bfcd8ea1bed99e227064dd5f253e45a07655dcb50d91924afba253ed92e2b9ff

Sharing

Copy URL Twitter E-mail

General

Target

bfcd8ea1bed99e227064dd5f253e45a07655dcb50d91924afba253ed92e2b9ff
Size

279KB
MD5

db0328400730578eaf825c57f4d1f48c
SHA1

556670919b27c72187570f70eaa2920aafe8bd94
SHA256

bfcd8ea1bed99e227064dd5f253e45a07655dcb50d91924afba253ed92e2b9ff
SHA512

beaadaa347905398c748300a5e80f9679581dacc13ecf368123724e410ecd5e28d47e00c9374dbb03534af598e483087af6bd16774b11b004d4c434f9032afec
SSDEEP

6144:pPSx9i2fj0k7cSIjh/Jm2jdDTU0SSkKO8jO0Uzh6wh:xSHi237cSIja2JbO8j9

Score

N/A

Malware Config

Signatures

Files

bfcd8ea1bed99e227064dd5f253e45a07655dcb50d91924afba253ed92e2b9ff
.exe windows x86

d40f29d428d42ae5504ff763fd0a8d41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

kernel32

DeleteFileA
FindNextFileA
SetEndOfFile
EnterCriticalSection
GetWindowsDirectoryA
LocalFree
RemoveDirectoryA
GetSystemTimeAsFileTime
WritePrivateProfileStringA
SetFileAttributesA
CloseHandle
HeapFree
HeapDestroy
EnumSystemLocalesA
GetShortPathNameA
GetACP
ReadFile
GetLogicalDriveStringsA
GetCommandLineA
FormatMessageA
CreateDirectoryA
FreeEnvironmentStringsA
GetStdHandle
RtlUnwind
FindFirstFileA
LeaveCriticalSection
GetUserDefaultLCID
GetCurrentThreadId
SetStdHandle
SetLastError
UnhandledExceptionFilter
SetEnvironmentVariableA
TlsFree
GetSystemDirectoryA
CreateFileA
IsBadCodePtr
CopyFileA
TlsGetValue
lstrcmpiA
CreateFileW
HeapReAlloc
HeapSize
SetFilePointer
FreeEnvironmentStringsW
HeapAlloc
VirtualProtect
CompareFileTime
GetTimeZoneInformation
SetUnhandledExceptionFilter
GetOEMCP
GetTempPathA
GetCurrentDirectoryA
SetConsoleCtrlHandler
LocalAlloc
OutputDebugStringA
GetFileSize
IsValidLocale
ExpandEnvironmentStringsA
MoveFileExA
DeleteFileW
GetTimeFormatA
RaiseException
TlsAlloc
VirtualFree
GetSystemInfo
CompareStringA
VirtualQuery
TlsSetValue
LCMapStringA
GetDateFormatA
IsValidCodePage
GetFileAttributesExA
DeleteCriticalSection
LCMapStringW
WritePrivateProfileSectionA
GetFileType
GetSystemTime
FindClose
WriteFile
GetPrivateProfileSectionA
LoadLibraryExA
CompareStringW
FatalAppExitA
GetThreadLocale
FileTimeToSystemTime
SetHandleCount
VirtualAlloc
GetModuleHandleA
WideCharToMultiByte
SystemTimeToFileTime
FlushFileBuffers
GetLocalTime
FreeLibrary
VirtualAllocEx

user32

GetSystemMetrics
LoadStringA
UnregisterClassA
CharUpperA

shlwapi

StrStrIA
PathAddBackslashA
PathAppendA

ole32

CoUninitialize
CoTaskMemFree
CoCreateInstance
CoInitialize
CoTaskMemAlloc

advapi32

OpenSCManagerA
RegCloseKey
CloseServiceHandle
QueryServiceStatus
RegSetValueExA
RegEnumKeyExA
RegEnumValueA
RegCreateKeyExA
RegFlushKey
ChangeServiceConfigA
SetSecurityDescriptorDacl
GetUserNameA
UnlockServiceDatabase
RegOpenKeyExA
StartServiceA
DeleteService
RegEnumKeyA
RegOpenKeyA
CreateServiceA
RegDeleteKeyA
RegQueryValueExA
RegQueryInfoKeyA
OpenServiceA
RegDeleteValueA
LockServiceDatabase
InitializeSecurityDescriptor
ControlService

rtm

RtmCloseEnumerationHandle
RtmReleaseNextHops
MgmGetProtocolOnInterface
RtmGetRouteAge
RtmGetLessSpecificDestination
RtmReleaseChangedDests
RtmReleaseEntities
RtmGetEnumDests
RtmGetChangedDests
RtmInvokeMethod
RtmIgnoreChangedDests
RtmUpdateAndUnlockRoute
MgmGroupEnumerationGetNext

cliconfg

CPlApplet

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 257KB - Virtual size: 419KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d40f29d428d42ae5504ff763fd0a8d41

Headers

File Characteristics

Imports

version

kernel32

user32

shlwapi

ole32

advapi32

rtm

cliconfg

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 257KB - Virtual size: 419KB

.rsrc Size: 2KB - Virtual size: 6KB

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 257KB - Virtual size: 419KB

.rsrc
Size: 2KB - Virtual size: 6KB