096aba988909904d4e63200b80129529e570a4645de51d2a26c17f5687a992a8

Sharing

Copy URL Twitter E-mail

General

Target

096aba988909904d4e63200b80129529e570a4645de51d2a26c17f5687a992a8
Size

799KB
MD5

f2b5222aeb05e646bdbd169365d0e0a9
SHA1

c0b7a0c79af39050aa7bc0b6e6ade742a551e664
SHA256

096aba988909904d4e63200b80129529e570a4645de51d2a26c17f5687a992a8
SHA512

3973d6017efdfb553a9a09a5d7c5c64b8086738bb0af1109b9c11536a80b0ac0a4c3ba72c4cb14429e5e8d3b31ad6782669e1cbb1fc77a9df2c2027e03ec45f0
SSDEEP

12288:gcUf1eSEJc9dDIZMxnJIXKIwBR6d47NodPMiAOviPzgfxLV:gpfwRJc9dTnJIXyR6d47+dPM3lU

Score

N/A

Malware Config

Signatures

Files

096aba988909904d4e63200b80129529e570a4645de51d2a26c17f5687a992a8
.exe windows x86

f5a906d071295ef508ab49dc3d86a375

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

imm32

ImmGetIMCCSize
ImmSetCompositionStringW
ImmGetIMEFileNameA
ImmLockIMC
ImmGetOpenStatus
ImmRegisterWordW
ImmNotifyIME
ImmGetConversionStatus
ImmGetProperty
ImmEscapeW
ImmUnlockIMCC
ImmGetHotKey
ImmReleaseContext
ImmGetContext
ImmEnumRegisterWordW
ImmGetGuideLineW
ImmDisableIME
ImmCreateContext
ImmConfigureIMEW
ImmSetHotKey
ImmGetCandidateListW
ImmSetCompositionWindow

msvcrt

fwscanf
_callnewh
_strupr
_acmdln
rand
_filelengthi64
wcsftime
strstr
_ultoa
_adjust_fdiv
_wsopen
wcsncmp
_open
_mbspbrk
_wcsicmp
__p__fmode
__lc_codepage
_wchdir
_ui64tow
cos
fwprintf
mbstowcs
_swab
tan
?_set_new_mode@@YAHH@Z
memcpy
ldexp
sqrt
_mktemp
printf
isalpha
strtok
_i64tow
?terminate@@YAXXZ

mscms

InternalGetPS2PreviewCRD
EnumColorProfilesA
InstallColorProfileW
GetColorDirectoryA
GetColorProfileElement
TranslateColors
InternalGetPS2CSAFromLCS
OpenColorProfileA
GetColorDirectoryW
DeleteColorTransform
IsColorProfileValid
GetColorProfileHeader
InternalGetPS2ColorSpaceArray
CreateColorTransformW
EnumColorProfilesW
CloseColorProfile
GetStandardColorSpaceProfileW
InternalGetPS2ColorRenderingDictionary

oleaut32

VariantCopy
SafeArrayGetUBound
SafeArrayGetLBound
VariantInit
VariantClear
VariantCopyInd
SysStringLen
SafeArrayPtrOfIndex
SysAllocStringByteLen
GetActiveObject
GetErrorInfo
SafeArrayCreate
SysAllocStringLen
SysReAllocStringLen
VariantChangeTypeEx
VariantChangeType
SysFreeString

advapi32

SystemFunction027
GetSecurityInfo
LookupPrivilegeNameW
GetExplicitEntriesFromAclW
CryptExportKey
AreAllAccessesGranted
CryptHashData
CryptSetHashParam
CryptDecrypt
GetSidSubAuthorityCount
RegDeleteValueA
UnlockServiceDatabase
SystemFunction009
RegSetKeySecurity
SystemFunction004
GetNamedSecurityInfoA
SetSecurityDescriptorOwner
GetTokenInformation
CryptGetHashParam
OpenServiceW
LockServiceDatabase
GetSecurityDescriptorControl
FileEncryptionStatusW
RegOpenKeyA

winspool.drv

AddPrinterW
GetPrinterA
GetPrinterDriverW
GetPrinterW
DeletePrinterConnectionW
FindFirstPrinterChangeNotification
EnumPortsW
SetJobA
EnumPrintersA
DeletePrintProcessorW
DeletePrinterDriverW
OpenPrinterA
GetFormW
EnumFormsA
FindNextPrinterChangeNotification
OpenPrinterW
AddPrintProcessorW
EndDocPrinter
GetPrintProcessorDirectoryW
EnumMonitorsW
SetFormW
DocumentPropertySheets
EnumPrinterDriversW
AddMonitorW
StartDocPrinterW
EnumPrinterDataExW
ClosePrinter
DeviceCapabilitiesW
SetPrinterW
SetPrinterDataW
XcvDataW
StartPagePrinter
EnumMonitorsA

crypt32

CryptDecryptAndVerifyMessageSignature

cfgmgr32

CM_Get_Sibling
CM_Get_Device_ID_List_ExW
CM_Get_DevNode_Status_Ex
CM_Get_Device_Interface_List_ExW
CM_Get_DevNode_Registry_PropertyW
CM_Get_Device_ID_List_Size_ExW
CM_Enumerate_Classes_Ex
CM_Reenumerate_DevNode
CM_Free_Log_Conf_Handle
CM_Locate_DevNode_ExW
CM_Get_DevNode_Registry_Property_ExW
CM_Free_Res_Des_Handle
CM_Get_Device_ID_Size

kernel32

CloseProfileUserMapping
GetCurrentDirectoryA
SetThreadAffinityMask
Process32NextW
TzSpecificLocalTimeToSystemTime
SetFileAttributesW
LoadResource
FlushViewOfFile
GetLongPathNameA
VirtualAlloc
EnumCalendarInfoA
GetLastError
WriteProfileStringW
lstrcpyA
InterlockedDecrement
SetVolumeLabelA
SetConsoleKeyShortcuts
lstrlenA
EndUpdateResourceW
GetVersion
GetConsoleTitleA
SetCurrentDirectoryW
SuspendThread
QueryPerformanceFrequency
GetThreadLocale

Sections

.text
Size: 44KB - Virtual size: 524KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 178KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 269KB - Virtual size: 541KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 145KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 734B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f5a906d071295ef508ab49dc3d86a375

Headers

DLL Characteristics

File Characteristics

Imports

imm32

msvcrt

mscms

oleaut32

advapi32

winspool.drv

crypt32

cfgmgr32

kernel32

Sections

.text Size: 44KB - Virtual size: 524KB

.edata Size: 178KB - Virtual size: 286KB

.edata Size: 269KB - Virtual size: 541KB

.data Size: 145KB - Virtual size: 243KB

.rsrc Size: 160KB - Virtual size: 159KB

.reloc Size: 1024B - Virtual size: 734B

.text
Size: 44KB - Virtual size: 524KB

.edata
Size: 178KB - Virtual size: 286KB

.edata
Size: 269KB - Virtual size: 541KB

.data
Size: 145KB - Virtual size: 243KB

.rsrc
Size: 160KB - Virtual size: 159KB

.reloc
Size: 1024B - Virtual size: 734B