a3dc58a39f2c301ece74d5aaeecaa550b7b81cd5b5a7d4e5818df91760d692c3

Sharing

Copy URL Twitter E-mail

General

Target

a3dc58a39f2c301ece74d5aaeecaa550b7b81cd5b5a7d4e5818df91760d692c3
Size

156KB
MD5

38e16ed3feab4c08229d1c7fd4fafa40
SHA1

678893e285dd53c9b09881c33bcf154b64da0df3
SHA256

a3dc58a39f2c301ece74d5aaeecaa550b7b81cd5b5a7d4e5818df91760d692c3
SHA512

55a143846b8a9650da7c9c35429ea01f4474fa92e491ecbdc539642fb54928523dae368c38bd6ef5f521360ae44eaa1a820eedb1f87414bae19b4440d1b1507d
SSDEEP

3072:tHRL19vSPMF+y0J3j4r0GHKrvA/3fGxoYiGaEn48mmAwTK:tHRL1xSPMF+y4jtHrvAvaoLfO48mmN+

Score

N/A

Malware Config

Signatures

Files

a3dc58a39f2c301ece74d5aaeecaa550b7b81cd5b5a7d4e5818df91760d692c3
.exe windows x86

99895b5b7167417882ef55e8544e0e87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
GetLastError
GlobalMemoryStatusEx
GetProcessHeap
GetCurrentProcess
SetFileAttributesA
ReleaseMutex
GetTickCount
CloseHandle
CreateMutexA
GetStartupInfoA
GetModuleHandleA
lstrcpyA
GetDriveTypeA
GetVersionExA
lstrcmpA
lstrcatA
lstrlenA
Sleep
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
GetProcAddress

user32

GetForegroundWindow
GetAsyncKeyState
GetKeyState
SetCapture
WindowFromPoint
SetCursorPos
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetSystemMetrics
LoadCursorA
ReleaseDC
SetRect
GetCursorPos
wsprintfA
SetProcessWindowStation
OpenWindowStationA
GetProcessWindowStation
GetWindowThreadProcessId
IsWindowVisible
CloseDesktop
GetThreadDesktop
IsWindow
CharNextA
GetWindowTextA
SendMessageA
CloseWindow
CreateWindowExA
PostMessageA
OpenDesktopA

gdi32

DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateCompatibleBitmap
GetDIBits
DeleteObject

advapi32

RegEnumKeyExA
ControlService
DeleteService
CloseServiceHandle
RegQueryValueA
RegCloseKey
LsaOpenPolicy
LsaRetrievePrivateData
LsaClose
LookupAccountNameA
IsValidSid
OpenServiceA
OpenSCManagerA
RegSetValueExA
RegCreateKeyA
SetNamedSecurityInfoA
BuildExplicitAccessWithNameA
GetNamedSecurityInfoA
SetEntriesInAclA
RegQueryValueExA
RegOpenKeyA
RegCreateKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
GetTokenInformation
LookupAccountSidA
DuplicateTokenEx
SetTokenInformation
CreateProcessAsUserA
RegDeleteKeyA
RegDeleteValueA
OpenProcessToken
RegEnumValueA
AllocateAndInitializeSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
RegSetKeySecurity
FreeSid
QueryServiceStatus

shell32

SHGetFileInfoA
SHGetSpecialFolderPathA

shlwapi

SHDeleteKeyA

msvcrt

_strnicmp
strtok
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
calloc
_beginthreadex
strncat
_strupr
_errno
atoi
strncmp
strcat
rename
strrchr
_except_handler3
free
??3@YAXPAX@Z
__CxxFrameHandler
_CxxThrowException
memcpy
memmove
ceil
_ftol
strlen
strstr
memset
??2@YAPAXI@Z
strcpy
strchr
malloc
strcmp

ws2_32

select
send
inet_ntoa
inet_addr
getsockname
bind
getpeername
accept
listen
sendto
closesocket
__WSAFDIsSet
gethostname
ntohs
socket
gethostbyname
connect
setsockopt
WSAStartup
WSACleanup
recvfrom
recv
WSAIoctl
htons

msvcp60

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ

wtsapi32

WTSQueryUserToken

userenv

CreateEnvironmentBlock

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99895b5b7167417882ef55e8544e0e87

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

msvcrt

ws2_32

msvcp60

wtsapi32

userenv

Sections

.text Size: 120KB - Virtual size: 119KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 16KB - Virtual size: 18KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 120KB - Virtual size: 119KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 16KB - Virtual size: 18KB

.rsrc
Size: 4KB - Virtual size: 1KB