d4682615a4a6536adac5db5ab9ffe7ccaabc760adc3430f3e105df85d336039a

Sharing

Copy URL Twitter E-mail

General

Target

d4682615a4a6536adac5db5ab9ffe7ccaabc760adc3430f3e105df85d336039a
Size

685KB
MD5

9350e1000e615140edd4052182b0a070
SHA1

5795f6df6a0747db63ff9836e040413355a8dc83
SHA256

d4682615a4a6536adac5db5ab9ffe7ccaabc760adc3430f3e105df85d336039a
SHA512

e62103d5befc9c0b9dcd67f9f16ca2858ae2ea34ed35c376c25a33757d369bbd13cd4f8ca1063ac14b1335d542a23a8d38c5a71a2090ec4c8ca99378f902a298
SSDEEP

12288:bSB4DTpDGI3cYfOOyrXvwbTAJwiOSrFEleUEnP4FYxBOSD0pBB3IpsYIozLBE/Pd:+BeTII3cMTyLvwASikleUEQaxBZoH1WI

Score

N/A

Malware Config

Signatures

Files

d4682615a4a6536adac5db5ab9ffe7ccaabc760adc3430f3e105df85d336039a
.exe windows x86

66fa9d82149737e3a2392c3282ade34c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

gdi32

EnumFontsW
CreateDIBSection
Escape
GetClipBox
GetWinMetaFileBits
XLATEOBJ_piVector
GetEnhMetaFileDescriptionA
EngCreateBitmap
GetTextExtentExPointW
CreateBitmap
CreateEllipticRgn
EngQueryLocalTime
PaintRgn
Chord
GetMapMode
GetViewportOrgEx
SetBkMode
PlayEnhMetaFileRecord
MaskBlt
SetDCPenColor
ExtCreateRegion
CreateDIBitmap
GetObjectType
GetGraphicsMode
GdiStartDocEMF
PtVisible

oleaut32

GetErrorInfo
VariantChangeType
SysReAllocStringLen
VariantInit
VariantChangeTypeEx
GetActiveObject
SysFreeString
VariantClear
SysAllocStringLen
SysAllocStringByteLen
SafeArrayGetUBound
SafeArrayPtrOfIndex
SafeArrayGetLBound
VariantCopyInd

iphlpapi

InternalSetTcpEntry
GetIpStatistics
GetUdpStatistics
InternalGetIfTable
InternalSetIfEntry
FlushIpNetTable
InternalGetUdpTable
GetIpForwardTable
GetAdaptersInfo
GetIpNetTable
NhGetInterfaceNameFromGuid
SendARP
GetNetworkParams
GetIcmpStatistics
InternalGetIpAddrTable
GetNumberOfInterfaces
AllocateAndGetIpAddrTableFromStack
EnableRouter
CreateProxyArpEntry
GetPerAdapterInfo
InternalDeleteIpForwardEntry
GetIfTable
InternalSetIpStats
GetTcpStatistics

odbc32

ValidateErrorQueue
CursorLibLockDesc
VRetrieveDriverErrorsRowCol
VFreeErrors
SQLPrimaryKeys
CursorLibLockStmt
CursorLibTransact
LockHandle
PostODBCError
PostODBCComponentError
CursorLibLockDbc
SearchStatusCode

advapi32

GetCurrentHwProfileW
FreeEncryptionCertificateHashList
GetCurrentHwProfileA
RegCreateKeyW
OpenThreadToken
SetKernelObjectSecurity
SetEntriesInAclW
LookupAccountSidA
SystemFunction036
RegCreateKeyExW
CryptEncrypt
SetNamedSecurityInfoA
LsaOpenSecret
RegSetValueExA
CryptDestroyHash
CryptGetHashParam
GetSecurityInfo
LockServiceDatabase
RegLoadKeyA

shell32

SHSetLocalizedName
SHGetFolderLocation
SHGetSettings
ShellExecuteExA
SHFormatDrive
SHCreateDirectoryExW
SHGetDesktopFolder
SHBrowseForFolderW
SHGetFileInfoA
DragFinish
SHChangeNotify
DuplicateIcon
ShellExecuteA
SHParseDisplayName
Shell_NotifyIconA
ShellExecuteExW
SHGetPathFromIDListA

kernel32

InterlockedExchangeAdd
EnumResourceTypesA
WriteFile
GetProcessPriorityBoost
ScrollConsoleScreenBufferA
IsDBCSLeadByteEx
GetVersion
GetModuleHandleW
SizeofResource
InterlockedDecrement
InitializeCriticalSection
RegisterWaitForInputIdle
ExitProcess
IsBadCodePtr
GetCurrentThread
WideCharToMultiByte
GetDefaultCommConfigW
LoadLibraryW
LocalCompact
VirtualAlloc
SetThreadContext
IsValidLocale
GlobalMemoryStatus
OpenProcess
CreateWaitableTimerA

Sections

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 15KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 169KB - Virtual size: 394KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 283KB - Virtual size: 337KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 167KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

66fa9d82149737e3a2392c3282ade34c

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

oleaut32

iphlpapi

odbc32

advapi32

shell32

kernel32

Sections

.data Size: 6KB - Virtual size: 6KB

.text Size: 15KB - Virtual size: 299KB

.data Size: 169KB - Virtual size: 394KB

.bss Size: 283KB - Virtual size: 337KB

.rdata Size: 167KB - Virtual size: 170KB

.rsrc Size: 43KB - Virtual size: 42KB

.data
Size: 6KB - Virtual size: 6KB

.text
Size: 15KB - Virtual size: 299KB

.data
Size: 169KB - Virtual size: 394KB

.bss
Size: 283KB - Virtual size: 337KB

.rdata
Size: 167KB - Virtual size: 170KB

.rsrc
Size: 43KB - Virtual size: 42KB