652c3f1013064987b1dc4f885ab9dfe52337953d10170cfb01d8646d592a6ecf

Sharing

Copy URL Twitter E-mail

General

Target

652c3f1013064987b1dc4f885ab9dfe52337953d10170cfb01d8646d592a6ecf
Size

280KB
MD5

155a3906b24ae3a818e53c83856de56b
SHA1

b5fbfa352bc2ecc618c4b2134331cce3cc9be4ad
SHA256

652c3f1013064987b1dc4f885ab9dfe52337953d10170cfb01d8646d592a6ecf
SHA512

9e78a8af387e5c849f2df10a4105c41f7895172f7b7b7b1c231e4c93fcaa1e794f6787aefd6e537fb9b607826e8f751e1634a5e7867d1f006e7027b5580f3521
SSDEEP

6144:MzheERWcKANbk0lV6NwK4Tr9s/S/KuBVyaoudAMuP:8zRWGe0aNwdtaSvVLo7

Score

N/A

Malware Config

Signatures

Files

652c3f1013064987b1dc4f885ab9dfe52337953d10170cfb01d8646d592a6ecf
.exe windows x86

7a468fd63e1d3d8798fd9e4ae6647a3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

GetHGlobalFromILockBytes
CoUnmarshalInterface
CoIsOle1Class
GetClassFile
CreateFileMoniker
CLSIDFromProgID

shlwapi

PathIsUNCA

advapi32

DeleteService
LookupPrivilegeValueA
RegOpenKeyExW
CloseServiceHandle
GetSecurityDescriptorControl
CreateServiceA
RegEnumValueW

kernel32

lstrcatA
CreateDirectoryW
CreateSemaphoreW
LocalUnlock
GetSystemPowerStatus
GetModuleHandleA
CreateSemaphoreA
GetCurrentThread
GetStartupInfoA
VirtualAlloc
DeleteCriticalSection
IsDebuggerPresent
GetPriorityClass
QueryPerformanceCounter
IsBadCodePtr
GlobalAddAtomW
CreateNamedPipeA
FindResourceA
lstrcmpiA
TerminateProcess
LeaveCriticalSection
GetModuleFileNameW
SetCurrentDirectoryW
MultiByteToWideChar
GetFileInformationByHandle
SuspendThread
GlobalAlloc
TlsGetValue
WriteConsoleW
IsDBCSLeadByte
EnumResourceLanguagesA
GetVersionExW
lstrlenA
SetErrorMode
ConvertDefaultLocale
UnhandledExceptionFilter
OutputDebugStringA
SearchPathA
GetCPInfo
SetEndOfFile
SetFileAttributesW
GetProfileStringW
WaitForSingleObject
GetVolumeInformationA
VerSetConditionMask
GetThreadPriority
DeleteTimerQueueEx
GlobalMemoryStatus
LoadLibraryW
TlsAlloc
SetLastError
FindNextFileW
UnmapViewOfFile
LocalFree
GetStringTypeW
GetEnvironmentStrings
GetSystemDirectoryA
GetEnvironmentVariableW
CompareFileTime
GetPrivateProfileStringW
OpenEventW
GetQueuedCompletionStatus
SwitchToThread
QueryPerformanceFrequency
GetCommandLineA
_llseek
WaitForMultipleObjects
VirtualQueryEx
OpenMutexW
LoadLibraryA
SetStdHandle
DeleteTimerQueueTimer
GetComputerNameA
GetUserDefaultUILanguage
DeleteFileW
GetLogicalDriveStringsA
WriteConsoleA
ResetEvent
GetStringTypeA
EnumSystemLocalesA
OpenFileMappingW
EnumResourceNamesW
LoadResource
GlobalFlags
OpenEventA
SetHandleCount
FreeEnvironmentStringsW
SetWaitableTimer
GetConsoleCP
Sleep
GetOverlappedResult
GetCurrentThreadId
GlobalReAlloc
GetProcessAffinityMask
GetFullPathNameW

oleaut32

VariantClear

user32

IsWindowUnicode
DispatchMessageW
DrawTextW
GetClipboardFormatNameA
GetKeyState
GetClipboardData
ShowOwnedPopups
GetWindowRgn
UnregisterDeviceNotification
SetClassLongW
GetClassNameW
TabbedTextOutA
TrackPopupMenu
GetSubMenu
EnableMenuItem
MessageBoxA
ScrollWindowEx
AdjustWindowRect
FrameRect
WindowFromPoint
LoadAcceleratorsA
PostMessageW
SendMessageW
ReplyMessage
DdeUnaccessData
InsertMenuA
CloseClipboard
IsRectEmpty
SetMenuItemInfoW
CopyAcceleratorTableA
DdeDisconnect
MsgWaitForMultipleObjects
DrawFocusRect
DestroyMenu
GetKeyboardLayoutList
WinHelpW
SetWindowContextHelpId
GetWindowTextW
GetIconInfo
SetDlgItemInt
GetMessageA
GetTabbedTextExtentA
DrawEdge
DefWindowProcW
LoadBitmapW
CharLowerW
ClipCursor
OemToCharA
DdeUninitialize
SetProcessDefaultLayout
ScreenToClient
CharToOemBuffA
GetMessageW
AppendMenuA
UnpackDDElParam
IsCharAlphaNumericA
BringWindowToTop
PeekMessageW
GetDesktopWindow
GetClassNameA
DrawFrameControl
wsprintfW
SystemParametersInfoA
GetUpdateRect
GetKeyboardType
IsClipboardFormatAvailable
CreateIcon
GetSystemMetrics
GrayStringA
ExcludeUpdateRgn
MonitorFromPoint
GetDlgItemTextW
CharUpperA
TranslateAcceleratorA
GetLastActivePopup
GetClientRect
CharLowerBuffW
WaitMessage
CharUpperW
GetMenuCheckMarkDimensions
LoadIconA
PostThreadMessageA
OpenIcon
CreatePopupMenu
GetCursorPos
GetDC
CharNextW

msvcrt

__set_app_type
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
wcstod
strstr
atol
wcslen
_wtoi
wcscspn
wcsncpy
ctime
_msize
floor
isspace
_controlfp
realloc
__p__fmode
calloc
_iob
wcsspn
memmove
setlocale
wcscmp
_expand
bsearch
longjmp
isdigit
atof
_mbsrchr
sprintf
malloc
strrchr
_fpreset
_itow
_errno
_purecall
_wtol
rand
towupper
wcstoul
tolower
wcspbrk
wcstol
_cexit
exit
_wcsdup
strchr
towlower
_snwprintf
swprintf
_ltow
_beginthreadex
wcstok
_wsplitpath
_wcsnicmp

Sections

.text
Size: 224KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7a468fd63e1d3d8798fd9e4ae6647a3e

Headers

File Characteristics

Imports

ole32

shlwapi

advapi32

kernel32

oleaut32

user32

msvcrt

Sections

.text Size: 224KB - Virtual size: 220KB

.rdata Size: 36KB - Virtual size: 32KB

.data Size: 12KB - Virtual size: 8KB

.rsrc Size: 4KB - Virtual size: 656B

.text
Size: 224KB - Virtual size: 220KB

.rdata
Size: 36KB - Virtual size: 32KB

.data
Size: 12KB - Virtual size: 8KB

.rsrc
Size: 4KB - Virtual size: 656B