7f27e19e12e2d5029090e36f01026e728d5a1f17a2329d226f82a35d492ae411

Sharing

Copy URL Twitter E-mail

General

Target

7f27e19e12e2d5029090e36f01026e728d5a1f17a2329d226f82a35d492ae411
Size

63KB
MD5

83a1a2f334b67c646fcab22efd805bd0
SHA1

fc3e16e4ac579785dade76f167141d18d0a2cb0a
SHA256

7f27e19e12e2d5029090e36f01026e728d5a1f17a2329d226f82a35d492ae411
SHA512

bca6dc4ab96943794d243b033085b6978da6eecfe392ab065102eb78b9a33c4682a085547d630c82e3ca103eda4684e599eb816bb763d130b806fdff9473229e
SSDEEP

1536:8rOn1Cv0KbJjSDxjVXywIpp+kfDEpxxYEhXu+ZfEFrFHfY:OawhSmtROx9++Zoq

Score

N/A

Malware Config

Signatures

Files

7f27e19e12e2d5029090e36f01026e728d5a1f17a2329d226f82a35d492ae411
.exe windows x86

b09dbb6ce3f67d0bca66f86946709adf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileStructW
DosDateTimeToFileTime
GetModuleHandleA
OpenEventA
FreeLibrary
GlobalUnWire
VirtualAlloc
SetCommState
Module32First
DeleteFiber
SwitchToFiber
SetEndOfFile
GetNamedPipeInfo
ResumeThread
GetOverlappedResult
WritePrivateProfileStructW
GlobalReAlloc
CreatePipe
DisableThreadLibraryCalls
CreateDirectoryExA
MapViewOfFileEx
GetCompressedFileSizeW
WinExec
SetThreadIdealProcessor
BeginUpdateResourceA
CreateRemoteThread
GetProfileStringA
VirtualProtect

shlwapi

StrPBrkW
SHEnumValueW
UrlUnescapeW
AssocQueryStringByKeyW
PathCommonPrefixW
StrFormatByteSizeW
StrToIntW
PathRemoveArgsA
UrlIsNoHistoryA
UrlApplySchemeA
PathUnmakeSystemFolderA
SHQueryInfoKeyA
PathCreateFromUrlA
SHAutoComplete
PathCreateFromUrlW
UrlCreateFromPathA
PathFindOnPathW
PathFindSuffixArrayA
UrlHashA
PathIsURLW
PathCommonPrefixA

ole32

OleSave
OleSetClipboard
CoUninitialize
CoTaskMemRealloc
CreateGenericComposite
CoQueryProxyBlanket
StgOpenStorageOnILockBytes
StgIsStorageILockBytes
OleRegEnumFormatEtc
UtGetDvtd32Info
OleCreateLinkFromData
CoRegisterMessageFilter
CreateDataCache
PropVariantClear
CoMarshalInterface
CoRegisterSurrogate
OleConvertIStorageToOLESTREAMEx
CoUnmarshalInterface
SetConvertStg
OleRegEnumVerbs

advapi32

RegSetValueExW
BuildExplicitAccessWithNameW
AddAccessDeniedAce
RegQueryValueA
DeleteService
RegOpenKeyExA
EnumDependentServicesA
AllocateLocallyUniqueId
GetSidLengthRequired
RegCreateKeyW
SetServiceObjectSecurity
GetSecurityDescriptorOwner
RegEnumKeyA
StartServiceW
LookupAccountSidW
RegReplaceKeyA
GetFileSecurityW
LookupPrivilegeValueW
FreeSid
OpenSCManagerA
GetSidSubAuthority
CryptEnumProvidersA
TrusteeAccessToObjectA
ConvertAccessToSecurityDescriptorA
CryptContextAddRef
GetAuditedPermissionsFromAclA

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b09dbb6ce3f67d0bca66f86946709adf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shlwapi

ole32

advapi32

Sections

.text Size: 58KB - Virtual size: 58KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 20KB

.text
Size: 58KB - Virtual size: 58KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 20KB