948b927a3b5fcebdadcd4e852dc83f7e9454a591d54b007b5c7456399c99446d

Sharing

Copy URL Twitter E-mail

General

Target

948b927a3b5fcebdadcd4e852dc83f7e9454a591d54b007b5c7456399c99446d
Size

196KB
MD5

d476e43c7c0aeeafbda088b45253c97f
SHA1

4787fe0e9ab32c4ddb14af0625f02963772d42cd
SHA256

948b927a3b5fcebdadcd4e852dc83f7e9454a591d54b007b5c7456399c99446d
SHA512

02658e6b1e19d8530dc0f18d76b4cf8d1c0c01b1832855cea88ea1a633ae5a33994e552ba0d5a710b8795595565745153c300cae5568337c1627d3a5315008f0
SSDEEP

3072:0DElnxiLIRPe26HOkdsRc1kRY4/yBE0oMeAORpQ3z3qomFYk:XY0C6m1kLvpqD8F

Score

N/A

Malware Config

Signatures

Files

948b927a3b5fcebdadcd4e852dc83f7e9454a591d54b007b5c7456399c99446d
.dll windows x86

8769bf10e41af045096d52cc19078fe6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
ReadFile
FindFirstFileW
FindClose
FindNextFileW
GetCurrentProcessId
GetComputerNameW
VirtualAlloc
VirtualFree
SetFilePointer
DeviceIoControl
GetFileAttributesW
TlsSetValue
TlsGetValue
GetTickCount
GetSystemTimeAsFileTime
SetFileAttributesW
SetPriorityClass
ExpandEnvironmentStringsW
LoadLibraryA
CreateEventW
SetProcessShutdownParameters
SetConsoleCtrlHandler
SetEnvironmentVariableW
GetEnvironmentVariableW
IsDebuggerPresent
GetOEMCP
GetACP
GetCPInfo
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
HeapReAlloc
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
GetVersion
RtlUnwind
HeapFree
HeapAlloc
RaiseException
TlsAlloc
GetStringTypeW
CreateSemaphoreW
ReleaseMutex
GetUserDefaultLCID
CompareFileTime
DeleteFileW
lstrcatW
GetModuleFileNameW
lstrcpynW
lstrcmpiW
LCMapStringW
lstrcpyW
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
DisableThreadLibraryCalls
InterlockedCompareExchange
InterlockedExchange
LocalFree
LockResource
CreateThread
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
LoadResource
GetExitCodeThread
WaitForSingleObject
Sleep
GetCommandLineW
CreateMutexW
InterlockedIncrement
GetProcAddress
FreeLibrary
InterlockedDecrement
lstrlenW
GetCurrentThreadId
lstrcmpW
FormatMessageW
CreateFileW
CreateProcessW
CloseHandle
FindResourceExW
VirtualProtect
GetStringTypeA
GetCommandLineA

user32

SetWindowTextW
EnableWindow
SendMessageW
GetDlgItem
DestroyMenu
ClientToScreen
InsertMenuW
EndDialog
TranslateMessage
PeekMessageW
SetForegroundWindow
GetLastActivePopup
FindWindowW
GetDlgCtrlID
LoadImageW
MessageBoxW
DefWindowProcW
CharNextW
SendMessageA
LoadStringW
DispatchMessageW
GetWindowTextW
GetSystemMetrics
GetWindowRect
IsWindowEnabled
ShowWindow
GetClientRect
SetWindowLongW
GetWindowLongW
SetTimer
CharLowerW
GetDC
ReleaseDC
SystemParametersInfoW
ScreenToClient
CreateWindowExW
SetWindowPos
PostMessageW
CallWindowProcW
TrackPopupMenu

advapi32

LsaClose
CryptReleaseContext
CryptDestroyKey
CryptDecrypt
CryptGenRandom
RevertToSelf
RegCloseKey
ReportEventW
RegisterEventSourceW
CryptAcquireContextW
CryptGetUserKey
RegQueryValueExW
RegOpenKeyW
RegSetValueExW
IsTokenRestricted
RegCreateKeyExW
ElfReportEventW
LsaOpenPolicy
LsaQueryInformationPolicy
ImpersonateLoggedOnUser
LsaSetInformationPolicy
LsaSetDomainInformationPolicy
RegCreateKeyW
SystemFunction007
RegDeleteValueW
RegDeleteKeyW
OpenProcessToken
GetTokenInformation
IsValidSid
GetSidSubAuthority
GetSidSubAuthorityCount
RegOpenKeyExW
LsaFreeMemory

gdi32

SelectObject
ExtTextOutW
SetTextColor
DeleteObject
CreateFontIndirectW
LineDDA
LineTo
MoveToEx
CreatePen
SetBkColor
GetDeviceCaps
GetLayout

ole32

CoCreateGuid
PropVariantClear
CoTaskMemFree
StringFromGUID2
CoInitialize
CoCreateInstance
CoUninitialize

rpcrt4

RpcImpersonateClient
RpcRevertToSelf
RpcBindingInqAuthClientW
RpcStringFreeW
UuidToStringW
UuidCreate

Sections

.text
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8769bf10e41af045096d52cc19078fe6

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

ole32

rpcrt4

Sections

.text Size: 124KB - Virtual size: 121KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 16KB - Virtual size: 48KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 124KB - Virtual size: 121KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 16KB - Virtual size: 48KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 6KB