bfa54b247823dcc88dbb8efd2808ba47725fddb302f70f913631b6a078caa548

Sharing

Copy URL Twitter E-mail

General

Target

bfa54b247823dcc88dbb8efd2808ba47725fddb302f70f913631b6a078caa548
Size

201KB
MD5

83685f76daeecfbf28b32a16947330b0
SHA1

a3eac6343e8b261a546dedcd8482cda484b0493e
SHA256

bfa54b247823dcc88dbb8efd2808ba47725fddb302f70f913631b6a078caa548
SHA512

a9473062101f72cbbbe927bbb977ccaa5fd7acaabf385438052d43759fcdb1ce1c106447ef19b1b820c098ed80f8150f3b5c04bff27f95e96d6277305f2d2133
SSDEEP

6144:pd2+I+GTWiwghVIwRYqyOe7swmh0jzSjJJ+:XprAWsbIw4me9

Score

N/A

Malware Config

Signatures

Files

bfa54b247823dcc88dbb8efd2808ba47725fddb302f70f913631b6a078caa548
.exe windows x86

dd8b7d6b572302f6d85d9cfe7fdcd4d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey

certcli

CAFreeCAProperty
CACertTypeSetSecurity
CAGetCAProperty
CAGetCertTypeKeySpec
CACreateCertType
CAEnumNextCertType
CARemoveCACertificateType
CASetCertTypeExtension
CAGetCertTypeExtensions
CAEnumCertTypes
CAEnumCertTypesForCA
CAUpdateCertType
CAGetCertTypePropertyEx
CAGetCertTypeFlags
CACertTypeGetSecurity
CAFreeCertTypeExtensions
CASetCertTypeFlags
CAFindCertTypeByName
CAUpdateCA
CAGetCertTypeProperty
CASetCertTypeKeySpec
CAFreeCertTypeProperty
CASetCertTypeProperty
CACloseCertType
CACloseCA
CAFindByName
CAAddCACertificateType

msvcrt

_purecall
__RTDynamicCast
_adjust_fdiv
wcsrchr
wcslen
_wcsicmp
memmove
wcschr
??1type_info@@UAE@XZ
wcstoul
mbstowcs
wcscmp
__dllonexit
?terminate@@YAXXZ
_wcsupr
malloc
??3@YAXPAX@Z
free
_except_handler3
_initterm
wcscpy
wcscat
_onexit
vswprintf
wcsstr
??2@YAPAXI@Z

kernel32

GlobalUnlock
GetStartupInfoA
GetDateFormatW
WideCharToMultiByte
InitializeCriticalSection
InterlockedIncrement
lstrcpyW
GetEnvironmentStringsW
lstrcmpiW
GlobalLock
LocalReAlloc
GetSystemWindowsDirectoryW
GlobalAlloc
GlobalFree
FormatMessageW
CloseHandle
FileTimeToSystemTime
GetModuleFileNameW
LoadLibraryW
GetSystemTimeAsFileTime
IsBadReadPtr
GetModuleHandleA
FileTimeToLocalFileTime
GetTickCount
SetLastError
RemoveDirectoryA
CreateFileW
GetCurrentProcess
GetComputerNameW
LocalFree
SetUnhandledExceptionFilter
DeleteCriticalSection
GetACP
InterlockedDecrement
lstrlenW
OutputDebugStringA
QueryPerformanceCounter
GetSystemDefaultLangID
OutputDebugStringW
GetLastError

user32

LoadImageW
MessageBoxW
GetWindowLongW
SetWindowLongW
SendDlgItemMessageW
RegisterClipboardFormatW
PostMessageW
LoadCursorW
SetFocus
InsertMenuItemW
EndDialog
ReleaseDC
EnableWindow
GetDC
LoadIconW
wsprintfW
SetWindowTextW
GetDlgItemTextA
SetCursor
WinHelpW
LoadStringW
SystemParametersInfoW
LoadBitmapW
GetDlgItem
DialogBoxParamW
GetParent
SendMessageW
SetDlgItemTextW

comctl32

PropertySheetW
CreatePropertySheetPageW

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 6.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd8b7d6b572302f6d85d9cfe7fdcd4d7

Headers

File Characteristics

Imports

advapi32

certcli

msvcrt

kernel32

user32

comctl32

Sections

.text Size: 115KB - Virtual size: 114KB

.data Size: 53KB - Virtual size: 53KB

.data Size: 27KB - Virtual size: 6.2MB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 115KB - Virtual size: 114KB

.data
Size: 53KB - Virtual size: 53KB

.data
Size: 27KB - Virtual size: 6.2MB

.rsrc
Size: 3KB - Virtual size: 3KB