896140491d26d9e29b57a939327685629c7e1d105f7877fb87f9c0773706fdbf

Sharing

Copy URL

Twitter E-mail

General

Target

896140491d26d9e29b57a939327685629c7e1d105f7877fb87f9c0773706fdbf
Size

1.1MB
MD5

950d69b33e22f6138bb452eff6035940
SHA1

bac399cec9deaa55184373e9380cf87703506023
SHA256

896140491d26d9e29b57a939327685629c7e1d105f7877fb87f9c0773706fdbf
SHA512

d023a90219b48d63800355d3e2c391298177bae35fb0f0c4a09e77882aad66b7511aca25a36eb2d06de2ba843647e595ac1259f93b9248bb20deaf7afbc3308f
SSDEEP

12288:BfI1L+USSD5c3n8GDk+IqFHesCvtRbSwj/7bL5p+Bd5zX0fh2dTalTGomInoIVMW:B0L+USSD5ziHelH/jT0LwZAqTlowOyqE

Score

N/A

Malware Config

Signatures

Files

896140491d26d9e29b57a939327685629c7e1d105f7877fb87f9c0773706fdbf
.exe windows x86

b7873342233a51a968c8c1f86e017f62

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
WideCharToMultiByte
MultiByteToWideChar
LocalFree
LocalAlloc
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
GetLastError
lstrlenW
GetModuleHandleW
GetWindowsDirectoryW
lstrcpynW
GetModuleFileNameW
GetTempPathA
GetSystemDirectoryW
DeleteFileA
GetWindowsDirectoryA
IsDBCSLeadByte
GetCPInfo
lstrcmpiA
CreateFileA
GetFileSize
MapViewOfFile
UnmapViewOfFile
CompareStringA
LocalReAlloc
IsDBCSLeadByteEx
IsValidCodePage
FindResourceExW
LoadResource
GetSystemDefaultLangID
lstrcmpA
lstrcmpiW
CreateMutexW
GetCommandLineW
GetStartupInfoA
UnhandledExceptionFilter
QueryPerformanceCounter
Sleep
DisableThreadLibraryCalls
GetModuleFileNameA
GetModuleHandleA
GetACP
WaitForSingleObject
CloseHandle
lstrlenA
FindFirstFileW
FindNextFileW
GetFileAttributesW
VerifyVersionInfoW
GetStdHandle
GetFileType
WriteConsoleW
GetConsoleOutputCP
FreeLibrary
SearchPathW
WriteFile
SetLastError

user32

LoadStringW
wsprintfW
GetDlgItem
GetPropA
SetPropA
SetDlgItemTextW
GetParent
MoveWindow
CharNextExA
wsprintfA
DialogBoxIndirectParamW
DialogBoxParamW
CharLowerA
GetTopWindow
GetForegroundWindow
GetSystemMetrics
GetDC
ReleaseDC

advapi32

RegCreateKeyExA
RegEnumKeyA
RegDeleteValueA
RegEnumValueW
RegEnumValueA
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegDeleteKeyW
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExW
RegDeleteKeyA
RegSetValueExA

ole32

CreateStreamOnHGlobal
CoTaskMemFree

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

msvcrt

puts
fwprintf
vswprintf
vfwprintf
fprintf
setlocale
strncpy
strrchr
strchr
atoi
strncmp
wcsstr
memmove
wcschr
malloc
exit
free
_getch

rpcrt4

RpcStringFreeW
RpcBindingFromStringBindingW
RpcBindingFree

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7873342233a51a968c8c1f86e017f62

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

version

msvcrt

rpcrt4

Sections

.text Size: 132KB - Virtual size: 131KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 80KB - Virtual size: 2.2MB

.rsrc Size: 16KB - Virtual size: 13KB

.text
Size: 132KB - Virtual size: 131KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 80KB - Virtual size: 2.2MB

.rsrc
Size: 16KB - Virtual size: 13KB