b9f521607471c52d0359603f0011225aea923be13bdcf64952c93eb1fbf1a7e4

Sharing

Copy URL Twitter E-mail

General

Target

b9f521607471c52d0359603f0011225aea923be13bdcf64952c93eb1fbf1a7e4
Size

279KB
MD5

2159b0fbf065fb391a5ac45b0ea17a27
SHA1

8a791a5d9a7268c9a5503f8504d4b255154e258e
SHA256

b9f521607471c52d0359603f0011225aea923be13bdcf64952c93eb1fbf1a7e4
SHA512

0771793d18df0c766739905b3b31fdb5e61783472ca67ed45525c245317a9234a9b31ac3a0f2e8f3e837151484d1fb2a997521ea3da308e38e454fe9a082d5fa
SSDEEP

6144:LPSx9i2fj0k7cSIjh/Jm2jdDTU0SSkKO8jO0Uzh6wh:bSHi237cSIja2JbO8j9

Score

N/A

Malware Config

Signatures

Files

b9f521607471c52d0359603f0011225aea923be13bdcf64952c93eb1fbf1a7e4
.exe windows x86

d40f29d428d42ae5504ff763fd0a8d41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

kernel32

DeleteFileA
FindNextFileA
SetEndOfFile
EnterCriticalSection
GetWindowsDirectoryA
LocalFree
RemoveDirectoryA
GetSystemTimeAsFileTime
WritePrivateProfileStringA
SetFileAttributesA
CloseHandle
HeapFree
HeapDestroy
EnumSystemLocalesA
GetShortPathNameA
GetACP
ReadFile
GetLogicalDriveStringsA
GetCommandLineA
FormatMessageA
CreateDirectoryA
FreeEnvironmentStringsA
GetStdHandle
RtlUnwind
FindFirstFileA
LeaveCriticalSection
GetUserDefaultLCID
GetCurrentThreadId
SetStdHandle
SetLastError
UnhandledExceptionFilter
SetEnvironmentVariableA
TlsFree
GetSystemDirectoryA
CreateFileA
IsBadCodePtr
CopyFileA
TlsGetValue
lstrcmpiA
CreateFileW
HeapReAlloc
HeapSize
SetFilePointer
FreeEnvironmentStringsW
HeapAlloc
VirtualProtect
CompareFileTime
GetTimeZoneInformation
SetUnhandledExceptionFilter
GetOEMCP
GetTempPathA
GetCurrentDirectoryA
SetConsoleCtrlHandler
LocalAlloc
OutputDebugStringA
GetFileSize
IsValidLocale
ExpandEnvironmentStringsA
MoveFileExA
DeleteFileW
GetTimeFormatA
RaiseException
TlsAlloc
VirtualFree
GetSystemInfo
CompareStringA
VirtualQuery
TlsSetValue
LCMapStringA
GetDateFormatA
IsValidCodePage
GetFileAttributesExA
DeleteCriticalSection
LCMapStringW
WritePrivateProfileSectionA
GetFileType
GetSystemTime
FindClose
WriteFile
GetPrivateProfileSectionA
LoadLibraryExA
CompareStringW
FatalAppExitA
GetThreadLocale
FileTimeToSystemTime
SetHandleCount
VirtualAlloc
GetModuleHandleA
WideCharToMultiByte
SystemTimeToFileTime
FlushFileBuffers
GetLocalTime
FreeLibrary
VirtualAllocEx

user32

GetSystemMetrics
LoadStringA
UnregisterClassA
CharUpperA

shlwapi

StrStrIA
PathAddBackslashA
PathAppendA

ole32

CoUninitialize
CoTaskMemFree
CoCreateInstance
CoInitialize
CoTaskMemAlloc

advapi32

OpenSCManagerA
RegCloseKey
CloseServiceHandle
QueryServiceStatus
RegSetValueExA
RegEnumKeyExA
RegEnumValueA
RegCreateKeyExA
RegFlushKey
ChangeServiceConfigA
SetSecurityDescriptorDacl
GetUserNameA
UnlockServiceDatabase
RegOpenKeyExA
StartServiceA
DeleteService
RegEnumKeyA
RegOpenKeyA
CreateServiceA
RegDeleteKeyA
RegQueryValueExA
RegQueryInfoKeyA
OpenServiceA
RegDeleteValueA
LockServiceDatabase
InitializeSecurityDescriptor
ControlService

rtm

RtmCloseEnumerationHandle
RtmReleaseNextHops
MgmGetProtocolOnInterface
RtmGetRouteAge
RtmGetLessSpecificDestination
RtmReleaseChangedDests
RtmReleaseEntities
RtmGetEnumDests
RtmGetChangedDests
RtmInvokeMethod
RtmIgnoreChangedDests
RtmUpdateAndUnlockRoute
MgmGroupEnumerationGetNext

cliconfg

CPlApplet

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 257KB - Virtual size: 419KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d40f29d428d42ae5504ff763fd0a8d41

Headers

File Characteristics

Imports

version

kernel32

user32

shlwapi

ole32

advapi32

rtm

cliconfg

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 257KB - Virtual size: 419KB

.rsrc Size: 2KB - Virtual size: 6KB

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 257KB - Virtual size: 419KB

.rsrc
Size: 2KB - Virtual size: 6KB