81620e2d30a2c7f30c70c5eb4d858de8aeea77d51e64e063c59ccb2588b20ae1

Sharing

Copy URL Twitter E-mail

General

Target

81620e2d30a2c7f30c70c5eb4d858de8aeea77d51e64e063c59ccb2588b20ae1
Size

375KB
MD5

d76993c42ee1613e417d853a92fdc66a
SHA1

e1acfd473c109eab617b5dc29f1e0bf38124d3ff
SHA256

81620e2d30a2c7f30c70c5eb4d858de8aeea77d51e64e063c59ccb2588b20ae1
SHA512

e3c97e315345a1fccc2fdf3316ec038487a50a92c7fe430591b6e8a063ac55fbd6944c7dcb9a913cb7f3c88cb14a8c7be004ea4edfb37eb60d9a6cdd463c3451
SSDEEP

6144:ScfrN9bHU9/UOi/aUJ7UOMutTCmsggTA5gn1YMVkg7CqrCMZztDSLG3Ele:ScfrvbH+/UOCaUZbTh0TA5gRkg7Cqm6w

Score

N/A

Malware Config

Signatures

Files

81620e2d30a2c7f30c70c5eb4d858de8aeea77d51e64e063c59ccb2588b20ae1
.exe windows x86

9153aa16a34a359c1c1dc03fb5ddbd31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_wtol
wcsstr
wcslen
memcmp
_snprintf
memset
_adjust_fdiv
free
_CxxThrowException
_except_handler3
??3@YAXPAX@Z
_purecall
??1type_info@@UAE@XZ
memmove
__CxxFrameHandler
realloc
??2@YAPAXI@Z
wcsncpy
_ftol
_vsnwprintf
_onexit
__dllonexit
wcscpy
malloc
?terminate@@YAXXZ
_initterm

kernel32

CompareStringW
InterlockedCompareExchange
GetUserDefaultUILanguage
LocalFree
FormatMessageW
GetNumberFormatW
CloseHandle
WaitForSingleObject
SetEvent
CreateTimerQueueTimer
DeleteTimerQueueTimer
LoadLibraryA
ResetEvent
OpenEventW
CreateEventW
GetPrivateProfileStringW
LoadLibraryW
FileTimeToSystemTime
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetFileAttributesW
GetVersionExA
WideCharToMultiByte
lstrlenA
GetModuleFileNameA
UnmapViewOfFile
VirtualAlloc
IsBadReadPtr
FreeLibrary
MapViewOfFile
CreateFileMappingA
GetSystemDirectoryW
GetVersion
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
lstrcpynW
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
GetLastError
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrlenW
GetVersionExW
GetThreadLocale
GetModuleHandleA
GetLocaleInfoA
GetACP
InterlockedExchange
CreateProcessW
GetProcAddress
Sleep
CreateDirectoryW
SetLastError
CreateFileW
WriteFile
FlushFileBuffers
GetSystemTime
GetFileSize
CreateFileMappingW
SetFilePointer
SetEndOfFile
ReleaseMutex
CreateMutexW
ExpandEnvironmentStringsW
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
lstrcatW
lstrcpyW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
GetCurrentThread
MultiByteToWideChar
VerifyVersionInfoW
HeapReAlloc
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapAlloc
HeapFree
GetSystemInfo

comctl32

InitCommonControlsEx

advapi32

RegOpenKeyW
RegDeleteKeyW
RegDeleteValueW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
InitiateSystemShutdownExW
RegQueryValueExW
ImpersonateSelf
CopySid
GetLengthSid
IsValidSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetUserNameW
OpenThreadToken
RevertToSelf
SetThreadToken
GetTokenInformation
DuplicateTokenEx
CheckTokenMembership
AllocateAndInitializeSid
FreeSid
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey

user32

SetCapture
ScreenToClient
ReleaseCapture
InvalidateRect
EndPaint
BeginPaint
SetCursor
LoadCursorW
FillRect
PtInRect
DrawFocusRect
GetFocus
GetSysColor
ExitWindowsEx
GetDlgItemTextW
IsWindow
IsDlgButtonChecked
KillTimer
EnableWindow
ShowScrollBar
EndDialog
SetWindowTextW
IsWindowVisible
GetWindowTextLengthW
LockWindowUpdate
RedrawWindow
SetTimer
ShowWindow
SetWindowPos
SendMessageW
LoadStringW
DestroyWindow
GetWindowLongW
SetWindowLongW
SetFocus
GetDlgItem
GetParent
PostMessageW
CharNextW
SetDlgItemTextW
DialogBoxParamW
CreateDialogParamW
DefWindowProcW
CreateWindowExW
MapWindowPoints
GetWindowRect
ReleaseDC
DrawTextW
CopyRect
GetDC
GetClientRect
SystemParametersInfoW
GetWindow
GetWindowTextW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoCreateFreeThreadedMarshaler
StringFromGUID2
CoCreateInstance
CoDisconnectObject
CoQueryProxyBlanket
CoInitializeEx
CoUninitialize
CoWaitForMultipleHandles
CoSetProxyBlanket

rpcrt4

UuidCreateNil
UuidCompare
UuidFromStringW
UuidToStringW
UuidCreate
RpcStringFreeW

crypt32

CryptProtectData
CryptUnprotectData

ntdll

VerSetConditionMask

gdi32

GetTextExtentPoint32W
GetTextMetricsW
GetObjectW
CreateFontIndirectW
SetBkMode
DeleteObject
SetTextColor
SelectObject

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 244KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 25KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9153aa16a34a359c1c1dc03fb5ddbd31

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

comctl32

advapi32

user32

ole32

rpcrt4

crypt32

ntdll

gdi32

Sections

.text Size: 71KB - Virtual size: 71KB

.rdata Size: 48KB - Virtual size: 47KB

.data Size: 244KB - Virtual size: 253KB

.bss Size: - Virtual size: 25KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 71KB - Virtual size: 71KB

.rdata
Size: 48KB - Virtual size: 47KB

.data
Size: 244KB - Virtual size: 253KB

.bss
Size: - Virtual size: 25KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 4KB