7a9f49b7112875c12f817c09f58cb2fc7856b68569cce88e5fe7bfb15cb427b2

Sharing

Copy URL Twitter E-mail

General

Target

7a9f49b7112875c12f817c09f58cb2fc7856b68569cce88e5fe7bfb15cb427b2
Size

334KB
MD5

0e83bd22d48b165d8cb4c9a8e7bff222
SHA1

35afaf307f10a548810998f0e39204706f1b1a59
SHA256

7a9f49b7112875c12f817c09f58cb2fc7856b68569cce88e5fe7bfb15cb427b2
SHA512

8071c8a6c4ff69f6e379452dd6a81a4d981ef337ed8da1664cfc140778cb07c7e6b13b128c38469147deb2058febd9812bd6919ea0b88c1e635d5decc56047c3
SSDEEP

3072:AGwl9bqGszBqYzxZtSqXNQBy1QjDmin1T1OYpoBxyrhfJ+aeN1n5Db86hSB:lsbds1zkqdj1knDC319SB

Score

N/A

Malware Config

Signatures

Files

7a9f49b7112875c12f817c09f58cb2fc7856b68569cce88e5fe7bfb15cb427b2
.exe windows x86

4560dfa13d136ac2ff310469ad679738

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegSetValueExW
RegCreateKeyW
DuplicateToken
AllocateAndInitializeSid
GetLengthSid
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
FreeSid
OpenThreadToken
OpenProcessToken
RegOpenCurrentUser
InitializeSecurityDescriptor
InitializeAcl
AddAccessAllowedAce
RegQueryValueExW
RegOpenKeyExW

kernel32

SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
GetCurrentThread
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
Sleep
FreeLibrary
GetCPInfo
GetOEMCP
IsValidCodePage
SetFilePointer
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
CloseHandle
FlushFileBuffers
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameW
GetUserDefaultUILanguage
LocalAlloc
LocalFree
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
MultiByteToWideChar
WideCharToMultiByte
RaiseException
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
SetLastError
GetModuleHandleW
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
ExpandEnvironmentStringsW
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
GetProcAddress
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
GetLastError
RtlUnwind
SetUnhandledExceptionFilter
GetModuleHandleA
GetLocalTime
OutputDebugStringW
LoadLibraryW
SetEvent
ResetEvent
CreateEventW
WaitForSingleObject
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess

gdi32

SetBkColor
GetStockObject
GetObjectW
CreateFontIndirectW
DeleteObject
SetTextColor

user32

AdjustWindowRectEx
UnregisterClassA
LoadIconW
SetForegroundWindow
MoveWindow
MessageBoxW
GetDlgItem
SetDlgItemTextW
SetWindowTextW
EndDialog
GetActiveWindow
DialogBoxParamW
GetDC
GetParent
SetPropW
GetCapture
SendMessageW
InvalidateRect
SetCapture
GetWindowRect
ClientToScreen
PtInRect
ReleaseCapture
LoadCursorW
SetCursor
GetPropW
CallWindowProcW
RemovePropW
GetWindowLongW
SetWindowLongW
GetSystemMetrics

shell32

ShellExecuteW

msidcrl40

ord49
ord3
ord29
ord2

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4560dfa13d136ac2ff310469ad679738

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

shell32

msidcrl40

Sections

.text Size: 99KB - Virtual size: 99KB

.data Size: 6KB - Virtual size: 14KB

.rsrc Size: 208KB - Virtual size: 208KB

.reloc Size: 18KB - Virtual size: 18KB

.text
Size: 99KB - Virtual size: 99KB

.data
Size: 6KB - Virtual size: 14KB

.rsrc
Size: 208KB - Virtual size: 208KB

.reloc
Size: 18KB - Virtual size: 18KB