a7f0141e1220676645d580f5e428861bae2e946c119b3da2bf696b66ab0ae859

Sharing

Copy URL Twitter E-mail

General

Target

a7f0141e1220676645d580f5e428861bae2e946c119b3da2bf696b66ab0ae859
Size

273KB
MD5

e32db0618864f62288b0f2b7f91e9be1
SHA1

be0e725c2a53ffc36c8859f2fe3f34c551efa6d2
SHA256

a7f0141e1220676645d580f5e428861bae2e946c119b3da2bf696b66ab0ae859
SHA512

9166813596bed520d0eba9e3e8d06e8f29a69400e7c79168ca7266d954f907c472dbaaf723c785e75871c6c3d1fd9240327b75ba20e8bcabc6804f79aa7f9dcf
SSDEEP

6144:OoGg5uUz8jBlzZSqg/QIrNtsJ4LhHrS1oW+Fn:OLfjBltSqg/JtsJ4LJrW

Score

N/A

Malware Config

Signatures

Files

a7f0141e1220676645d580f5e428861bae2e946c119b3da2bf696b66ab0ae859
.exe windows x86

9ab5817626d4b6c3b9aa7601b8763dbf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileW

advapi32

RegCreateKeyExW
OpenProcessToken
StartTraceW
RegSetValueExW
RegOpenKeyExW
ControlTraceW
EnableTrace
RegCloseKey
RegQueryValueExW
LookupAccountSidW
GetTokenInformation
RegOpenKeyW
EnumerateTraceGuids
RegDeleteValueW

wininet

InternetCloseHandle

ole32

CoInitialize
CoUninitialize
CoTaskMemFree
CoCreateInstance

secur32

GetComputerObjectNameW

shell32

SHCreateDirectoryExW

crypt32

CryptMsgClose
CertFreeCertificateContext
CryptMsgGetParam
CryptHashPublicKeyInfo
CertCloseStore
CryptMsgGetAndVerifySigner
CryptQueryObject
CryptDecodeObject
CertGetCertificateChain
CertFreeCertificateChain
CertVerifyCertificateChainPolicy

kernel32

HeapSize
GetConsoleMode
GetCommandLineA
CancelWaitableTimer
LocalFree
FormatMessageW
SetHandleCount
MapViewOfFile
LocalAlloc
GetFileAttributesExW
WriteConsoleW
FindResourceExW
GetFileSizeEx
GetCurrentDirectoryW
CreateWaitableTimerW
UnhandledExceptionFilter
SetFilePointer
GetConsoleCP
lstrcmpA
TlsFree
CreateToolhelp32Snapshot
GetModuleHandleW
LeaveCriticalSection
GetTempPathW
LoadResource
ReadFile
CreateDirectoryW
Process32NextW
WaitForSingleObject
HeapAlloc
SetWaitableTimer
LCMapStringW
Process32FirstW
IsValidCodePage
SetUnhandledExceptionFilter
GetThreadLocale
GetUserDefaultLCID
ExpandEnvironmentStringsW
GetOEMCP
GetFileSize
GetFileType
FreeEnvironmentStringsW
GetSystemDirectoryW
MoveFileExW
IsProcessorFeaturePresent
SetStdHandle
CreateEventW
GetSystemTimeAsFileTime
RtlUnwind
FreeLibrary
HeapDestroy
CloseHandle
GlobalFree
FindResourceW
TlsAlloc
RemoveDirectoryW
SizeofResource
TlsGetValue
CreateThread
GetACP
LockResource
HeapReAlloc
CreateFileW
IsDebuggerPresent
DeleteCriticalSection
WriteFile
EnumSystemLocalesA
GetSystemInfo
InitializeCriticalSectionAndSpinCount
GetCommandLineW
CreateFileMappingW
RaiseException
GetProcessHeap
FlushFileBuffers
GetTempFileNameW
IsValidLocale
OpenProcess
SetLastError
TlsSetValue
HeapFree
GetStdHandle
EnterCriticalSection
GetCurrentThreadId
WideCharToMultiByte
DeleteFileW
VirtualAllocEx

wintrust

WinVerifyTrust

userenv

ExpandEnvironmentStringsForUserW

user32

PostThreadMessageW
PeekMessageW
MsgWaitForMultipleObjects
GetMessageW
DispatchMessageW
GetSystemMetrics
TranslateMessage
UpdateWindow

shlwapi

PathFindFileNameW
PathFileExistsW
PathCombineW
SHDeleteKeyW
PathFindExtensionW
PathRemoveFileSpecW

comctl32

CreateStatusWindow
ImageList_SetFilter
FlatSB_ShowScrollBar
DllGetVersion
ImageList_GetIcon
DrawStatusText

catsrv

DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllUnregisterServer

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 39KB - Virtual size: 947KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 175KB - Virtual size: 837KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 634KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ab5817626d4b6c3b9aa7601b8763dbf

Headers

File Characteristics

Imports

urlmon

advapi32

wininet

ole32

secur32

shell32

crypt32

kernel32

wintrust

userenv

user32

shlwapi

comctl32

catsrv

Sections

.text Size: 16KB - Virtual size: 16KB

.bss Size: 39KB - Virtual size: 947KB

.reloc Size: 175KB - Virtual size: 837KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 36KB - Virtual size: 634KB

.rsrc Size: 512B - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 16KB

.bss
Size: 39KB - Virtual size: 947KB

.reloc
Size: 175KB - Virtual size: 837KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 36KB - Virtual size: 634KB

.rsrc
Size: 512B - Virtual size: 1KB