b7989a345b31cf35ed95616f4a3b157355cd1fced793f1d0c41b0efbec1f05bd

Sharing

Copy URL Twitter E-mail

General

Target

b7989a345b31cf35ed95616f4a3b157355cd1fced793f1d0c41b0efbec1f05bd
Size

59KB
MD5

c156cfba8b57e0891245eec3701df4e1
SHA1

5ef028ae9a5994d8bb1ff549f6676dc76306bdd1
SHA256

b7989a345b31cf35ed95616f4a3b157355cd1fced793f1d0c41b0efbec1f05bd
SHA512

a1146da1ddc2aba25fdfeaa5b4e0164321615bbf85c34812d45d9138dfd5d8c72461e99ed4054883edc5171bab7be7d9b47b9cdae7d21a902eb5331430a1c460
SSDEEP

1536:ETcI4Jws/yt5XmIpr1goLNFSq4XpzCBfhhjNsVIn8H2re7:E4I4baKe5goLh4ZzClh9n8

Score

N/A

Malware Config

Signatures

Files

b7989a345b31cf35ed95616f4a3b157355cd1fced793f1d0c41b0efbec1f05bd
.exe windows x86

e7889c4c01de46653395c1b4ba8bd0e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cmutil

??1CmLogFile@@QAE@XZ
?GetRegPath@CIniA@@QBEPBDXZ
?Start@CmLogFile@@QAEJH@Z
?GPPS@CIniW@@QBEPAGPBG00@Z
CmStrchrA
?SetEntry@CIniW@@QAEXPBG@Z
?GPPS@CIniA@@QBEPADPBD00@Z
?CIniW_WriteEntryToReg@CIniW@@IBEHPAUHKEY__@@PBG1PBEKK@Z
?Generate@CRandom@@QAEHXZ
?SetParams@CmLogFile@@QAEJHKPBG@Z
?FormatWrite@CmLogFile@@AAEXW4_CMLOG_ITEM@@PAG@Z
CmLoadSmallIconA
?SetParams@CmLogFile@@QAEJHKPBD@Z
?SetWriteICSData@CIniA@@QAEXH@Z
?IsEnabled@CmLogFile@@QAEHXZ
?SetFile@CIniW@@QAEXPBG@Z
?DeInit@CmLogFile@@QAEJXZ
?Clear@CIniA@@QAEXXZ
?CloseFile@CmLogFile@@AAEJXZ
CmStripFileNameW
CmWinHelp

msvcrt

__CxxExceptionFilter
??0__non_rtti_object@@QAE@PBD@Z
div
wcscspn
_ismbbkpunct
_adj_fdiv_r
_rmdir
modf
_statusfp
_mbsninc
_lrotl
_CIatan2
_wsearchenv
?before@type_info@@QBEHABV1@@Z
_adj_fpatan
??1exception@@UAE@XZ
_cputs

iassvcs

IASRadiusCrypt
IASSetMaxThreadIdle
IASInitialize
IASGetDictionary
IASReportEvent
IASGetLocalDictionary
IASSetMaxNumberOfThreads
IASUninitialize
IASGetHostByName
IASAllocateUniqueID
IASRegisterComponent
IASVariantChangeType
IASAdler32
IASRequestThread

kernel32

OutputDebugStringA
InitializeCriticalSection
SetLocalPrimaryComputerNameA
WaitForMultipleObjectsEx
IsValidLocale
IsDebuggerPresent
SetFileTime
ExitProcess
CompareFileTime
LZCloseFile
GetEnvironmentStringsW
WriteProcessMemory
SetFirmwareEnvironmentVariableA
SetLastError
LoadLibraryA
CreateDirectoryExA
QueryDosDeviceW
GlobalGetAtomNameA
SetProcessShutdownParameters
SetThreadIdealProcessor
GetEnvironmentVariableW
SearchPathW
GetExitCodeThread
VirtualAlloc
WaitForDebugEvent
OpenMutexA
EnumerateLocalComputerNamesW
GetUserGeoID
lstrcatA
GetTempFileNameW
CreateMutexA
GetLastError

user32

EndDialog

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e7889c4c01de46653395c1b4ba8bd0e0

Headers

DLL Characteristics

File Characteristics

Imports

cmutil

msvcrt

iassvcs

kernel32

user32

Sections

.text Size: 34KB - Virtual size: 34KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 18KB - Virtual size: 21KB

.text
Size: 34KB - Virtual size: 34KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 18KB - Virtual size: 21KB