1d9f2491372863b92afc644b2e4a131ffbc46d76d7bd6c0b01018b46ebf03516

Sharing

Copy URL Twitter E-mail

General

Target

1d9f2491372863b92afc644b2e4a131ffbc46d76d7bd6c0b01018b46ebf03516
Size

201KB
MD5

0ce47f4d68631970df00e7540e5097d7
SHA1

a3a92aebdd64c74971cb71c69db2e3dd016a80e4
SHA256

1d9f2491372863b92afc644b2e4a131ffbc46d76d7bd6c0b01018b46ebf03516
SHA512

82476dad491424c681147ad74d23f9a51ff5aa59a95f01f101ed5887a0724fdbadce23df5a7f8bfc3fa0435bcff0b839fcb19d70a81ca1f69dba223464f644e1
SSDEEP

6144:pd2+I+GTWiwghVIwRYqyOe7swmh0jzSjJJ3:XprAWsbIw4meI

Score

N/A

Malware Config

Signatures

Files

1d9f2491372863b92afc644b2e4a131ffbc46d76d7bd6c0b01018b46ebf03516
.exe windows x86

dd8b7d6b572302f6d85d9cfe7fdcd4d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey

certcli

CAFreeCAProperty
CACertTypeSetSecurity
CAGetCAProperty
CAGetCertTypeKeySpec
CACreateCertType
CAEnumNextCertType
CARemoveCACertificateType
CASetCertTypeExtension
CAGetCertTypeExtensions
CAEnumCertTypes
CAEnumCertTypesForCA
CAUpdateCertType
CAGetCertTypePropertyEx
CAGetCertTypeFlags
CACertTypeGetSecurity
CAFreeCertTypeExtensions
CASetCertTypeFlags
CAFindCertTypeByName
CAUpdateCA
CAGetCertTypeProperty
CASetCertTypeKeySpec
CAFreeCertTypeProperty
CASetCertTypeProperty
CACloseCertType
CACloseCA
CAFindByName
CAAddCACertificateType

msvcrt

_purecall
__RTDynamicCast
_adjust_fdiv
wcsrchr
wcslen
_wcsicmp
memmove
wcschr
??1type_info@@UAE@XZ
wcstoul
mbstowcs
wcscmp
__dllonexit
?terminate@@YAXXZ
_wcsupr
malloc
??3@YAXPAX@Z
free
_except_handler3
_initterm
wcscpy
wcscat
_onexit
vswprintf
wcsstr
??2@YAPAXI@Z

kernel32

GlobalUnlock
GetStartupInfoA
GetDateFormatW
WideCharToMultiByte
InitializeCriticalSection
InterlockedIncrement
lstrcpyW
GetEnvironmentStringsW
lstrcmpiW
GlobalLock
LocalReAlloc
GetSystemWindowsDirectoryW
GlobalAlloc
GlobalFree
FormatMessageW
CloseHandle
FileTimeToSystemTime
GetModuleFileNameW
LoadLibraryW
GetSystemTimeAsFileTime
IsBadReadPtr
GetModuleHandleA
FileTimeToLocalFileTime
GetTickCount
SetLastError
RemoveDirectoryA
CreateFileW
GetCurrentProcess
GetComputerNameW
LocalFree
SetUnhandledExceptionFilter
DeleteCriticalSection
GetACP
InterlockedDecrement
lstrlenW
OutputDebugStringA
QueryPerformanceCounter
GetSystemDefaultLangID
OutputDebugStringW
GetLastError

user32

LoadImageW
MessageBoxW
GetWindowLongW
SetWindowLongW
SendDlgItemMessageW
RegisterClipboardFormatW
PostMessageW
LoadCursorW
SetFocus
InsertMenuItemW
EndDialog
ReleaseDC
EnableWindow
GetDC
LoadIconW
wsprintfW
SetWindowTextW
GetDlgItemTextA
SetCursor
WinHelpW
LoadStringW
SystemParametersInfoW
LoadBitmapW
GetDlgItem
DialogBoxParamW
GetParent
SendMessageW
SetDlgItemTextW

comctl32

PropertySheetW
CreatePropertySheetPageW

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 6.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd8b7d6b572302f6d85d9cfe7fdcd4d7

Headers

File Characteristics

Imports

advapi32

certcli

msvcrt

kernel32

user32

comctl32

Sections

.text Size: 115KB - Virtual size: 114KB

.data Size: 53KB - Virtual size: 53KB

.data Size: 27KB - Virtual size: 6.2MB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 115KB - Virtual size: 114KB

.data
Size: 53KB - Virtual size: 53KB

.data
Size: 27KB - Virtual size: 6.2MB

.rsrc
Size: 3KB - Virtual size: 3KB