a388eb36391eb64f682f94529901c2b21a05e050d456d24bd6b3bec5d2efa386

Sharing

Copy URL

Twitter E-mail

General

Target

a388eb36391eb64f682f94529901c2b21a05e050d456d24bd6b3bec5d2efa386
Size

140KB
MD5

98422671379e7387f8f579fffcfdf114
SHA1

3434082eff05533dfcda5df2dece69bc82f591d0
SHA256

a388eb36391eb64f682f94529901c2b21a05e050d456d24bd6b3bec5d2efa386
SHA512

34a78c50e79d46238f4dd36c0350a930fda7b86f39b103f695e8597935632f988469846a8af81de10594428067b3d1ecd2c5e4aa13c30c090c2066c123638804
SSDEEP

1536:tSMQBnOOef2HFaDfhLGBrN2PZjjCKuyBemzKL7ojUgfZiGJe8RgmUZY7wZQC8xyP:7z+ladi5N3g7KL7ojjxJewgmsQly

Score

N/A

Malware Config

Signatures

Files

a388eb36391eb64f682f94529901c2b21a05e050d456d24bd6b3bec5d2efa386
.exe windows x86

7e471a0cc46a428a9cbe6f01dfe06994

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AddAccessAllowedAce
RegQueryValueExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CopySid
GetLengthSid
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
OpenProcessToken
OpenThreadToken
GetTokenInformation
LookupAccountNameA
IsValidSecurityDescriptor
GetSecurityDescriptorGroup
GetSecurityDescriptorOwner
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
IsValidAcl
RegQueryInfoKeyA
GetAce
InitializeAcl
GetSecurityDescriptorDacl
GetKernelObjectSecurity
AddAce
GetAclInformation
AddAccessDeniedAce
DeleteAce
EqualSid
AdjustTokenPrivileges
LookupPrivilegeValueA

gdi32

ExtTextOutW
GetClipBox
DeleteObject
CreateFontIndirectA
ExtTextOutA
SetBkColor
GetDCOrgEx
GetTextExtentPointW
SelectObject
SetTextColor
SetBkMode
GetObjectA

kernel32

lstrlenA
lstrcmpiA
lstrcpynA
lstrlenW
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
MultiByteToWideChar
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
DebugBreak
InterlockedIncrement
GetCurrentThreadId
GetModuleFileNameA
GetModuleHandleA
GetCurrentProcess
GetCurrentThread
WaitForSingleObject
lstrcpyA
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
lstrcatA
GetVersionExA
LocalAlloc
LocalFree
GlobalFree
GlobalAlloc
InterlockedDecrement
GetCommandLineA
GetProcAddress
LockResource
LoadLibraryA
lstrcmpA
GetTickCount
SetThreadPriority
GetThreadPriority
CompareStringA
CompareStringW
GetSystemDefaultLangID
UnhandledExceptionFilter
ExitProcess
VirtualAlloc
TerminateProcess
HeapCreate
GetVersion
VirtualFree
HeapFree
HeapAlloc
GetStartupInfoA
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStrings
SetConsoleCtrlHandler
FreeEnvironmentStringsA
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
HeapReAlloc
GetFileType
RtlUnwind
WriteFile
GetStringTypeA
GetStringTypeW
FlushFileBuffers
LCMapStringA
LCMapStringW
SetStdHandle
SetFilePointer

user32

EnableWindow
ClientToScreen
EnableMenuItem
DestroyWindow
IsWindow
LoadIconA
GetWindow
TrackPopupMenu
GetSystemMenu
PtInRect
GetCursorPos
FindWindowA
EndPaint
DrawFrameControl
GetClientRect
SetRect
SystemParametersInfoA
SetCapture
UpdateWindow
CopyRect
ReleaseCapture
GetMessagePos
EqualRect
IsZoomed
GetDesktopWindow
RegisterClassExA
LoadCursorA
CreateDialogParamW
SendMessageW
GetDlgItem
SendDlgItemMessageA
SendDlgItemMessageW
MoveWindow
CharLowerA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
MessageBoxA
GetMessageA
IsDialogMessageA
CharNextA
KillTimer
SendMessageTimeoutA
RegisterClassA
CreateWindowExA
SetWindowLongA
GetWindowLongA
DefWindowProcA
SendMessageA
SetWindowPos
ShowWindow
GetWindowThreadProcessId
SetWindowTextA
InvalidateRect
UnregisterClassA
wsprintfW
wsprintfA
GetSysColor
RegisterWindowMessageA
SetFocus
GetForegroundWindow
GetFocus
OffsetRect
IntersectRect
InflateRect
CreateDialogParamA
GetParent
SetRectEmpty
PostQuitMessage
PeekMessageA
SetForegroundWindow
PostMessageA
DispatchMessageA
MsgWaitForMultipleObjects
TranslateMessage
BeginPaint
LoadStringA
ScreenToClient
IsRectEmpty
IsWindowVisible
SetTimer

ole32

CoMarshalInterface
CoInitialize
CoUninitialize
CoCreateInstance
CoRevokeClassObject
CoRegisterClassObject
ProgIDFromCLSID
CoUnmarshalInterface
CreateStreamOnHGlobal
CoReleaseMarshalData
StringFromCLSID
OleLoadFromStream
OleSaveToStream
WriteClassStm
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

RegisterTypeLi
CreateErrorInfo
SetErrorInfo
LoadRegTypeLi
VariantCopy
VariantChangeType
VariantClear
VariantInit
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SysFreeString
SysStringLen
SysAllocStringLen
VarI4FromStr
LoadTypeLi

Sections

.text
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7e471a0cc46a428a9cbe6f01dfe06994

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

user32

ole32

oleaut32

Sections

.text Size: 96KB - Virtual size: 92KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 28KB - Virtual size: 28KB

.text
Size: 96KB - Virtual size: 92KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 28KB - Virtual size: 28KB