96a88f9bf9e68c5cdaf9e02a20241afaaf858442202d40fc1a5d13e38617581b

Sharing

Copy URL Twitter E-mail

General

Target

96a88f9bf9e68c5cdaf9e02a20241afaaf858442202d40fc1a5d13e38617581b
Size

208KB
MD5

089bfe5e0fef356e461e15100ec45165
SHA1

bf9ff63db1f7df89b7452663bdbc1876ddeedfdc
SHA256

96a88f9bf9e68c5cdaf9e02a20241afaaf858442202d40fc1a5d13e38617581b
SHA512

d8075c6da1e654088a4ea13843d9de91cb8da629aa37b65392c7251d930bbcccf898a34ca8a8f50af2eac6a215185faa7c5a537448a0a52b905bdebc3cf07d85
SSDEEP

6144:EfQqBbF5VbaplWotat+f6ptmbs99w3tnr:4Pf5VGyota4f6DxQ9r

Score

N/A

Malware Config

Signatures

Files

96a88f9bf9e68c5cdaf9e02a20241afaaf858442202d40fc1a5d13e38617581b
.exe windows x86

5b124d37c1feb3d48ec6b7f44f3a95b0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ClientToScreen
IsRectEmpty
GetClientRect
GetWindowLongW
PeekMessageW
SetCursor
IsWindow
InvalidateRect
CheckRadioButton
EnableWindow
MoveWindow
LoadCursorW
DestroyWindow
GetAsyncKeyState
GetDesktopWindow
SetWindowLongW
GetDlgItem
DefWindowProcW
CreateDialogParamW
SetDlgItemInt
LoadStringW
DispatchMessageW
SendMessageW
ShowWindow
IsWindowVisible
GetDlgItemInt
CheckDlgButton
GetWindowRect
GetDC
SetDlgItemTextW
TranslateMessage
ReleaseDC

ntdll

DbgPrintEx
CsrCaptureTimeout
DbgPrintReturnControlC
DbgBreakPoint
CsrCaptureMessageString
CsrSetPriorityClass
CsrFreeCaptureBuffer
CsrClientConnectToServer
CsrCaptureMessageMultiUnicodeStringsInPlace
CsrAllocateCaptureBuffer
DbgQueryDebugFilterState
CsrCaptureMessageBuffer
CsrGetProcessId
CsrClientCallServer
DbgPrint
DbgSetDebugFilterState
DbgPrompt
CsrIdentifyAlertableThread

kernel32

VirtualFree
GetQueuedCompletionStatus
GetFileAttributesW
GetCurrentThread
GetSystemTimeAsFileTime
lstrlenW
ResetEvent
WaitForSingleObject
InterlockedIncrement
GetThreadPriority
SetFilePointer
ReleaseSemaphore
GlobalMemoryStatus
LeaveCriticalSection
CloseHandle
lstrlenA
IsBadWritePtr
IsBadReadPtr
CreateThread
GetCurrentProcessId
lstrcpynW
LoadLibraryW
lstrcmpW
CreateSemaphoreW
lstrcmpiW
QueryPerformanceCounter
GlobalAlloc
HeapAlloc
FreeLibrary
IsBadCodePtr
WideCharToMultiByte
GetDiskFreeSpaceW
HeapFree
GetLocaleInfoW
CreateFileW
GetProfileIntA
ReadFile
SetThreadPriority
GetModuleFileNameA
GlobalFindAtomA
GetFullPathNameW
InitializeCriticalSection
GetPrivateProfileStringW
GlobalHandle
GetProcAddress
SetEvent
DeleteCriticalSection
GlobalLock
InterlockedExchange
GetLocaleInfoA
GetFileSize
MulDiv
GetACP
InterlockedDecrement
GlobalFree
SetUnhandledExceptionFilter
GetCurrentProcess
MultiByteToWideChar
SetEndOfFile
EnterCriticalSection
GlobalUnlock
CreateEventW
WriteFile
GetTickCount
lstrcpyA
GetVersionExW
WaitForMultipleObjects
GetProcessHeap
lstrcpyW
GetLastError

oleaut32

VarBstrFromUI8
VarBstrFromI2
VarBstrFromUI4
VarBstrFromUI2
VarBstrFromI8
VarBstrFromR4
VarBstrFromDec
VarBstrFromI4
VarBstrFromI1
VarBstrFromDate
VarBstrFromUI1
VarBstrFromDisp
VarBstrFromR8
VarBstrFromCy

newdev

InstallNewDevice
UpdateDriverForPlugAndPlayDevicesA
InstallWindowsUpdateDriver
InstallSelectedDriver
UpdateDriverForPlugAndPlayDevicesW

netshell

StartNCW
DllGetClassObject
NcIsValidConnectionName

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b124d37c1feb3d48ec6b7f44f3a95b0

Headers

File Characteristics

Imports

user32

ntdll

kernel32

oleaut32

newdev

netshell

Sections

.text Size: 85KB - Virtual size: 84KB

.rdata Size: 86KB - Virtual size: 86KB

.data Size: 32KB - Virtual size: 6.1MB

.rsrc Size: 1024B - Virtual size: 980B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 85KB - Virtual size: 84KB

.rdata
Size: 86KB - Virtual size: 86KB

.data
Size: 32KB - Virtual size: 6.1MB

.rsrc
Size: 1024B - Virtual size: 980B

.reloc
Size: 1KB - Virtual size: 1KB