9d7a58448c77278d97d2bcbab29e0466a28e3dbccddf6fb2aff62a90a33753b3

Sharing

Copy URL

Twitter E-mail

General

Target

9d7a58448c77278d97d2bcbab29e0466a28e3dbccddf6fb2aff62a90a33753b3
Size

1.1MB
MD5

859771508c1e74cbc172c7b5f32a0add
SHA1

1fab5b7bb2293599ebc086b16916d1e2802f3ca2
SHA256

9d7a58448c77278d97d2bcbab29e0466a28e3dbccddf6fb2aff62a90a33753b3
SHA512

68ec4116779074f4916e8dd7d5ebaf52207b8362c81ff2c602793c2e4ff16b07ed6e29456c5062d9c3a6e6782c67b8a736071bf79f2476fe764a96d0dfaa8079
SSDEEP

24576:w0L+USSD5MfpiuY05vxhrk091F89/NJ94uZ:w0L+7SD5Wpiu3FjFa11

Score

N/A

Malware Config

Signatures

Files

9d7a58448c77278d97d2bcbab29e0466a28e3dbccddf6fb2aff62a90a33753b3
.exe windows x86

b7873342233a51a968c8c1f86e017f62

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
WideCharToMultiByte
MultiByteToWideChar
LocalFree
LocalAlloc
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
GetLastError
lstrlenW
GetModuleHandleW
GetWindowsDirectoryW
lstrcpynW
GetModuleFileNameW
GetTempPathA
GetSystemDirectoryW
DeleteFileA
GetWindowsDirectoryA
IsDBCSLeadByte
GetCPInfo
lstrcmpiA
CreateFileA
GetFileSize
MapViewOfFile
UnmapViewOfFile
CompareStringA
LocalReAlloc
IsDBCSLeadByteEx
IsValidCodePage
FindResourceExW
LoadResource
GetSystemDefaultLangID
lstrcmpA
lstrcmpiW
CreateMutexW
GetCommandLineW
GetStartupInfoA
UnhandledExceptionFilter
QueryPerformanceCounter
Sleep
DisableThreadLibraryCalls
GetModuleFileNameA
GetModuleHandleA
GetACP
WaitForSingleObject
CloseHandle
lstrlenA
FindFirstFileW
FindNextFileW
GetFileAttributesW
VerifyVersionInfoW
GetStdHandle
GetFileType
WriteConsoleW
GetConsoleOutputCP
FreeLibrary
SearchPathW
WriteFile
SetLastError

user32

LoadStringW
wsprintfW
GetDlgItem
GetPropA
SetPropA
SetDlgItemTextW
GetParent
MoveWindow
CharNextExA
wsprintfA
DialogBoxIndirectParamW
DialogBoxParamW
CharLowerA
GetTopWindow
GetForegroundWindow
GetSystemMetrics
GetDC
ReleaseDC

advapi32

RegCreateKeyExA
RegEnumKeyA
RegDeleteValueA
RegEnumValueW
RegEnumValueA
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegDeleteKeyW
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExW
RegDeleteKeyA
RegSetValueExA

ole32

CreateStreamOnHGlobal
CoTaskMemFree

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

msvcrt

puts
fwprintf
vswprintf
vfwprintf
fprintf
setlocale
strncpy
strrchr
strchr
atoi
strncmp
wcsstr
memmove
wcschr
malloc
exit
free
_getch

rpcrt4

RpcStringFreeW
RpcBindingFromStringBindingW
RpcBindingFree

Sections

.text
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7873342233a51a968c8c1f86e017f62

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

version

msvcrt

rpcrt4

Sections

.text Size: 132KB - Virtual size: 129KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 80KB - Virtual size: 2.2MB

.rsrc Size: 16KB - Virtual size: 13KB

.text
Size: 132KB - Virtual size: 129KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 80KB - Virtual size: 2.2MB

.rsrc
Size: 16KB - Virtual size: 13KB