bd589cbfefdecb3829f7573e833872e45ea00f7ca7e87968bce8d5274918584e

Sharing

Copy URL Twitter E-mail

General

Target

bd589cbfefdecb3829f7573e833872e45ea00f7ca7e87968bce8d5274918584e
Size

273KB
MD5

d0db4220919fe70e5c89b135a572329e
SHA1

453329c75f020bb778ce7b07c59455954e26fb2d
SHA256

bd589cbfefdecb3829f7573e833872e45ea00f7ca7e87968bce8d5274918584e
SHA512

4afece96fa9b3cf8f91cb237629dca6bbbf1a407b270f3ecabd33cf3fd15934ecfa88e18625abd5733bb6114cafe3e7f2e376efddb1b64c37e8c8c0336b3090c
SSDEEP

6144:doGg5uUz8jBlzZSqg/QIrNtsJ4LhHrS1oW+Fn:dLfjBltSqg/JtsJ4LJrW

Score

N/A

Malware Config

Signatures

Files

bd589cbfefdecb3829f7573e833872e45ea00f7ca7e87968bce8d5274918584e
.exe windows x86

9ab5817626d4b6c3b9aa7601b8763dbf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileW

advapi32

RegCreateKeyExW
OpenProcessToken
StartTraceW
RegSetValueExW
RegOpenKeyExW
ControlTraceW
EnableTrace
RegCloseKey
RegQueryValueExW
LookupAccountSidW
GetTokenInformation
RegOpenKeyW
EnumerateTraceGuids
RegDeleteValueW

wininet

InternetCloseHandle

ole32

CoInitialize
CoUninitialize
CoTaskMemFree
CoCreateInstance

secur32

GetComputerObjectNameW

shell32

SHCreateDirectoryExW

crypt32

CryptMsgClose
CertFreeCertificateContext
CryptMsgGetParam
CryptHashPublicKeyInfo
CertCloseStore
CryptMsgGetAndVerifySigner
CryptQueryObject
CryptDecodeObject
CertGetCertificateChain
CertFreeCertificateChain
CertVerifyCertificateChainPolicy

kernel32

HeapSize
GetConsoleMode
GetCommandLineA
CancelWaitableTimer
LocalFree
FormatMessageW
SetHandleCount
MapViewOfFile
LocalAlloc
GetFileAttributesExW
WriteConsoleW
FindResourceExW
GetFileSizeEx
GetCurrentDirectoryW
CreateWaitableTimerW
UnhandledExceptionFilter
SetFilePointer
GetConsoleCP
lstrcmpA
TlsFree
CreateToolhelp32Snapshot
GetModuleHandleW
LeaveCriticalSection
GetTempPathW
LoadResource
ReadFile
CreateDirectoryW
Process32NextW
WaitForSingleObject
HeapAlloc
SetWaitableTimer
LCMapStringW
Process32FirstW
IsValidCodePage
SetUnhandledExceptionFilter
GetThreadLocale
GetUserDefaultLCID
ExpandEnvironmentStringsW
GetOEMCP
GetFileSize
GetFileType
FreeEnvironmentStringsW
GetSystemDirectoryW
MoveFileExW
IsProcessorFeaturePresent
SetStdHandle
CreateEventW
GetSystemTimeAsFileTime
RtlUnwind
FreeLibrary
HeapDestroy
CloseHandle
GlobalFree
FindResourceW
TlsAlloc
RemoveDirectoryW
SizeofResource
TlsGetValue
CreateThread
GetACP
LockResource
HeapReAlloc
CreateFileW
IsDebuggerPresent
DeleteCriticalSection
WriteFile
EnumSystemLocalesA
GetSystemInfo
InitializeCriticalSectionAndSpinCount
GetCommandLineW
CreateFileMappingW
RaiseException
GetProcessHeap
FlushFileBuffers
GetTempFileNameW
IsValidLocale
OpenProcess
SetLastError
TlsSetValue
HeapFree
GetStdHandle
EnterCriticalSection
GetCurrentThreadId
WideCharToMultiByte
DeleteFileW
VirtualAllocEx

wintrust

WinVerifyTrust

userenv

ExpandEnvironmentStringsForUserW

user32

PostThreadMessageW
PeekMessageW
MsgWaitForMultipleObjects
GetMessageW
DispatchMessageW
GetSystemMetrics
TranslateMessage
UpdateWindow

shlwapi

PathFindFileNameW
PathFileExistsW
PathCombineW
SHDeleteKeyW
PathFindExtensionW
PathRemoveFileSpecW

comctl32

CreateStatusWindow
ImageList_SetFilter
FlatSB_ShowScrollBar
DllGetVersion
ImageList_GetIcon
DrawStatusText

catsrv

DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllUnregisterServer

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 39KB - Virtual size: 947KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 175KB - Virtual size: 837KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 634KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ab5817626d4b6c3b9aa7601b8763dbf

Headers

File Characteristics

Imports

urlmon

advapi32

wininet

ole32

secur32

shell32

crypt32

kernel32

wintrust

userenv

user32

shlwapi

comctl32

catsrv

Sections

.text Size: 16KB - Virtual size: 16KB

.bss Size: 39KB - Virtual size: 947KB

.reloc Size: 175KB - Virtual size: 837KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 36KB - Virtual size: 634KB

.rsrc Size: 512B - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 16KB

.bss
Size: 39KB - Virtual size: 947KB

.reloc
Size: 175KB - Virtual size: 837KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 36KB - Virtual size: 634KB

.rsrc
Size: 512B - Virtual size: 1KB