85966def01bca7e9496e471795fe69588a40de77d9c9f993460c25eb14cb383d

Sharing

Copy URL Twitter E-mail

General

Target

85966def01bca7e9496e471795fe69588a40de77d9c9f993460c25eb14cb383d
Size

820KB
MD5

ea83dc7412812f9569d87d9671e42bff
SHA1

5bfdb1247fe0f8ab3838fec604690cba52c2ca4e
SHA256

85966def01bca7e9496e471795fe69588a40de77d9c9f993460c25eb14cb383d
SHA512

96c5a23128dbb9b8bab039ed71a35d9788c5750f47a77af8f100d58302c8495470e726deab250f1bd50177f84641d45c7156cba3ab8d26bcbcb1a6df5bb83a5f
SSDEEP

24576:/dPiUUOdqWT2jVHXmUhtMh1CeBh0K/+AtxU:/HRT2xP7eJBmAtW

Score

N/A

Malware Config

Signatures

Files

85966def01bca7e9496e471795fe69588a40de77d9c9f993460c25eb14cb383d
.exe windows x86

74fee2b9c8a2e9ae1583329b8ffdcb57

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
GetCurrentThread
CreateSemaphoreW
GetConsoleTitleA
SetThreadPriorityBoost
SetConsoleMode
RtlCaptureStackBackTrace
WriteProfileStringW
GetSystemTimeAsFileTime
RequestWakeupLatency
GetNamedPipeHandleStateA
RtlZeroMemory
VerifyConsoleIoHandle
Heap32ListNext
GetNumberOfConsoleMouseButtons
DnsHostnameToComputerNameA
VirtualProtectEx
VerSetConditionMask
GetUserDefaultLangID
GetModuleHandleA
WaitForSingleObjectEx
LZCloseFile
GetVDMCurrentDirectories
LoadLibraryA
RemoveDirectoryW
ExitProcess
EnumTimeFormatsW
VirtualAlloc
FatalAppExitA
WaitCommEvent
Heap32First
BaseInitAppcompatCacheSupport
GlobalUnWire
UpdateResourceA
EnumResourceNamesW
SystemTimeToTzSpecificLocalTime
LocalUnlock
EnumDateFormatsExA

crypt32

CryptMsgGetParam
CertAddCRLLinkToStore
CryptVerifyMessageSignatureWithKey
CryptAcquireContextU
I_CryptTouchLruEntry
CryptEnumOIDFunction
I_CryptRemoveLruEntry
CertDuplicateCertificateContext
CryptCloseAsyncHandle
I_CryptReadTrustedPublisherDWORDValueFromRegistry
CertEnumCRLsInStore
CryptMsgUpdate
CryptMemRealloc
I_CryptUnregisterSmartCardStore
RegOpenHKCUKeyExU
CryptSIPRemoveSignedDataMsg
CryptDecodeObject
CryptSignAndEncodeCertificate
I_CryptFindSmartCardCertInStore
CertOpenStore
CryptFindLocalizedName
CertDuplicateStore
CryptGetMessageCertificates
I_CryptInstallAsn1Module
CryptDecodeMessage
CertDeleteCertificateFromStore
RegSetValueExU
CertVerifySubjectCertificateContext
RegQueryInfoKeyU
CertFindAttribute
PFXVerifyPassword

msvcrt

_Gettnames
_inpd
_aligned_realloc
__set_app_type
_logb
_nextafter
_y1
_lseeki64
_wstat
_mbsspnp
??_7__non_rtti_object@@6B@
__p__amblksiz
_mbctolower
_mbscspn
asin
_except_handler3
_mbsnbset
wcstombs
_futime64
__p__commode
exit
__lc_codepage
_wfindfirst
_rmdir
__getmainargs
_adj_fdiv_r
_strnset
__p___winitenv
_stat
_fsopen
_mbsnbcmp
_wmktemp
_ismbcl1
_putws
_sopen

mscms

DisassociateColorProfileFromDeviceW
RegisterCMMA
CreateProfileFromLogColorSpaceA
SpoolerCopyFileEvent
InstallColorProfileA
GetStandardColorSpaceProfileW
SetColorProfileElementSize
CreateDeviceLinkProfile
InternalGetDeviceConfig
AssociateColorProfileWithDeviceW
SetColorProfileElementReference
OpenColorProfileW
AssociateColorProfileWithDeviceA
GenerateCopyFilePaths
EnumColorProfilesW
GetStandardColorSpaceProfileA
InternalGetPS2CSAFromLCS
InternalGetPS2ColorRenderingDictionary
GetCMMInfo
SetColorProfileHeader
InternalGetPS2PreviewCRD
GetColorProfileElementTag
SetStandardColorSpaceProfileA
DisassociateColorProfileFromDeviceA
GetColorDirectoryA
InternalSetDeviceConfig
GetCountColorProfileElements
UnregisterCMMW
CreateColorTransformW
UninstallColorProfileW
TranslateColors
GetColorProfileHeader

user32

PostQuitMessage
RegisterClassA
DefWindowProcA

Sections

.text
Size: 389KB - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 180KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74fee2b9c8a2e9ae1583329b8ffdcb57

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

crypt32

msvcrt

mscms

user32

Sections

.text Size: 389KB - Virtual size: 388KB

.rdata Size: 98KB - Virtual size: 98KB

.data Size: 180KB - Virtual size: 1.6MB

.rsrc Size: 150KB - Virtual size: 150KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 389KB - Virtual size: 388KB

.rdata
Size: 98KB - Virtual size: 98KB

.data
Size: 180KB - Virtual size: 1.6MB

.rsrc
Size: 150KB - Virtual size: 150KB

.reloc
Size: 1KB - Virtual size: 1KB