d0010a666fae54496a62bbc1408037efb1cab1a70dbd9b4cfbe37aa135814ba7

Sharing

Copy URL Twitter E-mail

General

Target

d0010a666fae54496a62bbc1408037efb1cab1a70dbd9b4cfbe37aa135814ba7
Size

114KB
MD5

345926b434aa047f11de58e689751822
SHA1

874c3a12f6283603c6f1adb24b3cf65f8f57c3e0
SHA256

d0010a666fae54496a62bbc1408037efb1cab1a70dbd9b4cfbe37aa135814ba7
SHA512

a6f005ab1d9ff766024e46f81e96bf8771c7b43b8f6d074520ca7a2d9e0a4e695b195da72cb5eacd1cb157054b3e98cfafe35085a9c6c992f7651981ea4c2fb8
SSDEEP

1536:k4l//ddoIoWQ4kFnV2Op7ZVmPOKK4LZZAnyARcKItw0DJyICF46Oiq/WcD+YEmn:Tox46Vdp9V4LZZAyARl0DJyIu4liPc9n

Score

N/A

Malware Config

Signatures

Files

d0010a666fae54496a62bbc1408037efb1cab1a70dbd9b4cfbe37aa135814ba7
.exe windows x86

f477390aaf332ebe38831742e35e40e9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_vsnprintf
_beginthread
??2@YAPAXI@Z
_endthread
sprintf
_except_handler3
wcsrchr
_itow
_ftol
free
malloc
??3@YAXPAX@Z

advapi32

RegOpenKeyExA
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegCreateKeyExW
RegCreateKeyExA
RegOpenKeyExW
RegCreateKeyA
RegCloseKey
RegSetValueA
RegOpenKeyA
RegQueryValueA
RegDeleteKeyA
ImpersonateLoggedOnUser
RegisterEventSourceW
GetUserNameW
LookupAccountNameW
ReportEventW
DeregisterEventSource
IsTextUnicode
RegSetValueExW

kernel32

GetStartupInfoA
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameA
GetCommandLineA
lstrlenW
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetPrivateProfileIntA
GetPrivateProfileStringW
GetPrivateProfileStringA
GetFullPathNameW
GetFullPathNameA
GetModuleHandleA
lstrlenA
lstrcpyA
HeapReAlloc
HeapAlloc
GetProcessHeap
HeapFree
GetStdHandle
GetFileType
FreeLibrary
GetSystemDirectoryA
GetTempPathA
GetTempFileNameA
CreateFileA
WriteFile
FlushFileBuffers
GetUserDefaultLCID
GetCPInfo
GetFileAttributesW
FindFirstFileW
GetFileAttributesA
FindFirstFileA
FindClose
GetLastError
ExitProcess
GetACP
CreateEventA
CreateThread
CloseHandle
SetEvent
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedIncrement
GetCurrentThreadId
GetVersionExA
GetPrivateProfileIntW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileW
GetLocaleInfoA
GetModuleFileNameW
LoadLibraryA
LocalFree
FormatMessageA
LocalAlloc
FormatMessageW
GetProcAddress

user32

SetWindowLongA
GetWindowLongA
CreateWindowExA
RegisterClassA
GetClassInfoA
CharNextA
LoadStringA
LoadStringW
SetTimer
GetMessageA
DispatchMessageA
GetActiveWindow
MessageBoxW
PostThreadMessageA
DefWindowProcA
PostQuitMessage
KillTimer
EnumThreadWindows
IsWindowVisible
PostMessageA
wsprintfA
wsprintfW
GetParent
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjects
SendMessageA

oleaut32

VariantCopy
VariantClear
CreateErrorInfo
SetErrorInfo
SysAllocStringByteLen
SysFreeString
LoadRegTypeLi
SysAllocStringLen
SysStringLen
LoadTypeLibEx
UnRegisterTypeLi
SafeArrayGetLBound
SafeArrayCopy
VariantInit
LoadTypeLi
VariantChangeType
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayDestroy
SafeArrayPutElement
SafeArrayCreate
SysAllocString

ole32

CoGetMalloc
StringFromCLSID
CoRegisterClassObject
CoRevokeClassObject
CoCreateInstance
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CreateBindCtx
CreateFileMoniker
CoInitializeSecurity
CoRegisterMessageFilter
CLSIDFromString
CLSIDFromProgID
MkParseDisplayName
CoGetClassObject

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

imm32

ImmGetDefaultIMEWnd

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

XOR
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f477390aaf332ebe38831742e35e40e9

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

kernel32

user32

oleaut32

ole32

version

imm32

Sections

.text Size: 64KB - Virtual size: 61KB

.data Size: 4KB - Virtual size: 480B

.rsrc Size: 40KB - Virtual size: 36KB

XOR Size: 2KB - Virtual size: 2KB

.text
Size: 64KB - Virtual size: 61KB

.data
Size: 4KB - Virtual size: 480B

.rsrc
Size: 40KB - Virtual size: 36KB

XOR
Size: 2KB - Virtual size: 2KB