8acacb460f6f68971e9b763560ed06cb0504e5be813ce90528f77b57f9fab018

Sharing

Copy URL Twitter E-mail

General

Target

8acacb460f6f68971e9b763560ed06cb0504e5be813ce90528f77b57f9fab018
Size

132KB
MD5

3a590c5c354cdb33cc522532078ec716
SHA1

c2dca117f6aed21c09cc11bd7284c3fc4a50be3f
SHA256

8acacb460f6f68971e9b763560ed06cb0504e5be813ce90528f77b57f9fab018
SHA512

26a6b198815972b25304f7f52d309e8c6c73e8b272a7ae57af010c1a15836fb3a7174355edce0194ea4551d4519d03d89fb6e5af67d96f728deced5fe4bd5857
SSDEEP

3072:xMZA4XoGJ42k62s8lrEw1s2Y9bM7KvsJD2/:sTXo04GEhH1MI7rI

Score

N/A

Malware Config

Signatures

Files

8acacb460f6f68971e9b763560ed06cb0504e5be813ce90528f77b57f9fab018
.exe windows x86

df9f2b5e8d5e3e5964047e67290c1410

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
GetCurrentThread
HeapAlloc
GetSystemInfo
GetProfileSectionA
PulseEvent
GetProfileStringA
SetConsoleCtrlHandler
GetPriorityClass
GetLocaleInfoA
GetGeoInfoA
LZOpenFileW
FatalAppExitA
GetOEMCP
LoadLibraryW
GetConsoleCommandHistoryA
WriteProfileSectionA
RegisterWowExec
FatalExit
GetModuleHandleW
SetNamedPipeHandleState
DisconnectNamedPipe

msvcrt

exit
putwc
_mbctohira
_stat
_ismbcl2
_makepath
_ecvt
_futime64
_fileno
__p__commode
_mktemp
_wcsset
__set_app_type
_filelengthi64
_strtime
_adj_fdivr_m32i
_stricoll
__getmainargs
_splitpath
_lfind
_wchdir
_adj_fdiv_m32
_swab
isalnum
_CIatan
__RTDynamicCast
___setlc_active_func

shlwapi

DllGetVersion
SHRegOpenUSKeyA
UrlGetPartA
PathRemoveBackslashW
PathBuildRootW
GetMenuPosFromID
PathMakePrettyA
UrlIsOpaqueA
PathAppendA
SHSetValueW
UrlIsA
SHGetValueW

esent

JetAttachDatabase
JetMakeKey@20
JetOpenFile
JetAttachDatabase2
JetCompact
JetGetTableIndexInfo
JetOpenDatabase
JetPrepareToCommitTransaction
JetReadFileInstance
JetBackup
JetEndExternalBackup
JetTruncateLogInstance
JetBeginTransaction@4
JetSetLS
JetBeginTransaction2
JetSeek
JetGetLS
JetEnumerateColumns
JetCloseFileInstance
JetInit
JetSetTableSequential
JetOSSnapshotFreeze

wshrm

WSHSetSocketInformation
WSHJoinLeaf
WSHEnumProtocols
WSHGetSockaddrType
WSHGetProviderGuid
WSHOpenSocket
WSHGetWildcardSockaddr
WSHNotify
WSHGetWSAProtocolInfo
WSHAddressToString
WSHGetWinsockMapping
WSHStringToAddress
WSHIoctl
WSHGetBroadcastSockaddr
WSHGetSocketInformation
WSHOpenSocket2

resutils

ResUtilSetBinaryValue
ResUtilSetResourceServiceEnvironment
ResUtilIsPathValid
ResUtilFindDwordProperty
ClusWorkerCreate
ResUtilEnumProperties
ResUtilVerifyPrivatePropertyList
ResUtilGetResourceDependencyByClass
ResUtilStopService
ResUtilFreeEnvironment
ResUtilFreeParameterBlock
ResUtilGetDwordValue
ResUtilPropertyListFromParameterBlock
ResUtilSetSzValue

user32

DefWindowProcW
RegisterClassW
PostQuitMessage

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

df9f2b5e8d5e3e5964047e67290c1410

Headers

File Characteristics

Imports

kernel32

msvcrt

shlwapi

esent

wshrm

resutils

user32

Sections

.text Size: 74KB - Virtual size: 74KB

.rdata Size: 46KB - Virtual size: 46KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 74KB - Virtual size: 74KB

.rdata
Size: 46KB - Virtual size: 46KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 5KB - Virtual size: 5KB