8c3cac9d398e696438c6deae315c6187f9511174ce4e66640220e8559fceb457

Sharing

Copy URL

Twitter E-mail

General

Target

8c3cac9d398e696438c6deae315c6187f9511174ce4e66640220e8559fceb457
Size

1.2MB
MD5

49ba7488064dfe5e0c4029bcf28ff2b0
SHA1

e5fa4206103475246ed12fc526ecbf5d7e0b9ff1
SHA256

8c3cac9d398e696438c6deae315c6187f9511174ce4e66640220e8559fceb457
SHA512

aef8ca7180bc780829743c597b9c85e979fd90561436cf42d9be7213866cba86c3f2ffedc085ecbd2923bc2105fe7694b966e4f2fdba654eeb22647edbf726b5
SSDEEP

12288:CYpeYaKVUhkk/q26Qe843fNEw9DQbT2XxgV/OLuDS8PRMBAsFIfrHoPE4iixALg1:RA0tQHPFBDS858Amg8ORkKm

Score

N/A

Malware Config

Signatures

Files

8c3cac9d398e696438c6deae315c6187f9511174ce4e66640220e8559fceb457
.exe windows x86

62cdf3b88c4f7bf7f381795c9e8bec44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleRegGetUserType
CreateOleAdviseHolder
OleCreate
OleSetContainedObject
StringFromIID
CLSIDFromString
CLSIDFromProgID
CoRegisterClassObject
CoRevokeClassObject
MkParseDisplayName
CreateBindCtx
CoCreateInstance
CoLockObjectExternal
CoTaskMemFree
StringFromCLSID
CoTaskMemAlloc
OleUninitialize
OleInitialize

shlwapi

SHDeleteKeyA

kernel32

FindResourceA
FreeResource
LoadResource
GetCurrentProcess
SizeofResource
GetConsoleWindow
LockResource
GetModuleHandleA
CloseHandle
CreateFileA
ReadFile
VirtualFree
FreeLibrary
WaitForSingleObject
CreateRemoteThread
OpenProcess
VirtualFreeEx
ReadProcessMemory
GetProcAddress
VirtualAlloc
VirtualAllocEx
LoadLibraryA
GetSystemInfo
GetCurrentThreadId
WriteProcessMemory
GetFileSize
SetFilePointer
WriteFile
Sleep
SystemTimeToTzSpecificLocalTime
GetTickCount
GetTimeZoneInformation
GetCurrentThread
InitializeCriticalSection
TerminateThread
LeaveCriticalSection
EnterCriticalSection
OpenThread
GetExitCodeThread
DeleteCriticalSection
SuspendThread
ResumeThread
AllocConsole
ReadConsoleA
SetConsoleMode
SetConsoleTitleA
GetStdHandle
AttachConsole
SetConsoleCtrlHandler
SetConsoleWindowInfo
GetCurrentProcessId
HeapAlloc
HeapFree
GetProcessHeap
IsBadReadPtr
VirtualProtect
GetCommandLineA
HeapSetInformation
GetStartupInfoW
LocalFree
EncodePointer
GetModuleHandleW
ExitProcess
GetFullPathNameA
lstrcpyW
ExitThread
CreateThread
RtlUnwind
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
DuplicateHandle
MoveFileA
CreateProcessA
DeleteFileA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
HeapCreate
QueryPerformanceCounter
RaiseException
GetCPInfo
GetACP
GetOEMCP
DebugBreak
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoW
LoadLibraryW
GetDriveTypeW
CompareStringW
LCMapStringW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
IsProcessorFeaturePresent
CreatePipe
GetExitCodeProcess
HeapSize
WriteConsoleW
GetCurrentDirectoryW
SetEndOfFile
CreateFileW
SetEnvironmentVariableA
FatalAppExitA
lstrlenW
IsBadWritePtr
GetLastError
MultiByteToWideChar
WideCharToMultiByte
FormatMessageA
GetModuleFileNameA
InterlockedDecrement
InterlockedIncrement
HeapReAlloc
GetFileAttributesA
DecodePointer
IsValidCodePage

user32

SetActiveWindow
ModifyMenuA
GetWindowThreadProcessId
GetMessageA
GetSystemMenu
PeekMessageA
DispatchMessageA
SetForegroundWindow
SetWindowRgn
TranslateMessage
GetClientRect
WinHelpA
IsWindow
RegisterClassA
CallWindowProcA
MapWindowPoints
IsWindowVisible
EqualRect
GetActiveWindow
ShowWindow
SetWindowPos
DefWindowProcA
CreateWindowExA
GetWindowLongA
GetWindowRect
wsprintfA
SetFocus
OffsetRect
IntersectRect
MessageBoxA

gdi32

SetViewportOrgEx
SetWindowExtEx
SetViewportExtEx
SetMapMode
CreateRectRgnIndirect
DeleteObject
SetWindowOrgEx

advapi32

RegSetValueExA
IsTextUnicode
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegEnumKeyExA
RegQueryValueExA

oleaut32

GetActiveObject
VariantInit
VariantCopyInd
VariantClear
LoadTypeLibEx
SysFreeString
SysStringLen
SysAllocStringLen
LoadRegTypeLi
LHashValOfNameSys
SafeArrayCreateVector
VariantTimeToSystemTime
SafeArrayAccessData
VariantCopy
SafeArrayDestroy
SafeArrayCreate
SystemTimeToVariantTime
SafeArrayGetDim
VariantChangeType
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayPutElement
DispGetIDsOfNames
UnRegisterTypeLi

Sections

.text
Size: 481KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 634KB - Virtual size: 633KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62cdf3b88c4f7bf7f381795c9e8bec44

Headers

DLL Characteristics

File Characteristics

Imports

ole32

shlwapi

kernel32

user32

gdi32

advapi32

oleaut32

Sections

.text Size: 481KB - Virtual size: 480KB

.rdata Size: 101KB - Virtual size: 100KB

.data Size: 9KB - Virtual size: 18KB

.rsrc Size: 634KB - Virtual size: 633KB

.text
Size: 481KB - Virtual size: 480KB

.rdata
Size: 101KB - Virtual size: 100KB

.data
Size: 9KB - Virtual size: 18KB

.rsrc
Size: 634KB - Virtual size: 633KB