986e877042bd4980587084bab5bb9d4ece85217d76b6289b746e320daf079ae0

Sharing

Copy URL Twitter E-mail

General

Target

986e877042bd4980587084bab5bb9d4ece85217d76b6289b746e320daf079ae0
Size

155KB
MD5

31887c17e2e1a89021924b9cdc327653
SHA1

7babc64fb8494209b491353de3877ac1e4089970
SHA256

986e877042bd4980587084bab5bb9d4ece85217d76b6289b746e320daf079ae0
SHA512

5bcdaa5b4ae1197da86e5c72211615b1f0ad5a2f2623d01f2782f52ce8df2c9a45dd441a5f104e87365951199bd6c50909ebf170789c8a83d5b08d70ab9d21d6
SSDEEP

3072:oCVKvhzorsKTSE15ExFcrsucvAXOECM7YRV5vSvTnuiz0FZc1aZmiBi28:RKMsK22+ysA6ye5vwuiIFZc1ac

Score

N/A

Malware Config

Signatures

Files

986e877042bd4980587084bab5bb9d4ece85217d76b6289b746e320daf079ae0
.exe windows x86

75895f1873ccf65d137e7f93f69c47e2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetParent
EndDialog
GetThreadDesktop
GetWindowTextW
OffsetRect
SendMessageW
SetWindowLongW
SetWindowTextW
ShowWindow
EnableWindow
GetWindowLongW
DialogBoxParamW

msvcrt

wcscmp
_except_handler3

kernel32

DisableThreadLibraryCalls
ExitProcess
GetCommandLineA
GetComputerNameW
CompareStringW
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetWindowsDirectoryW
LocalAlloc
MultiByteToWideChar
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
lstrcmpiW
CloseHandle
GetCurrentProcess

shell32

ShellExecuteW
SHSetUnreadMailCountW
SHOpenFolderAndSelectItems

advapi32

AddAce
CloseServiceHandle
RegSetValueExW
RegSetKeySecurity
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey
OpenServiceW
OpenSCManagerW
InitializeSid
ConvertStringSecurityDescriptorToSecurityDescriptorW
ControlService
ChangeServiceConfigW

setupapi

SetupLogErrorW
CM_Create_DevNodeA
SetupCloseLog
SetupDiCreateDevRegKeyW
SetupDiSetClassInstallParamsW
SetupOpenLog
SetupDiOpenDevRegKey
SetupDiInstallDevice
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassInstallParamsW
CMP_Report_LogOn

gdi32

CloseEnhMetaFile

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

75895f1873ccf65d137e7f93f69c47e2

Headers

DLL Characteristics

File Characteristics

Imports

user32

msvcrt

kernel32

shell32

advapi32

setupapi

gdi32

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 65KB - Virtual size: 65KB

.data Size: 46KB - Virtual size: 47KB

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 65KB - Virtual size: 65KB

.data
Size: 46KB - Virtual size: 47KB

.rsrc
Size: 6KB - Virtual size: 6KB