dc38ef904fb9fe2a027aa92d762f612ec28bba05a2cd4cc2e2290f1499e2fdd8

Sharing

Copy URL Twitter E-mail

General

Target

dc38ef904fb9fe2a027aa92d762f612ec28bba05a2cd4cc2e2290f1499e2fdd8
Size

169KB
MD5

8cd9f4bd6a172175f27f4e3092e07f02
SHA1

b67795733c3d5df98e070693e447e184a682ab0f
SHA256

dc38ef904fb9fe2a027aa92d762f612ec28bba05a2cd4cc2e2290f1499e2fdd8
SHA512

02b068e0f593f5d6c71b95102ca8ce27432171ba92e610fe2e04f942c7ff4a2279a0670e8415b3efd6e81fcc71471cbbc2798f046ed49bf23160289d64817903
SSDEEP

3072:sPipGcwEoKt9tX7boycOxv5SucEv6CE701efQSF:KKbt13xv5SGv6CG01efr

Score

N/A

Malware Config

Signatures

Files

dc38ef904fb9fe2a027aa92d762f612ec28bba05a2cd4cc2e2290f1499e2fdd8
.exe windows x86

2566fc6e62ad601943629eb5145c8b3f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileW

advapi32

RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyW
RegSetValueExW
CloseServiceHandle
OpenSCManagerW
OpenServiceW
StartServiceW
ChangeServiceConfigW
QueryServiceStatusEx
QueryServiceConfigW

shlwapi

PathFileExistsW

winhttp

WinHttpReceiveResponse
WinHttpAddRequestHeaders
WinHttpReadData
WinHttpCrackUrl
WinHttpGetProxyForUrl
WinHttpOpenRequest
WinHttpOpen
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpCloseHandle
WinHttpConnect
WinHttpWriteData
WinHttpSendRequest
WinHttpGetIEProxyConfigForCurrentUser
WinHttpSetOption
WinHttpSetTimeouts

kernel32

HeapSize
HeapCreate
GetCurrentThreadId
SetEnvironmentVariableA
WriteConsoleW
SetEnvironmentVariableW
CompareStringW
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
CreateFileW
LoadLibraryW
GetTimeZoneInformation
GetTempFileNameW
CreateProcessW
InterlockedDecrement
WaitForSingleObject
OutputDebugStringW
MultiByteToWideChar
GetTempPathW
GetLastError
GlobalFree
CloseHandle
GetTickCount
GetSystemDirectoryW
Sleep
GetVersionExW
GetLocalTime
GetModuleHandleW
GetProcAddress
lstrlenA
FindResourceExW
FindResourceW
LoadResource
HeapAlloc
HeapFree
GetProcessHeap
SizeofResource
LockResource
CreateDirectoryW
DeleteFileW
WideCharToMultiByte
InterlockedIncrement
InterlockedExchange
GetStringTypeW
EncodePointer
DecodePointer
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
HeapReAlloc
SetLastError
RaiseException
InitializeCriticalSectionAndSpinCount
SetFilePointer
IsProcessorFeaturePresent
IsValidCodePage
GetOEMCP
GetACP
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
TerminateProcess
GetCurrentProcessId
LocalFree
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetSystemTimeAsFileTime
GetTimeFormatW
GetDateFormatW
GetCPInfo
RtlUnwind
LCMapStringW
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
QueryPerformanceCounter

ole32

CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysAllocStringLen
VariantInit
SysFreeString
VariantClear
SysAllocString
GetErrorInfo

secur32

GetUserNameExW

Sections

.{56F353
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2566fc6e62ad601943629eb5145c8b3f

Headers

DLL Characteristics

File Characteristics

Imports

urlmon

advapi32

shlwapi

winhttp

kernel32

ole32

oleaut32

secur32

Sections

.{56F353 Size: 157KB - Virtual size: 156KB

.rsrc Size: 1024B - Virtual size: 708B

.reloc Size: 10KB - Virtual size: 9KB

.{56F353
Size: 157KB - Virtual size: 156KB

.rsrc
Size: 1024B - Virtual size: 708B

.reloc
Size: 10KB - Virtual size: 9KB