c514272455be1c41df62f82acf19b054b6ad80429a7ee932bc74c18679244ce2

Sharing

Copy URL Twitter E-mail

General

Target

c514272455be1c41df62f82acf19b054b6ad80429a7ee932bc74c18679244ce2
Size

238KB
MD5

83bce75ee5db780f2d8042a64045ef30
SHA1

7343724a51da6bef4ce35f2de4c14ea80d8657de
SHA256

c514272455be1c41df62f82acf19b054b6ad80429a7ee932bc74c18679244ce2
SHA512

f005d3eb169e6eaa6945ebef198e3ae49d1d173d450c5f22b082299f9f394ebdea8f6be0542e7cbb8d4f1d32c82e52b8cd549c586762e606530978cac87b5f07
SSDEEP

6144:i1c8zLAl0DybcdHkPPoO1i+26tFuyMko/:HILQA5ioOwSFuyMn/

Score

N/A

Malware Config

Signatures

Files

c514272455be1c41df62f82acf19b054b6ad80429a7ee932bc74c18679244ce2
.exe windows x86

78692938da5fbe4c9821c789e5e8987c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegOpenKeyExW
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenCurrentUser
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
RegQueryValueExW
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegDeleteValueA
GetSidSubAuthority
GetServiceDisplayNameW
RegQueryMultipleValuesA
SaferiSearchMatchingHashRules
BuildSecurityDescriptorA
PrivilegedServiceAuditAlarmA
GetUserNameW
ImpersonateSelf
SetInformationCodeAuthzPolicyW
SetServiceStatus
ConvertAccessToSecurityDescriptorW
GetMultipleTrusteeOperationW
GetMultipleTrusteeA
ReportEventW
SystemFunction010
SaferSetLevelInformation
LsaSetQuotasForAccount
ReadEventLogW
ProcessTrace
EnableTrace
OpenEncryptedFileRawW
MD4Init
StartServiceCtrlDispatcherW
SetEntriesInAccessListW
ElfRegisterEventSourceA
RegGetKeySecurity
ElfOpenBackupEventLogW
RegFlushKey
LsaOpenTrustedDomainByName
RegReplaceKeyW
FreeSid
UpdateTraceW
ElfOpenBackupEventLogA
InitiateSystemShutdownA
LsaDelete
BuildTrusteeWithObjectsAndSidW
RegCreateKeyA
RemoveTraceCallback
RegLoadKeyA
GetLengthSid
GetServiceKeyNameW
SystemFunction027
OpenTraceA
ConvertStringSDToSDDomainA
NotifyChangeEventLog
CryptGetDefaultProviderW
ObjectPrivilegeAuditAlarmW
I_ScSetServiceBitsW

user32

GetFocus
wsprintfA
EqualRect
MessageBoxA
GetClientRect
SetCursor
GetForegroundWindow
DestroyWindow
GetKeyState
ShowWindow
CallWindowProcA
UnregisterClassA
CharNextA
PtInRect
SetWindowLongA
IntersectRect
SetWindowPos
IsWindow
GetParent
IsChild
InvalidateRect
UnionRect
ReleaseDC
LoadCursorA
SetFocus
GetWindowLongA
DefWindowProcA
SetWindowRgn
OffsetRect
GetDC

kernel32

lstrcpyA
RaiseException
lstrcatA
FlushInstructionCache
TlsAlloc
TlsGetValue
TlsFree
lstrlenW
lstrcmpiA
lstrlenA
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
CloseHandle
SizeofResource
OutputDebugStringA
CreateDirectoryW
GetTempPathW
WriteConsoleA
GetConsoleCP
VirtualAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteFileA
FindResourceA
HeapDestroy
GetTempPathA
FreeEnvironmentStringsA
WriteFile
CreateFileA
FlushFileBuffers
WritePrivateProfileStringA
VirtualProtect
LCMapStringA
GetStdHandle
TerminateThread
FreeEnvironmentStringsW
GetConsoleMode
DeleteCriticalSection
CreateMutexA
MulDiv
HeapFree
LoadLibraryExA
WaitForSingleObjectEx
CreateThread
FreeLibrary
IsDBCSLeadByte
GetFileType
GetOEMCP
ReadFile
WaitForSingleObject
GetTempFileNameW
TlsSetValue
GetModuleHandleA
GetThreadLocale
GetLocalTime
GetProcessHeap
HeapSize
FindNextFileA
HeapReAlloc
VirtualFree
WriteConsoleW
VirtualQuery
GlobalLock
GetConsoleOutputCP
LoadResource
LCMapStringW
WaitForMultipleObjects
FindClose
CreateFileW
HeapAlloc
SetStdHandle
SetHandleCount
WideCharToMultiByte
GetCurrentThreadId
UnhandledExceptionFilter
CreateEventA
CreateMutexW
SetFilePointer
IsDebuggerPresent
IsProcessorFeaturePresent
DeleteFileW
GetSystemInfo
ReleaseMutex
FindFirstFileA
GlobalUnlock
SetFileAttributesA
GetCommandLineA
SetLastError
IsValidCodePage
GetACP
GlobalAlloc
lstrcmpA
RtlUnwind
GetCurrentDirectoryA
VirtualAllocEx

ole32

OleRegGetUserType
CoTaskMemRealloc
OleSaveToStream
OleRegEnumVerbs
CreateOleAdviseHolder
CoCreateInstance
OleRegGetMiscStatus
CreateDataAdviseHolder
OleLoadFromStream
CoTaskMemFree
CoTaskMemAlloc
WriteClassStm
StringFromGUID2

gdi32

SetWindowOrgEx
DeleteMetaFile
GetDeviceCaps
LPtoDP
CreateMetaFileA
DeleteDC
SetMapMode
CloseMetaFile
SetWindowExtEx
TextOutA
CreateRectRgnIndirect
RestoreDC
SetViewportOrgEx
SetTextAlign
CreateDCA
SaveDC

oleaut32

VariantCopy
VariantInit
SysAllocString
SysFreeString
SysStringByteLen
SysAllocStringByteLen
OleCreatePropertyFrame
SysStringLen
RegisterTypeLi
DispCallFunc
LoadTypeLi
UnRegisterTypeLi
VariantClear
VarUI4FromStr
VariantChangeType
LoadRegTypeLi

pngfilt

DllGetClassObject

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 211KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 954KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78692938da5fbe4c9821c789e5e8987c

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

user32

kernel32

ole32

gdi32

oleaut32

pngfilt

Sections

.text Size: 18KB - Virtual size: 17KB

.rdata Size: 211KB - Virtual size: 211KB

.data Size: 6KB - Virtual size: 954KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 18KB - Virtual size: 17KB

.rdata
Size: 211KB - Virtual size: 211KB

.data
Size: 6KB - Virtual size: 954KB

.rsrc
Size: 2KB - Virtual size: 1KB