ddd3e0c318cd23d1335aaf5e4541f4843917571380a08a19f83b4298edda817d

Sharing

Copy URL Twitter E-mail

General

Target

ddd3e0c318cd23d1335aaf5e4541f4843917571380a08a19f83b4298edda817d
Size

618KB
MD5

1cb2b6dc6333305717c487b1d7c8cd90
SHA1

17c1aef7f4f78afd767089d29356be950971d766
SHA256

ddd3e0c318cd23d1335aaf5e4541f4843917571380a08a19f83b4298edda817d
SHA512

ea77ba42b01e7331397db4d18201078daaa596f1f3d70c90da0b5cc6a5c4a357162fd5f4843c1f241ab2940ebc534548f18755b36dcf0bb3b904638912ff54e5
SSDEEP

12288:EJo9XTMwSM265zwFz9YxDXzajaN6zLXrn4w0a9MigQcO9RBuPFK:EJo9XpP262pKDXvNiXrnzF/coRBu

Score

N/A

Malware Config

Signatures

Files

ddd3e0c318cd23d1335aaf5e4541f4843917571380a08a19f83b4298edda817d
.exe windows x64

5e0e94ae048c25f75751961b16596ae0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW

kernel32

LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
lstrlenW
GetLastError
LoadLibraryW
GetProcAddress
GetModuleHandleW
lstrcmpiW
GetCurrentThreadId
SetEvent
SetLastError
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
LockResource
FindResourceExW
LocalFree
FormatMessageW
RaiseException
CreateThread
CreateEventW
ReleaseSemaphore
CreateSemaphoreW
EnterCriticalSection
WaitForSingleObjectEx
GetSystemInfo
OutputDebugStringA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
InterlockedPushEntrySList
VirtualAlloc
InterlockedPopEntrySList
VirtualFree
WideCharToMultiByte
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
CloseHandle

user32

DialogBoxParamW
GetActiveWindow
MessageBoxW
SetWindowLongPtrW
CharNextW
UnregisterClassA
DefWindowProcW
EndDialog
SendMessageW
GetWindowLongW
SetTimer
KillTimer
GetDlgItem
SetWindowPos
MapWindowPoints
GetClientRect
SystemParametersInfoW
GetWindowRect
GetWindow
GetParent
LoadStringW

msvcrt

wcslen
__wgetmainargs
vswprintf_s
_vscwprintf
wcsstr
memmove_s
wcsncpy_s
memcpy_s
free
malloc
__C_specific_handler
memset
??3@YAXPEAX@Z
_XcptFilter
_exit
_cexit
exit
_wcmdln
_initterm
_amsg_exit
__setusermatherr
_fmode
__set_app_type
realloc
_errno
_unlock
memcpy
memcmp
?terminate@@YAXXZ
_onexit
_lock
_purecall
__dllonexit
_commode

ole32

StringFromCLSID
CoInitialize
CLSIDFromString
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoInitializeEx
CoTaskMemAlloc

oleaut32

SysStringLen
SysAllocString
SysAllocStringLen
VarUI4FromStr
SysFreeString

comctl32

InitCommonControlsEx

mfplat

MFHeapAlloc
MFHeapFree

shell32

ShellExecuteW

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 564KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5e0e94ae048c25f75751961b16596ae0

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

msvcrt

ole32

oleaut32

comctl32

mfplat

shell32

Sections

.text Size: 48KB - Virtual size: 47KB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 564KB - Virtual size: 2.5MB

.text
Size: 48KB - Virtual size: 47KB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 564KB - Virtual size: 2.5MB