fdde04be1cba7e2fcae4eeee1be0f30a669fc94bedd52e5c45523fb9450e5a4c

Sharing

Copy URL

Twitter E-mail

General

Target

fdde04be1cba7e2fcae4eeee1be0f30a669fc94bedd52e5c45523fb9450e5a4c
Size

100KB
MD5

5c3193f61f869e41a5dba933eb4c4d79
SHA1

36bfee8f0b6c0623dc1273ab44f8857955db5d0d
SHA256

fdde04be1cba7e2fcae4eeee1be0f30a669fc94bedd52e5c45523fb9450e5a4c
SHA512

0ab3798e14743e511153b07c7cd9885a108689b007b49121bf822927b885184e7229e3597d1eec942179ea5a7787b9b73a9929dae08fbbebfa196b6e17711994
SSDEEP

3072:Oi9LG2FLubxHMztvKjr25WZAKe9UODNu9s:OedLuNMztvjKqU0Nu9s

Score

N/A

Malware Config

Signatures

Files

fdde04be1cba7e2fcae4eeee1be0f30a669fc94bedd52e5c45523fb9450e5a4c
.exe windows x86

eb9411b3ede33169131c0a9a6571d7e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExA
MakeAbsoluteSD
RegNotifyChangeKeyValue
RegDeleteKeyA
GetSecurityDescriptorOwner
CopySid
InitializeSid
GetSecurityDescriptorDacl
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
GetSecurityDescriptorControl
GetSecurityDescriptorGroup
IsValidSid
GetSidSubAuthority
EqualSid
RegCreateKeyExA
RegOpenKeyExA
OpenProcessToken
GetSidLengthRequired
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegDeleteValueA
MakeSelfRelativeSD
GetSecurityDescriptorSacl
GetLengthSid
GetTokenInformation
GetSecurityDescriptorLength

kernel32

WaitForSingleObject
FindFirstFileA
FreeLibrary
HeapDestroy
ReleaseMutex
lstrcpyA
GetACP
SetProcessWorkingSetSize
LoadLibraryExA
GetProcessHeap
lstrcatA
lstrlenW
lstrlenA
HeapReAlloc
LocalAlloc
FileTimeToSystemTime
FindResourceA
lstrcmpA
GetTimeFormatA
RemoveDirectoryA
lstrcmpiA
HeapSize
GetUserDefaultLangID
FindResourceExA
IsDBCSLeadByte
SetPriorityClass
WideCharToMultiByte
DeleteFileA
CreateEventA
GlobalLock
LoadResource
HeapAlloc
FormatMessageA
EnterCriticalSection
ResetEvent
HeapFree
GetSystemTimeAsFileTime
GetThreadLocale
LeaveCriticalSection
LockResource
FindClose
RaiseException
GlobalAlloc
CreateThread
GlobalUnlock
SizeofResource
GetModuleHandleA
FindNextFileA
SetLastError
SystemTimeToFileTime
LocalFree
CloseHandle
GetDateFormatA
OpenProcess
WaitForMultipleObjects
lstrcpynA
DeleteCriticalSection
CreateMutexA
GetCurrentThreadId
OpenEventA
VirtualAllocEx

oleaut32

VarUI4FromStr
GetErrorInfo
RegisterTypeLi
LoadTypeLi
SysStringByteLen
UnRegisterTypeLi
VariantInit
SysFreeString
VariantCopy
DispCallFunc
SysAllocString
LoadRegTypeLi
VariantClear
SysStringLen
SysAllocStringByteLen

shlwapi

PathFindExtensionA

ole32

CoInitialize
CLSIDFromProgID
CoRevokeClassObject
CoTaskMemFree
CoTaskMemRealloc
CoInitializeSecurity
CoCreateInstance
CoInitializeEx
CLSIDFromString
CoUninitialize
StringFromGUID2
CoFreeUnusedLibraries
StringFromCLSID
OleUninitialize
OleRun
CoTaskMemAlloc
CoRegisterClassObject

gdi32

CombineRgn
GetObjectA
CreateRectRgn
CreateRectRgnIndirect
GetTextExtentExPointA
CreateFontIndirectA
SetRectRgn

shell32

Shell_NotifyIconA
ShellExecuteA

user32

IsWindow
SendMessageA
CallNextHookEx
OpenClipboard
GetClientRect
PostMessageA
DrawIconEx
GetWindowThreadProcessId
GetDC
TranslateAcceleratorA
RedrawWindow
GetSystemMetrics
CharNextA
DrawTextA
UpdateWindow
SetFocus
LoadIconA
SetWindowRgn
SetForegroundWindow
GetDesktopWindow
SetWindowPos
PostQuitMessage
SetWindowsHookExA
MapDialogRect
DestroyIcon
InflateRect
TrackPopupMenu
CloseClipboard
LoadImageA
IsRectEmpty
LoadMenuA
FindWindowA
SetMenuDefaultItem
ReleaseDC
EmptyClipboard
LoadAcceleratorsA
UnhookWindowsHookEx
EnableWindow
IsZoomed
GetWindowRect
GetSubMenu
RegisterWindowMessageA
AttachThreadInput
EnableMenuItem
GetParent
GetCursorPos
RemoveMenu
SetClipboardData
CopyRect
GetForegroundWindow

security

ExportSecurityContext
DeleteSecurityPackageW
ImportSecurityContextW
AddSecurityPackageW

browseui

DllGetVersion

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 249KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb9411b3ede33169131c0a9a6571d7e7

Headers

File Characteristics

Imports

advapi32

kernel32

oleaut32

shlwapi

ole32

gdi32

shell32

user32

security

browseui

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 249KB - Virtual size: 252KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 249KB - Virtual size: 252KB

.rsrc
Size: 10KB - Virtual size: 9KB