45bc4bc56d78ca1aa0c17899cfe503843b92a9f5286f4630b76a4372d7363a2f

Sharing

Copy URL Twitter E-mail

General

Target

45bc4bc56d78ca1aa0c17899cfe503843b92a9f5286f4630b76a4372d7363a2f
Size

637KB
MD5

bad1dfb11fd1697f886152046cc41a6b
SHA1

975c07073af4fa86f0bbafafbe9737a5bf625247
SHA256

45bc4bc56d78ca1aa0c17899cfe503843b92a9f5286f4630b76a4372d7363a2f
SHA512

4902782ef43649736a9e87e13902231155111f34fe042a0b08e5746cc1403b525104d41397e5e41a7e62ebe9a3f0ed6c7740c2c014c4187c07eedbff17573f3d
SSDEEP

12288:EQAaAajMSFORKX4/X61y45TPc2olKwJxsWCcNhHGSFt+iCH2VJ4kC:EplajMqORKUq142oUw/NhHGSF05kC

Score

N/A

Malware Config

Signatures

Files

45bc4bc56d78ca1aa0c17899cfe503843b92a9f5286f4630b76a4372d7363a2f
.exe windows x86

ec8aaa0e7db1bae8c585a46710a09e54

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_get_osfhandle
iswdigit
_wcsrev
tolower
_beginthread
_Getdays
islower
fseek
_mbsupr

kernel32

CreateProcessW
CreateTimerQueueTimer
SetVolumeLabelW
GetLocaleInfoW
OpenFile
VirtualAlloc
SetConsoleOutputCP
RegisterWaitForSingleObject
CancelWaitableTimer
GetFileAttributesA
ExpandEnvironmentStringsA
AreFileApisANSI

advapi32

GetSecurityDescriptorDacl
RegSetValueExA
LsaQueryInformationPolicy
InitializeSecurityDescriptor
LookupAccountNameA
ConvertSidToStringSidA
ClearEventLogW
RegSetValueA
LsaSetInformationPolicy

uxtheme

GetWindowTheme
DrawThemeText
GetThemeMetric
GetThemeSysColor
GetCurrentThemeName
IsAppThemed
GetThemePartSize
GetThemeFont
GetThemeMargins
GetThemeBackgroundRegion
IsThemePartDefined
IsThemeBackgroundPartiallyTransparent
DrawThemeBackground

netapi32

NetUserGetLocalGroups
NetGetJoinInformation
NetShareEnum
NetUserGetInfo
NetUnjoinDomain
I_NetServerSetServiceBitsEx
NetQueryDisplayInformation
NetServerTransportEnum

user32

UnregisterClassW
EnumPropsW
wsprintfA
MonitorFromRect
GetCapture
PeekMessageW
DeregisterShellHookWindow

imm32

ImmUnlockIMC
ImmReleaseContext
ImmSetCandidateWindow
ImmLockIMCC
ImmConfigureIMEW
ImmUnlockIMCC
ImmSetCompositionStringW
ImmDisableIME
ImmIsIME
ImmGetGuideLineW
ImmCreateContext
ImmGetImeMenuItemsW
ImmGetCompositionFontW
ImmGetIMEFileNameA

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 226KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 167KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 190KB - Virtual size: 357KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec8aaa0e7db1bae8c585a46710a09e54

Headers

File Characteristics

Imports

msvcrt

kernel32

advapi32

uxtheme

netapi32

user32

imm32

Sections

.text Size: 50KB - Virtual size: 49KB

.bss Size: 226KB - Virtual size: 268KB

DATA Size: 167KB - Virtual size: 265KB

DATA Size: 190KB - Virtual size: 357KB

.rsrc Size: 512B - Virtual size: 472B

.reloc Size: 1024B - Virtual size: 556B

.text
Size: 50KB - Virtual size: 49KB

.bss
Size: 226KB - Virtual size: 268KB

DATA
Size: 167KB - Virtual size: 265KB

DATA
Size: 190KB - Virtual size: 357KB

.rsrc
Size: 512B - Virtual size: 472B

.reloc
Size: 1024B - Virtual size: 556B