c82a702d8fae644149639ffa8b450a04c5abd6590f702962464bc9ab74b4c1e8

Sharing

Copy URL Twitter E-mail

General

Target

c82a702d8fae644149639ffa8b450a04c5abd6590f702962464bc9ab74b4c1e8
Size

64KB
MD5

4b7d6bb13db532e0a9a6ef3537893284
SHA1

4f7dccdf9a2fc53dae24a9546c88137ef74c2d2e
SHA256

c82a702d8fae644149639ffa8b450a04c5abd6590f702962464bc9ab74b4c1e8
SHA512

ca6cc4bfe7f627c3355b7f3addd3644a6956191f85e063feaea6d895b9b5021a30e8068682747a3db4bfd84dd2de0550dc0f0b8e2dc71b88b854a35b62ddca4a
SSDEEP

768:wgwcoGbdYywNmcLE6uJ8HvK+mRkDUQ0NQMcBh:8nGbdyNmutHvpEHNQMah

Score

N/A

Malware Config

Signatures

Files

c82a702d8fae644149639ffa8b450a04c5abd6590f702962464bc9ab74b4c1e8
.exe windows x86

432c5998e0ce6a650cd87a2af7e311f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SafeArrayDestroy
SysFreeString
SysAllocString
VariantClear
SafeArrayCreate
VariantInit

rpcrt4

RpcImpersonateClient
UuidCreate
RpcRevertToSelf

iphlpapi

GetTcpTable
GetAdaptersAddresses
GetIpAddrTable
NotifyRouteChange
GetUdpTable
GetIpForwardTable
GetIpNetTable
SendARP
GetAdaptersInfo
NotifyAddrChange

kernel32

WriteFile
FormatMessageW
SizeofResource
LoadResource
lstrlenA
EnterCriticalSection
FindResourceW
SetFilePointer
SetFileAttributesW
DeleteCriticalSection
UnhandledExceptionFilter
GetSystemTimeAsFileTime
FindResourceExW
RaiseException
HeapAlloc
DeleteFileW
DeviceIoControl
SetEndOfFile
GetCurrentThreadId
LocalAlloc
FreeLibrary
WideCharToMultiByte
WaitForSingleObject
LockResource
GetFileSize
SetUnhandledExceptionFilter
CreateEventW
LeaveCriticalSection
ReadFile
ReleaseSemaphore
HeapFree
GetProcessHeap
GetSystemTime
SetLastError
HeapReAlloc
IsDebuggerPresent
LoadLibraryExW
HeapDestroy
CreateFileW
lstrlenW
HeapSize
CloseHandle
CreateSemaphoreW
DisableThreadLibraryCalls
FileTimeToSystemTime
OpenProcess
GetACP
GetFullPathNameA
VirtualAllocEx

shlwapi

PathAddBackslashW

user32

MsgWaitForMultipleObjects
PeekMessageW
TranslateMessage
DispatchMessageW

ws2_32

WSAStartup
inet_addr
ntohs
WSACleanup

ole32

CoUninitialize
CoCreateInstance
CoInitializeEx

advapi32

RegOpenKeyExW
GetSidSubAuthority
GetTraceLoggerHandle
RegisterTraceGuidsW
CloseServiceHandle
QueryServiceConfigW
GetTraceEnableLevel
OpenProcessToken
GetSidSubAuthorityCount
OpenSCManagerW
OpenServiceW
RegQueryValueExW
GetTokenInformation
TraceMessage
StartServiceW
RegCloseKey
GetTraceEnableFlags
QueryServiceStatusEx
ControlTraceW
RegSetValueExW
UnregisterTraceGuids
ControlService

hlink

HlinkCreateBrowseContext
HlinkQueryCreateFromData
HlinkCreateExtensionServices
HlinkOnNavigate
HlinkGetSpecialReference
DllRegisterServer

mssip32

DllUnregisterServer
CryptSIPVerifyIndirectData
CryptSIPCreateIndirectData

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.kClRdBs
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cVTtabs
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.WItwcMs
Size: 512B - Virtual size: 373B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nQkPKTU
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yoWqzTU
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kigfzvU
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hCZCzvU
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kTgFbZU
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.seLfbZU
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

432c5998e0ce6a650cd87a2af7e311f7

Headers

DLL Characteristics

File Characteristics

Imports

oleaut32

rpcrt4

iphlpapi

kernel32

shlwapi

user32

ws2_32

ole32

advapi32

hlink

mssip32

Sections

.text Size: 20KB - Virtual size: 19KB

.kClRdBs Size: 4KB - Virtual size: 3KB

.cVTtabs Size: 3KB - Virtual size: 2KB

.rdata Size: 3KB - Virtual size: 11KB

.WItwcMs Size: 512B - Virtual size: 373B

.nQkPKTU Size: 3KB - Virtual size: 2KB

.data Size: 7KB - Virtual size: 255KB

.yoWqzTU Size: 3KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 3KB

.kigfzvU Size: 3KB - Virtual size: 3KB

.hCZCzvU Size: 2KB - Virtual size: 2KB

.kTgFbZU Size: 4KB - Virtual size: 4KB

.seLfbZU Size: 4KB - Virtual size: 4KB

.text
Size: 20KB - Virtual size: 19KB

.kClRdBs
Size: 4KB - Virtual size: 3KB

.cVTtabs
Size: 3KB - Virtual size: 2KB

.rdata
Size: 3KB - Virtual size: 11KB

.WItwcMs
Size: 512B - Virtual size: 373B

.nQkPKTU
Size: 3KB - Virtual size: 2KB

.data
Size: 7KB - Virtual size: 255KB

.yoWqzTU
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 3KB

.kigfzvU
Size: 3KB - Virtual size: 3KB

.hCZCzvU
Size: 2KB - Virtual size: 2KB

.kTgFbZU
Size: 4KB - Virtual size: 4KB

.seLfbZU
Size: 4KB - Virtual size: 4KB