0d7f0eb31260ff7073c98ac30cb350ac10d25310f2bdce662e30f843b1dfe5e7

Sharing

Copy URL Twitter E-mail

General

Target

0d7f0eb31260ff7073c98ac30cb350ac10d25310f2bdce662e30f843b1dfe5e7
Size

733KB
MD5

395a916171c432da96b607d218c55450
SHA1

51720d778591ad8072ced2629ce942a0bb4d204f
SHA256

0d7f0eb31260ff7073c98ac30cb350ac10d25310f2bdce662e30f843b1dfe5e7
SHA512

cf327a271f5be9cb3e988557090e2838efc5d38a1b8234800137e9dfd4fe5f6e84e6378845d14fd4e857a0b7cc26dd54c64233b84ab0084206078004df61ef41
SSDEEP

12288:acvJvUf4aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaap:XRdaaaaaaaaaaaaaaaaaaaaaaaaaaaaJ

Score

N/A

Malware Config

Signatures

Files

0d7f0eb31260ff7073c98ac30cb350ac10d25310f2bdce662e30f843b1dfe5e7
.exe windows x86

77dac6fdf0cb9a30acd5a2534bf4ba24

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
lstrcpyA
TlsFree
lstrcmpiA
GetCurrentProcessId
LCMapStringW
ExitProcess
CreateEventA
lstrlenW
GetFileSize
GetSystemTimeAsFileTime
CreateThread
InterlockedIncrement
FreeEnvironmentStringsA
lstrcmpiW
CreateFileMappingA
FileTimeToLocalFileTime
GetStringTypeA
CreateFileMappingW
GetSystemDirectoryA
CreateFileW
GetModuleFileNameW
GetCPInfo
CreateEventW
DisableThreadLibraryCalls
CompareStringA
GetStdHandle
VirtualAllocEx
GetLocalTime

atmlib

ATMAddFont

rpcrt4

IUnknown_Release_Proxy
NdrCStdStubBuffer2_Release
RpcServerRegisterAuthInfoW
NdrOleFree
RpcServerRegisterIfEx
NdrDllUnregisterProxy
RpcServerUnregisterIf
IUnknown_QueryInterface_Proxy
CStdStubBuffer_QueryInterface
NdrStubForwardingFunction
CStdStubBuffer_Invoke
RpcBindingToStringBindingW
NdrClientCall2
RpcBindingSetAuthInfoW
RpcServerUseProtseqEpW
RpcBindingSetAuthInfoExW
RpcStringFreeA
NdrStubCall2
CStdStubBuffer_Disconnect
RpcBindingFromStringBindingW
CStdStubBuffer_CountRefs
NdrDllCanUnloadNow
RpcImpersonateClient
UuidToStringW
RpcRevertToSelf
UuidFromStringW
RpcBindingFree

ole32

OleRegEnumVerbs
CoInitializeEx
OleLoadFromStream
GetRunningObjectTable
CoGetObjectContext
CoInitialize
StgCreateDocfileOnILockBytes
CoUninitialize
CLSIDFromProgID
CreateStreamOnHGlobal
OleInitialize
CoCreateGuid
OleUninitialize
CoMarshalInterThreadInterfaceInStream
GetHGlobalFromStream
CoUnmarshalInterface
CoGetInterfaceAndReleaseStream
StgIsStorageFile
PropVariantCopy
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
CoRegisterClassObject
OleRun
StringFromIID
CreateILockBytesOnHGlobal
CLSIDFromString
MkParseDisplayName
CreateDataAdviseHolder
CreateOleAdviseHolder

advapi32

DuplicateTokenEx
AddAccessAllowedAce
RegCloseKey
RegisterTraceGuidsW
InitializeAcl
CryptAcquireContextW
MakeSelfRelativeSD
RegSetValueExW
QueryServiceConfigW
CryptCreateHash
SetNamedSecurityInfoW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DeregisterEventSource
GetTraceEnableLevel
ChangeServiceConfigW
OpenServiceA
GetSecurityDescriptorLength
RegDeleteKeyA
CloseServiceHandle
OpenSCManagerA
AddAce
GetTraceEnableFlags
EqualSid

shell32

SHFileOperationW
SHChangeNotify
SHGetMalloc
SHGetSpecialFolderPathW
SHGetDesktopFolder

user32

GetSystemMenu
EndPaint
LoadCursorA
GetDC
DialogBoxParamA
CheckDlgButton
PeekMessageA
GetClassNameW
SetDlgItemTextW
GetWindowRect
SetFocus
UnhookWindowsHookEx
MoveWindow
ShowWindow
BeginPaint
UpdateWindow
GetSysColorBrush
DestroyWindow
SetWindowTextA
SetWindowLongW
CreateDialogParamW
GetWindowLongW
WinHelpW
FindWindowW
CopyRect
RegisterClassA
EnableMenuItem
IsRectEmpty
DialogBoxParamW
ClientToScreen
DestroyIcon
MsgWaitForMultipleObjects
GetDesktopWindow
LoadIconA
KillTimer
MessageBoxA
IsWindow
RegisterWindowMessageA
DispatchMessageW

oleaut32

SysFreeString
GetErrorInfo
SafeArrayPtrOfIndex
SafeArrayGetUBound
VariantInit
SysStringByteLen
SysAllocStringByteLen
LoadTypeLib
CreateErrorInfo
SysAllocStringLen
SafeArrayGetElement
VariantCopy

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 7KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 11KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 24KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

77dac6fdf0cb9a30acd5a2534bf4ba24

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

atmlib

rpcrt4

ole32

advapi32

shell32

user32

oleaut32

Sections

.text Size: 57KB - Virtual size: 57KB

.orpc Size: 7KB - Virtual size: 10KB

DATA Size: 11KB - Virtual size: 20KB

INIT Size: 24KB - Virtual size: 48KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 57KB - Virtual size: 57KB

.orpc
Size: 7KB - Virtual size: 10KB

DATA
Size: 11KB - Virtual size: 20KB

INIT
Size: 24KB - Virtual size: 48KB

.reloc
Size: 1KB - Virtual size: 1KB