ae2f17ba8b9fc7e36c44c94cacb377860d6a78e86ba67a52f81269e41969ab0b

Sharing

Copy URL Twitter E-mail

General

Target

ae2f17ba8b9fc7e36c44c94cacb377860d6a78e86ba67a52f81269e41969ab0b
Size

132KB
MD5

db4102f84ceef77d708214559fbaf619
SHA1

74f4a71c8b3c40d18ffaf2539716e2443f5e0c5c
SHA256

ae2f17ba8b9fc7e36c44c94cacb377860d6a78e86ba67a52f81269e41969ab0b
SHA512

cae8a4e9b11281ac2467afce53290eb628e25f8dcd08306486c382916e077e400521ba870b8cf2dc2782c246b15f37a395ddc711e388928ef629cf3ce9aff823
SSDEEP

3072:xMZA4XoGJ42k62s8lrEw1s2Y9bM7KvsJD2G:sTXo04GEhH1MI7rZ

Score

N/A

Malware Config

Signatures

Files

ae2f17ba8b9fc7e36c44c94cacb377860d6a78e86ba67a52f81269e41969ab0b
.exe windows x86

df9f2b5e8d5e3e5964047e67290c1410

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
GetCurrentThread
HeapAlloc
GetSystemInfo
GetProfileSectionA
PulseEvent
GetProfileStringA
SetConsoleCtrlHandler
GetPriorityClass
GetLocaleInfoA
GetGeoInfoA
LZOpenFileW
FatalAppExitA
GetOEMCP
LoadLibraryW
GetConsoleCommandHistoryA
WriteProfileSectionA
RegisterWowExec
FatalExit
GetModuleHandleW
SetNamedPipeHandleState
DisconnectNamedPipe

msvcrt

exit
putwc
_mbctohira
_stat
_ismbcl2
_makepath
_ecvt
_futime64
_fileno
__p__commode
_mktemp
_wcsset
__set_app_type
_filelengthi64
_strtime
_adj_fdivr_m32i
_stricoll
__getmainargs
_splitpath
_lfind
_wchdir
_adj_fdiv_m32
_swab
isalnum
_CIatan
__RTDynamicCast
___setlc_active_func

shlwapi

DllGetVersion
SHRegOpenUSKeyA
UrlGetPartA
PathRemoveBackslashW
PathBuildRootW
GetMenuPosFromID
PathMakePrettyA
UrlIsOpaqueA
PathAppendA
SHSetValueW
UrlIsA
SHGetValueW

esent

JetAttachDatabase
JetMakeKey@20
JetOpenFile
JetAttachDatabase2
JetCompact
JetGetTableIndexInfo
JetOpenDatabase
JetPrepareToCommitTransaction
JetReadFileInstance
JetBackup
JetEndExternalBackup
JetTruncateLogInstance
JetBeginTransaction@4
JetSetLS
JetBeginTransaction2
JetSeek
JetGetLS
JetEnumerateColumns
JetCloseFileInstance
JetInit
JetSetTableSequential
JetOSSnapshotFreeze

wshrm

WSHSetSocketInformation
WSHJoinLeaf
WSHEnumProtocols
WSHGetSockaddrType
WSHGetProviderGuid
WSHOpenSocket
WSHGetWildcardSockaddr
WSHNotify
WSHGetWSAProtocolInfo
WSHAddressToString
WSHGetWinsockMapping
WSHStringToAddress
WSHIoctl
WSHGetBroadcastSockaddr
WSHGetSocketInformation
WSHOpenSocket2

resutils

ResUtilSetBinaryValue
ResUtilSetResourceServiceEnvironment
ResUtilIsPathValid
ResUtilFindDwordProperty
ClusWorkerCreate
ResUtilEnumProperties
ResUtilVerifyPrivatePropertyList
ResUtilGetResourceDependencyByClass
ResUtilStopService
ResUtilFreeEnvironment
ResUtilFreeParameterBlock
ResUtilGetDwordValue
ResUtilPropertyListFromParameterBlock
ResUtilSetSzValue

user32

DefWindowProcW
RegisterClassW
PostQuitMessage

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

df9f2b5e8d5e3e5964047e67290c1410

Headers

File Characteristics

Imports

kernel32

msvcrt

shlwapi

esent

wshrm

resutils

user32

Sections

.text Size: 74KB - Virtual size: 74KB

.rdata Size: 46KB - Virtual size: 46KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 74KB - Virtual size: 74KB

.rdata
Size: 46KB - Virtual size: 46KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 5KB - Virtual size: 5KB