caf6fe32e645628ef2ef03cb3fa4ea5117629b0f792eef26b65609e6146a3adc

Sharing

Copy URL Twitter E-mail

General

Target

caf6fe32e645628ef2ef03cb3fa4ea5117629b0f792eef26b65609e6146a3adc
Size

72KB
MD5

e4939f69fcac42d33103d7d4e874ca20
SHA1

36821ac6df2d6e7f6e72c5b9a6fb8662ecff3aa7
SHA256

caf6fe32e645628ef2ef03cb3fa4ea5117629b0f792eef26b65609e6146a3adc
SHA512

d8018caf8c53e651ef288c16923bacfb53efaea8c3c122c9a4b25a1ca9f1e3aec92801a8fb14d2eb33db36f86c94dd0c7fe5b84e4c962ed3e5dced61d8f0a25e
SSDEEP

1536:QbvO2TgylH7mEUPnFeU7JQ9wAMG4CoqTba2GhS3:QbWqfH7cfF777AMso+ba253

Score

N/A

Malware Config

Signatures

Files

caf6fe32e645628ef2ef03cb3fa4ea5117629b0f792eef26b65609e6146a3adc
.exe windows x86

3dd27bc15df2286167f078ee9926935b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

modemui

drvCommConfigDialogA
CountryRunOnce
drvGetDefaultCommConfigA

msimg32

vSetDdrawflag
TransparentBlt
GradientFill
AlphaBlend

shlwapi

UrlCombineA
UrlIsNoHistoryW
UrlUnescapeA
UrlCanonicalizeA
UrlHashA
UrlEscapeA
UrlIsOpaqueA
PathCombineA
UrlCreateFromPathA
UrlIsA
PathCompactPathA

user32

IsDialogMessageA
DrawIcon
DialogBoxParamA
LoadCursorA
GetWindowLongA
GetPropA
GetCaretPos
LoadImageA
PostMessageA
IsWindow
SetCursorPos
DispatchMessageA

advapi32

ControlService
RegEnumValueA
IsValidSid
RegFlushKey
RegCreateKeyA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey
IsTextUnicode
RegQueryValueA
CreateServiceA
InitializeSid
IsValidSecurityDescriptor
ClearEventLogA
RegDeleteValueA

nddeapi

NDdeShareAddA
NDdeShareSetInfoA
NDdeShareGetInfoA

kernel32

GetGeoInfoA
ReadFile
GetConsoleTitleA
GetModuleHandleA
GetPrivateProfileIntA
GetDateFormatA
GetProcessId
FormatMessageA
lstrcpynA
HeapValidate
GetStringTypeA
DeviceIoControl
GetBinaryTypeW
GetPrivateProfileStructW
VirtualAllocEx
GetComputerNameA
SetFilePointer
GetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentProcess
WaitForSingleObject
GetNumberFormatW
GetTimeFormatA
GetVersionExA
CloseHandle
GetProcessHeap
CreateDirectoryA
GetFullPathNameA
CreateNamedPipeA

certcli

CAEnumFirstCA
CACloseCA
CADeleteCA
CACloseCertType

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 881B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3dd27bc15df2286167f078ee9926935b

Headers

DLL Characteristics

File Characteristics

Imports

modemui

msimg32

shlwapi

user32

advapi32

nddeapi

kernel32

certcli

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1024B - Virtual size: 881B

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1024B - Virtual size: 881B

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 12KB - Virtual size: 12KB