72906e4259959a981e150852182612b9ba8bb10e9c168eb264206370e92a5747

Sharing

Copy URL Twitter E-mail

General

Target

72906e4259959a981e150852182612b9ba8bb10e9c168eb264206370e92a5747
Size

413KB
MD5

9149d85a58a5ba7cf073774c94633fee
SHA1

69e36132c4640a94611e7761de13839713d0cc3c
SHA256

72906e4259959a981e150852182612b9ba8bb10e9c168eb264206370e92a5747
SHA512

2d1c549b34de4bae44867ecebaa84a445ffa93b0de748f9aab054b30a82f49f3e019d98ea547871ad2edb8152740e56cef058be53cf1860c5509f397ecda87e4
SSDEEP

12288:D00j3l3K1A4uKGw/msd9zmkymGH0nhW072:Y0p3OADKGdsd9zamCm

Score

N/A

Malware Config

Signatures

Files

72906e4259959a981e150852182612b9ba8bb10e9c168eb264206370e92a5747
.exe windows x86

b59af26b08aa14ba66272388bc9c2443

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExW
RegCloseKey
GetTokenInformation
AdjustTokenPrivileges
OpenProcessToken
RegQueryValueExW

kernel32

SetFilePointer
CreateFileW
WriteFile
SetLastError
GetLastError
CopyFileW
GetFileSizeEx
GetLocalTime
GetFileType
GetStdHandle
FormatMessageW
GetConsoleScreenBufferInfo
GetSystemDefaultUILanguage
GetComputerNameW
MultiByteToWideChar
CompareStringW
WideCharToMultiByte
WriteConsoleW
SetConsoleCursorPosition
SetConsoleScreenBufferSize
ReadConsoleW
SetConsoleMode
GetConsoleMode
GetCurrentProcess
GetSystemDirectoryW
GetUserPreferredUILanguages
CloseHandle
GetProcAddress
FreeLibrary
LoadLibraryW
LocalAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
GetCommandLineW
DeleteFileW
HeapSetInformation
WaitForSingleObject
SetEvent
CreateThread
CreateEventW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetConsoleCtrlHandler
InitializeCriticalSection
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
OutputDebugStringA
InterlockedCompareExchange
Sleep
InterlockedExchange
lstrlenA
LocalFree
lstrlenW
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
GetLocaleInfoW
UnhandledExceptionFilter

msvcrt

?what@exception@@UBEPBDXZ
wcsncmp
fprintf
fflush
fwprintf
wcstombs
fread
fseek
towlower
swscanf
_iob
_exit
wcsstr
fgets
__CxxFrameHandler3
wcstoul
_wfopen
fwrite
fclose
_ftol2_sse
_getch
ceil
_cexit
__wgetmainargs
_callnewh
malloc
free
_wfreopen
fgetws
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
memmove_s
memcpy_s
_controlfp
_except_handler4_common
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
??1type_info@@UAE@XZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
exit
feof
_XcptFilter
_wsystem
_wtoi
_fileno
_filelength
_wremove
wctomb
fputws
_itow
??0exception@@QAE@ABV0@@Z
_wcsnicmp
_wtol
_vsnprintf
wcstok
_wcsicmp
memset
_ltow
??0exception@@QAE@XZ
memcpy
_CxxThrowException
_vsnwprintf
_kbhit

ole32

CoUninitialize
CoInitializeEx
CoSetProxyBlanket
CoCreateInstanceEx
CoCreateInstance
CoInitializeSecurity

oleaut32

SafeArrayGetLBound
SysStringLen
SysFreeString
SysAllocStringByteLen
SafeArrayGetVartype
SysStringByteLen
VariantCopy
VariantChangeType
SafeArrayCreate
SafeArrayPutElement
SafeArrayDestroy
SafeArrayGetUBound
SafeArrayGetElement
VariantInit
VariantClear
SysAllocString

user32

OpenClipboard
LoadStringW
CloseClipboard
SetClipboardData
CharUpperW
EmptyClipboard

framedynos

??0CHString@@QAE@ABV0@@Z
?Find@CHString@@QBEHPBG@Z
?Left@CHString@@QBE?AV1@H@Z
??H@YG?AVCHString@@ABV0@PBG@Z
??YCHString@@QAEABV0@ABV0@@Z
?Mid@CHString@@QBE?AV1@H@Z
??4CHString@@QAEABV0@ABV0@@Z
?TrimLeft@CHString@@QAEXXZ
?TrimRight@CHString@@QAEXXZ
?GetBuffer@CHString@@QAEPAGH@Z
?FindOneOf@CHString@@QBEHPBG@Z
?GetData@CHString@@IBEPAUCHStringData@@XZ
?Empty@CHString@@QAEXXZ
??YCHString@@QAEABV0@PBG@Z
??0CHString@@QAE@PBD@Z
?Right@CHString@@QBE?AV1@H@Z
??0CHString@@QAE@PBG@Z
??0CHString@@QAE@XZ
?Format@CHString@@QAAXPBGZZ
??1CHString@@QAE@XZ
??4CHString@@QAEABV0@PBG@Z

shlwapi

StrStrIW

ws2_32

WSACleanup
freeaddrinfo
WSAStartup
getaddrinfo

secur32

GetUserNameExW

iphlpapi

Icmp6SendEcho2
Icmp6CreateFile
IcmpSendEcho
IcmpCreateFile
IcmpCloseHandle

Sections

.text
Size: 299KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b59af26b08aa14ba66272388bc9c2443

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

ole32

oleaut32

user32

framedynos

shlwapi

ws2_32

secur32

iphlpapi

Sections

.text Size: 299KB - Virtual size: 299KB

.data Size: 512B - Virtual size: 2KB

.rsrc Size: 71KB - Virtual size: 71KB

.reloc Size: 41KB - Virtual size: 42KB

.text
Size: 299KB - Virtual size: 299KB

.data
Size: 512B - Virtual size: 2KB

.rsrc
Size: 71KB - Virtual size: 71KB

.reloc
Size: 41KB - Virtual size: 42KB