53f7d917ad9ebf5b7d2ccc1a835083bc0c0b92cc69ee584703ea6e4345f5c457

Sharing

Copy URL

Twitter E-mail

General

Target

53f7d917ad9ebf5b7d2ccc1a835083bc0c0b92cc69ee584703ea6e4345f5c457
Size

1.1MB
MD5

879d9a2c75ee83443a0a913f5dc71b5c
SHA1

41c124f8b5341773046ac9c6b5924b7919e0ac15
SHA256

53f7d917ad9ebf5b7d2ccc1a835083bc0c0b92cc69ee584703ea6e4345f5c457
SHA512

1f84756f6f30b6bff2cf3d5796549c96672e6fe4b6ebaa55f3b2d2f8e5ea034dd8086d5985f640f2c37b58eac0af089ab48ae5a730403e86b0939923b2f3c69a
SSDEEP

24576:GmZ5G43EgTDD55vd9lTTwTJvLqWZlzSq05sRlKi9AwvjUkSSX:jZ5rEgPfd9lTmvLq2lY0l+0X

Score

N/A

Malware Config

Signatures

Files

53f7d917ad9ebf5b7d2ccc1a835083bc0c0b92cc69ee584703ea6e4345f5c457
.exe windows x86

f716ba60b7f16c8a90094437582b28f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetOEMCP
GetACP
IsValidCodePage
SetFilePointerEx
ReadFile
GetFileType
GetConsoleMode
GetConsoleCP
FlushFileBuffers
IsDebuggerPresent
HeapSize
GetModuleFileNameW
WriteFile
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapReAlloc
SetFilePointer
DeleteFileW
ReadConsoleW
OutputDebugStringW
LoadLibraryW
SetStdHandle
WriteConsoleW
CreateFileW
SetEndOfFile
GetUserDefaultLangID
EnumTimeFormatsA
QueryPerformanceCounter
GetPriorityClass
CreateEventA
CloseHandle
GetFileInformationByHandle
LoadResource
WaitForSingleObject
GetLastError
GetCurrentProcess
VirtualAlloc
IsProcessorFeaturePresent
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
FindResourceExW
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
GetCommandLineA
LoadLibraryExW
GlobalAlloc
LCMapStringW
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
EncodePointer
DecodePointer
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
HeapFree
HeapAlloc
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentThreadId

user32

BeginDeferWindowPos
MoveWindow
TranslateMessage
ShowWindow
DrawFrameControl
wsprintfA
DestroyWindow
DefWindowProcA
GetScrollInfo
SetScrollInfo
LoadImageA
GetClassNameA
SetWindowLongA
GetCursorPos
MessageBoxA
GetClientRect
SetWindowTextA
DeferWindowPos
ScrollWindow
RedrawWindow
UpdateWindow
GetSubMenu
EnableMenuItem
CheckMenuItem
GetMenu
GetSystemMetrics
TranslateAcceleratorA
CreateAcceleratorTableA
SendInput
SetFocus
GetDialogBaseUnits
SendDlgItemMessageA
SetDlgItemTextA
DialogBoxIndirectParamA
CreateDialogParamA
EndDeferWindowPos
SendMessageA

gdi32

GetTextFaceA
SetWindowExtEx
TextOutA
SetAbortProc
SetTextColor
SetStretchBltMode
SetMapMode
SelectObject
GetViewportOrgEx
DescribePixelFormat
DeleteObject
CreateRectRgn
CreateFontIndirectA
CombineRgn
GetViewportExtEx

comdlg32

ChooseColorA
GetOpenFileNameA

advapi32

CryptSetKeyParam
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextA

shell32

SHGetSpecialFolderPathA
SHGetSpecialFolderLocation
SHGetMalloc

ole32

CreateBindCtx

crypt32

CertDuplicateStore

comctl32

ord413

pdh

PdhCollectQueryData

authz

AuthzInitializeResourceManager
AuthzFreeResourceManager

Sections

.text
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 686KB - Virtual size: 685KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f716ba60b7f16c8a90094437582b28f7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

crypt32

comctl32

pdh

authz

Sections

.text Size: 304KB - Virtual size: 304KB

.rdata Size: 111KB - Virtual size: 111KB

.data Size: 7KB - Virtual size: 18KB

.rsrc Size: 686KB - Virtual size: 685KB

.reloc Size: 21KB - Virtual size: 21KB

.text
Size: 304KB - Virtual size: 304KB

.rdata
Size: 111KB - Virtual size: 111KB

.data
Size: 7KB - Virtual size: 18KB

.rsrc
Size: 686KB - Virtual size: 685KB

.reloc
Size: 21KB - Virtual size: 21KB