eaac9976dba9ebc6de24b0efae8ade319c84c38545aa91cd3dd2c401886e3d8d

Sharing

Copy URL Twitter E-mail

General

Target

eaac9976dba9ebc6de24b0efae8ade319c84c38545aa91cd3dd2c401886e3d8d
Size

403KB
MD5

ea1e4d1513f0da89034949f65a2b864a
SHA1

f6e5d9344cef716fba62ef48a592b145f73dc8e2
SHA256

eaac9976dba9ebc6de24b0efae8ade319c84c38545aa91cd3dd2c401886e3d8d
SHA512

3596f0bbed3c68b560b77eefbd1afe34fef906b9305869de58550d8eea5e8be32e9799f881369c58f08a0ad02d626b9a7c81209d38ff6a0096ad78a60a9d1d7d
SSDEEP

6144:joKpOaETRZRdgGLU9dv517WSviCfj6jHDNWaKn5CfEmxIRNN6IpTqy:yZR5LUvv/7MCfjABWPoxxENHpe

Score

N/A

Malware Config

Signatures

Files

eaac9976dba9ebc6de24b0efae8ade319c84c38545aa91cd3dd2c401886e3d8d
.exe windows x86

91e902485d2a717c183401b9fa1600b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetErrorMode
IsDebuggerPresent
SetFileAttributesW
GetCurrentProcessId
lstrcpyA
GetProcessWorkingSetSize
SetProcessWorkingSetSize
ReadProcessMemory
SetLastError
GetProcessHeap
CloseHandle
MapViewOfFile
GetSystemInfo
TerminateProcess
lstrcatW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
lstrcmpiA
DisableThreadLibraryCalls
LoadLibraryExW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetLocaleInfoW
MultiByteToWideChar
FindFirstFileW
lstrlenA
GetTickCount
ClearCommError
GetCommState
GetVersionExW
ReadFile
GetCommTimeouts
SetCommTimeouts
CreateEventW
GetOverlappedResult
WideCharToMultiByte
EscapeCommFunction
SetFilePointer
WriteFile
MulDiv
LocalAlloc
FreeLibrary
lstrcmpW
GetCurrentProcess
CreateFileW
CreateProcessW
SetDefaultCommConfigW
GetDefaultCommConfigW
lstrcmpiW
GetModuleFileNameW
GetLastError
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleA
LoadLibraryW
LoadLibraryA
lstrcpynW
HeapAlloc
HeapFree
ExitThread
IsBadReadPtr
OutputDebugStringA
CompareFileTime
GetModuleHandleW
WaitNamedPipeW
OpenEventW
Sleep
SetEvent
LocalFree
GetFullPathNameW
lstrlenW
GetWindowsDirectoryW
CompareStringW
RemoveDirectoryW

user32

GetSubMenu
TrackPopupMenu
DestroyMenu
LoadCursorW
SetCursor
UnregisterDeviceNotification
IsWindowEnabled
IsCharAlphaNumericW
IsCharAlphaW
DestroyWindow
LoadIconW
EnableWindow
GetSystemMetrics
LoadMenuW
UpdateWindow
GetClientRect
GetKeyState
SetFocus
GetFocus
ScreenToClient
wsprintfW
wsprintfA
GetWindowTextW
SetWindowTextW
SetDlgItemTextW
SetWindowTextA
GetWindowTextA
GetWindowTextLengthW
ShowWindow
CheckDlgButton
LoadStringW
DefDlgProcW
RegisterDeviceNotificationW
GetDlgItem
GetSysColor
CharNextA
GetParent
IsWindow
RegisterClassW
GetClassInfoW
GetDC
KillTimer
SetTimer
CreateWindowExW
GetWindowLongW
DestroyIcon
CharPrevW
FindWindowW
DefWindowProcW
MsgWaitForMultipleObjects
MoveWindow
GetWindowRect
CharNextW
SetWindowLongW

advapi32

RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
CreateProcessWithLogonW
RegQueryValueExW
RegCloseKey
RegSetValueExA

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW

ole32

CoUninitialize
CoInitialize

msvcrt

memmove
wcscmp
wcsrchr
free
malloc

shlwapi

SHAutoComplete

setupapi

SetupCloseFileQueue
SetupDefaultQueueCallbackW
SetupDiGetINFClassW
SetupDiClassGuidsFromNameW
SetupDiGetWizardPage
SetupDiGetClassImageIndex
SetupDiDestroyDriverInfoList
SetupDiBuildDriverInfoList
SetupDiGetSelectedDevice
SetupCloseInfFile
SetupDiGetClassDescriptionW
SetupDiDestroyClassImageList
SetupDiGetClassImageList
SetupAddToSourceListW
SetupDiEnumDriverInfoW
SetupQuerySourceListW
SetupFreeSourceListW
SetupDiLoadClassIcon
SetupDiCreateDeviceInfoList
SetupDiClassNameFromGuidW
SetupDiDestroyDeviceInfoList
SetupDiGetSelectedDriverW
SetupDiGetClassInstallParamsW
SetupGetLineCountW
SetupOpenInfFileW
SetupUninstallOEMInfW
SetupGetStringFieldW
SetupDiSetDeviceInstallParamsW
SetupDiSetSelectedDriverW
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstallParamsW
SetupDiSetClassInstallParamsW
SetupDiCallClassInstaller
SetupGetFileQueueFlags
SetupTermDefaultQueueCallback
SetupCommitFileQueueW
SetupInitDefaultQueueCallbackEx
SetupPrepareQueueForRestoreW
SetupDiGetDriverInfoDetailW
SetupScanFileQueueW
SetupOpenFileQueue
SetupDiInstallDevice
SetupDiSetDeviceRegistryPropertyW
SetupDiInstallClassW
SetupUninstallNewlyCopiedInfs

wininet

InternetGetConnectedState

Sections

.text
Size: 346KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BSS
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.INIT
Size: 1024B - Virtual size: 1010B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 466KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

91e902485d2a717c183401b9fa1600b7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

msvcrt

shlwapi

setupapi

wininet

Sections

.text Size: 346KB - Virtual size: 346KB

.xdata Size: 1KB - Virtual size: 1KB

.BSS Size: 1KB - Virtual size: 1KB

.INIT Size: 1024B - Virtual size: 1010B

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 14KB - Virtual size: 466KB

.rsrc Size: 31KB - Virtual size: 30KB

.text
Size: 346KB - Virtual size: 346KB

.xdata
Size: 1KB - Virtual size: 1KB

.BSS
Size: 1KB - Virtual size: 1KB

.INIT
Size: 1024B - Virtual size: 1010B

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 14KB - Virtual size: 466KB

.rsrc
Size: 31KB - Virtual size: 30KB