16bc63f21507429fd3ee692712d98ba9e476db94afec37d26594616afcb60ff3

Sharing

Copy URL

Twitter E-mail

General

Target

16bc63f21507429fd3ee692712d98ba9e476db94afec37d26594616afcb60ff3
Size

1.1MB
MD5

32759d20df49c681fb558dde6de8e0b0
SHA1

e8ebb9b090e3a35c8e820dd83ba3d4cdc6560d0f
SHA256

16bc63f21507429fd3ee692712d98ba9e476db94afec37d26594616afcb60ff3
SHA512

deb5d722ad1113a7a13b4cff877d5fb5a8994ab20ee20d37fb9b56bfef8ef32577187e7afe828f39fe5f4e3f4f2d4208a4315de2fe9bd87cc9dda3b3737cbc96
SSDEEP

12288:bF9vvkPCuYcoTKFng0SrQKwypmwPI2A66BvDYqt:jvvkPNjoTKa1UKwykwP+Zrt

Score

N/A

Malware Config

Signatures

Files

16bc63f21507429fd3ee692712d98ba9e476db94afec37d26594616afcb60ff3
.exe windows x86

3de66df0d130a547131fe310bcfd61b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetEffectiveRightsFromAclW
LsaGetUserName
ReadEncryptedFileRaw
SystemFunction032
CloseServiceHandle
ControlService
EnumDependentServicesA
OpenSCManagerA
OpenServiceA
OpenThreadToken
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
SetServiceStatus
StartServiceA
ConvertSecurityDescriptorToStringSecurityDescriptorW
ConvertStringSecurityDescriptorToSecurityDescriptorW
EqualSid
LsaICLookupNames
RegOpenKeyExW
RegQueryValueExW
StartServiceCtrlDispatcherA
CryptEnumProvidersW
ElfOpenBackupEventLogA
ObjectDeleteAuditAlarmW
SetFileSecurityW
CloseEventLog
ConvertToAutoInheritPrivateObjectSecurity
GetAccessPermissionsForObjectA
RegEnumKeyExW
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
ClearEventLogA
RegCreateKeyA
RegCreateKeyExW
RegOpenKeyA
RegQueryValueA
RegSetValueExW
AddAccessAllowedAce
CryptImportKey
InitiateSystemShutdownExW
LsaClose
LsaFreeMemory
LsaOpenPolicy
LsaQueryInformationPolicy
NotifyBootConfigStatus
RevertToSelf
SetPrivateObjectSecurity
CreateServiceW
ElfClearEventLogFileA
GetNamedSecurityInfoW
EnumServiceGroupW
GetCurrentHwProfileA
GetFileSecurityA
GetUserNameA
LookupPrivilegeNameW
MakeSelfRelativeSD
ObjectDeleteAuditAlarmA
RegQueryInfoKeyW
SystemFunction030

kernel32

EnumResourceTypesW
FreeLibrary
GetComputerNameExW
GetEnvironmentStringsW
GetProcAddress
GetProcessHeaps
GetProfileStringW
LoadLibraryExW
OpenMutexW
RaiseException
WriteProfileStringW
CloseHandle
ConnectNamedPipe
CreateEventA
GetCurrentThread
GetModuleFileNameA
GetModuleHandleA
GetTempFileNameW
GetTimeFormatW
GlobalSize
InterlockedDecrement
InterlockedIncrement
LocalAlloc
LocalFree
LocalShrink
OpenWaitableTimerA
SetThreadAffinityMask
Sleep
GetProfileIntW
FindClose
FindNextFileW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
InterlockedCompareExchange
InterlockedExchange
LoadLibraryW
QueryPerformanceCounter
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualFree
lstrlenW
AssignProcessToJobObject
FreeUserPhysicalPages
GlobalAlloc
GlobalFree
UnmapViewOfFile
CreateEventW
DeviceIoControl
DisableThreadLibraryCalls
InitializeCriticalSectionAndSpinCount
WaitForMultipleObjects
WideCharToMultiByte
CancelIo
CreateThread
DeleteFileW
GetComputerNameA
GetModuleFileNameW
GetModuleHandleW
LCMapStringW
LoadLibraryA
MoveFileWithProgressA
MulDiv
SetEvent
WriteFileEx
OutputDebugStringA
GetCommandLineW
GetFileAttributesW
GetStringTypeExA
GetSystemDirectoryA
GlobalLock
GlobalUnlock
IsBadCodePtr
IsBadReadPtr
IsValidCodePage
MapViewOfFile
OpenFileMappingA
OpenMutexA
ReleaseMutex
WaitForSingleObject
WinExec
lstrcatA
lstrcmpiA
lstrcpyA
lstrlenA
DeleteFiber
FindFirstVolumeA
GetDefaultCommConfigA
OpenJobObjectW
ReplaceFileA
Thread32First
VirtualAlloc
WaitForMultipleObjectsEx
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcessHeap
SetCommState
UnlockFileEx
WriteConsoleOutputW
CompareFileTime
ExpandEnvironmentStringsW
FindFirstFileW
FormatMessageW
GetFileAttributesExW
GetFileTime
GetSystemDefaultLangID
GetSystemDirectoryW
ResetEvent
SetDefaultCommConfigW
SetErrorMode
SetPriorityClass
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetLastError
FindFirstFileA
FindNextFileA
SetFileTime
LocalFileTimeToFileTime
ExitProcess
HeapValidate
GetLocalTime
GetStartupInfoA
GetCommandLineA
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FatalAppExitA
HeapFree
HeapAlloc
MultiByteToWideChar
GetLocaleInfoA
GetLocaleInfoW
DuplicateHandle
GetFileInformationByHandle
PeekNamedPipe
GetFileType
GetConsoleCP
ReadConsoleInputA
ReadConsoleInputW
SetConsoleMode
GetConsoleMode
CreateFileW
CompareStringA
GetCPInfo
CompareStringW
GetDriveTypeA
GetCurrentDirectoryA
GetFullPathNameA
MoveFileW
HeapReAlloc
HeapSize
SetConsoleCtrlHandler
SetStdHandle
SetFilePointer
SetHandleCount
GetStdHandle
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetACP
GetOEMCP
CreateFileA
HeapDestroy
HeapCreate
IsBadWritePtr
VirtualProtect
GetSystemInfo
VirtualQuery
WriteFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
InitializeCriticalSection
RtlUnwind
PeekConsoleInputA
GetNumberOfConsoleInputEvents
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
ReadFile
SetEnvironmentVariableA
SetEnvironmentVariableW
GetFileAttributesA
LCMapStringA
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
FlushFileBuffers
WriteConsoleA
GetExitCodeProcess
CreateProcessA

