9f3d672d26f3fbedade13ebbdeea026f1b4bbd8b7ad03b921a3629d91282601b

Sharing

Copy URL Twitter E-mail

General

Target

9f3d672d26f3fbedade13ebbdeea026f1b4bbd8b7ad03b921a3629d91282601b
Size

288KB
MD5

7b82853166856bc1616e9a00a5979614
SHA1

293613a91536438db49a7dd052e8a521bf62a544
SHA256

9f3d672d26f3fbedade13ebbdeea026f1b4bbd8b7ad03b921a3629d91282601b
SHA512

f0a2406db2182b4aa8a5f3627c36d85cff08a60a115723297585811950af49bacc6a14b5ce8ff0e00b25513a3ab82448bf5c9289eeb09666291b6da5017e6c47
SSDEEP

6144:4lr6yDU7fqP/f0LETIOfrlYc5gTTArVR32GOuMMTrzuWeR7PP7EEPMW:qDqyXcLdWrll5gTT82ITrzpoPjR

Score

N/A

Malware Config

Signatures

Files

9f3d672d26f3fbedade13ebbdeea026f1b4bbd8b7ad03b921a3629d91282601b
.exe windows x86

967f723b472b772a2acdb23b566da365

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ReportEventW
OpenProcessToken
CopySid
GetTokenInformation
GetLengthSid
RegisterEventSourceW
DeregisterEventSource
IsValidSid
EqualSid
OpenThreadToken

kernel32

HeapDestroy
UnhandledExceptionFilter
GetThreadLocale
GetSystemTimeAsFileTime
GetCurrentThreadId
HeapAlloc
SetUnhandledExceptionFilter
FormatMessageW
DeleteCriticalSection
RaiseException
EnterCriticalSection
GetProcessHeap
CloseHandle
HeapSize
LeaveCriticalSection
lstrlenW
lstrlenA
IsDebuggerPresent
SetThreadLocale
GetACP
HeapFree
HeapReAlloc
GetCurrentDirectoryA
VirtualAllocEx

oleaut32

VariantChangeType
VariantCopyInd
SystemTimeToVariantTime
SafeArrayGetUBound
SafeArrayRedim
VariantCopy
LoadRegTypeLi
SafeArrayGetLBound
VariantInit
SafeArrayUnlock
SafeArrayCopy
SysStringLen
SafeArrayDestroy
VariantTimeToSystemTime
SysStringByteLen
SysFreeString
LoadTypeLi
VariantClear
SysAllocString
SafeArrayLock
SafeArrayGetVartype
SafeArrayCreate
SysAllocStringByteLen
GetErrorInfo

ole32

CLSIDFromProgID
CoRevertToSelf
CoCreateInstance
CoImpersonateClient

shell32

SHGetFolderPathW

userenv

UnloadUserProfile
GetProfileType
CreateEnvironmentBlock
LoadUserProfileA
GetProfilesDirectoryW
GetGPOListW
GetAppliedGPOListW

user32

UnregisterClassA

shlwapi

PathAppendW

catsrvps

DllUnregisterServer
GetProxyDllInfo
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 258KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

967f723b472b772a2acdb23b566da365

Headers

File Characteristics

Imports

advapi32

kernel32

oleaut32

ole32

shell32

userenv

user32

shlwapi

catsrvps

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 258KB - Virtual size: 261KB

.rsrc Size: 11KB - Virtual size: 11KB

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 258KB - Virtual size: 261KB

.rsrc
Size: 11KB - Virtual size: 11KB