9ebe01c84e2d5b23fae925ce99a997f39c8277ccabd548ea0548d73a9824ca47

Sharing

Copy URL Twitter E-mail

General

Target

9ebe01c84e2d5b23fae925ce99a997f39c8277ccabd548ea0548d73a9824ca47
Size

285KB
MD5

77ea2acdd5435321c1fd1c5ddaebf18d
SHA1

72eb7b7169d7c8cc0976b581e10fd01b2484a1b2
SHA256

9ebe01c84e2d5b23fae925ce99a997f39c8277ccabd548ea0548d73a9824ca47
SHA512

3df8c4ec53f7925668c10ae54252a7fb30feb75744bb97b5196519cb0bc26d5bc4696137454bf70727aa4c2298b02e764538be65a1d7330fed1f371dd79fc957
SSDEEP

6144:qBDRVJg282E2hz8XZgoGEyqMkf7l0FK/Uf:q1RVJ9EwgX1mqMkTlQdf

Score

N/A

Malware Config

Signatures

Files

9ebe01c84e2d5b23fae925ce99a997f39c8277ccabd548ea0548d73a9824ca47
.exe windows x86

d171201f61a083daad07d9a926b392d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsRelativeW
PathIsRootW
PathSkipRootW
PathRenameExtensionW
PathFindFileNameW
PathAppendW
PathRemoveExtensionW
PathRemoveFileSpecW
PathFileExistsW
PathAddBackslashW
PathCanonicalizeW
PathRemoveBackslashW
PathFindExtensionW
PathIsDirectoryW
PathRelativePathToW
PathStripToRootW
PathIsURLW
PathStripPathW
PathCombineW

shell32

SHGetFolderPathW
SHFileOperationW
SHGetFileInfoW

rpcrt4

NdrOleAllocate
CStdStubBuffer_CountRefs
CStdStubBuffer_Connect
NdrCStdStubBuffer_Release
CStdStubBuffer_Disconnect
IUnknown_AddRef_Proxy
CStdStubBuffer_Invoke
IUnknown_Release_Proxy
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_DebugServerRelease
NdrOleFree
NdrDllGetClassObject
IUnknown_QueryInterface_Proxy
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_QueryInterface

advapi32

RegCreateKeyExW
RegOpenKeyExA
RevertToSelf
RegQueryValueExW
AccessCheck
RegCloseKey
RegSetValueExW
RegOpenKeyExW
GetUserNameW
GetFileSecurityW
OpenThreadToken
ImpersonateSelf

ole32

CoWaitForMultipleHandles
CLSIDFromString
CreateStreamOnHGlobal
CoCreateGuid
CoRegisterClassObject
CoUninitialize
CoInitializeEx
ReadClassStm
CoCreateFreeThreadedMarshaler
StringFromCLSID
CoRegisterPSClsid
CoRevokeClassObject
StringFromGUID2
CLSIDFromProgID
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree

kernel32

GetCurrentDirectoryW
SetEnvironmentVariableW
TlsAlloc
CreateFileMappingW
FindNextFileW
WaitForSingleObject
LeaveCriticalSection
GetComputerNameW
GetFileAttributesExW
LoadResource
lstrlenA
WriteFile
GetFileTime
GetProcessHeap
InterlockedPushEntrySList
DebugBreak
FindClose
ResumeThread
FindFirstFileW
GetSystemTime
CompareFileTime
FindResourceExW
UnmapViewOfFile
HeapDestroy
CompareStringW
SleepEx
GetFileSize
CreateFileW
UnlockFile
GetVolumeInformationW
MapViewOfFile
VirtualFree
SetCurrentDirectoryW
ReadFile
VirtualProtect
CreateProcessW
SetLastError
FlushFileBuffers
lstrcmpW
LocalAlloc
HeapReAlloc
WideCharToMultiByte
lstrcmpiW
AllocConsole
TlsFree
LockFile
SetThreadPriority
SearchPathW
FindResourceW
CreateEventW
LocalFree
DeleteFileW
FlushInstructionCache
GetFileType
SizeofResource
VirtualQuery
RaiseException
HeapFree
GlobalUnlock
LoadLibraryExW
WaitForMultipleObjects
lstrlenW
SetFilePointer
InitializeCriticalSectionAndSpinCount
FileTimeToSystemTime
SetThreadContext
GlobalLock
CloseHandle
VirtualAlloc
EnterCriticalSection
GetDriveTypeW
GetFullPathNameW
FreeLibrary
OutputDebugStringW
TlsSetValue
DeleteCriticalSection
FormatMessageW
SwitchToThread
CreateThread
FindAtomW
TryEnterCriticalSection
TlsGetValue
IsValidCodePage
IsDebuggerPresent
CreateDirectoryW
InterlockedPopEntrySList
GetModuleHandleW
DuplicateHandle
OpenProcess
HeapAlloc
IsProcessorFeaturePresent
SuspendThread
GetSystemInfo
GetACP
GetCurrentThreadId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
ExpandEnvironmentStringsW
UnhandledExceptionFilter
LockResource
CreateFileA
SetEndOfFile
GetThreadContext
QueryPerformanceFrequency
ResetEvent
HeapSize
SetFileAttributesW
VirtualAllocEx

