8ad32fa794edea97fcd1a27dc8f3335c19284dbbcd982ddf8c2051bc4bad0b07

Sharing

Copy URL

Twitter E-mail

General

Target

8ad32fa794edea97fcd1a27dc8f3335c19284dbbcd982ddf8c2051bc4bad0b07
Size

829KB
MD5

01df07e97f6c63e568e1a66ade389640
SHA1

08ca1396b18704ab19819477a23658423f7d5d96
SHA256

8ad32fa794edea97fcd1a27dc8f3335c19284dbbcd982ddf8c2051bc4bad0b07
SHA512

f6fed611aa49f90aecbc1db8df73cf5778bd67d806b5ac362eafe2c0cb5f4a1468355f7a0552dc3b42d5749ebf91dad1e114492085e22a72ffad954b38379111
SSDEEP

12288:S443XWTM3IGx6LIN1WMZrorgOMq3uCz5fGojdOJl1IOp3ima1EwLj5nAZ04A:gXuMb1orgZMdOJl1rAv1M4

Score

N/A

Malware Config

Signatures

Files

8ad32fa794edea97fcd1a27dc8f3335c19284dbbcd982ddf8c2051bc4bad0b07
.exe windows x86

be5dd05f82dc3c0a41108b57ddc78943

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

ReportEventW
BuildTrusteeWithObjectsAndSidW
RegSetValueExW
FreeSid
AddAccessDeniedAce
LookupAccountSidW
DeregisterEventSource
CryptAcquireContextW
CreateProcessAsUserW
RegDisablePredefinedCache
QueryServiceConfigW
LsaQuerySecret
GetServiceDisplayNameA
RegDeleteKeyA
SetTokenInformation
CryptSetProvParam
RegisterServiceCtrlHandlerA
CryptContextAddRef
RegQueryMultipleValuesA

ole32

CreateClassMoniker
CoSuspendClassObjects
CoTaskMemRealloc
OleDuplicateData
HGLOBAL_UserSize
GetHGlobalFromStream
FreePropVariantArray
CoGetInterfaceAndReleaseStream
CLIPFORMAT_UserMarshal
MonikerCommonPrefixWith
CoGetObjectContext
CreateGenericComposite
CoGetMarshalSizeMax
CLSIDFromString
CoRegisterClassObject
OleFlushClipboard
HICON_UserUnmarshal
OleSaveToStream
CoTreatAsClass
HBITMAP_UserUnmarshal
OleSetMenuDescriptor
CLIPFORMAT_UserSize
CoEnableCallCancellation
OleCreate
CreateStreamOnHGlobal
StgConvertPropertyToVariant
CoRevokeClassObject
HBITMAP_UserSize
HWND_UserMarshal
CoCancelCall
UpdateDCOMSettings
HWND_UserFree

odbc32

CursorLibLockDbc
CursorLibTransact
ValidateErrorQueue
SearchStatusCode
PostODBCError
CursorLibLockStmt
VRetrieveDriverErrorsRowCol
SQLTablePrivilegesA
LockHandle
PostODBCComponentError
VFreeErrors
CursorLibLockDesc

kernel32

GetVolumePathNameW
lstrcpyW
VirtualAlloc
SetEvent
DuplicateHandle
SetFileTime
GetUserDefaultLCID
SetHandleCount
GetConsoleWindow
CloseHandle
HeapFree
SetThreadExecutionState
SetCommTimeouts
GetVolumeNameForVolumeMountPointA
InterlockedExchangeAdd
DeleteTimerQueueTimer
FindNextChangeNotification
lstrcpynW
GetPrivateProfileStringW
PostQueuedCompletionStatus
GetSystemDefaultLangID
LoadLibraryW

shlwapi

PathUndecorateW
PathIsNetworkPathW
SHRegGetUSValueW
AssocIsDangerous
UrlIsW
StrRetToBufW
PathCompactPathA
PathRenameExtensionW
StrCSpnW
UrlCombineA
StrRChrIA
StrCmpLogicalW
PathCombineA
PathRemoveBackslashW
StrSpnW
StrCmpW
StrFormatByteSizeW
wvnsprintfA
SHCreateStreamOnFileEx
SHCreateStreamOnFileW
PathGetArgsA
PathRemoveBlanksW
PathAddExtensionW
StrCmpIW
ColorHLSToRGB

setupapi

SetupDiCreateDeviceInterfaceRegKeyW
SetupDiDestroyDriverInfoList
SetupDiGetClassDevsExW
SetupOpenLog
SetupCommitFileQueueW
SetupGetSourceFileLocationW
CM_Get_Child
SetupDiEnumDriverInfoA
SetupDiInstallDevice
CM_Setup_DevNode
pSetupStringFromGuid
SetupDiGetSelectedDriverA
SetupDiGetDeviceInstanceIdA
SetupGetLineTextA
SetupDiSetSelectedDriverW
SetupDiEnumDriverInfoW
SetupInstallFromInfSectionW
SetupCloseLog
SetupDiGetINFClassW
SetupQueueCopyIndirectW
SetupQueryInfVersionInformationW
CM_Get_Device_ID_Size
SetupOpenInfFileW
SetupPromptReboot
SetupDiGetDeviceInterfaceDetailW
SetupCloseInfFile
SetupDiOpenClassRegKeyExW
SetupSetDirectoryIdExW

netapi32

NetUserGetInfo
NetWkstaUserGetInfo
NetGroupGetUsers
NetUnregisterDomainNameChangeNotification
NetRemoteTOD
NetGroupGetInfo
NetpwNameValidate
NetUserChangePassword
NetGroupDelUser
NetGroupEnum
NetLocalGroupSetInfo
NetLocalGroupDelMembers
NetAlertRaiseEx
NetUseDel
NetGetJoinInformation
NetServerGetInfo
NetApiBufferFree
NetLocalGroupGetMembers
NetMessageBufferSend
NetValidateName
NetLocalGroupAdd
NetGetDCName
NetLocalGroupEnum
NetQueryDisplayInformation
NetServiceInstall
NetServiceEnum

Sections

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 233B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 25KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CRT
Size: 172KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 48KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 151KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 104KB - Virtual size: 270KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 204KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be5dd05f82dc3c0a41108b57ddc78943

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

ole32

odbc32

kernel32

shlwapi

setupapi

netapi32

Sections

.idata Size: 10KB - Virtual size: 9KB

.idata Size: 1024B - Virtual size: 233B

.idata Size: 2KB - Virtual size: 1KB

.text Size: 25KB - Virtual size: 342KB

CRT Size: 172KB - Virtual size: 217KB

.idata Size: 48KB - Virtual size: 76KB

.bss Size: 151KB - Virtual size: 196KB

.edata Size: 104KB - Virtual size: 270KB

DATA Size: 204KB - Virtual size: 232KB

.rsrc Size: 110KB - Virtual size: 109KB

.reloc Size: 1024B - Virtual size: 578B

.idata
Size: 10KB - Virtual size: 9KB

.idata
Size: 1024B - Virtual size: 233B

.idata
Size: 2KB - Virtual size: 1KB

.text
Size: 25KB - Virtual size: 342KB

CRT
Size: 172KB - Virtual size: 217KB

.idata
Size: 48KB - Virtual size: 76KB

.bss
Size: 151KB - Virtual size: 196KB

.edata
Size: 104KB - Virtual size: 270KB

DATA
Size: 204KB - Virtual size: 232KB

.rsrc
Size: 110KB - Virtual size: 109KB

.reloc
Size: 1024B - Virtual size: 578B