4fce849e7bbcf628db8f22ef00fce1ad4f60fa2fddd5bb734d626a14604436ca

Sharing

Copy URL Twitter E-mail

General

Target

4fce849e7bbcf628db8f22ef00fce1ad4f60fa2fddd5bb734d626a14604436ca
Size

879KB
MD5

4012483bf43455f67cdb9e8d9808c1cc
SHA1

bdb23e92cba4be669cd911b6efd4565b4437a599
SHA256

4fce849e7bbcf628db8f22ef00fce1ad4f60fa2fddd5bb734d626a14604436ca
SHA512

50e62e48bd9e59315134a36e636a8f25ca0194614fbf78c91a0fad8a13c8515a398d318074e858eba12bf69ef3b672c8c20a48c4de2552549ee8285162c8ad85
SSDEEP

24576:4P5iTwGmeTpUCYBBBpGJnSazoY//s7lHUF:4P5iTwGmeTHqpwSa8k/s7

Score

N/A

Malware Config

Signatures

Files

4fce849e7bbcf628db8f22ef00fce1ad4f60fa2fddd5bb734d626a14604436ca
.exe windows x86

be5dd05f82dc3c0a41108b57ddc78943

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

ReportEventW
BuildTrusteeWithObjectsAndSidW
RegSetValueExW
FreeSid
AddAccessDeniedAce
LookupAccountSidW
DeregisterEventSource
CryptAcquireContextW
CreateProcessAsUserW
RegDisablePredefinedCache
QueryServiceConfigW
LsaQuerySecret
GetServiceDisplayNameA
RegDeleteKeyA
SetTokenInformation
CryptSetProvParam
RegisterServiceCtrlHandlerA
CryptContextAddRef
RegQueryMultipleValuesA

ole32

CreateClassMoniker
CoSuspendClassObjects
CoTaskMemRealloc
OleDuplicateData
HGLOBAL_UserSize
GetHGlobalFromStream
FreePropVariantArray
CoGetInterfaceAndReleaseStream
CLIPFORMAT_UserMarshal
MonikerCommonPrefixWith
CoGetObjectContext
CreateGenericComposite
CoGetMarshalSizeMax
CLSIDFromString
CoRegisterClassObject
OleFlushClipboard
HICON_UserUnmarshal
OleSaveToStream
CoTreatAsClass
HBITMAP_UserUnmarshal
OleSetMenuDescriptor
CLIPFORMAT_UserSize
CoEnableCallCancellation
OleCreate
CreateStreamOnHGlobal
StgConvertPropertyToVariant
CoRevokeClassObject
HBITMAP_UserSize
HWND_UserMarshal
CoCancelCall
UpdateDCOMSettings
HWND_UserFree

odbc32

CursorLibLockDbc
CursorLibTransact
ValidateErrorQueue
SearchStatusCode
PostODBCError
CursorLibLockStmt
VRetrieveDriverErrorsRowCol
SQLTablePrivilegesA
LockHandle
PostODBCComponentError
VFreeErrors
CursorLibLockDesc

kernel32

GetVolumePathNameW
lstrcpyW
VirtualAlloc
SetEvent
DuplicateHandle
SetFileTime
GetUserDefaultLCID
SetHandleCount
GetConsoleWindow
CloseHandle
HeapFree
SetThreadExecutionState
SetCommTimeouts
GetVolumeNameForVolumeMountPointA
InterlockedExchangeAdd
DeleteTimerQueueTimer
FindNextChangeNotification
lstrcpynW
GetPrivateProfileStringW
PostQueuedCompletionStatus
GetSystemDefaultLangID
LoadLibraryW

