800c3bd1e4e9cdb5961aef251a6a9a8c425897fd4f85a57ac896e686d1640006

Sharing

Copy URL

Twitter E-mail

General

Target

800c3bd1e4e9cdb5961aef251a6a9a8c425897fd4f85a57ac896e686d1640006
Size

432KB
MD5

c0d6582b0fb11cfe790ba05ae15b6b35
SHA1

da0290128fd7a4157c974a76ff25b89561971235
SHA256

800c3bd1e4e9cdb5961aef251a6a9a8c425897fd4f85a57ac896e686d1640006
SHA512

4c41b83fca8abf5778d3e0ecf50cc766af031ea1cb6cc9bc041003bfb5cc7abac41a7b6c78f3a045cd79ecb6c90d11ca093505d7467ae38fe4c2a426fae54d6f
SSDEEP

12288:Co61EONjHs2jMifCH0FfAzu5csmvuvHXV:mTFHskfCUFfAz+csmWvF

Score

N/A

Malware Config

Signatures

Files

800c3bd1e4e9cdb5961aef251a6a9a8c425897fd4f85a57ac896e686d1640006
.exe windows x86

34a165824a6e64d657ebbc368655aefd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

ReleaseStgMedium
ReadClassStm
CoRevokeClassObject
CoDisconnectObject
OleRegGetUserType
CreateStreamOnHGlobal
OleConvertOLESTREAMToIStorage
StgOpenStorage
StgCreateDocfileOnILockBytes
OleConvertIStorageToOLESTREAMEx
OleCreateFromFile
CoCreateGuid
CoGetInterfaceAndReleaseStream
StgCreateStorageEx
StringFromCLSID
MonikerCommonPrefixWith
RegisterDragDrop
OleCreateLinkToFileEx
OleRegEnumFormatEtc
CreateItemMoniker
OleConvertIStorageToOLESTREAM
CoUnmarshalInterface
CoCopyProxy
CoUnmarshalHresult
CoGetCurrentProcess
OleCreateDefaultHandler
OleInitialize
CoGetCallerTID
StgOpenStorageEx
CoGetCallContext
ReadOleStg
GetHGlobalFromStream
CoGetTreatAsClass
CoRegisterPSClsid
OleNoteObjectVisible
CoUnloadingWOW
OleCreate

advapi32

CryptVerifySignatureA
CryptDeriveKey
GetSecurityInfoExA
RegQueryInfoKeyA
ConvertSecurityDescriptorToAccessNamedA
OpenEventLogW
RegEnumKeyA
GetAccessPermissionsForObjectA
LookupPrivilegeNameA
QueryServiceObjectSecurity
SetTokenInformation
GetNamedSecurityInfoA
RegQueryValueA
SetAclInformation
SetKernelObjectSecurity
RegSetValueA
CopySid
SetSecurityInfo
AdjustTokenGroups
InitializeSid
LookupSecurityDescriptorPartsW
ReportEventA
RegOpenKeyA
CryptGetUserKey
BuildSecurityDescriptorW
BuildTrusteeWithNameA
RegEnumValueA
RegQueryValueExA
SetEntriesInAuditListW
SetSecurityDescriptorSacl
ObjectCloseAuditAlarmA
GetSecurityDescriptorGroup
SetFileSecurityW
LookupAccountSidW
GetTokenInformation
LookupPrivilegeValueW
IsValidAcl
BuildImpersonateTrusteeW
GetPrivateObjectSecurity
CryptContextAddRef
BuildImpersonateExplicitAccessWithNameA
CryptDestroyHash
RegOpenKeyExW
CryptSignHashA
GetOldestEventLogRecord
DeleteAce
ObjectDeleteAuditAlarmW
AreAllAccessesGranted
RegConnectRegistryW
AllocateLocallyUniqueId
GetTrusteeNameW
OpenProcessToken
RegDeleteValueW
GetServiceDisplayNameA
CryptDestroyKey
CryptAcquireContextW

shlwapi

PathRemoveFileSpecA
SHRegQueryInfoUSKeyA
StrToIntW
SHSetValueA
PathGetCharTypeA
StrCmpNA
ColorRGBToHLS
SHIsLowMemoryMachine
StrRStrIW
UrlIsOpaqueA
StrFromTimeIntervalW
PathFindOnPathW
PathCanonicalizeW
IntlStrEqWorkerA
SHDeleteValueA
ChrCmpIW
UrlCompareW
PathUndecorateW
PathBuildRootA
SHAutoComplete
PathCombineW
PathStripPathW
SHRegDeleteUSValueA
PathIsRelativeA
StrCmpIW
PathIsUNCServerA
PathIsContentTypeW
SHCopyKeyW
PathUnquoteSpacesA
StrCatBuffA
wvnsprintfW
StrRetToBufW
StrTrimW
StrFormatByteSizeA
PathAddBackslashW
PathRemoveArgsA
PathFindExtensionW
SHOpenRegStreamA
StrIsIntlEqualW

kernel32

IsBadCodePtr
SetConsoleCtrlHandler
UnhandledExceptionFilter
SetConsoleTextAttribute
EnumResourceNamesA
ReadFileScatter
VirtualProtect
WriteProfileStringW
FreeEnvironmentStringsA
EnumSystemLocalesW
GetDateFormatA
SetThreadPriority
HeapWalk
GetEnvironmentVariableA
ConvertDefaultLocale
MultiByteToWideChar
SetConsoleTitleA
ReadConsoleOutputAttribute
ExpandEnvironmentStringsW
ReleaseSemaphore
FileTimeToSystemTime
GlobalGetAtomNameW
SetProcessAffinityMask
SetProcessPriorityBoost
SetupComm
FindNextFileW
RequestDeviceWakeup
GetCommTimeouts
GetDriveTypeA
SetProcessWorkingSetSize
GetTapeStatus
SetFileAttributesA
GetQueuedCompletionStatus
LoadModule
FindResourceExA
GetConsoleMode
SetConsoleCursorInfo
GetVolumeInformationA
FlushViewOfFile
GetLogicalDrives
VirtualAlloc
MulDiv

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

34a165824a6e64d657ebbc368655aefd

Headers

DLL Characteristics

File Characteristics

Imports

ole32

advapi32

shlwapi

kernel32

Sections

.text Size: 62KB - Virtual size: 61KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 16KB

.text
Size: 62KB - Virtual size: 61KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 16KB