c0ea0f0b25e06a4fbf2a9893c371f7a58b0040e386a36cef96b091319adfc98c

Sharing

Copy URL Twitter E-mail

General

Target

c0ea0f0b25e06a4fbf2a9893c371f7a58b0040e386a36cef96b091319adfc98c
Size

348KB
MD5

93e7593cce99046b0c2a9a2f8bf5d193
SHA1

fade446a264c96f1b417c0ea9462f3477e0e0aed
SHA256

c0ea0f0b25e06a4fbf2a9893c371f7a58b0040e386a36cef96b091319adfc98c
SHA512

7df58812d9159dbe872212d84d4f3188cf4be7ef696d5b0eea99dca53f7368c261c303ce305533b483754b85cc1616ea5d78dbbc7d93e95d7f826cdccf80180d
SSDEEP

6144:9nglW0DMGXexJQUXjFn6U8Q3HdC5D+XsLhkRVnA2KBgldQG3tI6CxhDL6:xn0QGXDrT5HhkTAbg8UI

Score

N/A

Malware Config

Signatures

Files

c0ea0f0b25e06a4fbf2a9893c371f7a58b0040e386a36cef96b091319adfc98c
.exe windows x86

4cd1e73b47265e77d7958a497350e700

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
_snprintf
sprintf
_vsnprintf
memcpy
strrchr
strcmp
wcsncpy
_wcsicmp
memmove
wcsstr
_except_handler3
_adjust_fdiv
malloc
_initterm
free
_snwprintf

advapi32

ChangeServiceConfigW
FreeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetLengthSid
RegOpenKeyExA
AllocateAndInitializeSid
RegQueryValueExA
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegOpenKeyW
CloseServiceHandle
StartServiceW
RegEnumValueA
ChangeServiceConfig2W
CreateServiceW
OpenServiceW
OpenSCManagerW
RegDeleteValueW
QueryServiceStatus
ControlService
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyW
RegCreateKeyExW
RegSetValueExA
RegCreateKeyA
RegSetValueW
RegCreateKeyExA

gdi32

GetStockObject
BitBlt
CreateCompatibleBitmap
SelectObject
DeleteDC
CreateSolidBrush
GetDeviceCaps
CreatePen
CreateCompatibleDC
CreateDCW
ExtCreatePen
AddFontResourceA
CreateFontIndirectW

kernel32

lstrcatW
TlsSetValue
GetSystemDirectoryW
GetComputerNameExW
DeleteFileA
FreeLibrary
GetProcAddress
TlsAlloc
LeaveCriticalSection
LoadLibraryA
FindResourceA
LoadLibraryW
ReadFile
GetLastError
Sleep
InterlockedIncrement
WaitForSingleObject
LocalFree
CloseHandle
GetOEMCP
GlobalFree
GetStdHandle
ReleaseMutex
GetVersion
CompareStringW
ResetEvent
FindAtomA
GetPrivateProfileStringW
GetVersionExA
lstrlenA
GetWindowsDirectoryW
CreateProcessW
GetModuleHandleA
DeleteFileW
lstrcmpiW
lstrcmpW
MultiByteToWideChar
lstrcpyA
CompareStringA
lstrcpynW
GetTempFileNameA
DisableThreadLibraryCalls
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
CreateSemaphoreA
GetThreadLocale
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetACP
GetUserDefaultUILanguage
GetComputerNameW
GetSystemDefaultUILanguage
SetUnhandledExceptionFilter
lstrlenW
SetFileAttributesA
lstrcpyW
TlsFree
SetLastError
LocalAlloc
GetAtomNameA
GetModuleHandleW
GetSystemDefaultLangID
InterlockedExchange
PulseEvent
GetModuleFileNameW
CreateThread
WriteFile
AddAtomA
FormatMessageW
CreateEventW
HeapFree
FindNextFileA
CreateMutexA
EnterCriticalSection
HeapAlloc
SetFilePointer
GetProcessHeap
GetCommandLineA
FlushFileBuffers
SetFilePointerEx
GetStartupInfoA
GetConsoleOutputCP
OpenEventA
OpenEventW
OpenSemaphoreA
GlobalAlloc
SetEvent
WaitForSingleObjectEx
CreateFileA
FindResourceW
ExpandEnvironmentStringsA
GetLocalTime
GetModuleFileNameA
lstrcpynA
GlobalMemoryStatusEx
HeapCreate
CreateMutexW

