1058218ccc4e61703fcb417d0ad4e54166ec715721292b0be7f7f9def07aa940

Sharing

Copy URL Twitter E-mail

General

Target

1058218ccc4e61703fcb417d0ad4e54166ec715721292b0be7f7f9def07aa940
Size

1.1MB
MD5

aabb5617c69c217ebc16c2225571e22f
SHA1

6d833ce2e37edf705f2b8db51d46e12dea41dbe9
SHA256

1058218ccc4e61703fcb417d0ad4e54166ec715721292b0be7f7f9def07aa940
SHA512

4f9788bb4265b78039b0e5e35a298b69e11dea3d293d5d7cb94d3ae01d7b2ea6fe1ac23143462e5b09190e51e3d65ef1d3ea89e672d30fbd271729811de77525
SSDEEP

24576:ZZNWSHFR9Au+IcZ02N3dd8VC+XpkXtFvq0dMCKYMYRZNFWqE6:RWwR9AJZ0K3DEC+XKLvqH8HRZNHE6

Score

N/A

Malware Config

Signatures

Files

1058218ccc4e61703fcb417d0ad4e54166ec715721292b0be7f7f9def07aa940
.exe windows x86

65795b28a9a1b1c58e966ed5238c7fa4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeExA
GetSystemDirectoryA
GetFileSize
CreateFileMappingA
UnmapViewOfFile
LocalReAlloc
IsDBCSLeadByteEx
FindResourceExW
LoadResource
GetSystemDefaultLangID
lstrcmpA
CompareFileTime
GetLastError
LockResource
FindResourceA
LocalFree
LocalAlloc
lstrcatA
lstrcpyA
lstrlenA
FreeLibrary
SetEnvironmentVariableA
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
SetStdHandle
GetTimeZoneInformation
SetFilePointer
GetLocaleInfoW
SetConsoleCtrlHandler
GetStringTypeW
GetStringTypeA
IsValidCodePage
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetOEMCP
GetACP
GetEnvironmentStringsW
GetEnvironmentStrings
GetFileType
SetHandleCount
HeapSize
HeapReAlloc
VirtualAlloc
GetWindowsDirectoryA
VirtualFree
HeapCreate
ExitProcess
GetCurrentThread
SetLastError
TlsAlloc
TlsGetValue
WriteFile
GetCPInfo
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
GetProcessHeap
GetCommandLineA
RaiseException
HeapAlloc
HeapFree
ExitThread
IsDebuggerPresent
UnhandledExceptionFilter
RtlUnwind
InterlockedDecrement
InterlockedIncrement
CompareStringA
CompareStringW
ReleaseMutex
CreateMutexA
ReleaseSemaphore
WaitForSingleObject
CreateSemaphoreA
GetVersionExA
GetComputerNameA
Sleep
QueryPerformanceCounter
lstrlenW
ResetEvent
InitializeCriticalSection
DisableThreadLibraryCalls
DeleteCriticalSection
IsDBCSLeadByte
CreateEventW
CloseHandle
lstrcmpiW
LeaveCriticalSection
EnterCriticalSection
DeleteFileA
CreateProcessA
GetSystemDirectoryW
lstrcpynA
GetModuleFileNameW
GetWindowsDirectoryW
GetModuleHandleW
lstrcmpiA
GetModuleFileNameA
HeapDestroy
SetEndOfFile
GetSystemInfo
OpenSemaphoreA
CopyFileA
FindNextFileA
FindFirstFileA
RemoveDirectoryA
CreateDirectoryA
WaitForSingleObjectEx
GetModuleHandleA
GetDiskFreeSpaceA
WriteFileEx
GlobalAlloc
GlobalFree
CreateEventA
GetUserDefaultLangID
SleepEx
CreateThread
SetEvent
ExpandEnvironmentStringsA
GetLocalTime
OpenMutexA
MapViewOfFile
OpenFileMappingA
FatalAppExitA
WaitForMultipleObjects

user32

GetSystemMetrics
wsprintfW
GetDlgItem
GetPropA
SetDlgItemTextW
LoadStringA
CharNextA
ReleaseDC
GetDC
GetDesktopWindow
CharLowerA
DialogBoxIndirectParamW
MoveWindow
GetWindowRect
GetParent

advapi32

RegCreateKeyExA
RegEnumKeyA
RegQueryValueExA
OpenThreadToken
GetTokenInformation
GetLengthSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
RegEnumValueA
RegEnumValueW
RegSetValueExA
RegOpenKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
DeregisterEventSource
InitializeAcl
AddAccessAllowedAce
FreeSid
ReportEventA
OpenProcessToken
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey

ole32

CreateStreamOnHGlobal
CoTaskMemAlloc

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

msvcrt

fclose
printf
sprintf
rand
strrchr
strstr
strchr
wcsstr
fprintf
wcscpy
wcscmp
free
memmove
malloc
strncpy
_chdir
atol
fflush
strncmp
wcschr
wcslen
vprintf

crypt32

CertDeleteCertificateFromStore
CertFindCertificateInStore
CertOpenStore
CertGetCertificateContextProperty
CertDeleteCRLFromStore
CertAddCRLContextToStore
CertFindCRLInStore
CertEnumCRLsInStore
CertAddCertificateContextToStore
CertEnumCertificatesInStore

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

65795b28a9a1b1c58e966ed5238c7fa4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

version

msvcrt

crypt32

Sections

.text Size: 108KB - Virtual size: 107KB

.rdata Size: 84KB - Virtual size: 80KB

.data Size: 36KB - Virtual size: 2.2MB

.rsrc Size: 8KB - Virtual size: 4KB

.text
Size: 108KB - Virtual size: 107KB

.rdata
Size: 84KB - Virtual size: 80KB

.data
Size: 36KB - Virtual size: 2.2MB

.rsrc
Size: 8KB - Virtual size: 4KB