gdi32

GetObjectW

oleaut32

BSTR_UserMarshal
SafeArrayAccessData
SafeArrayGetVartype
VarCmp
DispCallFunc
SysFreeString
OleCreatePictureIndirect
BSTR_UserFree
SafeArrayLock
GetErrorInfo
LoadRegTypeLi
LoadTypeLi
SafeArrayUnlock
RegisterTypeLi
SysAllocString
VarBstrCmp
SysAllocStringByteLen
SafeArrayCreate
VariantCopy
SafeArrayGetDim
SysAllocStringLen
VariantInit
BSTR_UserUnmarshal
SysStringLen
UnRegisterTypeLi
SafeArrayUnaccessData
BSTR_UserSize
VariantChangeType
SysStringByteLen
SysReAllocStringLen
VariantClear
SafeArrayPutElement
VarBstrCat
SafeArrayCopy
SafeArrayDestroy
SafeArrayGetUBound
SafeArrayGetLBound

user32

TranslateMessage
GetClientRect
IsCharAlphaNumericW
MessageBeep
RegisterClipboardFormatW
MonitorFromWindow
GetLastInputInfo
SetWindowLongW
GetMessageTime
LoadImageW
CharNextW
LoadBitmapW
UnhookWindowsHookEx
SetWindowsHookExW
EndDialog
PeekMessageW
SetWindowTextW
GetWindowRect
CallNextHookEx
DialogBoxIndirectParamW
MapWindowPoints
IsCharAlphaW
ShowWindow
LoadCursorW
SetCursor
GetWindowLongW
IsCharUpperW
GetParent
GetCursorPos
GetWindow
UnregisterClassA
DestroyIcon
CharLowerW
GetDlgItem
DispatchMessageW
SetParent
SendDlgItemMessageW
MessageBoxW
PostMessageW
GetMonitorInfoW
IsCharLowerW
GetKeyState
CharLowerBuffW
SetWindowPos

comctl32

ImageList_Create
ImageList_GetImageInfo
ImageList_GetIconSize
ImageList_Merge
ImageList_Duplicate
ImageList_Destroy
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_LoadImageW
CreateStatusWindow
GetMUILanguage
ImageList_Add
ImageList_SetOverlayImage
ImageList_GetImageRect
ImageList_GetBkColor
FlatSB_ShowScrollBar
FlatSB_SetScrollRange
ImageList_LoadImageA
CreatePropertySheetPage

msyuv

DriverProc

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 38KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 172KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 708KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d171201f61a083daad07d9a926b392d3

Headers

File Characteristics

Imports

shlwapi

shell32

rpcrt4

advapi32

ole32

kernel32

gdi32

oleaut32

user32

comctl32

msyuv

Sections

.text Size: 25KB - Virtual size: 24KB

.bss Size: 38KB - Virtual size: 155KB

.reloc Size: 172KB - Virtual size: 336KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 40KB - Virtual size: 708KB

.rsrc Size: 1024B - Virtual size: 5KB

.text
Size: 25KB - Virtual size: 24KB

.bss
Size: 38KB - Virtual size: 155KB

.reloc
Size: 172KB - Virtual size: 336KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 40KB - Virtual size: 708KB

.rsrc
Size: 1024B - Virtual size: 5KB