931d42f9379df006087ac68185aa2d5b582f1a96810c0b7697ecadfd191ef9bd

Sharing

Copy URL Twitter E-mail

General

Target

931d42f9379df006087ac68185aa2d5b582f1a96810c0b7697ecadfd191ef9bd
Size

60KB
MD5

5bbcc3664ca4e395c34d756ade3f3c86
SHA1

26c34a59d536ee51595fa9999ec5e5cd05c9e9e4
SHA256

931d42f9379df006087ac68185aa2d5b582f1a96810c0b7697ecadfd191ef9bd
SHA512

dbe3e79053d2a565f3ba468cde39c383ef2acb4555b9f455dcc38561a5bf4ffe002d76b975823520ec8af7ae71c9d0fc9a22b3c9d25c079975916831ade4497d
SSDEEP

1536:uQxmj9tD1+jdczplA7NjXrwnnYJJrMIJiYQPIO8:qtaczplA7NjX0nux8IO8

Score

N/A

Malware Config

Signatures

Files

931d42f9379df006087ac68185aa2d5b582f1a96810c0b7697ecadfd191ef9bd
.exe windows x86

5abeec5addefb795b36dfeba0f37c8d9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetBinaryTypeW
WriteProfileStringW
LocalAlloc
GetFullPathNameA
SetSystemPowerState
SetConsoleCursor
SetLocalPrimaryComputerNameW
FindFirstFileA
UTRegister
GetStringTypeW
SetFileAttributesW
LoadLibraryExA
GetCalendarInfoA
EnumSystemCodePagesA
SetLastConsoleEventActive
EscapeCommFunction
HeapQueryInformation
GetShortPathNameW
GetPrivateProfileSectionA
BuildCommDCBAndTimeoutsA
SetThreadPriorityBoost
ExpandEnvironmentStringsA
LocalReAlloc
FindResourceExA
SetConsoleNumberOfCommandsW
CreateActCtxA
LockFileEx
WritePrivateProfileSectionA
CreateSemaphoreW
DeleteCriticalSection
GetConsoleAliasExesLengthA
GetSystemWow64DirectoryW
SetConsoleNlsMode
GlobalCompact
VirtualAlloc
HeapCreate
UnlockFile
GetConsoleKeyboardLayoutNameW
FindClose
IsValidLanguageGroup
SetSystemTimeAdjustment
EnumSystemLanguageGroupsW
SetConsolePalette
OpenEventW
EnumResourceNamesA
HeapWalk
GetWriteWatch
BuildCommDCBA
GetExpandedNameA
FindFirstVolumeMountPointW
PostQueuedCompletionStatus
DeleteFileA
DeleteTimerQueue
PrepareTape
RegisterWaitForSingleObject
GetVersionExW
GetVolumeInformationW
SetConsoleMenuClose
SetLocalTime
GetCPInfoExW
WaitNamedPipeW
RtlMoveMemory
BaseCleanupAppcompatCacheSupport
SetProcessWorkingSetSize
MoveFileExW
lstrcmpiW
SetComputerNameExA
GetProfileIntW
GetConsoleAliasesLengthA
ReplaceFileA
LoadLibraryA
ReadConsoleOutputCharacterA
UnhandledExceptionFilter
AssignProcessToJobObject
FindFirstChangeNotificationW
GetProcessPriorityBoost
BaseFlushAppcompatCache
GetOEMCP
SetComputerNameW
CreateHardLinkA
ReadConsoleInputA
EnumSystemLocalesA
ReplaceFileW
GetTimeFormatA

msvcp60

?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IPBGI@Z
?_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??Pstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?setstate@ios_base@std@@QAEXH_N@Z
?_Psum@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPAGPAGI@Z
?do_decimal_point@?$numpunct@D@std@@MBEDXZ
?put@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@G@Z
??0?$moneypunct@G$0A@@std@@QAE@ABV_Locinfo@1@I@Z
?_Init@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAPAG0PAH001@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
??9std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?narrow@?$ctype@G@std@@QBEDGD@Z
?frac_digits@?$_Mpunct@D@std@@QBEHXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
_Eps
?osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Isinf@?$_Ctr@M@std@@SA_NM@Z
?log@std@@YA?AV?$complex@N@1@ABV21@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$complex@N@std@@QAE@ABV?$complex@O@1@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@PAF@Z
?max@?$numeric_limits@N@std@@SANXZ
?is@?$ctype@G@std@@QBEPBGPBG0PAF@Z

msi

MsiAdvertiseScriptA
MsiGetFeatureCostW
MsiGetProductInfoW
MsiCreateTransformSummaryInfoW
MsiEnableLogW
MsiInstallMissingFileW
MsiSummaryInfoGetPropertyW
MsiConfigureProductExA
MsiGetShortcutTargetW
DllGetVersion
MsiDatabaseMergeA
MsiEnableLogA
MsiQueryFeatureStateFromDescriptorW
MsiMessageBoxW
MsiLocateComponentA
MsiUseFeatureExA
MsiEnumClientsW
MsiConfigureFeatureW
MsiDatabaseExportA
MsiGetSourcePathW
MsiSourceListForceResolutionW
MsiOpenPackageExW
MsiConfigureFeatureFromDescriptorW
MsiAdvertiseProductExW
MsiGetSourcePathA
MsiAdvertiseProductA
MsiRecordGetInteger
MsiDecomposeDescriptorA
MsiGetFileSignatureInformationW
MsiCreateTransformSummaryInfoA
MsiRecordGetStringW
MsiEnumComponentsW
MsiApplyPatchW
MsiVerifyPackageW
MsiGetPatchInfoA
MsiSetExternalUIW
MsiGetUserInfoW
Migrate10CachedPackagesA
MsiGetFeatureCostA
MsiGetFileVersionW
MsiGetTargetPathW
MsiDatabaseOpenViewA
MsiProcessAdvertiseScriptA
MsiSourceListAddSourceW
MsiGetFileVersionA
MsiEnumPatchesW
MsiSummaryInfoSetPropertyW
MsiVerifyDiskSpace
MsiOpenProductW
MsiGetComponentStateW
MsiEnumPatchesA

msvcrt20

fgetpos
?attach@filebuf@@QAEPAV1@H@Z
_creat
getenv
ceil
??0strstream@@QAE@PADHH@Z
??4istream_withassign@@QAEAAVistream@@PAVstreambuf@@@Z
??0istrstream@@QAE@ABV0@@Z
??_7ifstream@@6B@
?close@ofstream@@QAEXXZ
?bitalloc@ios@@SAJXZ
_logb
fgetws
?lock@ios@@QAAXXZ
_adj_fptan
?setg@streambuf@@IAEXPAD00@Z
?writepad@ostream@@AAEAAV1@PBD0@Z
?fd@ifstream@@QBEHXZ
??_Gstreambuf@@UAEPAXI@Z
setbuf
__threadhandle
?rdbuf@stdiostream@@QBEPAVstdiobuf@@XZ
_spawnv
strftime

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5abeec5addefb795b36dfeba0f37c8d9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcp60

msi

msvcrt20

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 18KB - Virtual size: 90KB

.rsrc Size: 19KB - Virtual size: 18KB

.reloc Size: 512B - Virtual size: 316B

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 18KB - Virtual size: 90KB

.rsrc
Size: 19KB - Virtual size: 18KB

.reloc
Size: 512B - Virtual size: 316B