ad7222d4cf73ad7ad3068b151366acd6dca612b9d3ada2a30493d0a3e327931f

Sharing

Copy URL Twitter E-mail

General

Target

ad7222d4cf73ad7ad3068b151366acd6dca612b9d3ada2a30493d0a3e327931f
Size

344KB
MD5

a0486ef9e2966d0845476a0c54917454
SHA1

a7b6a0e41b97518b65639a29f69658afc65ca14a
SHA256

ad7222d4cf73ad7ad3068b151366acd6dca612b9d3ada2a30493d0a3e327931f
SHA512

04db4d50577adc3131d518eb4570598ac91f55f6c44b0427f5dd091dbd884de28681dbb660260fac4ed57e16c186fc2fe73fdfc761b136c6501c6cea10b396b9
SSDEEP

6144:DVjseVBub3Rg/No/8NiQTduwvyidYWjkfrXLbMupsdJfqTCgVVpQ1pVkifVE2X1n:DVjX7G3RGxpldxoXfkTfqT1Q1pVkitEK

Score

N/A

Malware Config

Signatures

Files

ad7222d4cf73ad7ad3068b151366acd6dca612b9d3ada2a30493d0a3e327931f
.exe windows x86

62cad7e15ebdb26a48166d6844f228c1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnumDesktopsA
SetTimer

kernel32

GetModuleHandleA
Heap32Next
EnumSystemCodePagesA
GetStartupInfoA

mpr

WNetEnumResourceW
WNetDisconnectDialog
WNetGetUserA
WNetGetConnectionW
WNetCloseEnum
WNetAddConnectionA
WNetOpenEnumA
WNetEnumResourceA
WNetGetUserW
MultinetGetConnectionPerformanceA
WNetUseConnectionA

rasapi32

RasGetProjectionInfoA

winmm

mmioDescend
PlaySoundW
midiOutClose
mmioOpenW
mixerGetDevCapsW
midiStreamOpen
midiInReset
mmioOpenA
mmioSetBuffer
mmioStringToFOURCCW
mciSendCommandW
mmioWrite
waveOutWrite
midiInOpen
mmioRead
waveOutGetDevCapsA
joySetThreshold
waveInClose
mmioSendMessage
mmioCreateChunk
midiOutCacheDrumPatches
waveOutGetID
GetDriverModuleHandle
waveOutGetPitch
mixerGetDevCapsA
midiOutUnprepareHeader
joyReleaseCapture
waveInGetPosition
waveOutOpen
mmioRenameA
midiOutGetID
PlaySoundA
waveInPrepareHeader
midiStreamStop
mmioClose
midiOutPrepareHeader
mmioStringToFOURCCA
mixerGetNumDevs
midiInMessage
midiStreamPause
mixerGetControlDetailsW
OpenDriver
midiOutGetErrorTextA
waveOutBreakLoop
midiOutReset
DefDriverProc
DrvGetModuleHandle
mciSendStringA
auxSetVolume
mixerGetLineControlsW
SendDriverMessage
mmioAscend
joyGetDevCapsW
mciGetDeviceIDA
midiOutGetVolume
midiInGetDevCapsA
waveOutClose
mixerClose
midiOutOpen
waveInStart
midiOutGetDevCapsA
mmioInstallIOProcW
mmioGetInfo
midiStreamClose
sndPlaySoundW
sndPlaySoundA
waveOutRestart
midiInStart
midiInGetErrorTextA
waveOutPause
midiInUnprepareHeader
waveInGetErrorTextA
mciGetYieldProc
midiInAddBuffer
mciSendCommandA
joyGetPosEx
waveOutGetDevCapsW
mciGetDeviceIDFromElementIDA
waveInGetID
mixerGetLineControlsA
timeSetEvent
waveOutSetPitch
midiInStop
midiOutGetDevCapsW
waveInMessage
mciGetDeviceIDFromElementIDW
mciGetDeviceIDW
waveInReset
joyGetNumDevs