shlwapi

PathUndecorateW
PathIsNetworkPathW
SHRegGetUSValueW
AssocIsDangerous
UrlIsW
StrRetToBufW
PathCompactPathA
PathRenameExtensionW
StrCSpnW
UrlCombineA
StrRChrIA
StrCmpLogicalW
PathCombineA
PathRemoveBackslashW
StrSpnW
StrCmpW
StrFormatByteSizeW
wvnsprintfA
SHCreateStreamOnFileEx
SHCreateStreamOnFileW
PathGetArgsA
PathRemoveBlanksW
PathAddExtensionW
StrCmpIW
ColorHLSToRGB

setupapi

SetupDiCreateDeviceInterfaceRegKeyW
SetupDiDestroyDriverInfoList
SetupDiGetClassDevsExW
SetupOpenLog
SetupCommitFileQueueW
SetupGetSourceFileLocationW
CM_Get_Child
SetupDiEnumDriverInfoA
SetupDiInstallDevice
CM_Setup_DevNode
pSetupStringFromGuid
SetupDiGetSelectedDriverA
SetupDiGetDeviceInstanceIdA
SetupGetLineTextA
SetupDiSetSelectedDriverW
SetupDiEnumDriverInfoW
SetupInstallFromInfSectionW
SetupCloseLog
SetupDiGetINFClassW
SetupQueueCopyIndirectW
SetupQueryInfVersionInformationW
CM_Get_Device_ID_Size
SetupOpenInfFileW
SetupPromptReboot
SetupDiGetDeviceInterfaceDetailW
SetupCloseInfFile
SetupDiOpenClassRegKeyExW
SetupSetDirectoryIdExW

netapi32

NetUserGetInfo
NetWkstaUserGetInfo
NetGroupGetUsers
NetUnregisterDomainNameChangeNotification
NetRemoteTOD
NetGroupGetInfo
NetpwNameValidate
NetUserChangePassword
NetGroupDelUser
NetGroupEnum
NetLocalGroupSetInfo
NetLocalGroupDelMembers
NetAlertRaiseEx
NetUseDel
NetGetJoinInformation
NetServerGetInfo
NetApiBufferFree
NetLocalGroupGetMembers
NetMessageBufferSend
NetValidateName
NetLocalGroupAdd
NetGetDCName
NetLocalGroupEnum
NetQueryDisplayInformation
NetServiceInstall
NetServiceEnum

Sections

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 233B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 262B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 25KB - Virtual size: 343KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CRT
Size: 182KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 50KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 160KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 110KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 216KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be5dd05f82dc3c0a41108b57ddc78943

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

ole32

odbc32

kernel32

shlwapi

setupapi

netapi32

Sections

.data Size: 10KB - Virtual size: 9KB

.data Size: 1024B - Virtual size: 233B

.data Size: 2KB - Virtual size: 1KB

.data Size: 10KB - Virtual size: 9KB

.data Size: 1024B - Virtual size: 262B

.text Size: 25KB - Virtual size: 343KB

CRT Size: 182KB - Virtual size: 227KB

.idata Size: 50KB - Virtual size: 79KB

.bss Size: 160KB - Virtual size: 205KB

.edata Size: 110KB - Virtual size: 277KB

DATA Size: 216KB - Virtual size: 244KB

.rsrc Size: 110KB - Virtual size: 109KB

.reloc Size: 1024B - Virtual size: 578B

.data
Size: 10KB - Virtual size: 9KB

.data
Size: 1024B - Virtual size: 233B

.data
Size: 2KB - Virtual size: 1KB

.data
Size: 10KB - Virtual size: 9KB

.data
Size: 1024B - Virtual size: 262B

.text
Size: 25KB - Virtual size: 343KB

CRT
Size: 182KB - Virtual size: 227KB

.idata
Size: 50KB - Virtual size: 79KB

.bss
Size: 160KB - Virtual size: 205KB

.edata
Size: 110KB - Virtual size: 277KB

DATA
Size: 216KB - Virtual size: 244KB

.rsrc
Size: 110KB - Virtual size: 109KB

.reloc
Size: 1024B - Virtual size: 578B