33387d13fab12722b3eb83110bca5896cb0eb4e68d27f8a23246a5b77fb42214

Sharing

Copy URL

Twitter E-mail

General

Target

33387d13fab12722b3eb83110bca5896cb0eb4e68d27f8a23246a5b77fb42214
Size

65KB
MD5

d13df0be69dd862dcf12b04fec21d3d8
SHA1

883de150fbd21782f4cd8f9b177016be4b813f42
SHA256

33387d13fab12722b3eb83110bca5896cb0eb4e68d27f8a23246a5b77fb42214
SHA512

71da7172d51911c2e8bc736984211931942e8deb4c2a57f34f8889a12940605c3dc9bf6fdf53c187663d0f4f829e0d202e7da61ed90c19df5f9a5b82b2d5b962
SSDEEP

1536:oz/s74kb5NIPwfykx5fgH2Pz3rF3J5Ems6eij:6s74kbUkjMYz3rZJ5A6pj

Score

N/A

Malware Config

Signatures

Files

33387d13fab12722b3eb83110bca5896cb0eb4e68d27f8a23246a5b77fb42214
.exe windows x86

0b4dacd6470dbbd3446517c6dd5dfc2c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptSIPRetrieveSubjectGuid
CryptMsgEncodeAndSignCTL
PFXVerifyPassword
CertStrToNameA
CryptLoadSip
CryptHashPublicKeyInfo
CryptSIPVerifyIndirectData
CertSetCTLContextProperty
CryptSignMessageWithKey
CertAddCRLContextToStore
CryptSIPCreateIndirectData
CertRemoveEnhancedKeyUsageIdentifier
I_CryptCreateLruEntry
CertFindChainInStore
CryptHashCertificate
CertAddCertificateLinkToStore
I_CryptGetLruEntryIdentifier
I_CryptUninstallAsn1Module
CertDuplicateCTLContext
CertOpenStore
CryptFindCertificateKeyProvInfo
CryptSetKeyIdentifierProperty

kernel32

GlobalAlloc
EnumLanguageGroupLocalesW
GetCurrentProcessId
SetConsoleCursorPosition
CreateActCtxW
SetSystemPowerState
GetBinaryTypeA
BuildCommDCBW
GetCurrentActCtx
GetSystemWow64DirectoryW
VirtualAlloc
SetFileAttributesA
SetConsoleCursorInfo
EnumLanguageGroupLocalesA
FreeUserPhysicalPages
OutputDebugStringA
LoadLibraryA
SetCurrentDirectoryW
ReadConsoleInputExW
GlobalFindAtomA
lstrcat
GetDiskFreeSpaceExW

msi

MsiGetProductPropertyW
MsiPreviewBillboardW
MsiDatabaseIsTablePersistentA
MsiGetSummaryInformationW
MsiEnumComponentsW
MsiInstallMissingFileW
MsiProcessAdvertiseScriptW
MsiRecordSetStreamW
MsiProcessMessage
MsiLocateComponentA
MsiEnumClientsA
MsiQueryFeatureStateW
MsiConfigureFeatureW
MsiGetFileHashW
MsiRecordGetFieldCount
MsiQueryFeatureStateA
MsiDatabaseOpenViewW
MsiRecordSetStringA
MsiNotifySidChangeW
MsiSetPropertyA
MsiOpenDatabaseA
MsiProvideComponentFromDescriptorA
MsiGetSourcePathA
MsiEnumRelatedProductsA
MsiSequenceW

user32

TranslateMDISysAccel
SetDeskWallpaper
GetMouseMovePointsEx
PostQuitMessage
SubtractRect
DialogBoxIndirectParamW
ToUnicodeEx
SetWindowStationUser
MapWindowPoints
GetMonitorInfoW
DialogBoxParamA
GetKeyNameTextA
SetClassLongA
SetDebugErrorLevel
GetUserObjectSecurity
SetClipboardViewer
LoadKeyboardLayoutA
TileChildWindows

wininet

InternetAlgIdToStringA
ForceNexusLookupExW
DeleteUrlCacheEntry
InternetSecurityProtocolToStringW
ReadUrlCacheEntryStream
ShowSecurityInfo
ShowClientAuthCerts
SetUrlCacheEntryGroupA
InternetFindNextFileA
GetUrlCacheEntryInfoExW
FtpFindFirstFileW
InternetGetCookieExW
InternetDialW
InternetCheckConnectionW
GopherCreateLocatorW
InternetSetStatusCallback
LoadUrlCacheContent
InternetGetConnectedState
FindFirstUrlCacheEntryExW
SetUrlCacheHeaderData
GopherGetLocatorTypeW
DllInstall
InternetSetCookieExW

dsound

DirectSoundCreate
DirectSoundEnumerateW
DirectSoundFullDuplexCreate
DirectSoundEnumerateA
DirectSoundCaptureEnumerateW
DirectSoundCaptureCreate
GetDeviceID
DirectSoundCaptureCreate8
DirectSoundCaptureEnumerateA
DirectSoundCreate8

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 23KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0b4dacd6470dbbd3446517c6dd5dfc2c

Headers

File Characteristics

Imports

crypt32

kernel32

msi

user32

wininet

dsound

Sections

.text Size: 17KB - Virtual size: 17KB

Size: 21KB - Virtual size: 21KB

Size: 23KB - Virtual size: 213KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 17KB - Virtual size: 17KB

.rsrc
Size: 1KB - Virtual size: 1KB