cdcebcb2bb8e9d29bcae906b0ab1b9886d12746997297acbd3aaafb2dccb9bd8

Sharing

Copy URL

Twitter E-mail

General

Target

cdcebcb2bb8e9d29bcae906b0ab1b9886d12746997297acbd3aaafb2dccb9bd8
Size

237KB
MD5

2dd94cdf58bbc1a903ab9b09cb2ce5d4
SHA1

b58d70118bbbdfc9769b0cf8c8fd5f3ce369dcf6
SHA256

cdcebcb2bb8e9d29bcae906b0ab1b9886d12746997297acbd3aaafb2dccb9bd8
SHA512

15378c4d3817fbeef76e2eccad65f6d87061e62af07ade015acdda3ebbd7a79435c587964e994db53e95107498bdb5dd2cb0ed9922d9977d94c1fdc7a85df540
SSDEEP

6144:S1c8zLAl0DybcdHkPPoO1i+26tFuyMko:3ILQA5ioOwSFuyMn

Score

N/A

Malware Config

Signatures

Files

cdcebcb2bb8e9d29bcae906b0ab1b9886d12746997297acbd3aaafb2dccb9bd8
.exe windows x86

78692938da5fbe4c9821c789e5e8987c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegOpenKeyExW
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenCurrentUser
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
RegQueryValueExW
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegDeleteValueA
GetSidSubAuthority
GetServiceDisplayNameW
RegQueryMultipleValuesA
SaferiSearchMatchingHashRules
BuildSecurityDescriptorA
PrivilegedServiceAuditAlarmA
GetUserNameW
ImpersonateSelf
SetInformationCodeAuthzPolicyW
SetServiceStatus
ConvertAccessToSecurityDescriptorW
GetMultipleTrusteeOperationW
GetMultipleTrusteeA
ReportEventW
SystemFunction010
SaferSetLevelInformation
LsaSetQuotasForAccount
ReadEventLogW
ProcessTrace
EnableTrace
OpenEncryptedFileRawW
MD4Init
StartServiceCtrlDispatcherW
SetEntriesInAccessListW
ElfRegisterEventSourceA
RegGetKeySecurity
ElfOpenBackupEventLogW
RegFlushKey
LsaOpenTrustedDomainByName
RegReplaceKeyW
FreeSid
UpdateTraceW
ElfOpenBackupEventLogA
InitiateSystemShutdownA
LsaDelete
BuildTrusteeWithObjectsAndSidW
RegCreateKeyA
RemoveTraceCallback
RegLoadKeyA
GetLengthSid
GetServiceKeyNameW
SystemFunction027
OpenTraceA
ConvertStringSDToSDDomainA
NotifyChangeEventLog
CryptGetDefaultProviderW
ObjectPrivilegeAuditAlarmW
I_ScSetServiceBitsW

user32

GetFocus
wsprintfA
EqualRect
MessageBoxA
GetClientRect
SetCursor
GetForegroundWindow
DestroyWindow
GetKeyState
ShowWindow
CallWindowProcA
UnregisterClassA
CharNextA
PtInRect
SetWindowLongA
IntersectRect
SetWindowPos
IsWindow
GetParent
IsChild
InvalidateRect
UnionRect
ReleaseDC
LoadCursorA
SetFocus
GetWindowLongA
DefWindowProcA
SetWindowRgn
OffsetRect
GetDC

kernel32

lstrcpyA
RaiseException
lstrcatA
FlushInstructionCache
TlsAlloc
TlsGetValue
TlsFree
lstrlenW
lstrcmpiA
lstrlenA
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
CloseHandle
SizeofResource
OutputDebugStringA
CreateDirectoryW
GetTempPathW
WriteConsoleA
GetConsoleCP
VirtualAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteFileA
FindResourceA
HeapDestroy
GetTempPathA
FreeEnvironmentStringsA
WriteFile
CreateFileA
FlushFileBuffers
WritePrivateProfileStringA
VirtualProtect
LCMapStringA
GetStdHandle
TerminateThread
FreeEnvironmentStringsW
GetConsoleMode
DeleteCriticalSection
CreateMutexA
MulDiv
HeapFree
LoadLibraryExA
WaitForSingleObjectEx
CreateThread
FreeLibrary
IsDBCSLeadByte
GetFileType
GetOEMCP
ReadFile
WaitForSingleObject
GetTempFileNameW
TlsSetValue
GetModuleHandleA
GetThreadLocale
GetLocalTime
GetProcessHeap
HeapSize
FindNextFileA
HeapReAlloc
VirtualFree
WriteConsoleW
VirtualQuery
GlobalLock
GetConsoleOutputCP
LoadResource
LCMapStringW
WaitForMultipleObjects
FindClose
CreateFileW
HeapAlloc
SetStdHandle
SetHandleCount
WideCharToMultiByte
GetCurrentThreadId
UnhandledExceptionFilter
CreateEventA
CreateMutexW
SetFilePointer
IsDebuggerPresent
IsProcessorFeaturePresent
DeleteFileW
GetSystemInfo
ReleaseMutex
FindFirstFileA
GlobalUnlock
SetFileAttributesA
GetCommandLineA
SetLastError
IsValidCodePage
GetACP
GlobalAlloc
lstrcmpA
RtlUnwind
GetCurrentDirectoryA
VirtualAllocEx

ole32

OleRegGetUserType
CoTaskMemRealloc
OleSaveToStream
OleRegEnumVerbs
CreateOleAdviseHolder
CoCreateInstance
OleRegGetMiscStatus
CreateDataAdviseHolder
OleLoadFromStream
CoTaskMemFree
CoTaskMemAlloc
WriteClassStm
StringFromGUID2

gdi32

SetWindowOrgEx
DeleteMetaFile
GetDeviceCaps
LPtoDP
CreateMetaFileA
DeleteDC
SetMapMode
CloseMetaFile
SetWindowExtEx
TextOutA
CreateRectRgnIndirect
RestoreDC
SetViewportOrgEx
SetTextAlign
CreateDCA
SaveDC

oleaut32

VariantCopy
VariantInit
SysAllocString
SysFreeString
SysStringByteLen
SysAllocStringByteLen
OleCreatePropertyFrame
SysStringLen
RegisterTypeLi
DispCallFunc
LoadTypeLi
UnRegisterTypeLi
VariantClear
VarUI4FromStr
VariantChangeType
LoadRegTypeLi

pngfilt

DllGetClassObject

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 211KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 954KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78692938da5fbe4c9821c789e5e8987c

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

user32

kernel32

ole32

gdi32

oleaut32

pngfilt

Sections

.text Size: 18KB - Virtual size: 17KB

.rdata Size: 211KB - Virtual size: 211KB

.data Size: 6KB - Virtual size: 954KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 18KB - Virtual size: 17KB

.rdata
Size: 211KB - Virtual size: 211KB

.data
Size: 6KB - Virtual size: 954KB

.rsrc
Size: 2KB - Virtual size: 1KB