ef088465b9e041d90ff926d1930ec470eac7caf244bbde8ab319faefba65b415

Sharing

Copy URL Twitter E-mail

General

Target

ef088465b9e041d90ff926d1930ec470eac7caf244bbde8ab319faefba65b415
Size

1.1MB
MD5

3a4ca55ff4ac40c8acaac471f2e82643
SHA1

d5dbe7766bb39511681f79c4f8cd5f7e5edc70cf
SHA256

ef088465b9e041d90ff926d1930ec470eac7caf244bbde8ab319faefba65b415
SHA512

11e3f03f45c3143e422e4b8296e6b8844985149283e21abaa061db7fbbc3945e50d4c0f99a9dd25477b2a8cf63acdc6c1fbba529380c19a54073cd66948ef5e6
SSDEEP

24576:B0L+USSD5Ss1tZeuzCiOGEQxyPIRBDb/NxZ9Jv:B0L+7SD5SgZlGd7QxyIrJv

Score

N/A

Malware Config

Signatures

Files

ef088465b9e041d90ff926d1930ec470eac7caf244bbde8ab319faefba65b415
.exe windows x86

b7873342233a51a968c8c1f86e017f62

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
WideCharToMultiByte
MultiByteToWideChar
LocalFree
LocalAlloc
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
GetLastError
lstrlenW
GetModuleHandleW
GetWindowsDirectoryW
lstrcpynW
GetModuleFileNameW
GetTempPathA
GetSystemDirectoryW
DeleteFileA
GetWindowsDirectoryA
IsDBCSLeadByte
GetCPInfo
lstrcmpiA
CreateFileA
GetFileSize
MapViewOfFile
UnmapViewOfFile
CompareStringA
LocalReAlloc
IsDBCSLeadByteEx
IsValidCodePage
FindResourceExW
LoadResource
GetSystemDefaultLangID
lstrcmpA
lstrcmpiW
CreateMutexW
GetCommandLineW
GetStartupInfoA
UnhandledExceptionFilter
QueryPerformanceCounter
Sleep
DisableThreadLibraryCalls
GetModuleFileNameA
GetModuleHandleA
GetACP
WaitForSingleObject
CloseHandle
lstrlenA
FindFirstFileW
FindNextFileW
GetFileAttributesW
VerifyVersionInfoW
GetStdHandle
GetFileType
WriteConsoleW
GetConsoleOutputCP
FreeLibrary
SearchPathW
WriteFile
SetLastError

user32

LoadStringW
wsprintfW
GetDlgItem
GetPropA
SetPropA
SetDlgItemTextW
GetParent
MoveWindow
CharNextExA
wsprintfA
DialogBoxIndirectParamW
DialogBoxParamW
CharLowerA
GetTopWindow
GetForegroundWindow
GetSystemMetrics
GetDC
ReleaseDC

advapi32

RegCreateKeyExA
RegEnumKeyA
RegDeleteValueA
RegEnumValueW
RegEnumValueA
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegDeleteKeyW
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExW
RegDeleteKeyA
RegSetValueExA

ole32

CreateStreamOnHGlobal
CoTaskMemFree

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

msvcrt

puts
fwprintf
vswprintf
vfwprintf
fprintf
setlocale
strncpy
strrchr
strchr
atoi
strncmp
wcsstr
memmove
wcschr
malloc
exit
free
_getch

rpcrt4

RpcStringFreeW
RpcBindingFromStringBindingW
RpcBindingFree

Sections

.text
Size: 136KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7873342233a51a968c8c1f86e017f62

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

version

msvcrt

rpcrt4

Sections

.text Size: 136KB - Virtual size: 132KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 80KB - Virtual size: 2.2MB

.rsrc Size: 16KB - Virtual size: 13KB

.text
Size: 136KB - Virtual size: 132KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 80KB - Virtual size: 2.2MB

.rsrc
Size: 16KB - Virtual size: 13KB