db22d9f4721c57858254a413ad3f809ea0e6d03593828b059e5b6919175ab277

Sharing

Copy URL

Twitter E-mail

General

Target

db22d9f4721c57858254a413ad3f809ea0e6d03593828b059e5b6919175ab277
Size

1.1MB
MD5

c0ed2ce51d431ea0fdedd5f2922ecac3
SHA1

63b4a89cd6df2599e212247acba952dd51b8ceac
SHA256

db22d9f4721c57858254a413ad3f809ea0e6d03593828b059e5b6919175ab277
SHA512

c0523ebcc418c0de31682f53974519c0d971400c6897e79679d1d5578e152c8e78695264af0c334b0561ffb55d0906c1b21664768327a63048f9f45e2dffcd9c
SSDEEP

24576:6ZiFRk/OLPSDuzlPOnNPjp9GxV8xtcFEkCfXT40UH:LRkWLPwuRP0NLp8PFEk8D4bH

Score

N/A

Malware Config

Signatures

Files

db22d9f4721c57858254a413ad3f809ea0e6d03593828b059e5b6919175ab277
.exe windows x86

65795b28a9a1b1c58e966ed5238c7fa4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeExA
GetSystemDirectoryA
GetFileSize
CreateFileMappingA
UnmapViewOfFile
LocalReAlloc
IsDBCSLeadByteEx
FindResourceExW
LoadResource
GetSystemDefaultLangID
lstrcmpA
CompareFileTime
GetLastError
LockResource
FindResourceA
LocalFree
LocalAlloc
lstrcatA
lstrcpyA
lstrlenA
FreeLibrary
SetEnvironmentVariableA
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
SetStdHandle
GetTimeZoneInformation
SetFilePointer
GetLocaleInfoW
SetConsoleCtrlHandler
GetStringTypeW
GetStringTypeA
IsValidCodePage
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetOEMCP
GetACP
GetEnvironmentStringsW
GetEnvironmentStrings
GetFileType
SetHandleCount
HeapSize
HeapReAlloc
VirtualAlloc
GetWindowsDirectoryA
VirtualFree
HeapCreate
ExitProcess
GetCurrentThread
SetLastError
TlsAlloc
TlsGetValue
WriteFile
GetCPInfo
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
GetProcessHeap
GetCommandLineA
RaiseException
HeapAlloc
HeapFree
ExitThread
IsDebuggerPresent
UnhandledExceptionFilter
RtlUnwind
InterlockedDecrement
InterlockedIncrement
CompareStringA
CompareStringW
ReleaseMutex
CreateMutexA
ReleaseSemaphore
WaitForSingleObject
CreateSemaphoreA
GetVersionExA
GetComputerNameA
Sleep
QueryPerformanceCounter
lstrlenW
ResetEvent
InitializeCriticalSection
DisableThreadLibraryCalls
DeleteCriticalSection
IsDBCSLeadByte
CreateEventW
CloseHandle
lstrcmpiW
LeaveCriticalSection
EnterCriticalSection
DeleteFileA
CreateProcessA
GetSystemDirectoryW
lstrcpynA
GetModuleFileNameW
GetWindowsDirectoryW
GetModuleHandleW
lstrcmpiA
GetModuleFileNameA
HeapDestroy
SetEndOfFile
GetSystemInfo
OpenSemaphoreA
CopyFileA
FindNextFileA
FindFirstFileA
RemoveDirectoryA
CreateDirectoryA
WaitForSingleObjectEx
GetModuleHandleA
GetDiskFreeSpaceA
WriteFileEx
GlobalAlloc
GlobalFree
CreateEventA
GetUserDefaultLangID
SleepEx
CreateThread
SetEvent
ExpandEnvironmentStringsA
GetLocalTime
OpenMutexA
MapViewOfFile
OpenFileMappingA
FatalAppExitA
WaitForMultipleObjects

user32

GetSystemMetrics
wsprintfW
GetDlgItem
GetPropA
SetDlgItemTextW
LoadStringA
CharNextA
ReleaseDC
GetDC
GetDesktopWindow
CharLowerA
DialogBoxIndirectParamW
MoveWindow
GetWindowRect
GetParent

advapi32

RegCreateKeyExA
RegEnumKeyA
RegQueryValueExA
OpenThreadToken
GetTokenInformation
GetLengthSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
RegEnumValueA
RegEnumValueW
RegSetValueExA
RegOpenKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
DeregisterEventSource
InitializeAcl
AddAccessAllowedAce
FreeSid
ReportEventA
OpenProcessToken
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey

ole32

CreateStreamOnHGlobal
CoTaskMemAlloc

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

msvcrt

fclose
printf
sprintf
rand
strrchr
strstr
strchr
wcsstr
fprintf
wcscpy
wcscmp
free
memmove
malloc
strncpy
_chdir
atol
fflush
strncmp
wcschr
wcslen
vprintf

crypt32

CertDeleteCertificateFromStore
CertFindCertificateInStore
CertOpenStore
CertGetCertificateContextProperty
CertDeleteCRLFromStore
CertAddCRLContextToStore
CertFindCRLInStore
CertEnumCRLsInStore
CertAddCertificateContextToStore
CertEnumCertificatesInStore

Sections

.text
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

65795b28a9a1b1c58e966ed5238c7fa4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

version

msvcrt

crypt32

Sections

.text Size: 108KB - Virtual size: 106KB

.rdata Size: 84KB - Virtual size: 80KB

.data Size: 36KB - Virtual size: 2.2MB

.rsrc Size: 8KB - Virtual size: 4KB

.text
Size: 108KB - Virtual size: 106KB

.rdata
Size: 84KB - Virtual size: 80KB

.data
Size: 36KB - Virtual size: 2.2MB

.rsrc
Size: 8KB - Virtual size: 4KB