714ebc1386d7832434baba9f351e031c8b8e4af7c339d100f2830e4e7fb43917

Sharing

Copy URL Twitter E-mail

General

Target

714ebc1386d7832434baba9f351e031c8b8e4af7c339d100f2830e4e7fb43917
Size

432KB
MD5

3ed84496024f5224932c5c52643468c9
SHA1

1d3a8cb8ecfac530bc8424379963e0a81e912232
SHA256

714ebc1386d7832434baba9f351e031c8b8e4af7c339d100f2830e4e7fb43917
SHA512

07b05573aef557f9cae5608d7905a939ddc4519af5663d6ace96576ae94fc955d1a1a78cb7a5db26b9e241a34b85c17530ff972cc09453ca1341c6abfe190954
SSDEEP

12288:0wecSz7daqzFhxamrsApKKtRu9HNa2E9CHfs:0wYaqzUA8tajas

Score

N/A

Malware Config

Signatures

Files

714ebc1386d7832434baba9f351e031c8b8e4af7c339d100f2830e4e7fb43917
.exe windows x86

ab368a05b29495f74f239877b2f28e82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
TerminateProcess
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
HeapSetInformation
GetModuleHandleW
UnmapViewOfFile
CloseHandle
InterlockedExchange
VirtualProtect
VirtualQuery
GetCurrentThreadId
InterlockedIncrement
InterlockedCompareExchange
InterlockedDecrement
GetCurrentProcessId
CreateMutexA
WaitForSingleObject
ReleaseMutex
FindResourceA
IsDebuggerPresent
LockResource
CreateToolhelp32Snapshot
Module32First
GetProcAddress
Module32Next
GetModuleHandleA
EnumResourceNamesA
VirtualAlloc
CreateEventA
ExitProcess
SetEvent
GetExitCodeThread
TerminateThread
CreateThread
VirtualFree
GetModuleFileNameA
GetSystemTime
SystemTimeToFileTime
GetCommandLineW
LocalFree
GlobalAlloc
GetSystemInfo
GetWindowsDirectoryA
GetVolumeInformationA
CreateFileA
DeviceIoControl
GetCurrentThread
CreateFileW
GlobalFree
LoadLibraryA
TlsAlloc
TlsSetValue
TlsGetValue
TlsFree
FreeLibrary
MapViewOfFile
CreateFileMappingA
lstrcmpA
LocalAlloc
GetModuleFileNameW
GetLastError
OutputDebugStringA
IsProcessorFeaturePresent
GetTickCount
LoadResource
EncodePointer
GetSystemTimeAsFileTime
lstrlenW
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
QueryPerformanceCounter

advapi32

CryptAcquireContextA
GetNumberOfEventLogRecords
OpenEventLogA
RegCloseKey
RegEnumValueA
RegOpenKeyExA
CloseEventLog
OpenThreadToken
RevertToSelf
CryptGenRandom
ReadEventLogA
SetThreadToken

oleaut32

VariantInit
SystemTimeToVariantTime
SysAllocString
SysFreeString
CreateErrorInfo
SetErrorInfo
VariantChangeType
GetErrorInfo
VariantClear

mscoree

GetHashFromFileW
_CorExeMain

wintrust

CryptCATAdminReleaseContext
CryptCATCatalogInfoFromContext
WinVerifyTrust
CryptCATAdminEnumCatalogFromHash
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminAcquireContext
CryptCATAdminReleaseCatalogContext

crypt32

CryptMsgGetParam
CertFindCertificateInStore
CertCloseStore
CryptMsgClose
CertFreeCertificateContext
CryptQueryObject
CertGetNameStringA
CryptDecodeObject

iphlpapi

GetAdaptersInfo

ole32

CoInitializeEx
CoSetProxyBlanket
CoUninitialize
CoCreateInstance
CoTaskMemAlloc

shell32

CommandLineToArgvW

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA
SetupDiClassNameFromGuidA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo

rpcrt4

UuidCreate

Sections

.text
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab368a05b29495f74f239877b2f28e82

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

oleaut32

mscoree

wintrust

crypt32

iphlpapi

ole32

shell32

setupapi

rpcrt4

Sections

.text Size: 304KB - Virtual size: 303KB

.rdata Size: 102KB - Virtual size: 101KB

.data Size: 2KB - Virtual size: 4KB

.rsrc Size: 16KB - Virtual size: 16KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 304KB - Virtual size: 303KB

.rdata
Size: 102KB - Virtual size: 101KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 16KB - Virtual size: 16KB

.reloc
Size: 6KB - Virtual size: 5KB