95b5680023127dd5ac6239eb0e877cc27416075cfe927efa9fa555e4363fffd4

Sharing

Copy URL Twitter E-mail

General

Target

95b5680023127dd5ac6239eb0e877cc27416075cfe927efa9fa555e4363fffd4
Size

679KB
MD5

a3b56684950c667deed875e6e10d9bd0
SHA1

ada47ca88a53f847d168e6b2578922ad465dd02d
SHA256

95b5680023127dd5ac6239eb0e877cc27416075cfe927efa9fa555e4363fffd4
SHA512

c24a892ee552d48e75316ad50224636fbf8817869b507ed245ee8c95420bd60b99b542a95eb7e9b688587e6e16ec3696ac18918e4d6a7e28114ea91b700acda7
SSDEEP

12288:1l3dfGRsJN3sZqq5hg68SWGqtKHBJzfmCgL+7:1JdfGRQN3sA+0G40BkCga7

Score

N/A

Malware Config

Signatures

Files

95b5680023127dd5ac6239eb0e877cc27416075cfe927efa9fa555e4363fffd4
.exe windows x86

25a8d921b63987e001bc93be45718b18

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetDiskFreeSpaceA
GetSystemTimeAsFileTime
ReleaseMutex
lstrcpynW
GetConsoleWindow
EnterCriticalSection
PeekNamedPipe
DeleteFileW
AssignProcessToJobObject
ReadConsoleInputW
GlobalFree
GetModuleHandleW
GetCommandLineA
GetDriveTypeA
GetLastError
_lopen
GetSystemInfo
FileTimeToSystemTime
GetDriveTypeW
GetShortPathNameA
FindVolumeClose
EnumResourceTypesW
FoldStringW
GetEnvironmentStringsW
MoveFileW
GetStdHandle
SetConsoleTitleA
SetConsoleOutputCP
InterlockedIncrement
AllocConsole
SetFileTime
CreateProcessA
GlobalHandle
OpenThread
GetComputerNameW
SetFileApisToOEM
QueueUserWorkItem
VirtualAlloc
GetModuleFileNameW
SetProcessWorkingSetSize
SleepEx
DefineDosDeviceW
DefineDosDeviceA
HeapReAlloc
GetProcAddress
GlobalMemoryStatusEx
TransactNamedPipe
GetSystemDirectoryA
GetTimeZoneInformation

oleaut32

VariantInit
SysAllocStringByteLen
VariantCopy
SysStringLen
SysFreeString
GetErrorInfo
SafeArrayPtrOfIndex
GetActiveObject
VariantClear
SysReAllocStringLen
SysAllocStringLen
VariantCopyInd
VariantChangeType
SafeArrayGetLBound
SafeArrayCreate
VariantChangeTypeEx
SafeArrayGetUBound

advapi32

UnlockServiceDatabase
GetSecurityDescriptorLength
OpenServiceW
GetNumberOfEventLogRecords
InitializeSid
OpenThreadToken
CryptGenKey
AddAuditAccessObjectAce
CryptHashSessionKey
InitiateSystemShutdownW
AbortSystemShutdownA
BackupEventLogW
InitializeSecurityDescriptor
RegSetValueExW
DeregisterEventSource
ImpersonateSelf
SetKernelObjectSecurity
AreAllAccessesGranted

shell32

ExtractAssociatedIconW
DragQueryFileA
ExtractIconA
SheChangeDirExW
DragFinish
SHCreateDirectoryExW
ShellExecuteW
SHGetSettings
SHInvokePrinterCommandW
SHGetSpecialFolderPathW
SHBrowseForFolderA
SHGetDesktopFolder
SHGetIconOverlayIndexW
SHGetSpecialFolderPathA
SHOpenFolderAndSelectItems
ShellAboutW
SHGetDataFromIDListW
SHGetInstanceExplorer
SHGetPathFromIDListA
SHGetFileInfoA
SHAppBarMessage
SHGetFileInfoW

odbc32

PostODBCComponentError
VFreeErrors
LockHandle
CursorLibLockStmt
CursorLibLockDesc
CursorLibTransact
ValidateErrorQueue
SQLStatistics
CursorLibLockDbc
VRetrieveDriverErrorsRowCol
SearchStatusCode
PostODBCError

winmm

mciLoadCommandResource
mixerGetID
midiOutClose
mmioSetInfo
waveOutWrite
midiOutLongMsg
midiOutOpen
mixerClose
waveInUnprepareHeader
midiStreamProperty
mmioGetInfo
midiStreamOpen
mciSendCommandW
midiOutUnprepareHeader
waveOutRestart
midiOutPrepareHeader
mmTaskCreate
waveOutMessage
waveInAddBuffer
waveInClose
mciDriverNotify
waveInPrepareHeader
waveInOpen
midiOutGetDevCapsA
OpenDriver
PlaySoundW
waveOutUnprepareHeader
CloseDriver
midiOutCacheDrumPatches
timeGetDevCaps
sndPlaySoundW
mixerGetDevCapsA

Sections

.edata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 11KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 152KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CRT
Size: 262KB - Virtual size: 478KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 195KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

25a8d921b63987e001bc93be45718b18

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

oleaut32

advapi32

shell32

odbc32

winmm

Sections

.edata Size: 5KB - Virtual size: 4KB

.edata Size: 9KB - Virtual size: 8KB

.text Size: 11KB - Virtual size: 346KB

INIT Size: 152KB - Virtual size: 195KB

CRT Size: 262KB - Virtual size: 478KB

.rdata Size: 195KB - Virtual size: 269KB

.rsrc Size: 44KB - Virtual size: 43KB

.edata
Size: 5KB - Virtual size: 4KB

.edata
Size: 9KB - Virtual size: 8KB

.text
Size: 11KB - Virtual size: 346KB

INIT
Size: 152KB - Virtual size: 195KB

CRT
Size: 262KB - Virtual size: 478KB

.rdata
Size: 195KB - Virtual size: 269KB

.rsrc
Size: 44KB - Virtual size: 43KB