d23a5351975351998dbfcca440738630cc56d6bdf89463a38489fe154f5ac72f

Sharing

Copy URL Twitter E-mail

General

Target

d23a5351975351998dbfcca440738630cc56d6bdf89463a38489fe154f5ac72f
Size

273KB
MD5

9214c600b7d86eed9bfbd18f34c99e81
SHA1

2b5a19c7d551f7d2c024fb4b80a87712a6e721f2
SHA256

d23a5351975351998dbfcca440738630cc56d6bdf89463a38489fe154f5ac72f
SHA512

fc7e43fb7c54dabc48ef96ae8cc7fa332df73a7411c24c359dca22cdf288ac0f048e449b9358d37cdbf9d94cc410cf054c37502fb76e04165c4ede1bd572228a
SSDEEP

6144:djf9q9bK5NdTiwx1/aAnMcmZheH6USn+FQEXNokVkQLBH06b5Rxh9J+AhN:djf9L5fTiw7JmveH6USn+FQEXlVkGHb/

Score

N/A

Malware Config

Signatures

Files

d23a5351975351998dbfcca440738630cc56d6bdf89463a38489fe154f5ac72f
.exe windows x86

467c225b99b5477ab02268089de02699

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32NextW
CreateToolhelp32Snapshot
GetCurrentProcessId
SetStdHandle
Module32FirstW
GetStringTypeW
HeapReAlloc
GetConsoleCP
SetFilePointer
RtlUnwind
Process32FirstW
CreateProcessW
SetCurrentDirectoryW
FindClose
lstrlenW
OpenProcess
WaitForSingleObject
FindFirstFileW
LockResource
GetVersionExW
SizeofResource
LoadResource
FindResourceW
MultiByteToWideChar
WriteFile
DeleteFileW
CloseHandle
DeviceIoControl
GetProcAddress
GetCurrentDirectoryW
GetLastError
CreateFileW
CopyFileW
LoadLibraryW
GetSystemDirectoryW
GetModuleHandleW
FreeLibrary
GetCurrentProcess
LocalFree
ReadConsoleInputW
SetConsoleMode
GetConsoleMode
GetSystemTimeAsFileTime
GetCommandLineW
HeapSetInformation
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteConsoleW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sleep
HeapSize
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WideCharToMultiByte
LCMapStringW
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoW
HeapCreate
QueryPerformanceCounter
GetTickCount
FlushFileBuffers

shlwapi

SHGetValueW
PathFileExistsW

wininet

InternetOpenW
InternetReadFile
InternetCloseHandle
InternetOpenUrlW
InternetQueryDataAvailable

user32

GetSystemMetrics
CharUpperW
CharLowerW

advapi32

GetTokenInformation
ConvertSidToStringSidW
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
SetNamedSecurityInfoW
RegEnumKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownW
RegEnumKeyExW
OpenProcessToken
RegSetValueExW
RegCloseKey
ControlService
RegOpenKeyExW
ChangeServiceConfigW
RegDeleteValueW
StartServiceW
RegDeleteKeyW
RegQueryValueExW
RegSetValueW
RegCreateKeyExW
OpenServiceW
OpenSCManagerW
DeleteService
CloseServiceHandle
CreateServiceW

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.trdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

467c225b99b5477ab02268089de02699

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shlwapi

wininet

user32

advapi32

Sections

.text Size: 68KB - Virtual size: 67KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 102KB - Virtual size: 102KB

.reloc Size: 7KB - Virtual size: 7KB

.trdata Size: 60KB - Virtual size: 60KB

.text
Size: 68KB - Virtual size: 67KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 102KB - Virtual size: 102KB

.reloc
Size: 7KB - Virtual size: 7KB

.trdata
Size: 60KB - Virtual size: 60KB