4784aa3b21f60ad5ac62500068e63fece21d5b55d94d9c31b6bd9ad8902bb1bc

Sharing

Copy URL Twitter E-mail

General

Target

4784aa3b21f60ad5ac62500068e63fece21d5b55d94d9c31b6bd9ad8902bb1bc
Size

81KB
MD5

7a24bb6b436c4f0bc9e0005a3f3301f6
SHA1

476e2c66c208bfd4a944e28c8c57ad2ecb7b6f7e
SHA256

4784aa3b21f60ad5ac62500068e63fece21d5b55d94d9c31b6bd9ad8902bb1bc
SHA512

60b29a2ae0a234c6ef62dc338c179d160864d0d592f0505043c5036310102c8c3baf937ade404c6703a917f2cae4b4373f0b16016440ce2c7965bbeaae464443
SSDEEP

1536:ySmyP/W8rfKBqaP45l95w5irj3r9zjVZgMrApK4t8Lm9:cM//rfKBqagHBr9zxZUpxt8Li

Score

N/A

Malware Config

Signatures

Files

4784aa3b21f60ad5ac62500068e63fece21d5b55d94d9c31b6bd9ad8902bb1bc
.exe windows x86

ac7601f36ede2916e135c2248a89b0c0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CallNamedPipeW
CloseHandle
ConnectNamedPipe
CopyFileA
CreateDirectoryExA
CreateFileMappingW
EnumResourceTypesA
EraseTape
ExitProcess
ExpandEnvironmentStringsW
FileTimeToLocalFileTime
GetACP
GetCommandLineA
GetCompressedFileSizeA
GetCurrencyFormatW
GetDefaultCommConfigA
GetDiskFreeSpaceA
GetLocaleInfoW
GetModuleHandleA
GetOEMCP
GetPrivateProfileStringA
GetStartupInfoA
GetVersionExA
GetWriteWatch
GlobalHandle
HeapAlloc
HeapCreate
HeapReAlloc
InitializeCriticalSection
IsBadHugeReadPtr
IsBadReadPtr
IsDBCSLeadByteEx
IsProcessorFeaturePresent
IsSystemResumeAutomatic
LocalSize
LockFile
MulDiv
SetCurrentDirectoryW
SetLastError
SetStdHandle
SetThreadContext
SetTimerQueueTimer
TerminateProcess
UnregisterWait
lstrcpyA
lstrcpyW

user32

ReleaseDC
RegisterClassExA
RedrawWindow
PostMessageA
MoveWindow
MapWindowPoints
KillTimer
IsWindowVisible
RemoveMenu
GetWindowPlacement
GetWindow
GetUserObjectSecurity
GetSystemMetrics
GetMenuCheckMarkDimensions
GetFocus
GetCursorPos
FrameRect
FindWindowA
EndPaint
EnableMenuItem
DrawTextA
DrawIconEx
CloseClipboard
CheckMenuRadioItem
CheckMenuItem
SendMessageTimeoutA
SetDlgItemTextA
SetFocus
ShowWindow
TrackPopupMenuEx
IsDlgButtonChecked

msi

MsiEnumPatchesA
MsiGetActiveDatabase
MsiGetFeatureInfoW
MsiGetFileHashA
MsiGetLanguage
MsiGetPatchInfoW
MsiGetShortcutTargetW
MsiInstallMissingFileA
MsiLoadStringA
MsiPreviewDialogA
MsiEnumComponentsW
MsiProvideQualifiedComponentA
MsiRecordSetStreamW
MsiRecordSetStringA
MsiSetComponentStateA
MsiSetExternalUIW
MsiSetFeatureAttributesA
MsiSetPropertyA
MsiSourceListClearAllA
MsiSourceListForceResolutionA
MsiSummaryInfoGetPropertyA
MsiSummaryInfoPersist
MsiUseFeatureExA
MsiViewExecute
MsiEnableUIPreview
MsiDeleteUserDataW
MsiDatabaseMergeW
MsiDatabaseExportW
MsiCreateTransformSummaryInfoW
MsiConfigureFeatureFromDescriptorW
MsiCollectUserInfoW
MsiApplyPatchA
MsiPreviewDialogW

oleacc

GetRoleTextA
AccessibleObjectFromWindow

oledlg

OleUIBusyW
OleUIAddVerbMenuW
OleUIChangeIconW
OleUIConvertA
OleUIInsertObjectA

dbghelp

SymUnDName
SymSetOptions
SymSetSearchPath
SymFromName

comctl32

CreateMappedBitmap
CreatePropertySheetPageA
CreateStatusWindowA
CreateUpDownControl
FlatSB_GetScrollRange
FlatSB_SetScrollProp
GetMUILanguage
ImageList_Copy
ImageList_Destroy
ShowHideMenuCtl
PropertySheetA
InitMUILanguage
InitCommonControls
ImageList_SetFlags
ImageList_SetFilter
ImageList_SetDragCursorImage
ImageList_Replace
ImageList_Remove
ImageList_Merge
ImageList_LoadImageW
ImageList_LoadImageA
ImageList_GetImageCount
ImageList_EndDrag
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave

comdlg32

ChooseColorA
ChooseColorW
ChooseFontW
CommDlgExtendedError
GetFileTitleW
PrintDlgW
GetOpenFileNameW
ReplaceTextW

security

InitSecurityInterfaceW
FreeCredentialsHandle
EnumerateSecurityPackagesA
ApplyControlToken
AcquireCredentialsHandleA
AcceptSecurityContext

Sections

.text
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac7601f36ede2916e135c2248a89b0c0

Headers

File Characteristics

Imports

kernel32

user32

msi

oleacc

oledlg

dbghelp

comctl32

comdlg32

security

Sections

.text Size: 49KB - Virtual size: 52KB

.data Size: 28KB - Virtual size: 28KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 1KB - Virtual size: 4KB

.text
Size: 49KB - Virtual size: 52KB

.data
Size: 28KB - Virtual size: 28KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 1KB - Virtual size: 4KB