9bcecb0ecdda02b40d606b6ed34bbbf419f421e9a804fb7f67147b7186d3c41a

Sharing

Copy URL Twitter E-mail

General

Target

9bcecb0ecdda02b40d606b6ed34bbbf419f421e9a804fb7f67147b7186d3c41a
Size

267KB
MD5

0f27d6dcf61bcd2d05c07af4f8b557f1
SHA1

8154749606bb6984516e2a5946bbaedf364ed06b
SHA256

9bcecb0ecdda02b40d606b6ed34bbbf419f421e9a804fb7f67147b7186d3c41a
SHA512

77df83e49ed83e17b6a33d7e9e325a6da7292ea8302416a1bea94026b13f122dfacdf436b4dc33d006a32d5e8ed14f33bd29c6ffe49392dbe746849f97a0639b
SSDEEP

6144:AE+j1NrPtqmhLOXg83y2WC3d1uf5vQiZKD1dxp/s4:ANllzhLOXr3vW2MfpJZKVpB

Score

N/A

Malware Config

Signatures

Files

9bcecb0ecdda02b40d606b6ed34bbbf419f421e9a804fb7f67147b7186d3c41a
.exe windows x86

2aef63faa6c4c8e599a13e749aef952e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

netapi32

NetApiBufferFree
NetUserEnum

kernel32

lstrcmpW
CompareFileTime
lstrlenA
MultiByteToWideChar
lstrlenW
LoadLibraryW
GetLastError
lstrcpynW
FreeLibrary
InitializeCriticalSection
GetCurrentProcess
CreateDirectoryW
GetCurrentThread
GetFileAttributesW
GetModuleFileNameW
LocalAlloc
RemoveDirectoryW
GetWindowsDirectoryW
LocalFree
Sleep
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
WaitForSingleObject
CreateEventW
GetExitCodeProcess
SetEvent
GetVersionExW
ExpandEnvironmentStringsA
LoadLibraryA
OpenEventW
GetModuleHandleW
GetTempPathW
SetUnhandledExceptionFilter
GetProcAddress

user32

GetForegroundWindow
GetSystemMetrics
CopyRect
RegisterWindowMessageW
GetCursorPos
InvalidateRect
GetFocus
LoadCursorW
DestroyIcon
GetSysColor
MoveWindow
IsWindow
GetTopWindow
SetTimer
OffsetRect
PostMessageW
SetWindowPos
SendMessageW
EnableWindow

gdi32

CreateFontIndirectW
CreateRectRgn
CreateCompatibleDC
DeleteObject
CreatePatternBrush
CreateSolidBrush

advapi32

IsValidSecurityDescriptor
FreeSid
RegOpenKeyExA
RegQueryValueExA
OpenServiceW
StartServiceW
QueryServiceStatus
OpenSCManagerW
CloseServiceHandle
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RevertToSelf
AddAccessAllowedAce
SetSecurityDescriptorOwner
AllocateAndInitializeSid
InitializeAcl
ImpersonateSelf
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AccessCheck
SetSecurityDescriptorGroup
OpenThreadToken
OpenProcessToken
GetLengthSid

shell32

ShellExecuteW

msasn1

ASN1intx_free
ASN1BERDecUTF8String
ASN1BEREncMultibyteString
ASN1BEREncOpenType
ASN1open_cmp
ASN1generalizedtime_cmp
ASN1_CreateDecoderEx
ASN1BEREncCheck
ASN1BEREncRemoveZeroBits
ASN1char32string_cmp
ASN1intx_sub
ASN1BERDecNotEndOfContents

kbdbu

KbdLayerDescriptor

Sections

.edata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Ding
Size: 3KB - Virtual size: 830KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.X
Size: 512B - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PX
Size: 512B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 84KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.npO
Size: 4KB - Virtual size: 468KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RARlR
Size: 2KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 135KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.FeesU
Size: 4KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2aef63faa6c4c8e599a13e749aef952e

Headers

File Characteristics

Imports

netapi32

kernel32

user32

gdi32

advapi32

shell32

msasn1

kbdbu

Sections

.edata Size: 7KB - Virtual size: 7KB

.Ding Size: 3KB - Virtual size: 830KB

.X Size: 512B - Virtual size: 35KB

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 3KB - Virtual size: 37KB

.PX Size: 512B - Virtual size: 10KB

.edata Size: 84KB - Virtual size: 161KB

.npO Size: 4KB - Virtual size: 468KB

.data Size: 6KB - Virtual size: 311KB

.RARlR Size: 2KB - Virtual size: 354KB

.edata Size: 135KB - Virtual size: 190KB

.FeesU Size: 4KB - Virtual size: 269KB

.rsrc Size: 2KB - Virtual size: 2KB

.edata
Size: 7KB - Virtual size: 7KB

.Ding
Size: 3KB - Virtual size: 830KB

.X
Size: 512B - Virtual size: 35KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 3KB - Virtual size: 37KB

.PX
Size: 512B - Virtual size: 10KB

.edata
Size: 84KB - Virtual size: 161KB

.npO
Size: 4KB - Virtual size: 468KB

.data
Size: 6KB - Virtual size: 311KB

.RARlR
Size: 2KB - Virtual size: 354KB

.edata
Size: 135KB - Virtual size: 190KB

.FeesU
Size: 4KB - Virtual size: 269KB

.rsrc
Size: 2KB - Virtual size: 2KB