43222a5d8f176b9a842af0731bfda8c19b0892724407433250165f69968a4bfb

Sharing

Copy URL Twitter E-mail

General

Target

43222a5d8f176b9a842af0731bfda8c19b0892724407433250165f69968a4bfb
Size

637KB
MD5

3c4c791aa09351c8b764f783739d2789
SHA1

18c4f7f22aa93c73891cab8d4ef169666c9b36ff
SHA256

43222a5d8f176b9a842af0731bfda8c19b0892724407433250165f69968a4bfb
SHA512

91b8d2059b215ecd02e729f57a8a96a7c7a91b3bcdb8e27cb398fee83327ff3452420fb31132b52bf5d6ae45bbd615a846a76343a13a6584f048faf8754a1bfc
SSDEEP

12288:PQAaAajMSFORKX4/X61y45TPc2olKwJxsWCcNhHGSFt+iCH2VJ4kC:PplajMqORKUq142oUw/NhHGSF05kC

Score

N/A

Malware Config

Signatures

Files

43222a5d8f176b9a842af0731bfda8c19b0892724407433250165f69968a4bfb
.exe windows x86

ec8aaa0e7db1bae8c585a46710a09e54

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_get_osfhandle
iswdigit
_wcsrev
tolower
_beginthread
_Getdays
islower
fseek
_mbsupr

kernel32

CreateProcessW
CreateTimerQueueTimer
SetVolumeLabelW
GetLocaleInfoW
OpenFile
VirtualAlloc
SetConsoleOutputCP
RegisterWaitForSingleObject
CancelWaitableTimer
GetFileAttributesA
ExpandEnvironmentStringsA
AreFileApisANSI

advapi32

GetSecurityDescriptorDacl
RegSetValueExA
LsaQueryInformationPolicy
InitializeSecurityDescriptor
LookupAccountNameA
ConvertSidToStringSidA
ClearEventLogW
RegSetValueA
LsaSetInformationPolicy

uxtheme

GetWindowTheme
DrawThemeText
GetThemeMetric
GetThemeSysColor
GetCurrentThemeName
IsAppThemed
GetThemePartSize
GetThemeFont
GetThemeMargins
GetThemeBackgroundRegion
IsThemePartDefined
IsThemeBackgroundPartiallyTransparent
DrawThemeBackground

netapi32

NetUserGetLocalGroups
NetGetJoinInformation
NetShareEnum
NetUserGetInfo
NetUnjoinDomain
I_NetServerSetServiceBitsEx
NetQueryDisplayInformation
NetServerTransportEnum

user32

UnregisterClassW
EnumPropsW
wsprintfA
MonitorFromRect
GetCapture
PeekMessageW
DeregisterShellHookWindow

imm32

ImmUnlockIMC
ImmReleaseContext
ImmSetCandidateWindow
ImmLockIMCC
ImmConfigureIMEW
ImmUnlockIMCC
ImmSetCompositionStringW
ImmDisableIME
ImmIsIME
ImmGetGuideLineW
ImmCreateContext
ImmGetImeMenuItemsW
ImmGetCompositionFontW
ImmGetIMEFileNameA

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 226KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 167KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 190KB - Virtual size: 357KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec8aaa0e7db1bae8c585a46710a09e54

Headers

File Characteristics

Imports

msvcrt

kernel32

advapi32

uxtheme

netapi32

user32

imm32

Sections

.text Size: 50KB - Virtual size: 49KB

.bss Size: 226KB - Virtual size: 268KB

DATA Size: 167KB - Virtual size: 265KB

DATA Size: 190KB - Virtual size: 357KB

.rsrc Size: 512B - Virtual size: 472B

.reloc Size: 1024B - Virtual size: 556B

.text
Size: 50KB - Virtual size: 49KB

.bss
Size: 226KB - Virtual size: 268KB

DATA
Size: 167KB - Virtual size: 265KB

DATA
Size: 190KB - Virtual size: 357KB

.rsrc
Size: 512B - Virtual size: 472B

.reloc
Size: 1024B - Virtual size: 556B