oleaut32

LPSAFEARRAY_Marshal
VarBstrFromDec
VarDecSu
VarFormat
VarI4FromDec
VarDecFromUI1
VarUI4FromI4
OleCreatePropertyFrameIndirect
VarCyFix
VarR4FromI2
VARIANT_UserMarshal
VarDateFromI1
VarDecMul
VarUI1FromBool
VarAdd
VarDecFromDisp
VarFix
VarI2FromUI4
VarDecFix
SafeArrayAllocData
VarDateFromUI2
VarDecInt
VarUI4FromDate
VarUI4FromUI1

rpcrt4

I_RpcDeleteMutex
NdrFullPointerInsertRefId
RpcBindingCopy
RpcMgmtSetComTimeout
NdrNonEncapsulatedUnionFree
RpcNsBindingInqEntryNameW
NDRSContextUnmarshall2
NdrClientCall2
RpcBindingFree
RpcBindingFromStringBindingW
RpcBindingSetAuthInfoW
RpcMgmtInqServerPrincNameW
RpcStringBindingComposeW
RpcStringFreeW
I_RpcServerAllocateIpPort
RpcServerRegisterIfEx
RpcSsGetThreadHandle
RpcSsSetClientAllocFree
NdrClientContextMarshall
NdrMapCommAndFaultStatus
RpcSmAllocate
I_RpcBCacheAllocate
I_RpcClearMutex
NDRSContextUnmarshall
NdrComplexArrayUnmarshall
NdrComplexStructBufferSize
NdrCStdStubBuffer_Release
NdrDllGetClassObject
IUnknown_AddRef_Proxy
RpcCertGeneratePrincipalNameA
I_RpcBindingInqWireIdForSnego
NdrComplexArrayBufferSize
NdrMesTypeEncode
NdrServerContextMarshall
RpcAsyncGetCallStatus

user32

DrawTextW
GetClassWord
GetIconInfo
GetScrollPos
SendDlgItemMessageA
WindowFromDC
GetMenuStringA
GetNextDlgTabItem
GetWindowModuleFileNameW
DialogBoxIndirectParamA
InvalidateRgn
GetMessagePos
BeginDeferWindowPos
ChangeDisplaySettingsW
CheckMenuItem
CheckMenuRadioItem
ChildWindowFromPoint
CreateDialogParamW
CreateMenu
CreatePopupMenu
DeferWindowPos
DeleteMenu
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageW
DlgDirListComboBoxW
DrawEdge
DrawFocusRect
DrawStateW
EnableMenuItem
EnableWindow
EndDeferWindowPos
EndDialog
FillRect
GetActiveWindow
GetAsyncKeyState
GetCaretPos
GetClientRect
GetDlgCtrlID
GetDlgItem
GetDlgItemTextW
GetFocus
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoW
GetMenuStringW
GetMessageW
GetParent
GetSubMenu
GetSysColorBrush
GetSystemMetrics
GetTabbedTextExtentW
GetWindow
GetWindowLongW
GetWindowModuleFileName
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
InflateRect
InsertMenuW
IsChild
IsDialogMessageW
IsWindow
IsWindowEnabled
IsWindowVisible
LoadCursorW
LoadStringW
LookupIconIdFromDirectoryEx
MapWindowPoints
MessageBoxW
OffsetRect
PeekMessageW
PostMessageW
PostThreadMessageW
RegisterClipboardFormatW
ScreenToClient
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCursor
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetMenu
SetMenuDefaultItem
SetMenuItemInfoW
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoW
TranslateMessage
UpdateWindow
WinHelpW
wsprintfW
LoadStringA
MessageBoxA
wsprintfA
CloseWindow
DefFrameProcW
DefWindowProcA
EnumThreadWindows
FindWindowA
InsertMenuItemW
SetProcessWindowStation
ToUnicodeEx
CopyAcceleratorTableA
DdeUninitialize
DefFrameProcA
EnumDisplaySettingsExW
EnumPropsExW
GetClassLongA
GetKeyboardLayout
GetTopWindow
RealGetWindowClass
SetWindowContextHelpId

Sections

.text
Size: 292KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 796KB - Virtual size: 805KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3de66df0d130a547131fe310bcfd61b0

Headers

File Characteristics

Imports

advapi32

kernel32

oleaut32

rpcrt4

user32

Sections

.text Size: 292KB - Virtual size: 288KB

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 796KB - Virtual size: 805KB

.text
Size: 292KB - Virtual size: 288KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 796KB - Virtual size: 805KB