bd1cdccc46e7413d9f8e4a2fc4a1f843bc3d1d9189378c415bf0cec9add02c88

Sharing

Copy URL Twitter E-mail

General

Target

bd1cdccc46e7413d9f8e4a2fc4a1f843bc3d1d9189378c415bf0cec9add02c88
Size

29KB
MD5

3dbc0e917c81a21f13d3528d3f6ea01c
SHA1

09604d738565c1106ab061a9b97922b8c6ceb63b
SHA256

bd1cdccc46e7413d9f8e4a2fc4a1f843bc3d1d9189378c415bf0cec9add02c88
SHA512

f67293c892b500c813044a78c200f3c4826ce9fc15008c6af2aa21b34bb7da48ad33df112b256db4045cbeb4f1445b0bf3976a3a570e536d68dab33fd48d135c
SSDEEP

384:KpEe+EJT2MW2B0+Kj9fMOLqYLv5wEKs7PbO8QDsA7yULW7:sQ2EbOszL77A7yU

Score

N/A

Malware Config

Signatures

Files

bd1cdccc46e7413d9f8e4a2fc4a1f843bc3d1d9189378c415bf0cec9add02c88
.exe windows x86

22f31f00f8e28da972820521fb74a77b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoDosDateTimeToFileTime
CoEnableCallCancellation
CoFileTimeNow
CoFileTimeToDosDateTime
CoFreeAllLibraries
CoFreeLibrary
CoFreeUnusedLibraries
CoFreeUnusedLibrariesEx
CoGetApartmentID
CoGetCallContext
CoGetCallerTID
CoGetCancelObject
CoGetClassObject
CoGetClassVersion
CoGetComCatalog
CoGetContextToken
CoDosDateTimeToFileTime
CoEnableCallCancellation
CoFileTimeNow
CoFileTimeToDosDateTime
CoFreeAllLibraries
CoFreeLibrary
CoFreeUnusedLibraries
CoFreeUnusedLibrariesEx
CoGetApartmentID
CoGetCallContext
CoGetCallerTID
CoGetCancelObject
CoGetClassObject
CoGetClassVersion
CoGetComCatalog
CoGetContextToken
CoDosDateTimeToFileTime
CoEnableCallCancellation
CoFileTimeNow
CoFileTimeToDosDateTime
CoFreeAllLibraries
CoFreeLibrary
CoFreeUnusedLibraries
CoFreeUnusedLibrariesEx
CoGetApartmentID
CoGetCallContext
CoGetCallerTID
CoGetCancelObject
CoGetClassObject
CoGetClassVersion
CoGetComCatalog
CoGetContextToken
CoDosDateTimeToFileTime
CoEnableCallCancellation
CoFileTimeNow
CoFileTimeToDosDateTime
CoFreeAllLibraries
CoFreeLibrary
CoFreeUnusedLibraries
CoFreeUnusedLibrariesEx
CoGetApartmentID
CoGetCallContext
CoGetCallerTID
CoGetCancelObject
CoGetClassObject
CoGetClassVersion
CoGetComCatalog
CoGetContextToken

netapi32

DsGetDcNameW
DsGetDcNextA

msvcrt

fread
fopen

kernel32

QueryDosDeviceA
GetVersionExW
ReadConsoleA
EnumCalendarInfoW
GetACP
LocalFlags
LockResource
LocalCompact
GetWindowsDirectoryA

msacm32

acmFilterEnumW
acmFormatTagDetailsW
acmStreamPrepareHeader
acmStreamUnprepareHeader
acmDriverMessage
acmFilterDetailsW

perfctrs

CloseDhcpPerformanceData

mfcsubs

??0CString@@QAE@XZ

msi

MsiLocateComponentW
MsiMessageBoxA
MsiMessageBoxExA
MsiMessageBoxExW
MsiMessageBoxW
MsiNotifySidChangeA
MsiNotifySidChangeW
MsiOpenDatabaseA
MsiOpenDatabaseW
MsiOpenPackageA
MsiOpenPackageExA
MsiOpenPackageExW
MsiOpenPackageW
MsiOpenProductA
MsiOpenProductW
MsiLocateComponentW
MsiMessageBoxA
MsiMessageBoxExA
MsiMessageBoxExW
MsiMessageBoxW
MsiNotifySidChangeA
MsiNotifySidChangeW
MsiOpenDatabaseA
MsiOpenDatabaseW
MsiOpenPackageA
MsiOpenPackageExA
MsiOpenPackageExW
MsiOpenPackageW
MsiOpenProductA
MsiOpenProductW

aclui

CreateSecurityPage
EditSecurity

mshtml

CreateHTMLPropertyPage
CreateHTMLPropertyPage

Sections

text
Size: 1KB - Virtual size: 10KB

IMAGE_SCN_MEM_WRITE

.bss
Size: 10KB - Virtual size: 84KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 496B

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

22f31f00f8e28da972820521fb74a77b

Headers

File Characteristics

Imports

ole32

netapi32

msvcrt

kernel32

msacm32

perfctrs

mfcsubs

msi

aclui

mshtml

Sections

text Size: 1KB - Virtual size: 10KB

.bss Size: 10KB - Virtual size: 84KB

.rsrc Size: 15KB - Virtual size: 16KB

.rdata Size: 512B - Virtual size: 4KB

.data Size: 512B - Virtual size: 496B

text
Size: 1KB - Virtual size: 10KB

.bss
Size: 10KB - Virtual size: 84KB

.rsrc
Size: 15KB - Virtual size: 16KB

.rdata
Size: 512B - Virtual size: 4KB

.data
Size: 512B - Virtual size: 496B