8d05a6ac03bf4358d912290642028233ba18c29c164add2bfb844f3d4944d9f0

Sharing

Copy URL Twitter E-mail

General

Target

8d05a6ac03bf4358d912290642028233ba18c29c164add2bfb844f3d4944d9f0
Size

171KB
MD5

388b77a65032a855d05528a8ccb35b10
SHA1

bb50ba1e075aa96d0a4d4560149b6622338b74f9
SHA256

8d05a6ac03bf4358d912290642028233ba18c29c164add2bfb844f3d4944d9f0
SHA512

838af62d3f228cd037c31477a93b7e73a058046aa384f61f81955a1f0132415034e92d7ec3977f2e11dd9864f965471b286990a6c18380feb6cb42b818da624d
SSDEEP

3072:Ss4JRMvpPeI/J+fkKW01oJ4t5SMW+K8Ewpb3vKM:SApWI/J+fdW01hzSgOU

Score

N/A

Malware Config

Signatures

Files

8d05a6ac03bf4358d912290642028233ba18c29c164add2bfb844f3d4944d9f0
.exe windows x86

fb2e8e68a2ed5a6564dc7a2427ed4743

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
HeapFree
LocalReAlloc
GlobalFree
VerSetConditionMask
VerifyVersionInfoW
GetConsoleOutputCP
GetUserDefaultLCID
GetConsoleMode
lstrlenW
lstrcatW
lstrcpyW
SetFileAttributesW
SetLastError
GetFileInformationByHandle
GetCompressedFileSizeW
lstrcmpW
DeviceIoControl
SetCurrentDirectoryW
GetCurrentDirectoryW
GetCommandLineA
GetStartupInfoA
GetWindowsDirectoryA
GetCommandLineW
CreateProcessW
lstrcpynW
FindFirstFileW
DeleteFileW
FindNextFileW
FindClose
MultiByteToWideChar
CompareStringW
CreateFileW
GetFileAttributesW
GetStdHandle
WriteConsoleW
HeapAlloc
GetFileType
ReadFile
CopyFileW
CreateDirectoryW
LoadLibraryW
GetFullPathNameW
GetFileSize
LocalFree
LocalAlloc
GetSystemDirectoryW
InterlockedDecrement
SetEvent
LeaveCriticalSection
GetVersionExW
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapSetInformation
OpenEventW
CreateThread
CreateEventW
WaitForSingleObject
OpenProcess
InterlockedExchange
FreeLibrary
GetModuleHandleW
UnhandledExceptionFilter
QueryPerformanceCounter
GetModuleHandleA
GetProcAddress
CreateFileA
Sleep
LocalFileTimeToFileTime
SetFileTime
CloseHandle
FileTimeToLocalFileTime
GetLastError
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
LoadLibraryA
GetACP
GetOEMCP
VirtualAlloc
RtlUnwind
FlushFileBuffers
GetStringTypeA
VirtualProtect
GetSystemInfo
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
WriteFile
SetFilePointer

user32

SetWindowLongW
GetWindowLongW
ExitWindowsEx
IsCharAlphaA
ScreenToClient
DialogBoxParamW
LoadStringW
wsprintfW
EndDialog
GetDlgItem
SetWindowPos
ShowWindow
EnableWindow
SetWindowTextW
CharNextExA
CharToOemW

advapi32

InitializeAcl
FreeSid
RegCloseKey
RegOpenKeyExW
CheckTokenMembership
AdjustTokenPrivileges
GetLengthSid
AllocateAndInitializeSid
LookupPrivilegeValueW
OpenProcessToken
RegSetValueExW
GetFileSecurityW
OpenSCManagerW
QueryServiceStatus
ControlService
QueryServiceStatusEx
QueryServiceConfigW
EnumDependentServicesW
StartServiceW
RegSaveKeyW
RegDisablePredefinedCache
RegQueryValueExW
AddAccessAllowedAce

shell32

ShellExecuteA
CommandLineToArgvW

version

VerQueryValueA
GetFileVersionInfoA

msvcrt

memmove
free
malloc
printf
tolower
fread
fwrite
strncpy
exit
clock
time
fprintf
fclose
towlower
toupper
isdigit
atol
atoi
strchr
strncmp
strspn
wcschr
wcscmp
wscanf
swprintf
wcscpy
puts
wcslen
remove
wcsncpy
wcsrchr

shlwapi

PathAppendA
wvnsprintfW

rpcrt4

RpcRevertToSelf
RpcImpersonateClient
RpcServerListen
RpcMgmtSetServerStackSize
RpcServerRegisterIf2
RpcRaiseException

Sections

.text
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb2e8e68a2ed5a6564dc7a2427ed4743

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

version

msvcrt

shlwapi

rpcrt4

Sections

.text Size: 86KB - Virtual size: 85KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 61KB - Virtual size: 60KB

.rsrc Size: 11KB - Virtual size: 10KB

.text
Size: 86KB - Virtual size: 85KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 61KB - Virtual size: 60KB

.rsrc
Size: 11KB - Virtual size: 10KB