864562d04f512fd350d35f4f247b922f529a91edeced08d04c2f5d6df951399f

Sharing

Copy URL Twitter E-mail

General

Target

864562d04f512fd350d35f4f247b922f529a91edeced08d04c2f5d6df951399f
Size

111KB
MD5

11b1b4557d4637acc53d2b55890807b9
SHA1

c0202173531e2ae8629b427c899bee2aa43b538d
SHA256

864562d04f512fd350d35f4f247b922f529a91edeced08d04c2f5d6df951399f
SHA512

6a8b8a03a820d1ef21cac697979081a5fedbd27ac8514bc73892b9ac6729785a3904377a3a2a6fad9be2c5b99e6ef2fabe90dabcfb7b3f48fb5c040c02a5ce10
SSDEEP

1536:KufJG5bVxZAhEcT1yULhiAJ0CuQjcvhvM1Q7sP6J8QqTRDbGNHdyfJi:q5bcT8ULRXgYQwyGTRDqNHcf

Score

N/A

Malware Config

Signatures

Files

864562d04f512fd350d35f4f247b922f529a91edeced08d04c2f5d6df951399f
.exe windows x86

67cbad80770a6a6cb9cdbaa0599d2663

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

TraceMessage
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
EventRegister
EventUnregister
RegDeleteKeyValueW
RegGetValueW
RegSetKeyValueW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegEnumValueW
EventWrite

kernel32

GlobalAlloc
AcquireSRWLockShared
ReleaseSRWLockShared
GetComputerNameExW
SetThreadpoolTimer
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolWork
WaitForThreadpoolWorkCallbacks
ResetEvent
SubmitThreadpoolWork
CreateThreadpoolWork
GlobalFree
ReadFile
WriteFile
SetFilePointerEx
GetFileSizeEx
WaitForSingleObject
GetCurrentProcess
CreateFileW
InterlockedIncrement
InterlockedDecrement
SetEvent
CloseHandle
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeSRWLock
DuplicateHandle
GetTickCount
CreateEventW
CreateThreadpoolTimer
GetLastError
InterlockedExchange
MultiByteToWideChar
GetSystemFirmwareTable
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
Sleep
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange

user32

GetDisplayConfigBufferSizes
DisplayConfigGetDeviceInfo
QueryDisplayConfig

msvcrt

__set_app_type
free
_purecall
malloc
memset
qsort
_wcsnicmp
wcsstr
_wcsicmp
_vsnwprintf
__RTDynamicCast
wcschr
memcpy
_callnewh
__getmainargs
_cexit
_controlfp
_except_handler4_common
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_ismbblead
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_XcptFilter
_exit

ole32

CoAddRefServerProcess
CoReleaseServerProcess
CoUninitialize
CLSIDFromString
IIDFromString
StringFromIID
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
PropVariantClear
CreateStreamOnHGlobal
CoCreateInstance
CoInitializeEx
CoRegisterClassObject
CoRevokeClassObject

devobj

DevObjGetDeviceProperty
DevObjOpenDeviceInfo
DevObjCreateDeviceInfoList
DevObjDestroyDeviceInfoList

propsys

PSPropertyKeyFromString

dmrc

DMrcQueryModelId
DMrcGetProperties
DMrcQueryClose
DMrcInit
DMrcExit
DMrcQueryHardwareId

xmllite

CreateXmlReader

bcrypt

BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
BCryptFinishHash
BCryptGetProperty
BCryptCreateHash
BCryptHashData

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

67cbad80770a6a6cb9cdbaa0599d2663

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

msvcrt

ole32

devobj

propsys

dmrc

xmllite

bcrypt

Sections

.text Size: 75KB - Virtual size: 75KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 31KB - Virtual size: 32KB

.text
Size: 75KB - Virtual size: 75KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 31KB - Virtual size: 32KB