5e3f5bea0cebcfd1478961b9bf1dce4cfe430c619019fe12cb1db114857fbd07

Sharing

Copy URL Twitter E-mail

General

Target

5e3f5bea0cebcfd1478961b9bf1dce4cfe430c619019fe12cb1db114857fbd07
Size

203KB
MD5

90647b20bc7c3b1ae27c2f3a936e2fec
SHA1

db0db4bd55e3f88cf6eb0846367a0d1b8f45dc1a
SHA256

5e3f5bea0cebcfd1478961b9bf1dce4cfe430c619019fe12cb1db114857fbd07
SHA512

1eb0697337356f09955cf2ded649f1d2bcddde2e654741a1928b6070b66773d85c67f1d6224dd4198b76cd1ebeb3d90d88a5178fc1a1e9e8617b3cfb704979a6
SSDEEP

6144:X5RJaq8+kUR4fH6Sv/ymKrg7BzumQ8ZMoq2:p7aq8+kUiHL/lKrYBzumQEPV

Score

N/A

Malware Config

Signatures

Files

5e3f5bea0cebcfd1478961b9bf1dce4cfe430c619019fe12cb1db114857fbd07
.exe windows x86

d786e4eaa2982bcd9f441693deb457ab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileStringW
WaitForMultipleObjects
GetDiskFreeSpaceW
CreateSemaphoreW
InterlockedExchange
lstrcmpiW
EnterCriticalSection
GetModuleFileNameA
GetACP
GlobalHandle
MultiByteToWideChar
ResetEvent
GlobalAlloc
WaitForSingleObject
VirtualFree
SetUnhandledExceptionFilter
CreateThread
QueryPerformanceCounter
GetCurrentThread
HeapFree
lstrcpynW
GlobalLock
WriteFile
CreateEventW
GetLastError
LeaveCriticalSection
lstrlenA
GetCurrentProcessId
SetEvent
SetFilePointer
lstrlenW
GlobalUnlock
DeleteFileW
GetSystemDefaultLangID
IsBadWritePtr
GetFileSize
GetProcessHeap
LoadLibraryW
GetSystemTimeAsFileTime
GetFullPathNameW
HeapAlloc
GetQueuedCompletionStatus
GetCurrentProcess
ReleaseSemaphore
InterlockedDecrement
SetThreadPriority
GetFileAttributesW
GetTickCount
ReadFile
lstrcmpW
GetProcAddress
InitializeCriticalSection
DeleteCriticalSection
CreateFileW
GetTimeZoneInformation
SetEndOfFile
CloseHandle
lstrcpyW
WideCharToMultiByte
GetVersionExW
GetProfileIntA
lstrcpyA
GetSystemInfo
FreeLibrary
IsBadReadPtr
MulDiv
GlobalFree
GetThreadPriority
GlobalMemoryStatus
IsBadCodePtr
InterlockedIncrement

nddeapi

NDdeGetTrustedShareW
NDdeGetShareSecurityW
NDdeIsValidAppTopicListW
NDdeIsValidAppTopicListA
NDdeGetErrorStringA
NDdeGetShareSecurityA
NDdeGetTrustedShareA

user32

LoadStringW
CheckRadioButton
TranslateMessage
ClientToScreen
GetDlgItemInt
CreateDialogParamW
SendMessageW
GetWindowRect
CheckDlgButton
GetAsyncKeyState
IsWindow
GetWindowLongW
DefWindowProcW
InvalidateRect
EnableWindow
SetDlgItemTextW
SetCursor
IsWindowVisible
GetDC
MoveWindow
IsRectEmpty
SetWindowLongW
GetClientRect
ShowWindow
GetDesktopWindow
GetDlgItem
DestroyWindow
LoadCursorW
PeekMessageW
SetDlgItemInt
ReleaseDC
DispatchMessageW

ifsutil

?CheckAndRemove@NUMBER_SET@@QAEEVBIG_INT@@PAE@Z
?CheckAndAdd@SPARSE_SET@@QAEEVBIG_INT@@PAE@Z
?CheckAndAdd@NUMBER_SET@@QAEEVBIG_INT@@PAE@Z
?AddEntry@AUTOREG@@SGEPBVWSTRING@@@Z
?AddNext@NUMBER_SET@@QAEEVBIG_INT@@@Z
?AddVolumeName@MOUNT_POINT_MAP@@QAEEPAVWSTRING@@0@Z
?AddEdge@DIGRAPH@@QAEEKK@Z
?AddStart@NUMBER_SET@@QAEEVBIG_INT@@@Z

ncobjapi

WmiCommitObject
WmiAddObjectProp
WmiCreateObject
WmiIsObjectActive
WmiDestroyObject
WmiCreateObjectWithProps
WmiSetAndCommitObject
WmiCreateObjectWithFormat
WmiEventSourceConnect
WmiEventSourceDisconnect

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d786e4eaa2982bcd9f441693deb457ab

Headers

File Characteristics

Imports

kernel32

nddeapi

user32

ifsutil

ncobjapi

Sections

.text Size: 77KB - Virtual size: 77KB

.rdata Size: 58KB - Virtual size: 58KB

.data Size: 62KB - Virtual size: 2.1MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 77KB - Virtual size: 77KB

.rdata
Size: 58KB - Virtual size: 58KB

.data
Size: 62KB - Virtual size: 2.1MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB