ea6fcee526f6b060223332eb56437d44aef55c2e8799292aa85e3c85ed520fdf

Sharing

Copy URL

Twitter E-mail

General

Target

ea6fcee526f6b060223332eb56437d44aef55c2e8799292aa85e3c85ed520fdf
Size

141KB
MD5

0fd233c4db31b0df5703e5459d6df520
SHA1

154de102dd5b5ff8482f07d81d402f91e1e61a45
SHA256

ea6fcee526f6b060223332eb56437d44aef55c2e8799292aa85e3c85ed520fdf
SHA512

7c41c22bc34d59b1d39a71c61b5321897e26e30ad5cd02362f0e0ef8a32fc82c1912fcc402a5e88461d544f41d97f7a53ad7219425ce0e2e6cc248992ee1dc8e
SSDEEP

3072:8YrcXuT/q4kfG4joOCYrRMc0KnVnTvSCg:8YoXuTiSdc0KnFa

Score

N/A

Malware Config

Signatures

Files

ea6fcee526f6b060223332eb56437d44aef55c2e8799292aa85e3c85ed520fdf
.exe windows x86

a6cef1827545673035a388548437ddcc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

malloc
free
printf
_getche
__CxxFrameHandler
localtime
_vsnwprintf
wcschr
towupper
_wcsnicmp
wcscmp
wcscspn
iswspace
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
exit
_cexit
_XcptFilter
_exit
_c_exit
_wcsicmp
wcscat
wcsstr
_except_handler3
??0exception@@QAE@XZ
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
_CxxThrowException
_beginthreadex
_purecall
??0exception@@QAE@ABV0@@Z
_endthreadex
swprintf
_wtoi64
_controlfp
wcscpy
wcslen
_ui64tow
wcstok

msvcp60

??0bad_alloc@std@@QAE@PBD@Z
??1bad_alloc@std@@UAE@XZ
??0bad_alloc@std@@QAE@ABV01@@Z
?move@?$char_traits@G@std@@SAPAGPAGPBGI@Z
?length@?$char_traits@G@std@@SAIPBG@Z
?_Xlen@std@@YAXXZ
?copy@?$char_traits@G@std@@SAPAGPAGPBGI@Z
?_Xran@std@@YAXXZ
?compare@?$char_traits@G@std@@SAHPBG0I@Z
?assign@?$char_traits@G@std@@SAXAAGABG@Z
?find@?$char_traits@G@std@@SAPBGPBGIABG@Z

atl

ord30

advapi32

RegOpenKeyExW
RegQueryValueExW
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegCreateKeyExW
RegSetValueExW
RegCloseKey
TraceMessage
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW
ReportEventW
InitializeSecurityDescriptor
InitializeAcl
SetSecurityDescriptorDacl
MakeSelfRelativeSD
IsValidSid
GetLengthSid
LookupAccountNameW
OpenProcessToken
GetTokenInformation
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
AddAccessDeniedAce
AddAccessAllowedAce
SetServiceStatus
RegisterEventSourceW

kernel32

GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetSystemDirectoryW
WideCharToMultiByte
LocalFree
ExpandEnvironmentStringsW
ExitProcess
CreateThread
GetSystemInfo
InterlockedCompareExchange
CreateSemaphoreW
ReleaseSemaphore
GetLocalTime
GetComputerNameW
InterlockedIncrement
InterlockedDecrement
CancelIo
CloseHandle
GetLastError
CreateIoCompletionPort
ResumeThread
WaitForSingleObject
SetEvent
CreateEventW
LeaveCriticalSection
GetTickCount
EnterCriticalSection
SetThreadPriority
InitializeCriticalSection
DeleteCriticalSection
Sleep
PostQueuedCompletionStatus
ResetEvent
GetQueuedCompletionStatus

rpcrt4

RpcStringFreeW
UuidToStringW

user32

CharLowerW
CharUpperW
wsprintfW

oleaut32

SystemTimeToVariantTime
VariantChangeType
SysStringByteLen
SysAllocStringByteLen
SysStringLen
SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
VariantClear
VariantCopy
VariantInit
SysAllocString
SysFreeString
GetErrorInfo

ole32

CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoInitializeEx
CoUninitialize
OleRun

mqrt

MQReceiveMessageByLookupId
MQOpenQueue
MQPathNameToFormatName
MQReceiveMessage
MQCloseQueue
MQCloseCursor
MQCreateCursor
MQCreateQueue

Sections

.text
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mjjerqn
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a6cef1827545673035a388548437ddcc

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

msvcp60

atl

advapi32

kernel32

rpcrt4

user32

oleaut32

ole32

mqrt

Sections

.text Size: 109KB - Virtual size: 109KB

.data Size: 2KB - Virtual size: 5KB

.rsrc Size: 28KB - Virtual size: 29KB

mjjerqn Size: - Virtual size: 4KB

.text
Size: 109KB - Virtual size: 109KB

.data
Size: 2KB - Virtual size: 5KB

.rsrc
Size: 28KB - Virtual size: 29KB

mjjerqn
Size: - Virtual size: 4KB