b17c4cf346dc281c0774203c144215b99cc168c1b338633afb8ff0952cb26bfc

Sharing

Copy URL Twitter E-mail

General

Target

b17c4cf346dc281c0774203c144215b99cc168c1b338633afb8ff0952cb26bfc
Size

240KB
MD5

f017a0fff018cdb3dd4a109bfcd26620
SHA1

d210baa49f0601df5dc9d39e67858ec5e5cc27af
SHA256

b17c4cf346dc281c0774203c144215b99cc168c1b338633afb8ff0952cb26bfc
SHA512

818796cab2157cf576c3bd0137434f4573b57ed8454027ada6e3982c7319a41dd8592a8ce5bcc5b5005197a33032f367464ffeedd8de546cc88a654d4cb7178b
SSDEEP

3072:L3JrbhV5lJFl2IOIQ6IJJcK90JbAdj6kCyuwO+1THkZ9HpNw/lqcOVPqCbQ21s1Q:L9bFl7l2IOn6bFvSTHkZdpNYqcOV18

Score

N/A

Malware Config

Signatures

Files

b17c4cf346dc281c0774203c144215b99cc168c1b338633afb8ff0952cb26bfc
.dll windows x86

5ab9d00c8a138e46d45170c76333ecde

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LocalReAlloc
MapViewOfFile
GetTempPathA
UnmapViewOfFile
TlsSetValue
ReleaseMutex
GetCurrentProcessId
InterlockedCompareExchange
GetVersionExA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
InterlockedExchange
lstrcpyW
lstrcatW
GetLocalTime
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
HeapReAlloc
VirtualAlloc
GetCPInfo
FindCloseChangeNotification
Sleep
FreeLibraryAndExitThread
GetCurrentThreadId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemTime
SystemTimeToFileTime
lstrcpyA
lstrcmpA
CompareFileTime
SetEvent
WriteFile
GetTempFileNameA
CreateDirectoryW
MultiByteToWideChar
SetFileAttributesW
SetFileAttributesA
GetFileAttributesW
GetFileAttributesA
CreateFileA
LocalAlloc
LocalFree
lstrcmpW
lstrlenW
GetComputerNameExW
GetComputerNameW
GetCurrentThread
InterlockedIncrement
InterlockedDecrement
GetCurrentProcess
CreateEventW
GetTickCount
UnregisterWaitEx
RegisterWaitForSingleObject
CreateEventA
lstrlenA
GetProcAddress
CreateProcessA
FreeLibrary
GetWindowsDirectoryA
DeleteFileA
RemoveDirectoryA
LoadLibraryA
GetVersion
CreateDirectoryA
MoveFileA
GetPrivateProfileStringA
WaitForSingleObject
GetSystemInfo
CloseHandle
WideCharToMultiByte
GetPrivateProfileSectionA
GetCommandLineA
GetLocaleInfoA
GetOEMCP
GetACP
HeapAlloc
UnhandledExceptionFilter
GetEnvironmentStringsW
GetLastError
RtlUnwind
VirtualQuery
ExitProcess
GetModuleHandleA
TerminateProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
QueryPerformanceCounter

user32

LoadBitmapA
GetKeyboardType
MessageBoxA
GetDlgItem
SetDlgItemTextA
SendDlgItemMessageA
GetDlgItemTextA
SetFocus

advapi32

RegSetValueExA
CryptDeriveKey
CryptDecrypt
CryptGenRandom
LookupPrivilegeValueA
AdjustTokenPrivileges
GetSecurityDescriptorOwner
GetSecurityDescriptorDacl
GetAce
CryptReleaseContext
OpenProcessToken
GetLengthSid
CopySid
GetSidSubAuthority
RegOpenKeyExW
RegQueryInfoKeyW
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyA
RegQueryInfoKeyA
CryptVerifySignatureA
CryptSetKeyParam
CryptHashSessionKey
CryptGetUserKey
CryptDuplicateHash
OpenThreadToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
CryptGetKeyParam
CryptGenKey
CryptImportKey
CryptDestroyKey
CryptExportKey
RegisterEventSourceW
ReportEventW
RegNotifyChangeKeyValue
RegCreateKeyExW
RegQueryValueExW
CryptHashData
RevertToSelf
CryptCreateHash
AllocateLocallyUniqueId
CryptAcquireContextW
CryptAcquireContextA
CryptDestroyHash
CryptGetHashParam
RegDeleteValueA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExA

ole32

CoCreateInstance
CoUninitialize
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
CoInitialize

Sections

.text
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5ab9d00c8a138e46d45170c76333ecde

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 183KB - Virtual size: 182KB

.rdata Size: 41KB - Virtual size: 40KB

.data Size: 4KB - Virtual size: 38KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 183KB - Virtual size: 182KB

.rdata
Size: 41KB - Virtual size: 40KB

.data
Size: 4KB - Virtual size: 38KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 8KB - Virtual size: 8KB