f3b61b970c7d296348db9ed1f1ff2a0f0228cecb962e6976920c6da1dd889f5c

Sharing

Copy URL Twitter E-mail

General

Target

f3b61b970c7d296348db9ed1f1ff2a0f0228cecb962e6976920c6da1dd889f5c
Size

135KB
MD5

16584f064fc5d3c5993f52634614a5f0
SHA1

2c5d960bea5dd6a395fa1001ba87e67d045c426c
SHA256

f3b61b970c7d296348db9ed1f1ff2a0f0228cecb962e6976920c6da1dd889f5c
SHA512

d438d665f3b190f7d7ac7e8f86d92e6335dba8d1e0b469c4742b8ea5de04c1d2967494e942337f9b71b7ce6753af7e940b770e575e86ea1a874df5013b7fcb47
SSDEEP

1536:NGXf6ZEMvh2U6/IazXDaz++cFAykF4ebbMBvWP+OFHphLLIHjmFph/CPnI8:4XfCoDaz+zK94ebbN+MpxLIDtnj

Score

N/A

Malware Config

Signatures

Files

f3b61b970c7d296348db9ed1f1ff2a0f0228cecb962e6976920c6da1dd889f5c
.exe windows x86

69656772a686bb855e5e2abe9965a150

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamW
EndDialog
SetDlgItemTextW
CloseWindowStation
GetProcessWindowStation
OpenWindowStationW
SetProcessWindowStation
GetDesktopWindow
GetWindowRect
GetClientRect
MapWindowPoints
SetWindowPos
OpenDesktopW
SetThreadDesktop
GetThreadDesktop
CloseDesktop
PeekMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
wsprintfA
LoadStringW
wsprintfW

kernel32

FormatMessageW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
MultiByteToWideChar
ReleaseMutex
DebugBreak
RaiseException
CreateFileW
GetWindowsDirectoryW
CreateMutexW
GetLocalTime
WriteFile
SetFilePointer
lstrcatA
lstrcpyA
lstrlenA
LocalFree
InterlockedCompareExchange
GetModuleHandleW
GetVersionExW
GetSystemInfo
CreateSemaphoreW
Sleep
ReleaseSemaphore
SetLastError
GetComputerNameW
WideCharToMultiByte
GetSystemDirectoryW
SearchPathW
GlobalFree
GlobalAlloc
GlobalMemoryStatusEx
ResetEvent
CreateThread
DuplicateHandle
GetFileAttributesW
InitializeCriticalSection
PostQueuedCompletionStatus
InterlockedExchangeAdd
QueryPerformanceFrequency
CreateIoCompletionPort
InterlockedExchange
FreeLibraryAndExitThread
GetQueuedCompletionStatus
SetThreadPriority
OutputDebugStringA
LoadLibraryA
lstrcmpA
lstrcmpiW
GetModuleFileNameA
VirtualQueryEx
lstrcpynW
LockResource
LoadResource
FindResourceW
FindClose
DeleteFileW
GetCurrentProcess
FindNextFileW
FindFirstFileW
GetExitCodeProcess
CreateProcessW
ExpandEnvironmentStringsW
CreateDirectoryW
GetThreadContext
IsDebuggerPresent
LoadLibraryExW
GetModuleHandleA
GetModuleFileNameW
GetLastError
DisableThreadLibraryCalls
GetVersionExA
LoadLibraryW
CreateEventA
GetCurrentThread
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
lstrlenW
InterlockedIncrement
lstrcmpW
CompareStringW
SetFileAttributesW
InterlockedDecrement
GetUserDefaultLCID
SetEvent
GetCurrentThreadId
CloseHandle
WaitForSingleObject
CreateEventW
lstrcpyW
lstrcatW
FreeLibrary
GetProcAddress

ole32

StringFromCLSID
CoGetMalloc
CoGetObjectContext
FreePropVariantArray
PropVariantClear
PropVariantCopy
CoUnmarshalInterface
IIDFromString
CoUninitialize
CoInitializeEx
CoRevokeClassObject
CoRegisterClassObject
CoRevertToSelf
CoMarshalInterface
CoImpersonateClient
CreateStreamOnHGlobal
CoCreateInstance
CoEnableCallCancellation
CoDisableCallCancellation
StringFromGUID2
CoGetObject
StringFromIID
CLSIDFromString
CoGetClassObject
CoSetProxyBlanket
CoCancelCall
CoTaskMemFree
CoTaskMemAlloc
CoCreateGuid

advapi32

RegQueryInfoKeyW
SetThreadToken
RegisterServiceCtrlHandlerW
RegDeleteValueW
DeleteService
OpenSCManagerW
OpenServiceW
ChangeServiceConfigW
CreateServiceW
ChangeServiceConfig2W
CloseServiceHandle
ControlService
QueryServiceStatus
SetServiceStatus
RegEnumKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
MakeAbsoluteSD
MakeSelfRelativeSD
IsValidSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
GetSecurityDescriptorLength
LookupAccountSidW
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
EqualSid
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorSacl
SetSecurityDescriptorDacl
FreeSid
AllocateAndInitializeSid
RegOpenKeyW
RegisterEventSourceW
ReportEventW
DeregisterEventSource
RegQueryValueExW
GetUserNameW
OpenThreadToken
OpenProcessToken
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
AdjustTokenPrivileges
LookupPrivilegeValueW
RegUnLoadKeyW
RegLoadKeyW
RegEnumValueW

rpcrt4

NdrDllGetClassObject
NdrCStdStubBuffer_Release
NdrCStdStubBuffer2_Release
NdrDllRegisterProxy
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
NdrDllUnregisterProxy
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
NdrStubCall2
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrOleAllocate
NdrStubForwardingFunction

version

VerQueryValueW

msvcrt

wcslen
_onexit
__dllonexit
_adjust_fdiv
_initterm
_wstrdate
_wstrtime
_waccess
_vsnwprintf
wcsrchr
__CxxFrameHandler
_vsnprintf
_beginthreadex
_CIexp
_ftol
wcstoul
wcscpy
malloc
_wcsicmp
wcscmp
_wcsnicmp
iswctype
_except_handler3
_local_unwind2
_itow
wcscat
free

ntdll

RtlDelete
RtlSplay
RtlInitializeCriticalSectionAndSpinCount
RtlDeleteCriticalSection
RtlInitializeCriticalSection

Sections

.text
Size: 76KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69656772a686bb855e5e2abe9965a150

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

ole32

advapi32

rpcrt4

version

msvcrt

ntdll

Sections

.text Size: 76KB - Virtual size: 79KB

.data Size: 14KB - Virtual size: 18KB

.rsrc Size: 31KB - Virtual size: 31KB

.reloc Size: 14KB - Virtual size: 14KB

.text
Size: 76KB - Virtual size: 79KB

.data
Size: 14KB - Virtual size: 18KB

.rsrc
Size: 31KB - Virtual size: 31KB

.reloc
Size: 14KB - Virtual size: 14KB