b92d2b62b1be594cae927c6f8a8d7c76343c9791cfde45653a32c7b99d8208f6

Sharing

Copy URL Twitter E-mail

General

Target

b92d2b62b1be594cae927c6f8a8d7c76343c9791cfde45653a32c7b99d8208f6
Size

250KB
MD5

8420f0343feed9d6424f7aa94f1b216c
SHA1

0b6ac3f21ee3e98834d489f231fb3027c472cf87
SHA256

b92d2b62b1be594cae927c6f8a8d7c76343c9791cfde45653a32c7b99d8208f6
SHA512

41d0f597b0b882a28841cc3a74e53f71200fcc5eb632fb767a13a298e02e738f446a9d4f29cc63cc3dcdeb3c67cd5ab4227389f4ecb71e03855029f233eb6202
SSDEEP

6144:NALDWn7bRNEl+R6yxL9yT6JbzR+J1J5QZK2nbREoIr/R:NSkHRNBBVi6JHMJ+Rnb65

Score

N/A

Malware Config

Signatures

Files

b92d2b62b1be594cae927c6f8a8d7c76343c9791cfde45653a32c7b99d8208f6
.exe windows x86

b4ef01b32e24d87cf8c9bd290a77f88b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateGuid
IIDFromString
StringFromGUID2
CoCreateInstance

user32

CopyIcon
DestroyIcon
GetSystemMetrics
LoadIconW

kernel32

FindResourceW
WaitForSingleObject
FreeLibrary
UnhandledExceptionFilter
LockResource
GetCurrentThreadId
SizeofResource
LocalAlloc
HeapFree
HeapAlloc
lstrlenA
GetDriveTypeW
OpenProcess
WTSGetActiveConsoleSessionId
DisableThreadLibraryCalls
CreateFileW
GetFileAttributesExW
LeaveCriticalSection
IsDebuggerPresent
HeapReAlloc
FormatMessageW
GetProcessHeap
GetLongPathNameW
RaiseException
FindResourceExW
lstrlenW
LoadResource
HeapSize
CompareStringW
DeleteFileW
HeapDestroy
SetFileAttributesW
DeleteCriticalSection
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
EnterCriticalSection
SystemTimeToFileTime
VirtualAllocEx

iphlpapi

NotifyRouteChange
NotifyAddrChange

netapi32

NetShareEnum
NetApiBufferFree

certcli

CAOIDCreateNew
CAGetCAFlags
CARemoveCACertificateType
CAUpdateCA
CACloseCertType
CASetCertTypeProperty
CACreateNewCA

compstui

CommonPropertySheetUIA
CommonPropertySheetUIW
GetCPSUIUserData

Sections

.text
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.JhpAdhv
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.VtqFdhv
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gTIGgxD
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wHbp
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b4ef01b32e24d87cf8c9bd290a77f88b

Headers

DLL Characteristics

File Characteristics

Imports

ole32

user32

kernel32

iphlpapi

netapi32

certcli

compstui

Sections

.text Size: 224KB - Virtual size: 224KB

.JhpAdhv Size: 3KB - Virtual size: 2KB

.VtqFdhv Size: 1024B - Virtual size: 777B

.rdata Size: 2KB - Virtual size: 32KB

.gTIGgxD Size: 2KB - Virtual size: 2KB

.data Size: 7KB - Virtual size: 308KB

.rsrc Size: 4KB - Virtual size: 3KB

.wHbp Size: 5KB - Virtual size: 4KB

.text
Size: 224KB - Virtual size: 224KB

.JhpAdhv
Size: 3KB - Virtual size: 2KB

.VtqFdhv
Size: 1024B - Virtual size: 777B

.rdata
Size: 2KB - Virtual size: 32KB

.gTIGgxD
Size: 2KB - Virtual size: 2KB

.data
Size: 7KB - Virtual size: 308KB

.rsrc
Size: 4KB - Virtual size: 3KB

.wHbp
Size: 5KB - Virtual size: 4KB