fae88413fcf8c33613f90beda866c8efc708995fd2325afe3f4637d37fdaa927

Sharing

Copy URL Twitter E-mail

General

Target

fae88413fcf8c33613f90beda866c8efc708995fd2325afe3f4637d37fdaa927
Size

575KB
MD5

7d35e1c2956282c5794d6e86e2af85cd
SHA1

f63eb77c410833a013c255880bf27fd13a9b254e
SHA256

fae88413fcf8c33613f90beda866c8efc708995fd2325afe3f4637d37fdaa927
SHA512

4a2d7960f54550f6766d2df0b6c6b3f2bd5caf02e650ca2bae49bd8785646df972100a73c0880a9425b2313f9e62636875cbdd82a9e63bc78c4d11ac8a48f52e
SSDEEP

12288:MocuDsxpv1hJNsibfWV6iGcoPmOpjX4LLxQ:McD+1Rsmg6nNX4H

Score

N/A

Malware Config

Signatures

Files

fae88413fcf8c33613f90beda866c8efc708995fd2325afe3f4637d37fdaa927
.exe windows x86

7a08ea88a862eb1b6bea23929beae457

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AdjustTokenGroups
ReadEventLogA
OpenThreadToken
RegReplaceKeyA
RegDeleteKeyA
RegQueryInfoKeyA
PrivilegeCheck
SetTokenInformation
GetTokenInformation
RegQueryValueExA
OpenEventLogW

kernel32

GetPrivateProfileStringA
GetModuleHandleA
GetProcAddress
VirtualAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
GetLastError
FlushFileBuffers
WriteFile
InitializeCriticalSection
DeleteCriticalSection
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
ReadFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
HeapAlloc
SetStdHandle
InterlockedDecrement
InterlockedIncrement
CloseHandle
CreateFileA
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
LoadLibraryA
SetEndOfFile
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

avicap32

capGetDriverDescriptionA

avifil32

AVIStreamBeginStreaming
AVIStreamSampleToTime
AVIStreamWrite
AVIFileCreateStreamA

msvfw32

DrawDibEnd
ICSeqCompressFrame

usp10

ScriptStringGetOrder
ScriptStringOut
ScriptApplyLogicalWidth
ScriptCPtoX
ScriptString_pLogAttr
ScriptShape
ScriptLayout
ScriptString_pSize
ScriptIsComplex
ScriptFreeCache
ScriptGetFontProperties
ScriptStringCPtoX

cryptui

CryptUIWizExport
CryptUIWizDigitalSign
CryptUIDlgViewContext
CryptUIWizImport

comdlg32

PrintDlgW
PrintDlgA
GetSaveFileNameA
ChooseColorW
CommDlgExtendedError
FindTextW
GetFileTitleA
ReplaceTextW
GetOpenFileNameW
ChooseFontW
PageSetupDlgA
FindTextA
ChooseColorA
ChooseFontA
GetSaveFileNameW

odbc32

ord24

Sections

.text
Size: 526KB - Virtual size: 525KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7a08ea88a862eb1b6bea23929beae457

Headers

File Characteristics

Imports

advapi32

kernel32

avicap32

avifil32

msvfw32

usp10

cryptui

comdlg32

odbc32

Sections

.text Size: 526KB - Virtual size: 525KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 3KB - Virtual size: 312KB

.rsrc Size: 39KB - Virtual size: 39KB

.text
Size: 526KB - Virtual size: 525KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 3KB - Virtual size: 312KB

.rsrc
Size: 39KB - Virtual size: 39KB