93975fbb2fa0c33c05f611873f0d542be47912616993043f9186dcace3cd5ee6

Sharing

Copy URL Twitter E-mail

General

Target

93975fbb2fa0c33c05f611873f0d542be47912616993043f9186dcace3cd5ee6
Size

442KB
MD5

98275058114a7b1cf53d062c0d6212db
SHA1

cbaf089b889886dfb915d019b8e0621cbb5e9307
SHA256

93975fbb2fa0c33c05f611873f0d542be47912616993043f9186dcace3cd5ee6
SHA512

e83bd9cc668c13779d5a3120d918880a27bc2b745301e67dbf3d68368336bc99031815a5e3d96b9f7357066af625dc64d7e223aabfe0672681c9416db2ad7452
SSDEEP

12288:kr5tWl79QTKJnXUddvUQXAIJ3tuXMT2n:9lKTKJnXOv3QDXE2n

Score

N/A

Malware Config

Signatures

Files

93975fbb2fa0c33c05f611873f0d542be47912616993043f9186dcace3cd5ee6
.dll windows x86

b3e08fceaefda6957e403f7cc0c84ed3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AdjustTokenPrivileges
AllocateAndInitializeSid
CheckTokenMembership
CloseServiceHandle
ControlService
CreateProcessAsUserW
DuplicateTokenEx
FreeSid
GetUserNameW
InitializeSecurityDescriptor
LookupPrivilegeValueW
OpenProcessToken
OpenSCManagerW
OpenServiceW
QueryServiceStatusEx
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExW
RegSetValueExW
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorSacl
SetTokenInformation
StartServiceW

user32

BringWindowToTop
CopyRect
CreateDialogParamW
CreateWindowExW
DestroyWindow
DialogBoxParamW
EnableWindow
EndDialog
ExitWindowsEx
GetClientRect
GetDesktopWindow
GetDlgItem
GetDlgItemTextW
GetParent
GetSystemMetrics
wsprintfW
ShowWindow
SetWindowTextW
SetWindowPos
SetTimer
SetForegroundWindow
SetDlgItemTextW
SetActiveWindow
SendMessageW
PostMessageW
OffsetRect
MessageBoxW
LoadStringW
LoadImageW
KillTimer
IsWindow
GetWindowRect

wininet

InternetCloseHandle
InternetConnectW
InternetOpenW
InternetQueryDataAvailable
HttpSendRequestW
InternetReadFile
InternetSetOptionW
InternetSetStatusCallbackW
HttpQueryInfoW
HttpOpenRequestW
InternetQueryOptionW
HttpAddRequestHeadersA

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

shell32

ShellExecuteW
ShellExecuteExW
SHGetFolderPathW
SHCreateDirectoryExW
CommandLineToArgvW

shlwapi

PathCompactPathExW

ole32

CoUninitialize
CoInitializeEx

gdi32

SetBkColor
CreateSolidBrush

kernel32

WriteConsoleA
WideCharToMultiByte
WaitNamedPipeW
WaitForSingleObject
WaitForMultipleObjects
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateThread
TerminateProcess
WriteConsoleW
SetUnhandledExceptionFilter
SetStdHandle
SetLastError
SetHandleCount
SetFilePointer
SetEvent
SetErrorMode
SetEnvironmentVariableA
SetEndOfFile
SearchPathW
RtlUnwind
ResetEvent
ReleaseMutex
ReadFile
RaiseException
QueryPerformanceCounter
Process32NextW
Process32FirstW
OutputDebugStringW
OpenProcess
OpenMutexW
OpenEventA
MultiByteToWideChar
MoveFileW
MoveFileExW
LocalFree
LoadLibraryW
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidLocale
IsValidCodePage
IsDebuggerPresent
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
WriteFile
SystemTimeToFileTime
AllocConsole
CancelIo
CloseHandle
CompareStringA
CompareStringW
CopyFileW
CreateEventA
CreateEventW
CreateFileA
CreateMutexW
CreateProcessW
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFileW
DisconnectNamedPipe
EnterCriticalSection
EnumSystemLocalesA
ExitProcess
ExitThread
ExpandEnvironmentStringsW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDateFormatW
GetEnvironmentStringsA
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesW
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetLongPathNameW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeExW
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExW
HeapAlloc
HeapCreate

rpcrt4

UuidToStringW
UuidFromStringW
UuidCreate
RpcStringFreeW

Exports

Exports

InitVar
Long_FromSsize_t
SetItemString
SetString
StringFlags
WithUnicodeFilename

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 261KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b3e08fceaefda6957e403f7cc0c84ed3

Headers

File Characteristics

Imports

advapi32

user32

wininet

version

shell32

shlwapi

ole32

gdi32

kernel32

rpcrt4

Exports

Exports

Sections

.text Size: 70KB - Virtual size: 69KB

.rdata Size: 261KB - Virtual size: 261KB

.data Size: 69KB - Virtual size: 71KB

.rsrc Size: 35KB - Virtual size: 35KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 70KB - Virtual size: 69KB

.rdata
Size: 261KB - Virtual size: 261KB

.data
Size: 69KB - Virtual size: 71KB

.rsrc
Size: 35KB - Virtual size: 35KB

.reloc
Size: 4KB - Virtual size: 4KB