cdb47ebbcef646af1b6695b770f2a6f3b12a20ae6be0d7c670892f845a38df30

Sharing

Copy URL Twitter E-mail

General

Target

cdb47ebbcef646af1b6695b770f2a6f3b12a20ae6be0d7c670892f845a38df30
Size

459KB
MD5

09668f7015aab3cffa5b57e029e592b0
SHA1

402e9a213a72d3bd70c583889c8cd7da8b6af224
SHA256

cdb47ebbcef646af1b6695b770f2a6f3b12a20ae6be0d7c670892f845a38df30
SHA512

9e2db4e9798da88568613aaa3c4f9ed57be57ee258f75170668b238120156f958473058983b5067a170d8da7e435586c9b6088a43e084f9bb63581a71a86d4fc
SSDEEP

6144:NQbWuTut6E7XD7yhKL3CQobW3JsB2t1xx75p9TO6IF206P7oVvz7zeqoaoG54l45:NiErD7iAoq3589ANP7opaPz/pk

Score

N/A

Malware Config

Signatures

Files

cdb47ebbcef646af1b6695b770f2a6f3b12a20ae6be0d7c670892f845a38df30
.exe windows x86

4a3dfeea83fb4b90758577ac86a6c6d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock

kernel32

Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
CloseHandle
LeaveCriticalSection
OpenProcess
GetModuleFileNameW
GetLastError
GetLocaleInfoW
FreeLibrary
LoadLibraryExW
MultiByteToWideChar
ExpandEnvironmentStringsW
GetProcAddress
GetModuleHandleW
GetEnvironmentVariableW
EnumResourceNamesW
WideCharToMultiByte
SetFileAttributesW
FileTimeToSystemTime
CreateFileW
CreateProcessW
MoveFileExW
CreateDirectoryW
WaitForSingleObject
GlobalFree
GlobalAlloc
GetCurrentThreadId
CopyFileW
DeleteFileW
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
WaitForMultipleObjects
FormatMessageW
SetFilePointer
DuplicateHandle
ExitThread
GetCurrentProcess
SetLastError
LocalFree
CreateThread
WriteFile
CreateEventW
GetTempPathW
GetCurrentProcessId
GetCommandLineW
FindClose
RemoveDirectoryW
FindNextFileW
FindFirstFileW
GetSystemDirectoryW
InterlockedIncrement
InterlockedCompareExchange
OpenMutexW
ReleaseMutex
CreateMutexW
LocalAlloc
Sleep
ReadFile
FlushFileBuffers
GetFileSize
GetModuleHandleA
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
GetVersionExA
SetEnvironmentVariableA
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
FileTimeToLocalFileTime
GetDriveTypeW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedDecrement
GetStdHandle
GetModuleFileNameA
LoadLibraryA
InitializeCriticalSection
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
LCMapStringA
LCMapStringW
GetFullPathNameW
GetCurrentDirectoryA
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetDriveTypeA
CreateFileA
CompareStringA
CompareStringW
GetProcessHeap

user32

BeginPaint
GetSystemMetrics
GetKeyboardLayoutList
SystemParametersInfoW
LoadKeyboardLayoutW
LoadStringW
UnloadKeyboardLayout
MessageBoxW
GetWindowLongW
CheckDlgButton
EndPaint
DestroyWindow
CreateDialogParamW
SetWindowTextW
IsDlgButtonChecked
EndDialog
ShowWindow
SetWindowLongW
EnableWindow
GetFocus
GetClientRect
PostMessageW
LoadIconW
FindWindowW
SetForegroundWindow
IsIconic
SetWindowPos
GetDlgItem
SendMessageW
DialogBoxParamW

advapi32

RegDeleteKeyW
LookupAccountSidW
GetTokenInformation
RegQueryValueExW
RegFlushKey
RegSetValueExW
RegEnumKeyW
DuplicateTokenEx
CreateProcessAsUserW
OpenProcessToken
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW
RegCloseKey
AddAccessAllowedAceEx
BuildExplicitAccessWithNameW
GetSecurityDescriptorSacl
GetSidLengthRequired
SetEntriesInAclW
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorW
InitializeAcl
GetNamedSecurityInfoW
SetNamedSecurityInfoW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor

shlwapi

SHDeleteKeyW

imm32

ImmGetHotKey
ImmSetHotKey
ImmDisableIME

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

comctl32

ImageList_Create
ImageList_ReplaceIcon
InitCommonControlsEx

shell32

ShellExecuteW
SHFileOperationW
SHGetSpecialFolderPathW

Sections

.text
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4a3dfeea83fb4b90758577ac86a6c6d1

Headers

File Characteristics

Imports

userenv

kernel32

user32

advapi32

shlwapi

imm32

version

comctl32

shell32

Sections

.text Size: 268KB - Virtual size: 267KB

.rdata Size: 68KB - Virtual size: 67KB

.data Size: 8KB - Virtual size: 25KB

.rsrc Size: 108KB - Virtual size: 112KB

.text
Size: 268KB - Virtual size: 267KB

.rdata
Size: 68KB - Virtual size: 67KB

.data
Size: 8KB - Virtual size: 25KB

.rsrc
Size: 108KB - Virtual size: 112KB