cb22e0e53bc1aadbb7e557cec4efe3cddd169c5d4ee245ec92cd127d98f0b76b

Sharing

Copy URL Twitter E-mail

General

Target

cb22e0e53bc1aadbb7e557cec4efe3cddd169c5d4ee245ec92cd127d98f0b76b
Size

80KB
MD5

9522ba99fd4c34ac9d728d83338415c8
SHA1

cee1ebb92a4ce84d7904e6ab4c341b06ef85eade
SHA256

cb22e0e53bc1aadbb7e557cec4efe3cddd169c5d4ee245ec92cd127d98f0b76b
SHA512

cfe408e54275559334559923c5a8eb6d45eaa39b000aad3e827efe23809b07bd0f5b38002c324e36565fc5bda502e9a832a432b44727163a7e7e01f92402e00f
SSDEEP

1536:N5KLAh22Mm5JKOW/gbCILeXUb2/BSv32svwOMlbETl+kLy:NfU2MGJKbc14UbmEM4G

Score

N/A

Malware Config

Signatures

Files

cb22e0e53bc1aadbb7e557cec4efe3cddd169c5d4ee245ec92cd127d98f0b76b
.dll windows x86

bfc683bc1c70a2bb146e550f90627c92

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Beep
CloseHandle
CreateFileMappingA
CreateFileW
CreateJobObjectA
CreateMutexW
CreateTimerQueue
DeleteTimerQueueTimer
EnterCriticalSection
EnumCalendarInfoExW
ExitProcess
FindNextVolumeA
FindNextVolumeMountPointW
GetACP
GetBinaryTypeA
GetCommandLineA
GetDefaultCommConfigW
GetExitCodeProcess
GetModuleHandleA
GetOEMCP
GetPrivateProfileStringW
GetStartupInfoA
GetThreadPriority
GetThreadPriorityBoost
GetThreadTimes
GetTimeFormatW
GetVersionExA
Heap32Next
HeapAlloc
HeapCreate
HeapValidate
IsBadReadPtr
IsBadStringPtrA
LocalSize
MapUserPhysicalPages
MapViewOfFile
OpenFile
OpenSemaphoreA
ResetWriteWatch
SetFileAttributesA
SetFileAttributesW
SetLastError
SetStdHandle
WaitForMultipleObjects
WritePrivateProfileStructA
_llseek
_lopen
lstrcpyA

user32

SetWindowPlacement
UnionRect
SetDlgItemTextA
TrackPopupMenu
SetWindowLongA
ReleaseCapture
RegisterClassA
PostQuitMessage
MsgWaitForMultipleObjects
LoadIconA
InvalidateRgn
IntersectRect
GetWindowRect
GetWindowDC
GetUserObjectSecurity
GetParent
GetMenuItemCount
GetMenu
GetFocus
GetDlgItemTextA
GetDlgItem
EmptyClipboard
DrawEdge
DestroyWindow
DeferWindowPos
DefFrameProcA
DefDlgProcA
CreateWindowExA
ClientToScreen
CheckMenuItem
SetMenuItemInfoA

msi

MsiOpenPackageW
MsiInstallMissingFileW
MsiOpenProductA
MsiPreviewDialogW
MsiProvideAssemblyA
MsiViewGetErrorW
MsiViewExecute
MsiViewClose
MsiVerifyPackageA
MsiInstallMissingFileA
MsiInstallMissingComponentW
MsiGetFeatureUsageW
MsiEvaluateConditionW
MsiEnumPatchesA
MsiEnumComponentQualifiersA
MsiEnableUIPreview
MsiEnableLogA
MsiProcessAdvertiseScriptA
MsiDoActionW
MsiDeleteUserDataW
MsiDatabaseOpenViewA
MsiDatabaseIsTablePersistentW
MsiDatabaseExportW
MsiDatabaseExportA
MsiCreateTransformSummaryInfoW
MsiCreateAndVerifyInstallerDirectory
MsiCollectUserInfoW
MsiAdvertiseProductA
Migrate10CachedPackagesA
MsiSetComponentStateW
MsiSetComponentStateA
MsiReinstallProductW
MsiRecordSetStreamA
MsiRecordSetInteger
MsiQueryProductStateA

oleacc

WindowFromAccessibleObject
AccessibleChildren

oledlg

OleUIAddVerbMenuA
OleUIBusyA
OleUICanConvertOrActivateAs
OleUIChangeIconA

dbghelp

SymFunctionTableAccess64
SymFromAddr
SymGetSymNext64
SymGetTypeFromName
SymGetSymFromName64
SymFindFileInPath
FindFileInSearchPath

comctl32

FlatSB_SetScrollProp
InitCommonControls
ImageList_Write
ImageList_SetOverlayImage
ImageList_SetFlags
ImageList_SetFilter
ImageList_LoadImageW
ImageList_LoadImageA
ImageList_GetImageCount
ImageList_GetIcon
ImageList_GetBkColor
ImageList_Duplicate
ImageList_DrawIndirect
ImageList_DragLeave
ImageList_BeginDrag
ImageList_AddIcon
FlatSB_ShowScrollBar
FlatSB_SetScrollInfo
FlatSB_GetScrollProp
FlatSB_GetScrollPos
DrawStatusTextA
DrawInsert
DestroyPropertySheetPage
CreateStatusWindowA
CreateMappedBitmap
InitMUILanguage
InitializeFlatSB
MenuHelp
PropertySheetW
InitCommonControlsEx

comdlg32

GetOpenFileNameW
dwOKSubclass
dwLBSubclass
WantArrows
GetSaveFileNameW
ChooseFontW
GetSaveFileNameA
CommDlgExtendedError

security

QuerySecurityPackageInfoW
FreeContextBuffer
DeleteSecurityPackageW
DeleteSecurityPackageA
DeleteSecurityContext
AcquireCredentialsHandleW
AddSecurityPackageA
CompleteAuthToken

advapi32

SetSecurityDescriptorDacl
SetNamedSecurityInfoA
ReportEventA
RegisterTraceGuidsW
RegFlushKey
OpenTraceA
OpenServiceA
OpenEventLogW
LsaRemovePrivilegesFromAccount
LsaAddPrivilegesToAccount
LookupSecurityDescriptorPartsW
ImpersonateNamedPipeClient
GetAuditedPermissionsFromAclA
FindFirstFreeAce
EnumServicesStatusExW
ElfRegisterEventSourceW
ElfChangeNotify
DestroyPrivateObjectSecurity
CryptDuplicateKey
CreateServiceA
CreateProcessAsUserA
ConvertToAutoInheritPrivateObjectSecurity
ClearEventLogW
BuildImpersonateExplicitAccessWithNameW
AddAccessAllowedObjectAce

Sections

.text
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bfc683bc1c70a2bb146e550f90627c92

Headers

File Characteristics

Imports

kernel32

user32

msi

oleacc

oledlg

dbghelp

comctl32

comdlg32

security

advapi32

Sections

.text Size: 49KB - Virtual size: 52KB

.data Size: 28KB - Virtual size: 28KB

.rsrc Size: 1024B - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 4KB

.text
Size: 49KB - Virtual size: 52KB

.data
Size: 28KB - Virtual size: 28KB

.rsrc
Size: 1024B - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 4KB