7975cfde0e909eb8a68b8beecfc96516953bf9da664d957cfbd73ad219fa6cbc

Sharing

Copy URL Twitter E-mail

General

Target

7975cfde0e909eb8a68b8beecfc96516953bf9da664d957cfbd73ad219fa6cbc
Size

43KB
MD5

45f640370b5acb97bbe2e7e76a103e5b
SHA1

a16de16da25ea4f869d02a984f025f43e9ed0e68
SHA256

7975cfde0e909eb8a68b8beecfc96516953bf9da664d957cfbd73ad219fa6cbc
SHA512

658eb880094125dacb9549d1c19ae0bcbb519d2ec8efca1aeeaf05f6ad04f1fc85ea8dc33e4d5e32fac402c0935e0255c2ce5330a2e3b92ed66341f41e239b9e
SSDEEP

768:oU/mTixBQj4ecP/XzbbF3M5tQBDrqz6anN4gAohX:oUOoVXgOBDrqznnN4gAO

Score

N/A

Malware Config

Signatures

Files

7975cfde0e909eb8a68b8beecfc96516953bf9da664d957cfbd73ad219fa6cbc
.exe windows x86

1908e18d5367a0c4ce35061a1cbc7c0a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
GetCommTimeouts
GetTempPathW
GetFullPathNameA
OpenWaitableTimerA
CreateEventA
GetExitCodeThread
FlushConsoleInputBuffer
WriteFile
AllocConsole
GetEnvironmentStringsA
UnmapViewOfFile
SetEnvironmentVariableW
SetFileAttributesW
BaseInitAppcompatCacheSupport
GetUserDefaultLCID
GenerateConsoleCtrlEvent
FindFirstChangeNotificationW
GetCurrentThread
GetLocaleInfoA
lstrcpyW
GetProfileSectionW
GetWriteWatch
ReadConsoleOutputCharacterW
DeactivateActCtx
UnregisterConsoleIME
SetThreadExecutionState
QueryPerformanceFrequency
LoadLibraryW
LockResource
FindVolumeClose
SetConsoleIcon

cmpbk32

PhoneBookEnumRegions
PhoneBookEnumNumbers
PhoneBookGetCountryNameA
PhoneBookCopyFilter
PhoneBookEnumCountries
PhoneBookHasPhoneType
PhoneBookMatchFilter
PhoneBookLoad
PhoneBookGetCurrentCountryId
PhoneBookGetPhoneNonCanonicalA
PhoneBookFreeFilter
PhoneBookGetPhoneDispA
PhoneBookGetPhoneDescA
PhoneBookGetPhoneCanonicalA
PhoneBookUnload
PhoneBookEnumNumbersWithRegionsZero
PhoneBookGetPhoneDUNA
PhoneBookGetCountryNameW

ntdll

ZwSaveKeyEx
ZwQueryTimerResolution
ZwPulseEvent
wcscpy
RtlGetNativeSystemInformation
RtlSelfRelativeToAbsoluteSD
ZwAccessCheckAndAuditAlarm
NtResetWriteWatch
ZwAdjustPrivilegesToken
NtOpenProcessToken
RtlLargeIntegerShiftLeft
ZwOpenThreadTokenEx
RtlLargeIntegerShiftRight
RtlRemoveVectoredExceptionHandler
RtlIsGenericTableEmpty
NtCreatePagingFile
RtlAnsiStringToUnicodeSize
DbgPrint
RtlFindCharInUnicodeString
NtUnlockVirtualMemory
bsearch
NtImpersonateClientOfPort
NtResetEvent
RtlFindActivationContextSectionString
ZwOpenObjectAuditAlarm
ZwSetInformationProcess
ZwShutdownSystem
RtlIpv4StringToAddressW
ZwSetValueKey
_vsnwprintf

d3d8thk

OsThunkDdBeginMoCompFrame
OsThunkDdLock
OsThunkDdDestroyD3DBuffer
OsThunkDdGetScanLine
OsThunkDdGetAvailDriverMemory
OsThunkDdGetDriverInfo
OsThunkD3dValidateTextureStageState
OsThunkDdQueryMoCompStatus
OsThunkDdResetVisrgn
OsThunkDdUpdateOverlay
OsThunkDdFlipToGDISurface
OsThunkDdGetMoCompGuids
OsThunkDdGetFlipStatus
OsThunkD3dDrawPrimitives2
OsThunkDdBlt
OsThunkDdGetDriverState
OsThunkDdCreateD3DBuffer
OsThunkDdSetOverlayPosition
OsThunkDdGetMoCompBuffInfo
OsThunkDdGetBltStatus
OsThunkD3dContextDestroyAll
OsThunkDdSetColorKey

advapi32

LsaEnumerateAccountRights
ConvertToAutoInheritPrivateObjectSecurity
GetInformationCodeAuthzPolicyW
RegGetKeySecurity
CryptExportKey
RegisterServiceCtrlHandlerW
CredDeleteW
ElfBackupEventLogFileA
RegisterEventSourceW
AddAccessDeniedAce
StartTraceW
WmiReceiveNotificationsA
RegSetValueW
ElfRegisterEventSourceA
CreatePrivateObjectSecurityWithMultipleInheritance

msvcirt

??_Difstream@@QAEXXZ
??5istream@@QAEAAV0@AAH@Z
?precision@ios@@QBEHXZ
??4istream_withassign@@QAEAAVistream@@ABV1@@Z
??0strstreambuf@@QAE@PAEH0@Z
?setbuf@filebuf@@UAEPAVstreambuf@@PADH@Z
??0exception@@QAE@XZ
?rdbuf@istrstream@@QBEPAVstrstreambuf@@XZ
??_Dfstream@@QAEXXZ
??0ios@@QAE@PAVstreambuf@@@Z
??4strstream@@QAEAAV0@AAV0@@Z

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1908e18d5367a0c4ce35061a1cbc7c0a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

cmpbk32

ntdll

d3d8thk

advapi32

msvcirt

Sections

.text Size: 31KB - Virtual size: 30KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 272B

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 31KB - Virtual size: 30KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 272B

.rsrc
Size: 8KB - Virtual size: 8KB