788bf9e243159d329e6ffd497300394af010154cc175d3308b6930f6e8354941

Sharing

Copy URL Twitter E-mail

General

Target

788bf9e243159d329e6ffd497300394af010154cc175d3308b6930f6e8354941
Size

250KB
MD5

e82095c652ce0aa8e1b1b6556025c7fa
SHA1

2d760c41b8b43ac85443273de0f1fd2a14a96d72
SHA256

788bf9e243159d329e6ffd497300394af010154cc175d3308b6930f6e8354941
SHA512

e243c3605f3387d2df3c2f3c0601eb85f7e0666e84dd98936271cfd03ab860d655a9f183d9c59a62df24fc4b730db3db19f2cc3796da80f6bd502b8779048043
SSDEEP

6144:YALDWn7bRNEl+R6yxL9yT6JbzR+J1J5QZK2nbREoIr/R:YSkHRNBBVi6JHMJ+Rnb65

Score

N/A

Malware Config

Signatures

Files

788bf9e243159d329e6ffd497300394af010154cc175d3308b6930f6e8354941
.exe windows x86

b4ef01b32e24d87cf8c9bd290a77f88b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateGuid
IIDFromString
StringFromGUID2
CoCreateInstance

user32

CopyIcon
DestroyIcon
GetSystemMetrics
LoadIconW

kernel32

FindResourceW
WaitForSingleObject
FreeLibrary
UnhandledExceptionFilter
LockResource
GetCurrentThreadId
SizeofResource
LocalAlloc
HeapFree
HeapAlloc
lstrlenA
GetDriveTypeW
OpenProcess
WTSGetActiveConsoleSessionId
DisableThreadLibraryCalls
CreateFileW
GetFileAttributesExW
LeaveCriticalSection
IsDebuggerPresent
HeapReAlloc
FormatMessageW
GetProcessHeap
GetLongPathNameW
RaiseException
FindResourceExW
lstrlenW
LoadResource
HeapSize
CompareStringW
DeleteFileW
HeapDestroy
SetFileAttributesW
DeleteCriticalSection
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
EnterCriticalSection
SystemTimeToFileTime
VirtualAllocEx

iphlpapi

NotifyRouteChange
NotifyAddrChange

netapi32

NetShareEnum
NetApiBufferFree

certcli

CAOIDCreateNew
CAGetCAFlags
CARemoveCACertificateType
CAUpdateCA
CACloseCertType
CASetCertTypeProperty
CACreateNewCA

compstui

CommonPropertySheetUIA
CommonPropertySheetUIW
GetCPSUIUserData

Sections

.text
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.JhpAdhv
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.VtqFdhv
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gTIGgxD
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wHbp
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b4ef01b32e24d87cf8c9bd290a77f88b

Headers

DLL Characteristics

File Characteristics

Imports

ole32

user32

kernel32

iphlpapi

netapi32

certcli

compstui

Sections

.text Size: 224KB - Virtual size: 224KB

.JhpAdhv Size: 3KB - Virtual size: 2KB

.VtqFdhv Size: 1024B - Virtual size: 777B

.rdata Size: 2KB - Virtual size: 32KB

.gTIGgxD Size: 2KB - Virtual size: 2KB

.data Size: 7KB - Virtual size: 308KB

.rsrc Size: 4KB - Virtual size: 3KB

.wHbp Size: 5KB - Virtual size: 4KB

.text
Size: 224KB - Virtual size: 224KB

.JhpAdhv
Size: 3KB - Virtual size: 2KB

.VtqFdhv
Size: 1024B - Virtual size: 777B

.rdata
Size: 2KB - Virtual size: 32KB

.gTIGgxD
Size: 2KB - Virtual size: 2KB

.data
Size: 7KB - Virtual size: 308KB

.rsrc
Size: 4KB - Virtual size: 3KB

.wHbp
Size: 5KB - Virtual size: 4KB