b3c23f56bb9c9f52a17218cb308a3675dbceba355ece0bafe2bd3c97bfdd5325

Sharing

Copy URL Twitter E-mail

General

Target

b3c23f56bb9c9f52a17218cb308a3675dbceba355ece0bafe2bd3c97bfdd5325
Size

135KB
MD5

8947760fe1a772ecfd22dae5cbee28f5
SHA1

99e4b63577328ceeb3f64133071aa34ea6d8ec56
SHA256

b3c23f56bb9c9f52a17218cb308a3675dbceba355ece0bafe2bd3c97bfdd5325
SHA512

c29ec1369b28751a51148ad9c9ee23b5da264dad21c21dbe113ed44ebe5c51c2c56538ab18643627584dc5c4c54a6e077728e8f3cba1bfd9a5e30c968c985d13
SSDEEP

3072:fMomUV1JvxZg2jsegaqntQioczDKnX+d0Na2:blPVjsTt3zDy5

Score

N/A

Malware Config

Signatures

Files

b3c23f56bb9c9f52a17218cb308a3675dbceba355ece0bafe2bd3c97bfdd5325
.exe windows x86

06bb254695e23d7317d4763036fa5f48

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlAcquireResourceShared
NtOpenProcessToken
NlsMbCodePageTag
wcsrchr
NtCreateEvent
VerSetConditionMask
RtlFreeUnicodeString
RtlLengthSecurityDescriptor
RtlTimeFieldsToTime
wcscmp
NtMapViewOfSection
RtlCreateTimerQueue
RtlQueryEnvironmentVariable_U
NtQuerySecurityObject
NtOpenFile
NtFsControlFile
_wcslwr
NtQueryValueKey
RtlQueryInformationAcl
RtlLengthRequiredSid

user32

DragObject
GetWindowTextW
ExitWindowsEx
RegisterWindowMessageA
SetForegroundWindow
LoadCursorW
GetWindowPlacement
GetCapture
UpdateWindow
GetParent
GetWindowDC
GetDlgItemTextW
BeginPaint
DestroyWindow
CharNextA
DialogBoxParamW
UnhookWindowsHookEx
DefWindowProcW
RegisterClassExW
SetWindowLongA
ChangeMenuW
SetDlgItemTextW
ClipCursor
SendMessageW
GetForegroundWindow
GetPropA
GetWindowLongW
DrawIcon
SystemParametersInfoA
CreateWindowExA
GetWindowLongA
LoadIconA
GetFocus
InflateRect
FillRect
LoadCursorA

kernel32

lstrcpyW
LoadLibraryW
OpenEventW
DuplicateHandle
IsBadWritePtr
GetModuleHandleA
FormatMessageW
GetCurrentThreadId
GetEnvironmentStringsW
lstrcmpW
SetFilePointer
GetFileSize
IsDBCSLeadByte
SetErrorMode
FindFirstFileA
lstrcmpiW
WaitForMultipleObjects
WaitForSingleObject
GetVersion
ExitProcess
VirtualAlloc
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
CreateDirectoryA
GetOEMCP
GetCurrentProcessId
OpenEventA
ReadFile
GetConsoleOutputCP
FindResourceW
IsBadReadPtr
GetLocaleInfoW
lstrcpynA
GetLastError
SetEndOfFile
GetStartupInfoA

msvcrt

strtoul
towupper
ctime
_adjust_fdiv
__initenv
_rotl
srand
iswspace
?terminate@@YAXXZ
fclose
_initterm
strncmp
_tell
wcscmp
__p__osver
ceil
__set_app_type
_ultow
wcsstr
_CIacos
_wcsnicmp
free
strlen
_access
_chsize
bsearch
_cexit
sscanf
_wfopen
__p__iob
_strnicmp
_wcslwr
_commit

ole32

OleRegGetMiscStatus
ProgIDFromCLSID
CoReleaseMarshalData
StgOpenStorage
CoImpersonateClient
OleInitialize
CoCreateInstance
StgCreateDocfileOnILockBytes
CoInitializeSecurity
CoCreateGuid
CoTaskMemRealloc
GetDocumentBitStg
CoUnmarshalInterface
OleRun
CreateStreamOnHGlobal
CoMarshalInterface
OleRegGetUserType
StgIsStorageFile
ReleaseStgMedium
CoSetProxyBlanket
CoRevertToSelf
WriteClassStm
CoGetInterfaceAndReleaseStream
StgCreateDocfile
CLSIDFromString
CoTaskMemFree

advapi32

AdjustTokenPrivileges
RegCreateKeyA
RegEnumValueA
IsValidSecurityDescriptor
RegEnumKeyW
RegEnumKeyExA
GetLengthSid
CloseServiceHandle
QueryServiceConfigW
RegQueryInfoKeyA
GetUserNameW
RegOpenKeyW
ControlService
OpenSCManagerA
SetEntriesInAclW
IsValidAcl
UnregisterTraceGuids
IsValidSid
GetTraceLoggerHandle
OpenServiceW
SetSecurityDescriptorOwner
GetTokenInformation
RevertToSelf
GetSidSubAuthority
GetSidSubAuthorityCount
RegOpenKeyExA
StartServiceW

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 58KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

06bb254695e23d7317d4763036fa5f48

Headers

File Characteristics

Imports

ntdll

user32

kernel32

msvcrt

ole32

advapi32

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 66KB - Virtual size: 66KB

.data Size: 58KB - Virtual size: 183KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 66KB - Virtual size: 66KB

.data
Size: 58KB - Virtual size: 183KB