db29e9601d50bf2f281cd5c3cdcb0b988202822fcb2416dea1481fc4f35831cb

Sharing

Copy URL

Twitter E-mail

General

Target

db29e9601d50bf2f281cd5c3cdcb0b988202822fcb2416dea1481fc4f35831cb
Size

256KB
MD5

0a8afbd8dab9f7b3fe84a99821ae31c0
SHA1

fae7465266727eafdbf827f32d1bdcd2e1330292
SHA256

db29e9601d50bf2f281cd5c3cdcb0b988202822fcb2416dea1481fc4f35831cb
SHA512

0730042c241bffd5c69f3a920be929165d9cf4dce77fb6d44a6030d5b0228d9b419ef3327a2dedc9a1a56931606cb59feab30d3ab07968278c3743460863da82
SSDEEP

6144:bFFcpJ/fRGELyQDPglLY6zCpRVpzajx6Q4T22oB:bFFcpJ/fRGEXPN6zUR7u6QCR

Score

N/A

Malware Config

Signatures

Files

db29e9601d50bf2f281cd5c3cdcb0b988202822fcb2416dea1481fc4f35831cb
.exe windows x86

4c3a35497703a57610c67e7f324b18b8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
lstrcpynW
lstrcmpW
GetModuleHandleA
WideCharToMultiByte
GetFileAttributesExW
MoveFileW
MoveFileExW
SetLastError
CreateDirectoryExW
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
GetVersion
CreateDirectoryW
GetPrivateProfileStringW
VirtualAlloc
ReadFile
SetCurrentDirectoryW
WaitForSingleObject
GetExitCodeProcess
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CloseHandle
CreateFileW
MultiByteToWideChar
GetTickCount
lstrlenW
GetLastError
LocalFree
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
RaiseException
GetModuleFileNameW
GetNativeSystemInfo
Sleep
GetCurrentThread
SetThreadPriority
LoadLibraryW
GetSystemDirectoryW
GetVersionExW
DeleteFileW
GetSystemWindowsDirectoryW
GetCurrentProcess
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetProcAddress
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
HeapCreate
VirtualFree
InterlockedDecrement
InterlockedIncrement
WritePrivateProfileStringW
WritePrivateProfileSectionW
CopyFileW
FreeLibrary
RtlUnwind
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CreateThread
ExitThread
GetModuleHandleW
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
CreateFileA
GetSystemTimeAsFileTime
SetEndOfFile
WriteFile
CreateMutexW
TlsGetValue
TlsSetValue
GetAtomNameW
AddAtomW
ReleaseMutex
TlsAlloc
FindAtomW
DeleteAtom
TlsFree

user32

SendMessageW
FindWindowW
ExitWindowsEx
EnumChildWindows
GetWindowTextW
ShowWindow
GetParent
MessageBoxW

advapi32

OpenServiceW
InitiateSystemShutdownW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegEnumKeyExW
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegSetValueExW
CloseServiceHandle
DeleteService
ControlService
OpenSCManagerW

shell32

ShellExecuteExW
SHGetSpecialFolderPathW

ole32

CoUninitialize
CoInitialize
CoCreateInstance

shlwapi

PathAppendW
PathFindFileNameW
SHSetValueW
StrStrIW
PathIsDirectoryW
PathCombineW
PathRemoveFileSpecW
PathFileExistsW

setupapi

SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupUninstallOEMInfW
SetupDiGetDeviceInstanceIdW
CM_Get_DevNode_Status
SetupDiSetClassInstallParamsW
SetupDiCallClassInstaller
SetupCopyOEMInfW
CM_Get_Device_IDW
CM_Get_Parent
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList

iphlpapi

GetBestInterfaceEx
GetBestInterface
GetAdaptersAddresses

ws2_32

inet_addr

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.2rdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4c3a35497703a57610c67e7f324b18b8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

shlwapi

setupapi

iphlpapi

ws2_32

version

Sections

.text Size: 109KB - Virtual size: 109KB

.rdata Size: 26KB - Virtual size: 25KB

.data Size: 11KB - Virtual size: 20KB

.rsrc Size: 17KB - Virtual size: 16KB

.reloc Size: 9KB - Virtual size: 8KB

.2rdata Size: 76KB - Virtual size: 76KB

.text
Size: 109KB - Virtual size: 109KB

.rdata
Size: 26KB - Virtual size: 25KB

.data
Size: 11KB - Virtual size: 20KB

.rsrc
Size: 17KB - Virtual size: 16KB

.reloc
Size: 9KB - Virtual size: 8KB

.2rdata
Size: 76KB - Virtual size: 76KB