496e35abdc91b8f4d42b1c2fa5685a6da9f1c9901801c8da65798acc081eb8ef

Sharing

Copy URL Twitter E-mail

General

Target

496e35abdc91b8f4d42b1c2fa5685a6da9f1c9901801c8da65798acc081eb8ef
Size

237KB
MD5

530ee5bb1c906e6f37f2374031eca220
SHA1

c19fda535bf899feb93ed72a35d6ce21d1ed4c16
SHA256

496e35abdc91b8f4d42b1c2fa5685a6da9f1c9901801c8da65798acc081eb8ef
SHA512

6fbbf90d492ae1dc601dc2264100e79932bbd61653fbc6e578df1ca484d69a9e324526dc78073f488e59b330bea38a25e4012860eca0f5c9882de67694517b67
SSDEEP

6144:M+BIO2abDl9p8ezJC74MNKMYEL8ZvA1QjYYY:M+2c9LSKMYEOQQ0t

Score

N/A

Malware Config

Signatures

Files

496e35abdc91b8f4d42b1c2fa5685a6da9f1c9901801c8da65798acc081eb8ef
.exe windows x86

e1cfdff372d4dfe89bc91cc341e0f565

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetFileTitleA

advapi32

SystemFunction016
MSChapSrvChangePassword
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
LsaICLookupNamesWithCreds
GetAclInformation
LsaEnumeratePrivileges
AddUsersToEncryptedFile
OpenThreadToken
RegCloseKey
LockServiceDatabase
SetSecurityDescriptorControl

kernel32

FreeEnvironmentStringsA
RaiseException
lstrcatA
SetFileAttributesA
SetErrorMode
LocalFree
InterlockedDecrement
GlobalAddAtomA
GetModuleHandleA
FlushFileBuffers
ExitProcess
LockResource
Beep
VirtualFree
DuplicateHandle
FindNextFileA
InterlockedIncrement
CompareStringA
GetProcAddress
InitializeCriticalSection
FindResourceA
GetTimeZoneInformation
SystemTimeToFileTime
SetConsoleCursorInfo
GetStringTypeW
HeapCreate
WideCharToMultiByte
HeapSize
GetCurrentThread
HeapAlloc
GetCommandLineA
HeapReAlloc
TlsFree
LoadResource
GlobalFree
IsBadCodePtr
TlsSetValue
FileTimeToSystemTime
GlobalAlloc
lstrcpyA
lstrcmpA
LoadLibraryA
FindClose
GetWindowsDirectoryA
FlushInstructionCache
FileTimeToLocalFileTime
SetEndOfFile
UnhandledExceptionFilter
GetOEMCP
LocalFileTimeToFileTime
EnterCriticalSection
GetVersion
GetLastError
LocalAlloc
GetCurrentProcess
GetThreadLocale
TlsAlloc
IsBadReadPtr
FreeLibrary
LocalUnlock
WriteFile
DeleteCriticalSection
SetUnhandledExceptionFilter
GlobalFindAtomA
RtlUnwind
GlobalDeleteAtom
CompareStringW
GetFileTime
GetVersionExA
VirtualAlloc
SetConsoleTextAttribute
SetSystemTime
GetEnvironmentStringsW
GetFileAttributesA
lstrcpynA
GetDriveTypeA
SetStdHandle
GetStringTypeA
SetLastError
GetVolumeInformationA
LCMapStringA
GetProcessVersion
lstrcmpiA
SetFilePointer
LockFile
GetCPInfo
ReadFile
UnlockFile
lstrlenA
SetEnvironmentVariableA
SystemTimeToTzSpecificLocalTime
DeleteFileA
GetEnvironmentVariableA
GlobalGetAtomNameA
GetSystemDirectoryA
CreateFileA
GetFullPathNameA
GetStdHandle
SetHandleCount
HeapFree
MultiByteToWideChar
HeapDestroy
FindFirstFileA
GetFileType
GetEnvironmentStringsA
IsValidLocale
FreeEnvironmentStringsW
GetACP
LeaveCriticalSection
IsDebuggerPresent
GlobalUnlock
GetStartupInfoA
GetFileSize
LCMapStringW
IsBadWritePtr
GetCurrentThreadId
TlsGetValue
GlobalFlags
MulDiv
InitializeSListHead
DosDateTimeToFileTime
LocalReAlloc
CloseHandle
GlobalHandle
GetCurrentDirectoryA
GetModuleFileNameA
SetCurrentDirectoryA
Sleep
GlobalLock
ReleaseActCtx

gdi32

ScaleViewportExtEx
GetDeviceCaps
SetWindowExtEx
TextOutA
DeleteObject
GetRelAbs
SetViewportExtEx
GetClipBox
DeleteDC
RestoreDC
CreateDIBitmap
SetMapMode
RoundRect
CreateEllipticRgn

winmm

timeGetSystemTime
mixerOpen
mmioAdvance

user32

GetLastActivePopup
GetWindowLongA
PostMessageA
DestroyWindow
CopyRect
SetWindowLongA
IsWindowVisible
EndDialog
GetForegroundWindow
ValidateRect
CreateDialogIndirectParamA
CreateWindowExA
TranslateMessage
GetWindowPlacement
GetMenu
EnableWindow
LoadStringA
ReleaseDC
GetTopWindow
GetActiveWindow
GetMessagePos
ShowWindow
SendDlgItemMessageA
wsprintfA
EnableMenuItem
GetDlgCtrlID
SystemParametersInfoA
DrawIcon
UpdateWindow
GetMenuCheckMarkDimensions
MessageBoxA
SetMenuItemBitmaps
ExitWindowsEx
IsWindow
PostQuitMessage
GetParent
GetWindowRect
SetPropA
SetActiveWindow
LoadBitmapA
GetWindow
GetCursorPos
RegisterClassA
GetSubMenu
GetKeyState
GetCapture
SetWindowTextA
GetSysColor
DefWindowProcA
CheckMenuItem
GetSystemMetrics
PtInRect
SendMessageA
GrayStringA
GetMenuState
SetWindowPos
LoadIconA
PeekMessageA
IsWindowEnabled
CallNextHookEx
DestroyMenu
BeginPaint
GetClassNameA
GetMenuItemCount
UnregisterClassA
RemovePropA
ClientToScreen
GetClientRect
LoadCursorA
GetDlgItem
GetClassInfoA
GetDC
GetMenuItemID
CallWindowProcA
GetPropA
SetWindowsHookExA
CharUpperA
GetMessageA
IsDialogMessageA
GetWindowTextA
MapWindowPoints
GetWindowTextLengthA
WinHelpA
GetFocus

Sections

.text
Size: 203KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e1cfdff372d4dfe89bc91cc341e0f565

Headers

File Characteristics

Imports

comdlg32

advapi32

kernel32

gdi32

winmm

user32

Sections

.text Size: 203KB - Virtual size: 202KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 20KB - Virtual size: 20KB

.rsrc Size: 512B - Virtual size: 504B

.text
Size: 203KB - Virtual size: 202KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 512B - Virtual size: 504B