5eee1490d0695fd4be68193f159558cabeb8d8abef6cd58b0399b10c9044f4c8

Sharing

Copy URL Twitter E-mail

General

Target

5eee1490d0695fd4be68193f159558cabeb8d8abef6cd58b0399b10c9044f4c8
Size

1.2MB
MD5

14971ff3c1e9c542aff7a95fac7ba4fd
SHA1

0e86fc1156050ec98f943283a1de5480caef7ae5
SHA256

5eee1490d0695fd4be68193f159558cabeb8d8abef6cd58b0399b10c9044f4c8
SHA512

837efda5645dc6a76862909ddeff4f78adfb7d37026c7bcaf21f1b7be6679d28b4e0bbcd41d852d0a2886e01b453ccd9dc0d5c1049de724d089da52f99868bdf
SSDEEP

24576:ky+m/7WJU45bvLl1pnngae5gp8Z/xgzUpsJ3vO1i4/96ieKdWpyHWOFb:k0/7WJU45bvLl1pnnkjJEUpSf8/9O43V

Score

N/A

Malware Config

Signatures

Files

5eee1490d0695fd4be68193f159558cabeb8d8abef6cd58b0399b10c9044f4c8
.exe windows x86

929879191b781359908bef05d2a18e83

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntW
LCMapStringW
GetStringTypeW
GetLocaleInfoA
RtlUnwind
VirtualAlloc
HeapAlloc
IsValidCodePage
GetACP
FreeEnvironmentStringsW
EnterCriticalSection
GetSystemTimeAsFileTime
VirtualFree
HeapCreate
InterlockedIncrement
TlsGetValue
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
DeleteCriticalSection
lstrcmpiW
InitializeCriticalSection
LeaveCriticalSection
Sleep
GetLastError
CloseHandle
FindClose
InterlockedExchange
WaitForSingleObject
ReleaseMutex
UnmapViewOfFile
MapViewOfFile
VerifyVersionInfoW
FileTimeToSystemTime
FlushFileBuffers
CreateDirectoryW
GetProcAddress
LoadLibraryW
MultiByteToWideChar
GetSystemInfo
lstrcmpiA
GetModuleHandleW
FreeLibrary
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleHandleA
TryEnterCriticalSection
LoadLibraryExW
DeleteFileW
OutputDebugStringA
CreateFileMappingW
CreateMutexW
TlsFree
TlsAlloc
GetExitCodeThread
OpenThread
VirtualQuery
GetShortPathNameW
CreateFileMappingA
InterlockedCompareExchange
CreateFileA
UnhandledExceptionFilter
IsDebuggerPresent
FindNextFileW
GetFileAttributesExW
VerSetConditionMask
SetFilePointer
GetLocalTime
GetModuleFileNameW
GetModuleFileNameA
GetStdHandle
ExitProcess
GetCPInfo
WriteConsoleW
GetConsoleOutputCP
RaiseException
SetStdHandle
IsDBCSLeadByteEx
WideCharToMultiByte
MoveFileExW
GetCommandLineA
HeapDestroy
WriteFile
TlsSetValue
InterlockedDecrement
GetEnvironmentStrings
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetOEMCP
HeapSize
GetStringTypeA
LocalFree
SetLastError
RemoveDirectoryA

user32

wsprintfW

advapi32

RegCloseKey
RegQueryValueExA
SetSecurityDescriptorDacl
GetLengthSid
GetTokenInformation
OpenProcessToken
FreeSid
AllocateAndInitializeSid
LookupAccountNameW
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
RegQueryValueExW
ReportEventW
RegSetValueExW
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetSecurityDescriptorOwner
RegOpenKeyExA
RegDeleteKeyW
RegSetKeySecurity
RegCreateKeyExA
GetAce
IsValidSid

msvcrt

getenv
fwrite
free
gmtime
fputc
fprintf
puts
memcmp
malloc
pow
fread
wcslen

crypt32

CertGetPublicKeyLength
CertCreateCertificateContext

shlwapi

PathRemoveFileSpecW
PathAppendW

Sections

.text
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

929879191b781359908bef05d2a18e83

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

crypt32

shlwapi

Sections

.text Size: 116KB - Virtual size: 112KB

.rdata Size: 72KB - Virtual size: 68KB

.data Size: 72KB - Virtual size: 2.2MB

.rsrc Size: 76KB - Virtual size: 75KB

.text
Size: 116KB - Virtual size: 112KB

.rdata
Size: 72KB - Virtual size: 68KB

.data
Size: 72KB - Virtual size: 2.2MB

.rsrc
Size: 76KB - Virtual size: 75KB