89a695c913eedbed40b0c8b7a9ad11793465f3d6886e0b2e34a17d002f8c6202

Sharing

Copy URL Twitter E-mail

General

Target

89a695c913eedbed40b0c8b7a9ad11793465f3d6886e0b2e34a17d002f8c6202
Size

677KB
MD5

2a86eba98efd922e98fde5f2dfa47688
SHA1

3175974d84174a19800bdc4f5727bb12a77597da
SHA256

89a695c913eedbed40b0c8b7a9ad11793465f3d6886e0b2e34a17d002f8c6202
SHA512

e2478835367fceda8dbaec50e881eeefc5ead4e94e64649fe29e7b7e106b487dc2170cdad40508c84d6e7e4abad788e1595c300f118a75cc9b0699946a7b6d86
SSDEEP

768:mzHV2df00jgptda1MUCn+4MieN0vjYvK0Xq3f394Bxhm4vH56MORvEDgnrr0mlam:jxUptQsHCNxC0PPS+T6ZouQOeg

Score

N/A

Malware Config

Signatures

Files

89a695c913eedbed40b0c8b7a9ad11793465f3d6886e0b2e34a17d002f8c6202
.exe windows x86

87b9d664fe784da5dc7b54f8ea03956a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptDuplicateHash
DuplicateTokenEx
GetPrivateObjectSecurity
OpenThreadToken
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW

kernel32

VirtualAlloc
CloseHandle
DeleteVolumeMountPointW
ExpandEnvironmentStringsW
FindClose
FindFirstFileW
GetCurrentThread
GetSystemWindowsDirectoryW
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
OpenFile
SetLocalTime
Sleep
lstrcmpi
lstrlenW
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
EncodePointer
GetLastError
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryW
GetLocaleInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
RtlUnwind
HeapAlloc
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW

oleaut32

VarUI4FromR4

rpcrt4

I_RpcNsInterfaceUnexported
NdrDllGetClassObject
NdrEncapsulatedUnionUnmarshall
NdrNonConformantStringUnmarshall

shell32

Shell_NotifyIconW

user32

PaintDesktop
SetWindowTextA
GetClassNameW

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 452KB - Virtual size: 451KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 178KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

87b9d664fe784da5dc7b54f8ea03956a

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

oleaut32

rpcrt4

shell32

user32

Sections

.text Size: 43KB - Virtual size: 42KB

.rdata Size: 452KB - Virtual size: 451KB

.data Size: 178KB - Virtual size: 185KB

.text
Size: 43KB - Virtual size: 42KB

.rdata
Size: 452KB - Virtual size: 451KB

.data
Size: 178KB - Virtual size: 185KB