f9e6afb68a219c279bc83dd458a0a544850dce1a3910d20e6c503d33b5ad5ada

Sharing

Copy URL Twitter E-mail

General

Target

f9e6afb68a219c279bc83dd458a0a544850dce1a3910d20e6c503d33b5ad5ada
Size

220KB
MD5

649f1ed05fad63dfdc62fcfe6ac545b7
SHA1

3e456a2a4124f3393bd786470562890aa920aeb9
SHA256

f9e6afb68a219c279bc83dd458a0a544850dce1a3910d20e6c503d33b5ad5ada
SHA512

29afc02c94ae9f62d7c91fec117a15212f24386b70fa729c6808f5cb4b0aaf55e026360ccb393cc5522f9fa61e3acdecfc4121ce65e34415fb6dafc7cad1b60f
SSDEEP

6144:nX7tyIxjUdr7aRYIjhgdaUQN3nA7DWqdtWGwx6:ZyIJUl2pN3nA7DW+Q

Score

N/A

Malware Config

Signatures

Files

f9e6afb68a219c279bc83dd458a0a544850dce1a3910d20e6c503d33b5ad5ada
.exe windows x86

486275d380a62c8409ae3b1b0113394e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsSetValue
GetCurrentThreadId
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
TlsAlloc
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
VirtualAlloc
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
Sleep
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
FreeEnvironmentStringsA
SetEnvironmentVariableA

user32

CreateWindowExA
SendMessageW
SetActiveWindow
SetCapture
SetWindowPos
UnregisterClassA
GetMenuItemCount
GetActiveWindow
GetKeyState
InflateRect
LoadIconA
SetWindowTextW
ReleaseCapture
ClientToScreen
DefWindowProcW
GetClientRect
DestroyWindow
SetTimer
OffsetRect
DrawFocusRect
SetWindowLongW
ShowWindowAsync
DestroyMenu
PtInRect
SetMenuItemInfoA
LoadStringW
GetSubMenu
CreateWindowExW
TrackPopupMenu
AllowSetForegroundWindow
MoveWindow
MessageBeep
AdjustWindowRectEx
RegisterClassW
GetCursorPos
PostMessageW
DestroyIcon
ReleaseDC
CheckMenuItem
GetMenu
GetMenuStringW

ole32

OleUninitialize
CoRegisterSurrogate
OleInitialize
CoTaskMemAlloc
StgCreateDocfileOnILockBytes
CLSIDFromProgID
CoTaskMemFree
RegisterDragDrop
CoLockObjectExternal
CoRegisterMessageFilter
StringFromCLSID
RevokeDragDrop
CoFreeUnusedLibraries
CoRevokeClassObject
OleFlushClipboard
OleRun
CreateStreamOnHGlobal
CoQueryProxyBlanket
CLSIDFromString
CoUninitialize
CoCreateGuid
CoDisconnectObject
CoInitialize
ReleaseStgMedium
CoGetClassObject
CreateBindCtx
GetRunningObjectTable
CoCreateInstance
CoInitializeSecurity
CreateILockBytesOnHGlobal

advapi32

InitializeAcl
CryptAcquireContextA
QueryServiceStatus
LookupPrivilegeValueA
RegDeleteKeyW
RegDeleteKeyA
RegOpenKeyExA
CryptCreateHash
RegEnumKeyExW
CryptReleaseContext
EqualSid
CryptDestroyHash
SetSecurityDescriptorDacl
CloseServiceHandle
CryptGenRandom
DeregisterEventSource
RevertToSelf
AddAccessAllowedAce
RegQueryInfoKeyW
RegCreateKeyExW
RegCreateKeyExA
RegDeleteValueA
GetLengthSid
AdjustTokenPrivileges
RegEnumKeyExA
RegQueryValueExA
CryptAcquireContextW
OpenServiceW
AddAccessAllowedAceEx
RegEnumValueW
AllocateAndInitializeSid
RegSetValueExA
OpenThreadToken
RegSetValueExW
CryptHashData
RegQueryValueExW
RegEnumValueA
GetTokenInformation
FreeSid
OpenProcessToken
InitializeSecurityDescriptor
RegOpenKeyExW
RegCloseKey
RegDeleteValueW

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 144KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

486275d380a62c8409ae3b1b0113394e

Headers

File Characteristics

Imports

kernel32

user32

ole32

advapi32

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 144KB - Virtual size: 241KB

.rsrc Size: 12KB - Virtual size: 10KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 144KB - Virtual size: 241KB

.rsrc
Size: 12KB - Virtual size: 10KB