7756e8d0b749dc115067088a554c7e7e45a38fd0c657b8ff58882f86a304eec4

Sharing

Copy URL

Twitter E-mail

General

Target

7756e8d0b749dc115067088a554c7e7e45a38fd0c657b8ff58882f86a304eec4
Size

444KB
MD5

e1a76a7d7afea480d5e8a7b90c9b6ab6
SHA1

33cae04abc026040954b0e31468457ecab9a45b1
SHA256

7756e8d0b749dc115067088a554c7e7e45a38fd0c657b8ff58882f86a304eec4
SHA512

e76fd23863a21ced0c1cd31603cb1bbab981121ced3f9c608a703c543a38dd1206d5be0538523476b28c97da1ce91cc3f3d3bbfcd4ae63c7b2f692878afcf304
SSDEEP

12288:fRPp5ni1bQngYFcW7FigSySopS5fnCrKSLoD/fI4J:fhni2nUIFBSrsS5/SKnfII

Score

N/A

Malware Config

Signatures

Files

7756e8d0b749dc115067088a554c7e7e45a38fd0c657b8ff58882f86a304eec4
.exe windows x86

173f850148a11a7fefa2d92b5046d880

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM

Imports

kernel32

SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
LoadLibraryW
ExitProcess
OutputDebugStringW
GetFileType
WriteConsoleW
OutputDebugStringA
WriteFile
GetStdHandle
IsProcessorFeaturePresent
GetModuleHandleW
TlsFree
GetCurrentThreadId
TlsSetValue
LCMapStringW
GetStringTypeW
FreeLibrary
VirtualQuery
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryA
SetStdHandle
CloseHandle
CreateFileW
RaiseException
MulDiv
HeapAlloc
HeapCreate
GetProcessHeap
GetOEMCP
GetACP
GetProcAddress
LocalAlloc
GetCurrentThread
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
SetLastError
LocalFree
InterlockedDecrement
GetModuleFileNameA
MultiByteToWideChar
GetLastError
FileTimeToSystemTime
TlsGetValue
TlsAlloc
IsValidCodePage
GetCPInfo
IsBadReadPtr
HeapValidate
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
DecodePointer
TerminateProcess
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameW
EncodePointer
HeapFree
HeapReAlloc
HeapSize
Sleep
IsDebuggerPresent
SetUnhandledExceptionFilter
SystemTimeToTzSpecificLocalTime
GetModuleHandleA
HeapQueryInformation
RtlUnwind

user32

GetClientRect
CreateDialogParamA
BeginPaint
GetDesktopWindow
CheckRadioButton
CreatePopupMenu
SetRect
SendMessageA
SetMenu
DrawMenuBar
DispatchMessageW
GetMessageW
GetWindowLongA
LoadCursorA
RegisterClassA
ShowWindow
DefWindowProcA
FindWindowW
wsprintfA
MessageBoxA
GetSystemMetrics
CountClipboardFormats
DdeCreateDataHandle
LoadIconA
RegisterClassExA
CheckDlgButton
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
GetDlgItem
GetWindowTextA
EndDialog
GetParent
SetWindowTextA
GetAncestor
DialogBoxParamA
CreateWindowExA
OffsetRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsDlgButtonChecked
EndPaint

gdi32

DeleteDC
GetStockObject
SelectObject
BitBlt
GetObjectA
CreateFontIndirectA
CreateCompatibleBitmap
CreateCompatibleDC
MoveToEx
CreatePen
LineTo
SetBkColor
ExtTextOutA
DeleteObject
TextOutW

comdlg32

PrintDlgExA
ChooseFontA

advapi32

GetFileSecurityA
ConvertSidToStringSidA
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
GetSecurityDescriptorDacl
SetSecurityDescriptorDacl
GetSecurityDescriptorOwner
SetSecurityDescriptorOwner
GetSecurityDescriptorGroup
SetSecurityDescriptorGroup
GetSecurityDescriptorLength
ImpersonateSelf
OpenThreadToken
MapGenericMask
AccessCheck
IsValidSecurityDescriptor
MakeSelfRelativeSD
SetEntriesInAclA

ole32

CLSIDFromString
CoInitialize
CoUninitialize
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
CreateBindCtx
CoSetProxyBlanket

oleaut32

GetErrorInfo
VariantClear
VariantChangeType
SysFreeString
SysStringLen
SysAllocString
VariantInit

ws2_32

WSACreateEvent
WSAGetLastError

netapi32

NetShareGetInfo
NetShareSetInfo

psapi

GetProcessMemoryInfo

iphlpapi

IcmpCloseHandle
IcmpCreateFile
NotifyRouteChange

shlwapi

PathFindFileNameA

comctl32

ord17

imm32

ImmAssociateContext

setupapi

SetupCopyOEMInfA

msi

ord79

Sections

.text
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flis
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

173f850148a11a7fefa2d92b5046d880

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

oleaut32

ws2_32

netapi32

psapi

iphlpapi

shlwapi

comctl32

imm32

setupapi

msi

Sections

.text Size: 148KB - Virtual size: 148KB

.rdata Size: 90KB - Virtual size: 90KB

.data Size: 5KB - Virtual size: 12KB

.flis Size: 171KB - Virtual size: 171KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 27KB - Virtual size: 27KB

.text
Size: 148KB - Virtual size: 148KB

.rdata
Size: 90KB - Virtual size: 90KB

.data
Size: 5KB - Virtual size: 12KB

.flis
Size: 171KB - Virtual size: 171KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 27KB - Virtual size: 27KB