1d299b3c37ee4ec38cd60e5c90fd198c98018d202c8e099a45d6d95cdf003c23

Sharing

Copy URL

Twitter E-mail

General

Target

1d299b3c37ee4ec38cd60e5c90fd198c98018d202c8e099a45d6d95cdf003c23
Size

268KB
MD5

537758f9feed88cc7c0309e1bfbaacdc
SHA1

cd495c785167cc981bd53fba9fdadf517e3ec418
SHA256

1d299b3c37ee4ec38cd60e5c90fd198c98018d202c8e099a45d6d95cdf003c23
SHA512

4829cdab815f7fc6f5ebbda6af0910cbb3ca2779a25a0df3cb049ef915308ed118488f7bae5414819e52de20f21b951dc680f935c7093cd27c8299135e04947f
SSDEEP

3072:udQcuXN9T2tw4/HNI8EKTTSYkVR7z6z9muc+:udQcuXN9T2TVeKvSYkVR7aYuc+

Score

N/A

Malware Config

Signatures

Files

1d299b3c37ee4ec38cd60e5c90fd198c98018d202c8e099a45d6d95cdf003c23
.exe windows x86

74dacc44e0583111f759ce6f8738ae72

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetVersionExW
HeapAlloc
HeapFree
MultiByteToWideChar
QueryPerformanceCounter
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
GetShortPathNameW
lstrcatW
lstrlenW
VirtualAllocEx
GetWindowsDirectoryW
GetSystemTimeAsFileTime
GetProcAddress
LoadLibraryA
GetCurrentThread
GetProcessHeap
GetModuleHandleA
GetModuleFileNameW
GetLastError
GetFileSize
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
FindNextFileW
DeleteFileW
GetACP
GetStartupInfoA
CreateSemaphoreW
CreateFileW
WriteFile
CloseHandle

user32

LoadCursorA
SetForegroundWindow
SetFocus
LoadIconW
LoadStringW
FindWindowW
ExitWindowsEx
LoadIconA
MessageBoxW

gdi32

GetStockObject

advapi32

RegCloseKey
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCreateKeyW
RegDeleteValueW
RegFlushKey
RegOpenKeyExA
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExA
RegQueryValueExW
RegSetValueExW
OpenProcessToken

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW

msvcrt

_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
exit
isdigit
rand
srand
time

Sections

192
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data18
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data16
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data5
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data11
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data10
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data9
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data8
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data7
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data6
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

191
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

19
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

18
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

17
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

16
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

15
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74dacc44e0583111f759ce6f8738ae72

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msvcrt

Sections

192 Size: 3KB - Virtual size: 3KB

.text Size: 34KB - Virtual size: 34KB

.data Size: 1KB - Virtual size: 1KB

.data18 Size: 1024B - Virtual size: 1000B

.data16 Size: 1024B - Virtual size: 1000B

.data5 Size: 50KB - Virtual size: 49KB

.data11 Size: 1024B - Virtual size: 1024B

.data10 Size: 1024B - Virtual size: 1024B

.data9 Size: 1024B - Virtual size: 1000B

.data8 Size: 1024B - Virtual size: 1000B

.data7 Size: 1024B - Virtual size: 1000B

.data6 Size: 1024B - Virtual size: 1000B

.data4 Size: 1024B - Virtual size: 1000B

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 1024B - Virtual size: 1000B

191 Size: 3KB - Virtual size: 3KB

19 Size: 130KB - Virtual size: 130KB

18 Size: 8KB - Virtual size: 7KB

17 Size: 8KB - Virtual size: 7KB

16 Size: 8KB - Virtual size: 7KB

15 Size: 8KB - Virtual size: 7KB

192
Size: 3KB - Virtual size: 3KB

.text
Size: 34KB - Virtual size: 34KB

.data
Size: 1KB - Virtual size: 1KB

.data18
Size: 1024B - Virtual size: 1000B

.data16
Size: 1024B - Virtual size: 1000B

.data5
Size: 50KB - Virtual size: 49KB

.data11
Size: 1024B - Virtual size: 1024B

.data10
Size: 1024B - Virtual size: 1024B

.data9
Size: 1024B - Virtual size: 1000B

.data8
Size: 1024B - Virtual size: 1000B

.data7
Size: 1024B - Virtual size: 1000B

.data6
Size: 1024B - Virtual size: 1000B

.data4
Size: 1024B - Virtual size: 1000B

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 1024B - Virtual size: 1000B

191
Size: 3KB - Virtual size: 3KB

19
Size: 130KB - Virtual size: 130KB

18
Size: 8KB - Virtual size: 7KB

17
Size: 8KB - Virtual size: 7KB

16
Size: 8KB - Virtual size: 7KB

15
Size: 8KB - Virtual size: 7KB