50f3436b6ddf6442d27257bd8a87b2d5db4a924f011d4c115f5ffee090f6c223

Sharing

Copy URL Twitter E-mail

General

Target

50f3436b6ddf6442d27257bd8a87b2d5db4a924f011d4c115f5ffee090f6c223
Size

167KB
MD5

20e1d4c0c49c9adf30664c9458326e39
SHA1

7a93162cdc722443f536f588b0fd06a553991087
SHA256

50f3436b6ddf6442d27257bd8a87b2d5db4a924f011d4c115f5ffee090f6c223
SHA512

27ac44e3987500cb51b949ea93fcc5859f761a69d895179df656c649cf52b2019bfccc5bed388e78417f8159c01100df5ea8e1f0e0be30076d089d43601a6569
SSDEEP

3072:6IZrnvjg5Bv7OqIgWYvaJjR88vcaBFePaB5ZEKo+5qdVOZDsJSYhB:PYP7OXAwFeCBkl+52kZDsfT

Score

N/A

Malware Config

Signatures

Files

50f3436b6ddf6442d27257bd8a87b2d5db4a924f011d4c115f5ffee090f6c223
.exe windows x86

52bfe6feacea1de038bb662cb421af14

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

TreeResetNamedSecurityInfoW
OpenServiceA
LsaRemoveAccountRights
WmiCloseBlock
GetSecurityDescriptorSacl
LookupPrivilegeValueW
LsaCreateAccount
GetSidSubAuthority
RegNotifyChangeKeyValue
RegisterServiceCtrlHandlerA
RegSetKeySecurity
RegSaveKeyW
RegCreateKeyExW
ConvertStringSidToSidA
GetCurrentHwProfileA
RegQueryInfoKeyA
RegCloseKey
RegQueryValueExW
OpenProcessToken
RegSetValueExA
RegQueryValueExA
GetTokenInformation
CryptHashSessionKey
AreAnyAccessesGranted
GetFileSecurityW
SystemFunction020
LsaNtStatusToWinError
LsaEnumerateTrustedDomains
SetSecurityInfo
RegisterServiceCtrlHandlerExA
GetCurrentHwProfileW
RegQueryMultipleValuesW
LsaLookupPrivilegeDisplayName
SetNamedSecurityInfoA
GetSidSubAuthorityCount
DuplicateToken
SetKernelObjectSecurity
GetSidLengthRequired
SystemFunction031
RevertToSelf
WmiOpenBlock
ObjectCloseAuditAlarmA
CreatePrivateObjectSecurityEx
SetEntriesInAclW
DecryptFileW
RegReplaceKeyA
EnumServicesStatusExW
PrivilegeCheck
AddAuditAccessAce
RegOpenCurrentUser
AddAccessDeniedAceEx
WriteEncryptedFileRaw

kernel32

CreateDirectoryExW
GetFullPathNameA
GetNumberOfConsoleInputEvents
OpenSemaphoreA
EnumSystemCodePagesW
GetDefaultCommConfigW
SetVolumeMountPointA
VirtualAlloc
GetNumberFormatA
SetConsoleOutputCP
SetConsoleOS2OemFormat
SignalObjectAndWait
CreateToolhelp32Snapshot
CreateFileW
LockResource
WriteConsoleOutputCharacterW
WritePrivateProfileStructW
GetVolumeNameForVolumeMountPointA
CreateDirectoryExA
GetConsoleAliasExesLengthW
lstrlenA
GetUserDefaultLCID
BindIoCompletionCallback
GetPrivateProfileStringA
GetFileAttributesExA
GetLastError
SetStdHandle
VirtualUnlock
GetSystemTime
OpenSemaphoreW
GetProcessHeaps
GetConsoleCP
FlushConsoleInputBuffer
GetPrivateProfileStructA
SetThreadAffinityMask
GetFileType
Module32Next
GetDevicePowerState
GetCompressedFileSizeW
GlobalWire
EnumCalendarInfoExA

gdi32

ExtCreateRegion
GdiInitSpool
TextOutW
SetWorldTransform
CreatePen
EnumFontsA
AddFontResourceExA
SetBrushOrgEx
ExtTextOutA
DeleteDC
CreateBitmap
EngPlgBlt
GdiGradientFill
GetSystemPaletteUse
CombineTransform
Arc
STROBJ_bGetAdvanceWidths
CreateHalftonePalette
GetPixelFormat
GetTextExtentExPointA
ExcludeClipRect
FixBrushOrgEx
GdiAddGlsBounds
PolyTextOutW
GetPolyFillMode
GetCharacterPlacementW
GetObjectType
GdiEntry13
SelectObject
GetBrushOrgEx
RectInRegion
GdiConvertAndCheckDC
SetLayout
CreateColorSpaceW
Chord
GetGraphicsMode
GetTextCharacterExtra
GetWorldTransform
ExtFloodFill
PlayEnhMetaFile
GetDCBrushColor
GetICMProfileW
LineTo
SetWindowExtEx
EngGradientFill
EngTransparentBlt
GetMetaFileA
BRUSHOBJ_hGetColorTransform
SetColorAdjustment
FloodFill
GetBitmapBits

secur32

MakeSignature
InitializeSecurityContextA
ImpersonateSecurityContext
QuerySecurityPackageInfoW
InitSecurityInterfaceW
QueryContextAttributesW
AcquireCredentialsHandleA
GetComputerObjectNameW
TranslateNameW
GetUserNameExA
DecryptMessage
DeleteSecurityContext
LsaGetLogonSessionData
FreeContextBuffer
InitializeSecurityContextW
EncryptMessage
AcceptSecurityContext
QuerySecurityPackageInfoA
FreeCredentialsHandle
SecpTranslateNameEx
LsaDeregisterLogonProcess
LsaEnumerateLogonSessions
LsaUnregisterPolicyChangeNotification
LsaLogonUser
LsaRegisterPolicyChangeNotification
LsaLookupAuthenticationPackage
RevertSecurityContext
AcquireCredentialsHandleW

Sections

CRT
Size: 131KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 158B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52bfe6feacea1de038bb662cb421af14

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

secur32

Sections

CRT Size: 131KB - Virtual size: 260KB

.text Size: 3KB - Virtual size: 2KB

.rsrc Size: 32KB - Virtual size: 31KB

.reloc Size: 512B - Virtual size: 158B

CRT
Size: 131KB - Virtual size: 260KB

.text
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 32KB - Virtual size: 31KB

.reloc
Size: 512B - Virtual size: 158B