d77a7171afb8e1a7c962bda15592d13ded1b75d25edf8fccc4f9be6ab5e51670

Sharing

Copy URL Twitter E-mail

General

Target

d77a7171afb8e1a7c962bda15592d13ded1b75d25edf8fccc4f9be6ab5e51670
Size

124KB
MD5

4bbf8cfb1a9acc586bf68b463b4471c9
SHA1

75dca921d479860695f5817f571110bfa4bbbc9f
SHA256

d77a7171afb8e1a7c962bda15592d13ded1b75d25edf8fccc4f9be6ab5e51670
SHA512

21b0572f3ab71e33e87c3e2785b438aa471666dbcaf9b0d7060ae5f83ee3e2c4538b6aa12d88f25d261f940ac6b34e5c66f7bf112f8e86cbf2cf35bd942d2a79
SSDEEP

3072:ioIupHZZtV5GCWapI7gxN87PDPmOtdR6:JZ3+CWaRGbDPzD

Score

N/A

Malware Config

Signatures

Files

d77a7171afb8e1a7c962bda15592d13ded1b75d25edf8fccc4f9be6ab5e51670
.exe windows x86

3c2eae7471842908b896959d84dcf058

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CreateFileMappingA
UnmapViewOfFile
lstrlenA
lstrcmpA
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
InterlockedDecrement
lstrcmpiA
SetEvent
CreateThread
CreateEventA
InterlockedIncrement
lstrcpynA
OpenFileMappingA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
GetCurrentThreadId
GetCommandLineA
GetModuleFileNameW
Sleep
MapViewOfFile
WaitForSingleObject
ReleaseMutex
CloseHandle
LocalAlloc
lstrcpyA
GetSystemTimeAsFileTime
lstrcatA
CreateMutexA
LocalFree
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetModuleFileNameA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
LoadLibraryA
GetOEMCP
GetStringTypeW
GetStringTypeA
InterlockedExchange
GetCPInfo
LCMapStringW
LCMapStringA
RtlUnwind
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapFree
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
EnterCriticalSection
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
HeapSize
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
WriteFile
GetStdHandle

user32

PostThreadMessageA
LoadStringA
GetMessageA
wsprintfA
CharNextA
DispatchMessageA

advapi32

IsValidSecurityDescriptor
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegQueryValueExW
RegOpenKeyExW
GetSecurityDescriptorDacl
LookupAccountSidW
GetAce
MakeAbsoluteSD
SetEntriesInAclW

ole32

CoTaskMemAlloc
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemFree
CoTaskMemRealloc
StringFromGUID2
CoUninitialize
CoInitializeSecurity
CoInitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
SysStringLen
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�D�
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3c2eae7471842908b896959d84dcf058

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

version

Sections

.text Size: 44KB - Virtual size: 40KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 8KB - Virtual size: 4KB

�D� Size: 52KB - Virtual size: 52KB

.text
Size: 44KB - Virtual size: 40KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 8KB - Virtual size: 4KB

�D�
Size: 52KB - Virtual size: 52KB