0b7e4da04e2d6ef60bb2d04131093f1a6daca9eb0cad8a01da47bdbc4f12d0db

Sharing

Copy URL Twitter E-mail

General

Target

0b7e4da04e2d6ef60bb2d04131093f1a6daca9eb0cad8a01da47bdbc4f12d0db
Size

84KB
MD5

514c996537e11f394d8573059ded4f8e
SHA1

e532113f489d33bff123eb6b81a108fc90869f26
SHA256

0b7e4da04e2d6ef60bb2d04131093f1a6daca9eb0cad8a01da47bdbc4f12d0db
SHA512

34cc775b9ec36d51f64f19a8e9a92b3aa8cd9bff3b8907375a92e8f5114d983fe031a3c3e605dac0e72e23e699a6f18f69a0d76f69a817059e36ea2e63dad6d8
SSDEEP

1536:3eLvcz9VYwi4IpVK9nlzHR50271TwIK6zF5ha/BbNnUdiGiNKlji+LDJ7Gza0xWY:3gczPXiVPK91X71TwIJDh6bQiGiNKljb

Score

N/A

Malware Config

Signatures

Files

0b7e4da04e2d6ef60bb2d04131093f1a6daca9eb0cad8a01da47bdbc4f12d0db
.exe windows x86

bfc683bc1c70a2bb146e550f90627c92

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Beep
CloseHandle
CreateFileMappingA
CreateFileW
CreateJobObjectA
CreateMutexW
CreateTimerQueue
DeleteTimerQueueTimer
EnterCriticalSection
EnumCalendarInfoExW
ExitProcess
FindNextVolumeA
FindNextVolumeMountPointW
GetACP
GetBinaryTypeA
GetCommandLineA
GetDefaultCommConfigW
GetExitCodeProcess
GetModuleHandleA
GetOEMCP
GetPrivateProfileStringW
GetStartupInfoA
GetThreadPriority
GetThreadPriorityBoost
GetThreadTimes
GetTimeFormatW
GetVersionExA
Heap32Next
HeapAlloc
HeapCreate
HeapValidate
IsBadReadPtr
IsBadStringPtrA
LocalSize
MapUserPhysicalPages
MapViewOfFile
OpenFile
OpenSemaphoreA
ResetWriteWatch
SetFileAttributesA
SetFileAttributesW
SetLastError
SetStdHandle
WaitForMultipleObjects
WritePrivateProfileStructA
_llseek
_lopen
lstrcpyA

user32

SetWindowPlacement
UnionRect
SetDlgItemTextA
TrackPopupMenu
SetWindowLongA
ReleaseCapture
RegisterClassA
PostQuitMessage
MsgWaitForMultipleObjects
LoadIconA
InvalidateRgn
IntersectRect
GetWindowRect
GetWindowDC
GetUserObjectSecurity
GetParent
GetMenuItemCount
GetMenu
GetFocus
GetDlgItemTextA
GetDlgItem
EmptyClipboard
DrawEdge
DestroyWindow
DeferWindowPos
DefFrameProcA
DefDlgProcA
CreateWindowExA
ClientToScreen
CheckMenuItem
SetMenuItemInfoA

msi

MsiOpenPackageW
MsiInstallMissingFileW
MsiOpenProductA
MsiPreviewDialogW
MsiProvideAssemblyA
MsiViewGetErrorW
MsiViewExecute
MsiViewClose
MsiVerifyPackageA
MsiInstallMissingFileA
MsiInstallMissingComponentW
MsiGetFeatureUsageW
MsiEvaluateConditionW
MsiEnumPatchesA
MsiEnumComponentQualifiersA
MsiEnableUIPreview
MsiEnableLogA
MsiProcessAdvertiseScriptA
MsiDoActionW
MsiDeleteUserDataW
MsiDatabaseOpenViewA
MsiDatabaseIsTablePersistentW
MsiDatabaseExportW
MsiDatabaseExportA
MsiCreateTransformSummaryInfoW
MsiCreateAndVerifyInstallerDirectory
MsiCollectUserInfoW
MsiAdvertiseProductA
Migrate10CachedPackagesA
MsiSetComponentStateW
MsiSetComponentStateA
MsiReinstallProductW
MsiRecordSetStreamA
MsiRecordSetInteger
MsiQueryProductStateA

oleacc

WindowFromAccessibleObject
AccessibleChildren

oledlg

OleUIAddVerbMenuA
OleUIBusyA
OleUICanConvertOrActivateAs
OleUIChangeIconA

dbghelp

SymFunctionTableAccess64
SymFromAddr
SymGetSymNext64
SymGetTypeFromName
SymGetSymFromName64
SymFindFileInPath
FindFileInSearchPath

comctl32

FlatSB_SetScrollProp
InitCommonControls
ImageList_Write
ImageList_SetOverlayImage
ImageList_SetFlags
ImageList_SetFilter
ImageList_LoadImageW
ImageList_LoadImageA
ImageList_GetImageCount
ImageList_GetIcon
ImageList_GetBkColor
ImageList_Duplicate
ImageList_DrawIndirect
ImageList_DragLeave
ImageList_BeginDrag
ImageList_AddIcon
FlatSB_ShowScrollBar
FlatSB_SetScrollInfo
FlatSB_GetScrollProp
FlatSB_GetScrollPos
DrawStatusTextA
DrawInsert
DestroyPropertySheetPage
CreateStatusWindowA
CreateMappedBitmap
InitMUILanguage
InitializeFlatSB
MenuHelp
PropertySheetW
InitCommonControlsEx

comdlg32

GetOpenFileNameW
dwOKSubclass
dwLBSubclass
WantArrows
GetSaveFileNameW
ChooseFontW
GetSaveFileNameA
CommDlgExtendedError

security

QuerySecurityPackageInfoW
FreeContextBuffer
DeleteSecurityPackageW
DeleteSecurityPackageA
DeleteSecurityContext
AcquireCredentialsHandleW
AddSecurityPackageA
CompleteAuthToken

advapi32

SetSecurityDescriptorDacl
SetNamedSecurityInfoA
ReportEventA
RegisterTraceGuidsW
RegFlushKey
OpenTraceA
OpenServiceA
OpenEventLogW
LsaRemovePrivilegesFromAccount
LsaAddPrivilegesToAccount
LookupSecurityDescriptorPartsW
ImpersonateNamedPipeClient
GetAuditedPermissionsFromAclA
FindFirstFreeAce
EnumServicesStatusExW
ElfRegisterEventSourceW
ElfChangeNotify
DestroyPrivateObjectSecurity
CryptDuplicateKey
CreateServiceA
CreateProcessAsUserA
ConvertToAutoInheritPrivateObjectSecurity
ClearEventLogW
BuildImpersonateExplicitAccessWithNameW
AddAccessAllowedObjectAce

Sections

.text
Size: 52KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bfc683bc1c70a2bb146e550f90627c92

Headers

File Characteristics

Imports

kernel32

user32

msi

oleacc

oledlg

dbghelp

comctl32

comdlg32

security

advapi32

Sections

.text Size: 52KB - Virtual size: 56KB

.data Size: 28KB - Virtual size: 28KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 1KB - Virtual size: 4KB

.text
Size: 52KB - Virtual size: 56KB

.data
Size: 28KB - Virtual size: 28KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 1KB - Virtual size: 4KB