efb89f66dd7b906d1a7aae84c81eaf1801031e56260b9c019c5d4296d38280bf

Sharing

Copy URL Twitter E-mail

General

Target

efb89f66dd7b906d1a7aae84c81eaf1801031e56260b9c019c5d4296d38280bf
Size

211KB
MD5

677df180e5db90f444a7e5b2d037b766
SHA1

b661b52f662eb42166a343eabcb821aa016d75c9
SHA256

efb89f66dd7b906d1a7aae84c81eaf1801031e56260b9c019c5d4296d38280bf
SHA512

75e2f53d1def52d23560c1d22fe374ae9da8c8609310568f45d29a98ea14803e882958c3010f2d0fb6f97e5184b092936e345127d3b9b16629eea9301f16d35e
SSDEEP

3072:ZbqWesy8nhL7momEXLAg0FugReWiam+P2nK2nkXOlZToxf:ZHhL7DvbAOgR4aH2tk+foxf

Score

N/A

Malware Config

Signatures

Files

efb89f66dd7b906d1a7aae84c81eaf1801031e56260b9c019c5d4296d38280bf
.exe windows x86

fd36593591a66b578502db502e653a64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TrackPopupMenu
UpdateWindow
CreateWindowExA
CreateDialogParamA
CloseWindow
ChangeDisplaySettingsA
BeginPaint
AppendMenuA
wsprintfA
SetRect
GetClientRect

comdlg32

GetSaveFileNameA
GetOpenFileNameA
ChooseColorA

shell32

ShellExecuteA
SHChangeNotify

advapi32

RegQueryValueA
RegQueryValueExA
RegSetValueA
OpenProcessToken
StartServiceA
RegSetValueExA
AdjustTokenPrivileges
CloseServiceHandle
ControlService
CreateServiceA
DeleteService
GetTokenInformation
LookupPrivilegeValueA
OpenSCManagerA
OpenServiceA
RegCloseKey
RegCreateKeyA
RegFlushKey
RegOpenKeyExA

comctl32

ord17
ImageList_LoadImageA

kernel32

GetConsoleCP
LCMapStringW
LCMapStringA
GetConsoleMode
FlushFileBuffers
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProcAddress
VirtualAlloc
SetVolumeLabelW
GetTapeStatus
FreeEnvironmentStringsA
BuildCommDCBW
GetCurrencyFormatW
SystemTimeToTzSpecificLocalTime
VerifyVersionInfoW
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
SetCurrentDirectoryA
CreateProcessA
CloseHandle
WaitForSingleObject
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetLastError
AreFileApisANSI
GetModuleFileNameA
GetModuleFileNameW
LocalFree
FormatMessageA
FormatMessageW
GetWindowsDirectoryA
SetFileTime
CreateFileW
SetLastError
GetModuleHandleW
Sleep
ExitProcess
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
RaiseException
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
RtlUnwind
GetLocaleInfoA
GetTimeZoneInformation
HeapAlloc
HeapReAlloc
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd36593591a66b578502db502e653a64

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

shell32

advapi32

comctl32

kernel32

Sections

.text Size: 74KB - Virtual size: 73KB

.rdata Size: 32KB - Virtual size: 32KB

.data Size: 75KB - Virtual size: 97KB

.rsrc Size: 29KB - Virtual size: 28KB

.text
Size: 74KB - Virtual size: 73KB

.rdata
Size: 32KB - Virtual size: 32KB

.data
Size: 75KB - Virtual size: 97KB

.rsrc
Size: 29KB - Virtual size: 28KB