aa964caab52edb4f277ba778098b672c7c84ee83a20714c6e4bc43a68470e558

Sharing

Copy URL

Twitter E-mail

General

Target

aa964caab52edb4f277ba778098b672c7c84ee83a20714c6e4bc43a68470e558
Size

364KB
MD5

7eb15a882e6e6adf023bf276b0c239b3
SHA1

86c13e2cd3aea4caef2753e7b9675f1d07a880d3
SHA256

aa964caab52edb4f277ba778098b672c7c84ee83a20714c6e4bc43a68470e558
SHA512

c23c11dd770fdb48640958caf67c2e002934db7622190f8d58502317e95898f4e8e427dabac34a00f1165bc065b7693422ba613d306fa3baeb562adb5239b552
SSDEEP

6144:BEAU1eeD624pGSoJDZ2sqIrU5AsZBbgyg4s43yirHwlzKPm:BvU1eeD6282JtOI2D3bzsEHrQBKP

Score

N/A

Malware Config

Signatures

Files

aa964caab52edb4f277ba778098b672c7c84ee83a20714c6e4bc43a68470e558
.exe windows x86

bbf0880943931eac4965920ffd01faa7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
GetClassInfoExW
CharUpperBuffW
GetUserObjectInformationW
SetForegroundWindow
CreateCursor
CloseDesktop
GetDoubleClickTime
GetClipCursor
RegisterWindowMessageA
IsDlgButtonChecked
SendDlgItemMessageA
TranslateAcceleratorA
DispatchMessageA
RegisterClipboardFormatW
SetRect
SystemParametersInfoA
GetDlgItemTextA
SetWindowPlacement
EnableWindow
GetWindowLongA
LoadMenuA
GetMenu
GetForegroundWindow
LoadCursorFromFileA
PtInRect
DdeFreeStringHandle
GetClipboardFormatNameW
RegisterClassExW
GetDlgItem
GetClassNameW
FindWindowExW
SendNotifyMessageW
SystemParametersInfoW
ModifyMenuA
DestroyAcceleratorTable
ShowOwnedPopups
InvalidateRect
SetWindowLongW
GetDlgItemTextW
GetWindowModuleFileNameA
IsChild
CreateDialogParamA
ChildWindowFromPointEx
GetMessageExtraInfo
GetSysColorBrush
IsCharLowerA

lz32

LZCopy

msvcrt

_controlfp
_wutime64
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
acos
_ismbcalpha
scanf
_onexit
__dllonexit
_wcsdup
_getwch

advapi32

RevertToSelf
ReportEventW
RegQueryValueW
GetUserNameW
MakeAbsoluteSD
SetEntriesInAclW
RegNotifyChangeKeyValue
RegCreateKeyExA
SetSecurityDescriptorOwner
ChangeServiceConfig2W
CreateProcessAsUserW
LsaOpenPolicy
RegOpenKeyExW
ControlService
SetFileSecurityA
LsaFreeMemory
GetLengthSid
CopySid
OpenSCManagerA
QueryServiceConfigW
GetKernelObjectSecurity
GetSidSubAuthority
GetSidLengthRequired
RegUnLoadKeyW
RegSetKeySecurity
LookupPrivilegeValueA
RegisterServiceCtrlHandlerA
OpenServiceA
CloseServiceHandle
AdjustTokenPrivileges
RegSetValueExA
LsaQueryInformationPolicy
SetSecurityDescriptorSacl
LookupPrivilegeValueW
OpenThreadToken
CreateProcessAsUserA
BuildExplicitAccessWithNameA
ImpersonateSelf
GetSecurityDescriptorDacl
CreateServiceA
SetSecurityDescriptorGroup
RegQueryInfoKeyW

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 544KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bbf0880943931eac4965920ffd01faa7

Headers

File Characteristics

Imports

user32

lz32

msvcrt

advapi32

Sections

.text Size: 68KB - Virtual size: 67KB

.rdata Size: 60KB - Virtual size: 56KB

.data Size: 12KB - Virtual size: 544KB

.rsrc Size: 220KB - Virtual size: 219KB

.text
Size: 68KB - Virtual size: 67KB

.rdata
Size: 60KB - Virtual size: 56KB

.data
Size: 12KB - Virtual size: 544KB

.rsrc
Size: 220KB - Virtual size: 219KB