c71678c4aa977643a8be83f9a0be38bbfa5672062648febb1820784289cb9303

General

Target

c71678c4aa977643a8be83f9a0be38bbfa5672062648febb1820784289cb9303
Size

176KB
MD5

78ad6b10db015dea2171f9bf58005ab5
SHA1

11ea45a8756dd663628a3e04dea901c01f0d33ff
SHA256

c71678c4aa977643a8be83f9a0be38bbfa5672062648febb1820784289cb9303
SHA512

1b25c8cb142b7d9be1641bb8ad9aaaea6b5b5b02912c42d9f61e42bd159b03778d501429eccc61b8b3cdb108f4c23481e4f02c5a394ead07de51d3c9d94b01b7
SSDEEP

3072:84nCgC5rkEy5YZwi1lQJO6C5OvlJRO1tW60S+aSKh4M0lXpEaAcbmeY14tcZB8iy:znIemWJO6TJoYHaSA6m4yL0

Score

N/A

Malware Config

Signatures

Files

c71678c4aa977643a8be83f9a0be38bbfa5672062648febb1820784289cb9303
.exe windows x86

eb5f522846197b61ebe68f44b95823e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitialize
CoRegisterSurrogate
CoRegisterClassObject
OleInitialize
OleSetContainedObject

cryptui

CryptUIWizDigitalSign
CryptUIWizFreeDigitalSignContext
CryptUIDlgSelectCertificateFromStore
CryptUIDlgViewContext

ddraw

DirectDrawEnumerateA
DirectDrawCreate

dsound

ord9
ord11
ord1

gpedit

BrowseForGPO
DeleteGPOLink
ImportRSoPData
CreateGPOLink

kernel32

GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetSystemInfo
WriteFile
LCMapStringW
SetTapePosition
VirtualProtect
GetComputerNameA
PulseEvent
SetEvent
ResetEvent
CreateEventA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 554KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

eb5f522846197b61ebe68f44b95823e9

Headers

File Characteristics

Imports

ole32

cryptui

ddraw

dsound

gpedit

kernel32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 88KB - Virtual size: 85KB

.data Size: 52KB - Virtual size: 554KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 88KB - Virtual size: 85KB

.data
Size: 52KB - Virtual size: 554KB