2e8829f7c78f10051940f3978fac1843823de766f6b01c22d68caedfb4d8871b

Sharing

Copy URL Twitter E-mail

General

Target

2e8829f7c78f10051940f3978fac1843823de766f6b01c22d68caedfb4d8871b
Size

252KB
MD5

59f4af65e3d7c3ecd751672f59c64e9a
SHA1

7edccfe6e49590cf570373e4b1da31ba916f983c
SHA256

2e8829f7c78f10051940f3978fac1843823de766f6b01c22d68caedfb4d8871b
SHA512

b1f43b730d7298389d0effaf71a56b70ff357a972feea35817f5518a4ba99e35d7e16622f9db64f64686ef82a0ec4d02f101ac1ab7d52d94a709307784505631
SSDEEP

6144:41rwii7st1Y+S6pYQCR+gs74dVGwG+oISthMZzLkV:4T+sH4wgsLMFkV

Score

N/A

Malware Config

Signatures

Files

2e8829f7c78f10051940f3978fac1843823de766f6b01c22d68caedfb4d8871b
.exe windows x86

729e2b8cebe03557fa750328914aa7f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

ws2_32

WSACleanup
inet_ntoa
gethostbyname
gethostname
WSAStartup

kernel32

GetProcessHeap
RaiseException
CreateMutexW
CreateDirectoryW
RemoveDirectoryW
SetErrorMode
GetExitCodeThread
MoveFileW
GetSystemTime
GetCurrentThreadId
IsDebuggerPresent
SetUnhandledExceptionFilter
GetSystemDirectoryW
FileTimeToSystemTime
GlobalAlloc
lstrlenW
lstrcmpiW
DosDateTimeToFileTime
ExpandEnvironmentStringsA
WaitForSingleObject
CreateEventW
LoadResource
FindResourceW
FreeLibrary
LocalFree
lstrlenA
OpenEventW
SystemTimeToFileTime
GetLocalTime
GetModuleHandleW
GetTempPathW
lstrcmpW
GetProcAddress

user32

GetForegroundWindow
MessageBoxW

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
CreateProcessAsUserW
SetSecurityInfo
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetSecurityDescriptorDacl
GetSecurityInfo
DuplicateTokenEx
RegQueryValueExA
RegOpenKeyExA
DeregisterEventSource
ReportEventW
RegisterEventSourceW
GetTokenInformation
OpenProcessToken
ControlService
QueryServiceStatus
CloseServiceHandle
OpenServiceW
OpenSCManagerW
StartServiceW
QueryServiceConfigW
ImpersonateLoggedOnUser
RevertToSelf
SetThreadToken
LookupAccountSidW
GetUserNameW

shell32

ShellExecuteW

shlwapi

PathGetDriveNumberW

quartz

AMGetErrorTextA
DllUnregisterServer
DBToAmpFactor
AMGetErrorTextW
DllRegisterServer
AmpFactorToDB
DllCanUnloadNow

dsauth

StoreSetSearchSubTree
StoreInitHandle

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.o
Size: 1KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.NCfFn
Size: 5KB - Virtual size: 558KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.HFHP
Size: 81KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.G
Size: 1KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ReMw
Size: 2KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BmRgDG
Size: 135KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

729e2b8cebe03557fa750328914aa7f2

Headers

File Characteristics

Imports

version

ws2_32

kernel32

user32

advapi32

shell32

shlwapi

quartz

dsauth

Sections

.text Size: 13KB - Virtual size: 12KB

.o Size: 1KB - Virtual size: 69KB

.rdata Size: 3KB - Virtual size: 21KB

.NCfFn Size: 5KB - Virtual size: 558KB

.HFHP Size: 81KB - Virtual size: 169KB

.G Size: 1KB - Virtual size: 47KB

.ReMw Size: 2KB - Virtual size: 122KB

.data Size: 6KB - Virtual size: 160KB

.BmRgDG Size: 135KB - Virtual size: 196KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 13KB - Virtual size: 12KB

.o
Size: 1KB - Virtual size: 69KB

.rdata
Size: 3KB - Virtual size: 21KB

.NCfFn
Size: 5KB - Virtual size: 558KB

.HFHP
Size: 81KB - Virtual size: 169KB

.G
Size: 1KB - Virtual size: 47KB

.ReMw
Size: 2KB - Virtual size: 122KB

.data
Size: 6KB - Virtual size: 160KB

.BmRgDG
Size: 135KB - Virtual size: 196KB

.rsrc
Size: 2KB - Virtual size: 2KB