f07371b5ed8cc3c3d0a84b425e889822a6f433ab3dce5536582124ef77e5eba8

Sharing

Copy URL Twitter E-mail

General

Target

f07371b5ed8cc3c3d0a84b425e889822a6f433ab3dce5536582124ef77e5eba8
Size

51KB
MD5

f03ab93bc2e0e3151924fbe3d443ae1c
SHA1

77328d55cb85c6c188c0a7880a9f813716426d17
SHA256

f07371b5ed8cc3c3d0a84b425e889822a6f433ab3dce5536582124ef77e5eba8
SHA512

3b5e5e985f2c6a5af039a2faac24c0442f94a6ed3528aa4f974c0d037ef809032cd9513179d1dd225d12d2e5bcc73c9f793541c77443a777fe505a4a819767e0
SSDEEP

768:+uVy092aNe/WGJetadVebVN9/lqQGQizSfIpkPIgCDnElK220Y9BfZSbLaTECyp:+uVy0UaxGIvVbXImwyIlDEAl9BhfEbp

Score

N/A

Malware Config

Signatures

Files

f07371b5ed8cc3c3d0a84b425e889822a6f433ab3dce5536582124ef77e5eba8
.exe windows x86

bd4ac47738337be6cede3aa4df34900a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalHandle
Toolhelp32ReadProcessMemory
BaseCheckAppcompatCache
DeleteFileA
HeapDestroy
ScrollConsoleScreenBufferW
IsBadHugeReadPtr
VirtualAlloc
LZCreateFileW
VirtualAllocEx
SetConsoleOutputCP
MultiByteToWideChar
ReadConsoleInputExW
GlobalAddAtomW
BeginUpdateResourceA
QueryDosDeviceW
AllocConsole
FatalAppExitA
WriteConsoleInputA
LockFileEx
GetEnvironmentStringsW
LoadLibraryA
SetConsoleTextAttribute
SetLocaleInfoA
UnhandledExceptionFilter
FreeLibraryAndExitThread
GetDateFormatW
GetConsoleAliasW
CreateSemaphoreA

imm32

ImmSetCompositionStringA
ImmInstallIMEW
ImmSetCompositionWindow
ImmGetImeInfoEx
ImmWINNLSGetEnableStatus
ImmRegisterWordW
ImmGetConversionListW
ImmDestroySoftKeyboard
ImmGetImeMenuItemsA
ImmIMPQueryIMEW
ImmGetCandidateListCountA
ImmDisableIme
ImmSetOpenStatus
ImmSetHotKey
ImmNotifyIME

ufat

?Initialize@EA_SET@@QAEEPAVMEM@@PAVLOG_IO_DP_DRIVE@@PAVFAT_SA@@PBVFAT@@KK@Z
?Initialize@ROOTDIR@@QAEEPAVMEM@@PAVLOG_IO_DP_DRIVE@@KJ@Z
FormatEx
??0FAT_DIRENT@@QAE@XZ
?FreeChain@FAT@@QAEXK@Z
??1FAT_SA@@UAE@XZ
?QueryFileStartingCluster@FAT_SA@@QAEKPBVWSTRING@@PAVHMEM@@PAPAVFATDIR@@PAEPAVFAT_DIRENT@@@Z
?IsValidLastAccessTime@FAT_DIRENT@@QBEEXZ
Format
?QueryLastWriteTime@FAT_DIRENT@@QBEEPAT_LARGE_INTEGER@@@Z
??1EA_HEADER@@UAE@XZ
?Initialize@REAL_FAT_SA@@UAEEPAVLOG_IO_DP_DRIVE@@PAVMESSAGE@@E@Z
?Write@CLUSTER_CHAIN@@UAEEXZ
??0CLUSTER_CHAIN@@QAE@XZ
?Initialize@FAT_DIRENT@@QAEEPAXE@Z
?Initialize@CLUSTER_CHAIN@@QAEEPAVMEM@@PAVLOG_IO_DP_DRIVE@@PAVFAT_SA@@PBVFAT@@KK@Z
Recover
?Index12@FAT@@ABEKK@Z
?QueryEaSetClusterNumber@EA_HEADER@@QBEGG@Z
??0ROOTDIR@@QAE@XZ

shlwapi

PathQuoteSpacesA
PathIsNetworkPathA
PathGetArgsA
PathMatchSpecW
PathIsDirectoryW
SHRegDuplicateHKey
SHSetValueW
StrFormatByteSizeA
SHQueryValueExA
PathRenameExtensionA
AssocCreate
SHDeleteEmptyKeyW
SHEnumValueW
PathIsUNCServerA
AssocQueryStringByKeyW
StrTrimA

ntdll

RtlAddAccessDeniedAceEx
NtResetEvent
NtDeviceIoControlFile
RtlCreateTagHeap
RtlTimeToSecondsSince1980
RtlGetProcessHeaps
RtlInitializeContext
ZwSetLowWaitHighEventPair
RtlQuerySecurityObject
LdrLoadDll
_CIsin
RtlProtectHeap
ZwPulseEvent
ZwQueryOpenSubKeys
RtlFindLastBackwardRunClear
_memicmp
iscntrl
RtlpNtCreateKey
RtlEnumProcessHeaps
RtlDumpResource
NtAccessCheckAndAuditAlarm

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bd4ac47738337be6cede3aa4df34900a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

imm32

ufat

shlwapi

ntdll

Sections

.text Size: 42KB - Virtual size: 42KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1KB - Virtual size: 54KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 42KB - Virtual size: 42KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1KB - Virtual size: 54KB

.rsrc
Size: 1KB - Virtual size: 1KB