a78d774721ce0ee013b3c55bc6179d4db335b1ca4b12dadbaabd73597901ca43

Sharing

Copy URL Twitter E-mail

General

Target

a78d774721ce0ee013b3c55bc6179d4db335b1ca4b12dadbaabd73597901ca43
Size

1013KB
MD5

1d50abbfd26cfa272ac92e9e00fb8610
SHA1

86fb89d54a808210733f4fb6d76ff3217a7c37cc
SHA256

a78d774721ce0ee013b3c55bc6179d4db335b1ca4b12dadbaabd73597901ca43
SHA512

922a8783c74a858a81541574b7bcbef38e1d470f36817842da9fdc82fe719db4c7ab0a39cc7d4a844526b7e2b654052f1876575d968db9ae6df3b29c4c4468bf
SSDEEP

24576:x8250d0ySW/5hQBBk5tutCc+XZaA223yvn9HwMdQ6u14Ea:A5hyBk5tau7Y9HwMdQ54Ea

Score

N/A

Malware Config

Signatures

Files

a78d774721ce0ee013b3c55bc6179d4db335b1ca4b12dadbaabd73597901ca43
.exe windows x86

4a47ede30d39c6b19ced4dc8403ef76f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExW
GetFileSizeEx
SetNamedPipeHandleState
GetCurrentProcessId
CreateEventW
ProcessIdToSessionId
ResetEvent
WaitForSingleObject
CreateThread
WaitNamedPipeW
WriteConsoleW
SetStdHandle
FreeLibrary
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapReAlloc
IsValidLocale
EnumSystemLocalesA
TransactNamedPipe
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
GetVersion
DeleteCriticalSection
OpenEventW
CreateWaitableTimerW
WaitForMultipleObjects
EnterCriticalSection
GetProcAddress
GetLastError
LeaveCriticalSection
Sleep
LoadLibraryW
InitializeCriticalSection
GetTickCount
SetWaitableTimer
CreateMutexW
CloseHandle
ReleaseMutex
SetEvent
GetCurrentProcess
GetModuleHandleW
GetVersionExW
CreateFileW
GetACP
GetSystemInfo
CompareFileTime
OpenProcess
TerminateProcess
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
ConnectNamedPipe
CreateNamedPipeW
WriteFile
ReadFile
DisconnectNamedPipe
FlushFileBuffers
WideCharToMultiByte
MultiByteToWideChar
FindFirstFileW
FindClose
FindNextFileW
ExitProcess
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapFree
RaiseException
GetCPInfo
RtlUnwind
HeapAlloc
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapSize
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetStringTypeW

comctl32

InitCommonControlsEx

mbam

_MessagesDisplay@8
_DatabaseOutdatedBy@0
_UpdateAvailable@0
_GetDatabaseVersion@8
_LicenseIsValid@0
_GetMBAMSetting@8
_ProtectionToggle@4
_GetMBAMSettings@4
_SchedulerUninstall@0
_ProtectionInstall@0
_SchedulerInstall@0
_GetConfigParameter@12
_ProtectionIsEnabled@4
_SchedulerStop@0
_ProtectionStop@0
_ProtectionUninstall@0
_GetProgramVersion@8

mbamnet

_ValidateTrial@16
_IsTrialActive@0

user32

GetCursorPos
AppendMenuW
TranslateMessage
DeleteMenu
CreatePopupMenu
GetMenuItemCount
DefWindowProcW
SetWindowTextW
UpdateWindow
SendMessageW
PostMessageW
TrackPopupMenu
GetMessageW
CharUpperW
CharLowerW
CheckMenuItem
DispatchMessageW
EndPaint
DestroyWindow
GetSystemMenu
PostQuitMessage
RegisterWindowMessageW
LoadImageW
SetForegroundWindow
LoadCursorW
DrawEdge
RegisterClassExW
LoadIconW
SetRect
SystemParametersInfoW
EnableMenuItem
SetWindowPos
ShowWindow
CreateWindowExW
MessageBoxW
GetSystemMetrics
BeginPaint

gdi32

DeleteObject
SelectObject
DeleteDC
GetObjectW
GetStockObject
CreateCompatibleDC
CreateFontIndirectW
BitBlt

shell32

ShellExecuteW
SHGetFolderPathW
Shell_NotifyIconW

advapi32

RegCloseKey
RegOpenKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegQueryValueExW
IsTextUnicode
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CryptAcquireContextW
CryptDeriveKey
CryptCreateHash
CryptDestroyKey
CryptDecrypt
CryptDestroyHash
CryptHashData

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Sections

.text
Size: 342KB - Virtual size: 341KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vmp0
Size: 500KB - Virtual size: 1.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4a47ede30d39c6b19ced4dc8403ef76f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comctl32

mbam

mbamnet

user32

gdi32

shell32

advapi32

version

Sections

.text Size: 342KB - Virtual size: 341KB

.rdata Size: 73KB - Virtual size: 72KB

.data Size: 13KB - Virtual size: 22KB

.rsrc Size: 56KB - Virtual size: 56KB

.reloc Size: 27KB - Virtual size: 26KB

.vmp0 Size: 500KB - Virtual size: 1.6MB

.text
Size: 342KB - Virtual size: 341KB

.rdata
Size: 73KB - Virtual size: 72KB

.data
Size: 13KB - Virtual size: 22KB

.rsrc
Size: 56KB - Virtual size: 56KB

.reloc
Size: 27KB - Virtual size: 26KB

.vmp0
Size: 500KB - Virtual size: 1.6MB