164502baff9f039ec6d7c3290cad247a4f873027ad19bc8f465c910a5cec0d7e

Sharing

Copy URL Twitter E-mail

General

Target

164502baff9f039ec6d7c3290cad247a4f873027ad19bc8f465c910a5cec0d7e
Size

236KB
MD5

0efa290756c47062821ffdc6e0becf6a
SHA1

6bf4200e1c58d1fed1b5df0607a212d86c846277
SHA256

164502baff9f039ec6d7c3290cad247a4f873027ad19bc8f465c910a5cec0d7e
SHA512

0d6da2e4f8e9c638940e2da2faeb326852788ad19f020d4975642ec3177737f2d2a1fb3c680409d7f86068a5a279c6456790e5561b9b3a54362c065b597e99ca
SSDEEP

6144:ZWjrU26fy5pTxssdiDnCiROXgEoDVc6XFfNcnuH:Ujrif8rssdiDnHEUvc

Score

N/A

Malware Config

Signatures

Files

164502baff9f039ec6d7c3290cad247a4f873027ad19bc8f465c910a5cec0d7e
.exe windows x86

e1cfdff372d4dfe89bc91cc341e0f565

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetFileTitleA

advapi32

SystemFunction016
MSChapSrvChangePassword
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
LsaICLookupNamesWithCreds
GetAclInformation
LsaEnumeratePrivileges
AddUsersToEncryptedFile
OpenThreadToken
RegCloseKey
LockServiceDatabase
SetSecurityDescriptorControl

kernel32

FreeEnvironmentStringsA
RaiseException
lstrcatA
SetFileAttributesA
SetErrorMode
LocalFree
InterlockedDecrement
GlobalAddAtomA
GetModuleHandleA
FlushFileBuffers
ExitProcess
LockResource
Beep
VirtualFree
DuplicateHandle
FindNextFileA
InterlockedIncrement
CompareStringA
GetProcAddress
InitializeCriticalSection
FindResourceA
GetTimeZoneInformation
SystemTimeToFileTime
SetConsoleCursorInfo
GetStringTypeW
HeapCreate
WideCharToMultiByte
HeapSize
GetCurrentThread
HeapAlloc
GetCommandLineA
HeapReAlloc
TlsFree
LoadResource
GlobalFree
IsBadCodePtr
TlsSetValue
FileTimeToSystemTime
GlobalAlloc
lstrcpyA
lstrcmpA
LoadLibraryA
FindClose
GetWindowsDirectoryA
FlushInstructionCache
FileTimeToLocalFileTime
SetEndOfFile
UnhandledExceptionFilter
GetOEMCP
LocalFileTimeToFileTime
EnterCriticalSection
GetVersion
GetLastError
LocalAlloc
GetCurrentProcess
GetThreadLocale
TlsAlloc
IsBadReadPtr
FreeLibrary
LocalUnlock
WriteFile
DeleteCriticalSection
SetUnhandledExceptionFilter
GlobalFindAtomA
RtlUnwind
GlobalDeleteAtom
CompareStringW
GetFileTime
GetVersionExA
VirtualAlloc
SetConsoleTextAttribute
SetSystemTime
GetEnvironmentStringsW
GetFileAttributesA
lstrcpynA
GetDriveTypeA
SetStdHandle
GetStringTypeA
SetLastError
GetVolumeInformationA
LCMapStringA
GetProcessVersion
lstrcmpiA
SetFilePointer
LockFile
GetCPInfo
ReadFile
UnlockFile
lstrlenA
SetEnvironmentVariableA
SystemTimeToTzSpecificLocalTime
DeleteFileA
GetEnvironmentVariableA
GlobalGetAtomNameA
GetSystemDirectoryA
CreateFileA
GetFullPathNameA
GetStdHandle
SetHandleCount
HeapFree
MultiByteToWideChar
HeapDestroy
FindFirstFileA
GetFileType
GetEnvironmentStringsA
IsValidLocale
FreeEnvironmentStringsW
GetACP
LeaveCriticalSection
IsDebuggerPresent
GlobalUnlock
GetStartupInfoA
GetFileSize
LCMapStringW
IsBadWritePtr
GetCurrentThreadId
TlsGetValue
GlobalFlags
MulDiv
InitializeSListHead
DosDateTimeToFileTime
LocalReAlloc
CloseHandle
GlobalHandle
GetCurrentDirectoryA
GetModuleFileNameA
SetCurrentDirectoryA
Sleep
GlobalLock
ReleaseActCtx

gdi32

ScaleViewportExtEx
GetDeviceCaps
SetWindowExtEx
TextOutA
DeleteObject
GetRelAbs
SetViewportExtEx
GetClipBox
DeleteDC
RestoreDC
CreateDIBitmap
SetMapMode
RoundRect
CreateEllipticRgn

winmm

timeGetSystemTime
mixerOpen
mmioAdvance

user32

GetLastActivePopup
GetWindowLongA
PostMessageA
DestroyWindow
CopyRect
SetWindowLongA
IsWindowVisible
EndDialog
GetForegroundWindow
ValidateRect
CreateDialogIndirectParamA
CreateWindowExA
TranslateMessage
GetWindowPlacement
GetMenu
EnableWindow
LoadStringA
ReleaseDC
GetTopWindow
GetActiveWindow
GetMessagePos
ShowWindow
SendDlgItemMessageA
wsprintfA
EnableMenuItem
GetDlgCtrlID
SystemParametersInfoA
DrawIcon
UpdateWindow
GetMenuCheckMarkDimensions
MessageBoxA
SetMenuItemBitmaps
ExitWindowsEx
IsWindow
PostQuitMessage
GetParent
GetWindowRect
SetPropA
SetActiveWindow
LoadBitmapA
GetWindow
GetCursorPos
RegisterClassA
GetSubMenu
GetKeyState
GetCapture
SetWindowTextA
GetSysColor
DefWindowProcA
CheckMenuItem
GetSystemMetrics
PtInRect
SendMessageA
GrayStringA
GetMenuState
SetWindowPos
LoadIconA
PeekMessageA
IsWindowEnabled
CallNextHookEx
DestroyMenu
BeginPaint
GetClassNameA
GetMenuItemCount
UnregisterClassA
RemovePropA
ClientToScreen
GetClientRect
LoadCursorA
GetDlgItem
GetClassInfoA
GetDC
GetMenuItemID
CallWindowProcA
GetPropA
SetWindowsHookExA
CharUpperA
GetMessageA
IsDialogMessageA
GetWindowTextA
MapWindowPoints
GetWindowTextLengthA
WinHelpA
GetFocus

Sections

.text
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e1cfdff372d4dfe89bc91cc341e0f565

Headers

File Characteristics

Imports

comdlg32

advapi32

kernel32

gdi32

winmm

user32

Sections

.text Size: 202KB - Virtual size: 202KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 20KB - Virtual size: 20KB

.rsrc Size: 512B - Virtual size: 504B

.text
Size: 202KB - Virtual size: 202KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 512B - Virtual size: 504B