86c1facd531a1492ed321f9766ed3bf445bda4cf5ab5d4a72dee4488680557b9

Sharing

Copy URL

Twitter E-mail

General

Target

86c1facd531a1492ed321f9766ed3bf445bda4cf5ab5d4a72dee4488680557b9
Size

152KB
MD5

1162206853e33968b74b51b58466ed80
SHA1

198d9dd27a0522e01503a53e2a9f04f3e82a2da5
SHA256

86c1facd531a1492ed321f9766ed3bf445bda4cf5ab5d4a72dee4488680557b9
SHA512

43b6fedef82f142238570c089e26dcaef0248511c6f9137cbb7bd261005de526484fa8ae14b2cbfc3e96c2bcc0a2eb1b17d487f11d14456dd00bd0301ae15c8a
SSDEEP

3072:qyeo93Zv51vSiDWYbu2lIdkVmPmmmmmmmmm+9mmmmYmmmmmmmmmmmmmmmmmm2My5:151aiDWxbCmPmmmmmmmmmcmmmmYmmmmK

Score

N/A

Malware Config

Signatures

Files

86c1facd531a1492ed321f9766ed3bf445bda4cf5ab5d4a72dee4488680557b9
.dll windows x86

66d5dc4ef499842d0e98edde470d1020

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsDirectoryA
PathFileExistsA
PathRemoveBackslashA

advapi32

LookupPrivilegeValueA
RegEnumKeyA
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
AdjustTokenPrivileges
OpenProcessToken
RegFlushKey
RegSetValueExW

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA

kernel32

LCMapStringW
LCMapStringA
UnhandledExceptionFilter
GetEnvironmentStringsW
OutputDebugStringW
OutputDebugStringA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
WideCharToMultiByte
RaiseException
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
UnlockFile
WriteFile
LockFile
SetFilePointer
GetCurrentProcessId
GetLocalTime
CreateFileA
Process32Next
TerminateProcess
GetCurrentProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
MultiByteToWideChar
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetFileAttributesA
GetVersionExW
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcpyA
lstrlenW
ReadFile
SetFileAttributesA
FindClose
FindNextFileA
lstrcmpA
FindFirstFileA
LoadLibraryW
FindFirstFileW
Sleep
lstrlenA
QueryDosDeviceA
GetModuleHandleA
GetSystemTime
VirtualFree
IsBadReadPtr
VirtualAlloc
GetLastError
_llseek
IsBadWritePtr
FreeEnvironmentStringsW
FlushFileBuffers
GetSystemInfo
VirtualProtect
SetStdHandle
IsBadCodePtr
GetTickCount
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
QueryPerformanceCounter
GetStringTypeW
GetStringTypeA
HeapSize
SetUnhandledExceptionFilter
RtlUnwind
GetFullPathNameA
GetSystemTimeAsFileTime
HeapFree
GetCurrentThreadId
GetCommandLineA
HeapAlloc
VirtualQuery
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetOEMCP
GetCPInfo
GetDriveTypeA
GetCurrentDirectoryA
ExitProcess
HeapDestroy
HeapCreate
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc

user32

SetForegroundWindow
PostMessageA
FindWindowExW
FindWindowW
GetClassNameW
IsIconic
ShowWindow
wsprintfA
LoadStringW
EnumChildWindows

shell32

SHGetFolderPathA
SHGetFolderPathW
SHFileOperationW
ShellExecuteExA
ord526

ole32

CoCreateInstance
CoInitialize
CoSetProxyBlanket
CoUninitialize

oleaut32

VariantInit

Exports

Exports

SK_CheckVGAVenderAndDeviceID
SK_CreateLink
SK_DeleteFolderW
SK_DeletePatchRedundantRegKey
SK_DumpFile
SK_DumpMsg
SK_EnableWow64FsRedirection
SK_FileEncode
SK_FindProcess
SK_FindProcessByID
SK_GetAbsPath
SK_GetModulePath
SK_GetModulePathByID
SK_GetProcessID
SK_GetProcessIDList
SK_GetProcessReturnValue
SK_GetReverseID
SK_GetShellFolderPathA
SK_GetShellFolderPathW
SK_GetUserDefaultUILanguage
SK_GetUserInfo
SK_IsEmbedded
SK_KillProcess
SK_KillProcessByID
SK_LaunchAppAndWait
SK_LaunchAppAndWait2
SK_MergeSimFile
SK_PathIsDirectory
SK_RefreshAddRemoveProgram
SK_RefreshDesktop
SK_SetDefaultAutoPlayer
SK_SetFileAttribute
SK_StringReverse

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

66d5dc4ef499842d0e98edde470d1020

Headers

File Characteristics

Imports

shlwapi

advapi32

setupapi

kernel32

user32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 54KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 5KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 56KB - Virtual size: 54KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 5KB

.rmnet
Size: 60KB - Virtual size: 60KB