17e6f9a44128e0a671cfe60b4141e332653f90d9bc233f251feb23a263756120

Sharing

Copy URL

Twitter E-mail

General

Target

17e6f9a44128e0a671cfe60b4141e332653f90d9bc233f251feb23a263756120
Size

167KB
MD5

8326fe8301ca9fc84661aa112715a08a
SHA1

8d343bd05d41ad0f9c748a331381ab5b3b069923
SHA256

17e6f9a44128e0a671cfe60b4141e332653f90d9bc233f251feb23a263756120
SHA512

e2df3dd4bf4487f9e9026788492e588ed60ac3c3cdf6a8e4f1703ba96c4b6c7a131b43bb66e4eac7c50e33102cc999b4ad73cf016ea699f0b7947eb10d61f91e
SSDEEP

3072:5jyvKe2HmKfbuB+cGPPcBi2qqa4ZqzR8nCchDFdz:lyvl2GWuYcGPUBhqKdCs3

Score

N/A

Malware Config

Signatures

Files

17e6f9a44128e0a671cfe60b4141e332653f90d9bc233f251feb23a263756120
.exe windows x86

3515f25cf069455d98b3a849a8117d65

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
?classCCachedDataPathProperty@CCachedDataPathProperty@@2UCRuntimeClass@@B
?classCDataPathProperty@CDataPathProperty@@2UCRuntimeClass@@B

msoeacct

DllGetClassObject
HrCreateAccountManager
DllCanUnloadNow
ValidEmailAddress
GetDllMajorVersion

sqlwoa

_TranslateAccelerator@12
_CommDlg_OpenSave_GetFolderPath@12
_StartDoc@8
_GetWindowTextLength@4
_GetTextMetrics@8

user32

GetWindowTextA
GetClientRect
GetWindowTextW
GetDesktopWindow
FindWindowA
GetWindowRect
FindWindowW
GetForegroundWindow

kernel32

SetConsoleCursorPosition
VirtualAlloc
TerminateProcess
Thread32Next
lstrlenA

hid

HidD_GetPhysicalDescriptor
HidP_GetExtendedAttributes
HidD_GetProductString
HidP_GetLinkCollectionNodes
HidP_GetData

powrprof

ReadGlobalPwrPolicy
SetActivePwrScheme
IsPwrSuspendAllowed
WritePwrScheme
LoadCurrentPwrScheme

mtxlegih

TryLegInterfaceFirst

inseng

CheckTrust
GetICifFileFromFile
DownloadFile
GetICifRWFileFromFile
DllGetClassObject

shlwapi

StrTrimA
PathGetDriveNumberW
StrTrimW
PathRemoveBlanksA
PathStripToRootW

tapi32

phoneGetHookSwitch
lineDevSpecificFeature
lineGetAgentCapsW
phoneGetStatusW
lineCreateAgentW

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3515f25cf069455d98b3a849a8117d65

Headers

DLL Characteristics

File Characteristics

Imports

mfc42

msoeacct

sqlwoa

user32

kernel32

hid

powrprof

mtxlegih

inseng

shlwapi

tapi32

Sections

.text Size: 66KB - Virtual size: 66KB

.data Size: 98KB - Virtual size: 101KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 66KB - Virtual size: 66KB

.data
Size: 98KB - Virtual size: 101KB

.reloc
Size: 2KB - Virtual size: 1KB