user32

FindWindowW
SetForegroundWindow
FindWindowExA
wsprintfW
ShowWindow
CountClipboardFormats
SetWindowTextW
UnregisterClassA
GetCaretBlinkTime
GetForegroundWindow
GetClipboardSequenceNumber
FindWindowA
SystemParametersInfoW
LoadCursorA
LoadIconA
GetInputState
MessageBoxW
LoadIconW
SetDlgItemTextW
TranslateMessage
DispatchMessageA
SendDlgItemMessageW
ReleaseDC
GetDoubleClickTime
GetDlgItem
SendMessageA
UpdateWindow
SetFocus
GetMessageA
GetSysColor
GetDesktopWindow
LoadStringW
IsWindow
GetFocus
GetProcessDefaultLayout
GetWindowLongW
LoadMenuA
SetWindowLongW
GetParent
DefWindowProcA
SendMessageW
GetDC
GetCursor
PostQuitMessage
CharNextW
GetActiveWindow

ole32

CoInitialize
CoUninitialize
CoCreateInstance

cfgmgr32

CM_Get_DevNode_Status

setupapi

SetupDefaultQueueCallbackW
SetupGetStringFieldW
SetupFindFirstLineW
SetupDiRegisterDeviceInfo
SetupCloseInfFile
SetupDiGetActualSectionToInstallW
SetupOpenInfFileW
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
SetupDiGetSelectedDevice
SetupQueryInfVersionInformationW
SetupGetInfInformationW
SetupDiGetDriverInstallParamsW
SetupDiEnumDriverInfoW
SetupDiGetDeviceRegistryPropertyW
SetupDiOpenDevRegKey
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiClassGuidsFromNameW
SetupDiSetSelectedDevice
SetupDiOpenDeviceInterfaceRegKey
SetupDiEnumDeviceInterfaces
SetupDiSetClassInstallParamsW
SetupDiGetClassInstallParamsW
SetupDiGetWizardPage
SetupDiCallClassInstaller
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiCreateDeviceInfoW
SetupDiClassNameFromGuidW
SetupDiCreateDeviceInfoList
SetupDiRemoveDevice
SetupDiDeleteDevRegKey
SetupDiRemoveDeviceInterface
SetupDiDeleteDeviceInterfaceRegKey
SetupDiGetDeviceInterfaceDetailW
SetupFindNextLine
SetupDiCreateDeviceInterfaceRegKeyW
SetupOpenAppendInfFileW
SetupDiCreateDeviceInterfaceW
SetupTermDefaultQueueCallback
SetupDiInstallDevice
SetupInitDefaultQueueCallbackEx
SetupDiCreateDevRegKeyW
SetupDiSetDriverInstallParamsW

shell32

SHGetFolderPathW

mscms

InstallColorProfileW
AssociateColorProfileWithDeviceW

Sections

.text
Size: 122KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 212KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4cd1e73b47265e77d7958a497350e700

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

gdi32

kernel32

user32

ole32

cfgmgr32

setupapi

shell32

mscms

Sections

.text Size: 122KB - Virtual size: 120KB

.data Size: 212KB - Virtual size: 241KB

.bss Size: - Virtual size: 5KB

.tls Size: 2KB - Virtual size: 1KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 122KB - Virtual size: 120KB

.data
Size: 212KB - Virtual size: 241KB

.bss
Size: - Virtual size: 5KB

.tls
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 5KB - Virtual size: 5KB