7a3ef0241059363f67fb090a9ece970a6a8e7b1cc8a3151cbaf6340bf21c82d1

Sharing

Copy URL Twitter E-mail

General

Target

7a3ef0241059363f67fb090a9ece970a6a8e7b1cc8a3151cbaf6340bf21c82d1
Size

312KB
MD5

92a49a428a0aeda76d9b5b1206e4de80
SHA1

04fef959c35be6166b07a63cdd5872c2340d7d82
SHA256

7a3ef0241059363f67fb090a9ece970a6a8e7b1cc8a3151cbaf6340bf21c82d1
SHA512

b1861fa0b192a3c318913c38e8cbb229337dca87d12b54ffa01bb0d45c4dc173fdea36032d02d124d1439e542b1f736187836bdbdd344ba8306d9977d92e4a1a
SSDEEP

6144:Xth1hCXmVop0n2hhz1Ruq9mySXg+GK1oi3DqHnFtsbk1JBNT7Dm:b1YmVAH5Eq9mySw+hqHnF2Qn7Dm

Score

N/A

Malware Config

Signatures

Files

7a3ef0241059363f67fb090a9ece970a6a8e7b1cc8a3151cbaf6340bf21c82d1
.exe windows x86

f803004fc1c944f66379125a1a1265f0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageW
lstrcmpiW
QueryPerformanceCounter
HeapAlloc
OutputDebugStringA
lstrcpynW
SetUnhandledExceptionFilter
SizeofResource
InterlockedDecrement
LoadLibraryA
lstrlenA
LoadResource
LeaveCriticalSection
GetModuleFileNameW
FlushInstructionCache
EnterCriticalSection
RemoveDirectoryA
FindResourceW
HeapDestroy
DeleteCriticalSection
FreeLibrary
GetEnvironmentStringsA
GetCurrentProcessId
GetSystemTimeAsFileTime
lstrcatW
lstrcpyW
GetTickCount
SetLastError
GetCurrentProcess
GetProcAddress
lstrlenW
LocalFree
InterlockedIncrement
GetSystemInfo
MultiByteToWideChar
HeapFree
GetProcessHeap
GetLastError
GetUserDefaultLCID
VirtualFree

user32

MapWindowPoints
SetWindowPos
SendDlgItemMessageW
SendMessageW
GetWindow
GetSystemMetrics
LoadImageW
CreateDialogParamW
SetDlgItemTextW
GetDialogBaseUnits
GetClientRect
LoadStringW
EnableWindow
CopyRect
SetWindowLongW
SystemParametersInfoW
GetWindowLongW
GetDlgItem
DestroyWindow
GetDlgItemTextW
SetWindowTextW
MessageBoxW
DrawTextW
DialogBoxParamW
EndDialog
GetWindowRect
SetFocus
ShowWindow
CharNextW
GetParent

rpcrt4

CStdStubBuffer_Disconnect
NdrDllCanUnloadNow
CStdStubBuffer_CountRefs
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Invoke
NdrCStdStubBuffer_Release
CStdStubBuffer_QueryInterface
IUnknown_AddRef_Proxy
CStdStubBuffer_Connect
CStdStubBuffer_IsIIDSupported
NdrDllUnregisterProxy
IUnknown_Release_Proxy
NdrOleAllocate
NdrDllRegisterProxy
NdrOleFree
CStdStubBuffer_DebugServerQueryInterface
NdrDllGetClassObject
CStdStubBuffer_AddRef

msvcrt

_adjust_fdiv
_except_handler3
malloc
??2@YAPAXI@Z
wcscat
swprintf
?terminate@@YAXXZ
free
??3@YAXPAX@Z
wcslen
??1type_info@@UAE@XZ
_initterm
wcsncpy
wcscmp
realloc
__CxxFrameHandler

advapi32

RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
GetTraceEnableLevel
GetTraceLoggerHandle
RegDeleteKeyW
RegDeleteValueW
GetTraceEnableFlags
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegisterTraceGuidsW
UnregisterTraceGuids
TraceMessage

ole32

CoCreateInstance
CoSetProxyBlanket
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc

gdi32

SetBkMode

untfs

Chkdsk
Format
Extend
Recover
ChkdskEx
FormatEx

shell32

ShellExecuteW
SHGetFolderPathW

Sections

text
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f803004fc1c944f66379125a1a1265f0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

rpcrt4

msvcrt

advapi32

ole32

gdi32

untfs

shell32

Sections

text Size: 114KB - Virtual size: 113KB

.rdata Size: 170KB - Virtual size: 169KB

.rsrc Size: 26KB - Virtual size: 25KB

text
Size: 114KB - Virtual size: 113KB

.rdata
Size: 170KB - Virtual size: 169KB

.rsrc
Size: 26KB - Virtual size: 25KB