5d24aad701112069f10b3ad48acee50a625707b3be7e406b19710360b0d39973

Sharing

Copy URL Twitter E-mail

General

Target

5d24aad701112069f10b3ad48acee50a625707b3be7e406b19710360b0d39973
Size

1.2MB
MD5

faaf5c317cf3e86a50b1c3ec7a3cd887
SHA1

82038ad299cdf9b4b2f1b76ae3e50fa8bb860a38
SHA256

5d24aad701112069f10b3ad48acee50a625707b3be7e406b19710360b0d39973
SHA512

537d632b0e98e097bf038b39b8b0ba246a1c24326297980575b3bc05f6d2162d7bce6ce88ecf688ddb45d43af84c75afed1f368991792480171a80b219ac9d78
SSDEEP

24576:Vyd/7WJU45bvLl1MnngaePZqS0IaWLELe5tngvt0+Afz7E/0NM3:VG/7WJU45bvLl1MnnAqSE92ngt6+SM3

Score

N/A

Malware Config

Signatures

Files

5d24aad701112069f10b3ad48acee50a625707b3be7e406b19710360b0d39973
.exe windows x86

929879191b781359908bef05d2a18e83

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntW
LCMapStringW
GetStringTypeW
GetLocaleInfoA
RtlUnwind
VirtualAlloc
HeapAlloc
IsValidCodePage
GetACP
FreeEnvironmentStringsW
EnterCriticalSection
GetSystemTimeAsFileTime
VirtualFree
HeapCreate
InterlockedIncrement
TlsGetValue
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
DeleteCriticalSection
lstrcmpiW
InitializeCriticalSection
LeaveCriticalSection
Sleep
GetLastError
CloseHandle
FindClose
InterlockedExchange
WaitForSingleObject
ReleaseMutex
UnmapViewOfFile
MapViewOfFile
VerifyVersionInfoW
FileTimeToSystemTime
FlushFileBuffers
CreateDirectoryW
GetProcAddress
LoadLibraryW
MultiByteToWideChar
GetSystemInfo
lstrcmpiA
GetModuleHandleW
FreeLibrary
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleHandleA
TryEnterCriticalSection
LoadLibraryExW
DeleteFileW
OutputDebugStringA
CreateFileMappingW
CreateMutexW
TlsFree
TlsAlloc
GetExitCodeThread
OpenThread
VirtualQuery
GetShortPathNameW
CreateFileMappingA
InterlockedCompareExchange
CreateFileA
UnhandledExceptionFilter
IsDebuggerPresent
FindNextFileW
GetFileAttributesExW
VerSetConditionMask
SetFilePointer
GetLocalTime
GetModuleFileNameW
GetModuleFileNameA
GetStdHandle
ExitProcess
GetCPInfo
WriteConsoleW
GetConsoleOutputCP
RaiseException
SetStdHandle
IsDBCSLeadByteEx
WideCharToMultiByte
MoveFileExW
GetCommandLineA
HeapDestroy
WriteFile
TlsSetValue
InterlockedDecrement
GetEnvironmentStrings
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetOEMCP
HeapSize
GetStringTypeA
LocalFree
SetLastError
RemoveDirectoryA

user32

wsprintfW

advapi32

RegCloseKey
RegQueryValueExA
SetSecurityDescriptorDacl
GetLengthSid
GetTokenInformation
OpenProcessToken
FreeSid
AllocateAndInitializeSid
LookupAccountNameW
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
RegQueryValueExW
ReportEventW
RegSetValueExW
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetSecurityDescriptorOwner
RegOpenKeyExA
RegDeleteKeyW
RegSetKeySecurity
RegCreateKeyExA
GetAce
IsValidSid

msvcrt

getenv
fwrite
free
gmtime
fputc
fprintf
puts
memcmp
malloc
pow
fread
wcslen

crypt32

CertGetPublicKeyLength
CertCreateCertificateContext

shlwapi

PathRemoveFileSpecW
PathAppendW

Sections

.text
Size: 116KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

929879191b781359908bef05d2a18e83

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

crypt32

shlwapi

Sections

.text Size: 116KB - Virtual size: 113KB

.rdata Size: 72KB - Virtual size: 68KB

.data Size: 72KB - Virtual size: 2.2MB

.rsrc Size: 76KB - Virtual size: 75KB

.text
Size: 116KB - Virtual size: 113KB

.rdata
Size: 72KB - Virtual size: 68KB

.data
Size: 72KB - Virtual size: 2.2MB

.rsrc
Size: 76KB - Virtual size: 75KB