a283cc8ea47527365eca82779a3b20b42518caa225ad5664ebc686ff25fb59f3

Sharing

Copy URL Twitter E-mail

General

Target

a283cc8ea47527365eca82779a3b20b42518caa225ad5664ebc686ff25fb59f3
Size

250KB
MD5

e659eaaa8380fe18bfebe231d6e0a241
SHA1

247667735505accc09fa8159cad188a0b745601a
SHA256

a283cc8ea47527365eca82779a3b20b42518caa225ad5664ebc686ff25fb59f3
SHA512

5cc8e4ae371855a33f2fe5115cf182b1dcfc7a5b7a8ac5465abe6e3d01361bba5e3d91efbf7a88edb879fd258b359a293189d432c694aadf475f0a47409c2587
SSDEEP

6144:gALDWn7bRNEl+R6yxL9yT6JbzR+J1J5QZK2nbREoIr/R:gSkHRNBBVi6JHMJ+Rnb65

Score

N/A

Malware Config

Signatures

Files

a283cc8ea47527365eca82779a3b20b42518caa225ad5664ebc686ff25fb59f3
.exe windows x86

b4ef01b32e24d87cf8c9bd290a77f88b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateGuid
IIDFromString
StringFromGUID2
CoCreateInstance

user32

CopyIcon
DestroyIcon
GetSystemMetrics
LoadIconW

kernel32

FindResourceW
WaitForSingleObject
FreeLibrary
UnhandledExceptionFilter
LockResource
GetCurrentThreadId
SizeofResource
LocalAlloc
HeapFree
HeapAlloc
lstrlenA
GetDriveTypeW
OpenProcess
WTSGetActiveConsoleSessionId
DisableThreadLibraryCalls
CreateFileW
GetFileAttributesExW
LeaveCriticalSection
IsDebuggerPresent
HeapReAlloc
FormatMessageW
GetProcessHeap
GetLongPathNameW
RaiseException
FindResourceExW
lstrlenW
LoadResource
HeapSize
CompareStringW
DeleteFileW
HeapDestroy
SetFileAttributesW
DeleteCriticalSection
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
EnterCriticalSection
SystemTimeToFileTime
VirtualAllocEx

iphlpapi

NotifyRouteChange
NotifyAddrChange

netapi32

NetShareEnum
NetApiBufferFree

certcli

CAOIDCreateNew
CAGetCAFlags
CARemoveCACertificateType
CAUpdateCA
CACloseCertType
CASetCertTypeProperty
CACreateNewCA

compstui

CommonPropertySheetUIA
CommonPropertySheetUIW
GetCPSUIUserData

Sections

.text
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.JhpAdhv
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.VtqFdhv
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gTIGgxD
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wHbp
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b4ef01b32e24d87cf8c9bd290a77f88b

Headers

DLL Characteristics

File Characteristics

Imports

ole32

user32

kernel32

iphlpapi

netapi32

certcli

compstui

Sections

.text Size: 224KB - Virtual size: 224KB

.JhpAdhv Size: 3KB - Virtual size: 2KB

.VtqFdhv Size: 1024B - Virtual size: 777B

.rdata Size: 2KB - Virtual size: 32KB

.gTIGgxD Size: 2KB - Virtual size: 2KB

.data Size: 7KB - Virtual size: 308KB

.rsrc Size: 4KB - Virtual size: 3KB

.wHbp Size: 5KB - Virtual size: 4KB

.text
Size: 224KB - Virtual size: 224KB

.JhpAdhv
Size: 3KB - Virtual size: 2KB

.VtqFdhv
Size: 1024B - Virtual size: 777B

.rdata
Size: 2KB - Virtual size: 32KB

.gTIGgxD
Size: 2KB - Virtual size: 2KB

.data
Size: 7KB - Virtual size: 308KB

.rsrc
Size: 4KB - Virtual size: 3KB

.wHbp
Size: 5KB - Virtual size: 4KB