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_controlfp
_except_handler3
__set_app_type
__p__fmode

advapi32

RegConnectRegistryA
GetKernelObjectSecurity
GetServiceKeyNameA
GetSecurityDescriptorDacl
ChangeServiceConfig2A
OpenBackupEventLogA
SetPrivateObjectSecurity
BuildTrusteeWithNameA
GetEffectiveRightsFromAclA
LsaEnumerateAccountRights
LsaFreeMemory
AddAuditAccessAce
LookupPrivilegeValueA
ObjectPrivilegeAuditAlarmA
GetExplicitEntriesFromAclW
SetKernelObjectSecurity
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
RegQueryValueExA
RegEnumValueW
LookupAccountNameA
EnumServicesStatusA
NotifyChangeEventLog
QueryServiceConfig2A
LsaLookupNames
RegSetValueW
AllocateAndInitializeSid
LsaEnumerateTrustedDomains
RegSetValueExW
ObjectOpenAuditAlarmW
LsaDeleteTrustedDomain
DuplicateToken
GetNumberOfEventLogRecords
AddAccessAllowedAce
LsaSetInformationPolicy
ObjectDeleteAuditAlarmW
GetSecurityDescriptorGroup
AccessCheckAndAuditAlarmA
SetNamedSecurityInfoW
CreateServiceA
RegEnumKeyA
AddAccessDeniedAce
AdjustTokenGroups
BuildImpersonateExplicitAccessWithNameA
PrivilegedServiceAuditAlarmW
LsaRetrievePrivateData
GetAce
OpenEventLogA
ControlService
GetExplicitEntriesFromAclA
LsaCreateTrustedDomainEx
RegCreateKeyA
IsValidSid
RegDeleteKeyW
ReportEventW
GetFileSecurityA
RegEnumKeyExW
ImpersonateSelf
ClearEventLogW
LsaNtStatusToWinError
LsaEnumerateAccountsWithUserRight
RegSetValueExA
GetNamedSecurityInfoA
LsaClose
CloseServiceHandle
RegOpenKeyA
OpenServiceA
GetServiceKeyNameW
RegReplaceKeyA
LsaQueryInformationPolicy
RegCreateKeyExA
RegDeleteValueW
RegSaveKeyA
InitializeSecurityDescriptor
CreateProcessAsUserA
RegConnectRegistryW
GetTrusteeNameW
AccessCheck
GetTokenInformation
OpenBackupEventLogW
RegSetKeySecurity
StartServiceA
AdjustTokenPrivileges
LsaOpenPolicy
MapGenericMask
QueryServiceLockStatusA
EncryptFileW
GetSidSubAuthority
IsTokenRestricted
LogonUserA
QueryServiceLockStatusW
RegReplaceKeyW
RegisterEventSourceW
DeregisterEventSource
AreAnyAccessesGranted
EqualSid
AddAce
GetServiceDisplayNameW
QueryServiceConfigA
GetLengthSid
GetNamedSecurityInfoW
CloseEventLog
ChangeServiceConfigA
SetFileSecurityA
RegOpenKeyExA
SetFileSecurityW
BuildExplicitAccessWithNameA
EnumDependentServicesW
GetUserNameW
OpenSCManagerW
FindFirstFreeAce
GetAuditedPermissionsFromAclW
MakeSelfRelativeSD
SetEntriesInAclA
LockServiceDatabase
EqualPrefixSid
SetSecurityInfo
GetSecurityInfo

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62cad7e15ebdb26a48166d6844f228c1

Headers

File Characteristics

Imports

user32

kernel32

mpr

rasapi32

winmm

msvcrt

advapi32

Sections

.text Size: 108KB - Virtual size: 104KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 1.5MB

.rsrc Size: 32KB - Virtual size: 28KB

.text
Size: 108KB - Virtual size: 104KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 1.5MB

.rsrc
Size: 32KB - Virtual size: 28KB