baaad8e951a02e458a7c91803ad27c308b8268bee838149b35e52f83a9973034

Sharing

Copy URL Twitter E-mail

General

Target

baaad8e951a02e458a7c91803ad27c308b8268bee838149b35e52f83a9973034
Size

236KB
MD5

31aff82c17d8eeaa2a9d58216effadb0
SHA1

ee177e2b099f907ddcda7dc4d4ca7da45fdfeff9
SHA256

baaad8e951a02e458a7c91803ad27c308b8268bee838149b35e52f83a9973034
SHA512

ce1d08a5c7059e39ca65b4e10c3cefeee3e462a5846a0df07e2df99476931caee187111afb85b19e784efd7898f4b586eed3f703da3fa581e2dcc558172109e9
SSDEEP

6144:j9QjTlA7hp9frvEwq0Vv5alnuvXN2f4/DvB00oiDPG:jMTlA/9frvEwPvwZuvsf4/DvB00/

Score

N/A

Malware Config

Signatures

Files

baaad8e951a02e458a7c91803ad27c308b8268bee838149b35e52f83a9973034
.exe windows x86

e1cfdff372d4dfe89bc91cc341e0f565

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetFileTitleA

advapi32

SystemFunction016
MSChapSrvChangePassword
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
LsaICLookupNamesWithCreds
GetAclInformation
LsaEnumeratePrivileges
AddUsersToEncryptedFile
OpenThreadToken
RegCloseKey
LockServiceDatabase
SetSecurityDescriptorControl

kernel32

FreeEnvironmentStringsA
RaiseException
lstrcatA
SetFileAttributesA
SetErrorMode
LocalFree
InterlockedDecrement
GlobalAddAtomA
GetModuleHandleA
FlushFileBuffers
ExitProcess
LockResource
Beep
VirtualFree
DuplicateHandle
FindNextFileA
InterlockedIncrement
CompareStringA
GetProcAddress
InitializeCriticalSection
FindResourceA
GetTimeZoneInformation
SystemTimeToFileTime
SetConsoleCursorInfo
GetStringTypeW
HeapCreate
WideCharToMultiByte
HeapSize
GetCurrentThread
HeapAlloc
GetCommandLineA
HeapReAlloc
TlsFree
LoadResource
GlobalFree
IsBadCodePtr
TlsSetValue
FileTimeToSystemTime
GlobalAlloc
lstrcpyA
lstrcmpA
LoadLibraryA
FindClose
GetWindowsDirectoryA
FlushInstructionCache
FileTimeToLocalFileTime
SetEndOfFile
UnhandledExceptionFilter
GetOEMCP
LocalFileTimeToFileTime
EnterCriticalSection
GetVersion
GetLastError
LocalAlloc
GetCurrentProcess
GetThreadLocale
TlsAlloc
IsBadReadPtr
FreeLibrary
LocalUnlock
WriteFile
DeleteCriticalSection
SetUnhandledExceptionFilter
GlobalFindAtomA
RtlUnwind
GlobalDeleteAtom
CompareStringW
GetFileTime
GetVersionExA
VirtualAlloc
SetConsoleTextAttribute
SetSystemTime
GetEnvironmentStringsW
GetFileAttributesA
lstrcpynA
GetDriveTypeA
SetStdHandle
GetStringTypeA
SetLastError
GetVolumeInformationA
LCMapStringA
GetProcessVersion
lstrcmpiA
SetFilePointer
LockFile
GetCPInfo
ReadFile
UnlockFile
lstrlenA
SetEnvironmentVariableA
SystemTimeToTzSpecificLocalTime
DeleteFileA
GetEnvironmentVariableA
GlobalGetAtomNameA
GetSystemDirectoryA
CreateFileA
GetFullPathNameA
GetStdHandle
SetHandleCount
HeapFree
MultiByteToWideChar
HeapDestroy
FindFirstFileA
GetFileType
GetEnvironmentStringsA
IsValidLocale
FreeEnvironmentStringsW
GetACP
LeaveCriticalSection
IsDebuggerPresent
GlobalUnlock
GetStartupInfoA
GetFileSize
LCMapStringW
IsBadWritePtr
GetCurrentThreadId
TlsGetValue
GlobalFlags
MulDiv
InitializeSListHead
DosDateTimeToFileTime
LocalReAlloc
CloseHandle
GlobalHandle
GetCurrentDirectoryA
GetModuleFileNameA
SetCurrentDirectoryA
Sleep
GlobalLock
ReleaseActCtx

gdi32

ScaleViewportExtEx
GetDeviceCaps
SetWindowExtEx
TextOutA
DeleteObject
GetRelAbs
SetViewportExtEx
GetClipBox
DeleteDC
RestoreDC
CreateDIBitmap
SetMapMode
RoundRect
CreateEllipticRgn

winmm

timeGetSystemTime
mixerOpen
mmioAdvance

user32

GetLastActivePopup
GetWindowLongA
PostMessageA
DestroyWindow
CopyRect
SetWindowLongA
IsWindowVisible
EndDialog
GetForegroundWindow
ValidateRect
CreateDialogIndirectParamA
CreateWindowExA
TranslateMessage
GetWindowPlacement
GetMenu
EnableWindow
LoadStringA
ReleaseDC
GetTopWindow
GetActiveWindow
GetMessagePos
ShowWindow
SendDlgItemMessageA
wsprintfA
EnableMenuItem
GetDlgCtrlID
SystemParametersInfoA
DrawIcon
UpdateWindow
GetMenuCheckMarkDimensions
MessageBoxA
SetMenuItemBitmaps
ExitWindowsEx
IsWindow
PostQuitMessage
GetParent
GetWindowRect
SetPropA
SetActiveWindow
LoadBitmapA
GetWindow
GetCursorPos
RegisterClassA
GetSubMenu
GetKeyState
GetCapture
SetWindowTextA
GetSysColor
DefWindowProcA
CheckMenuItem
GetSystemMetrics
PtInRect
SendMessageA
GrayStringA
GetMenuState
SetWindowPos
LoadIconA
PeekMessageA
IsWindowEnabled
CallNextHookEx
DestroyMenu
BeginPaint
GetClassNameA
GetMenuItemCount
UnregisterClassA
RemovePropA
ClientToScreen
GetClientRect
LoadCursorA
GetDlgItem
GetClassInfoA
GetDC
GetMenuItemID
CallWindowProcA
GetPropA
SetWindowsHookExA
CharUpperA
GetMessageA
IsDialogMessageA
GetWindowTextA
MapWindowPoints
GetWindowTextLengthA
WinHelpA
GetFocus

Sections

.text
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e1cfdff372d4dfe89bc91cc341e0f565

Headers

File Characteristics

Imports

comdlg32

advapi32

kernel32

gdi32

winmm

user32

Sections

.text Size: 202KB - Virtual size: 202KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 20KB - Virtual size: 22KB

.rsrc Size: 512B - Virtual size: 504B

.text
Size: 202KB - Virtual size: 202KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 20KB - Virtual size: 22KB

.rsrc
Size: 512B - Virtual size: 504B