fd33c5d417628e49959d1680a7e25606d1db590783ef9da6b2312b64e051dc47

Sharing

Copy URL Twitter E-mail

General

Target

fd33c5d417628e49959d1680a7e25606d1db590783ef9da6b2312b64e051dc47
Size

220KB
MD5

d6b30b80d022dff266c6ba8d18d0ab5f
SHA1

d468c79128e358bb6b1f98322bdf589f32ff235f
SHA256

fd33c5d417628e49959d1680a7e25606d1db590783ef9da6b2312b64e051dc47
SHA512

9504d0e33ac6ced81da7b6450e06f37e2872c5a44f1ae9cae71cbff0aea4099f6e36a1c0891ad982ceb6da176ac89bf7f9e85dc3325c208dfabb389e7ea2f4e4
SSDEEP

6144:xVmNRg8MgLXV3kKFmR88q5C12DF9mPWEnsxp:URglgh3TsRrpS9m9nsL

Score

N/A

Malware Config

Signatures

Files

fd33c5d417628e49959d1680a7e25606d1db590783ef9da6b2312b64e051dc47
.exe windows x86

336c2d9bde677717ab56fdd3336bc8e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
SetEndOfFile
HeapCreate
GetCommandLineW
LoadResource
lstrlenW
GetProcessHeap
TlsSetValue
CreateEventW
HeapDestroy
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
InterlockedIncrement
GetSystemTimeAsFileTime
GetStringTypeA
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
IsBadWritePtr
HeapAlloc
FatalAppExitA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
WriteFile
RtlUnwind
HeapFree
VirtualFree
GetVersionExA
GetEnvironmentVariableA
GetCurrentThread
GetLastError
SetLastError
DeleteCriticalSection
VirtualAlloc
TlsFree
SetEvent
GetCommandLineA
GetStartupInfoA
GetOEMCP
LocalAlloc
SetStdHandle
GlobalAlloc
FindFirstFileW
DeleteFileW
GetCurrentThreadId
SetUnhandledExceptionFilter
TlsAlloc
FreeEnvironmentStringsW
FormatMessageW
GetFileType
GetTickCount
SetHandleCount
GetFileAttributesA
LoadLibraryExW
CreateThread
CreateEventA
GetCurrentProcess
GetSystemInfo
SizeofResource
Sleep
HeapSize
GetFileAttributesW
TlsGetValue
GetACP
GetCurrentProcessId
FlushFileBuffers
SetErrorMode
LoadLibraryW
GetFileSize
HeapReAlloc
lstrlenA
GlobalFree
RegisterWaitForSingleObject
CreateFileW
GetStringTypeW
GetConsoleMode
GetCPInfo
InterlockedDecrement
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetStdHandle
SetEnvironmentVariableA

ole32

StgCreateDocfileOnILockBytes
CoQueryProxyBlanket
CoTaskMemFree
CoInitialize
CoCreateInstance
GetRunningObjectTable
CoInitializeSecurity
CLSIDFromString
CreateStreamOnHGlobal
CoLockObjectExternal
CLSIDFromProgID
CoFreeUnusedLibraries
OleRun
CreateILockBytesOnHGlobal
CoTaskMemAlloc
CoCreateGuid
CoRegisterMessageFilter
RegisterDragDrop
StringFromCLSID
CreateBindCtx
RevokeDragDrop
ReleaseStgMedium
OleFlushClipboard
CoGetClassObject
CoUninitialize
CoRevokeClassObject
CoDisconnectObject
OleInitialize
OleIsRunning
OleRegGetUserType
OleUninitialize

advapi32

CryptGenRandom
RegCloseKey
CryptAcquireContextW
AllocateAndInitializeSid
CryptDestroyHash
RegEnumValueA
AdjustTokenPrivileges
OpenServiceW
RegDeleteValueW
CryptCreateHash
SetSecurityDescriptorDacl
RevertToSelf
RegOpenKeyExA
RegDeleteKeyW
QueryServiceStatus
RegDeleteKeyA
LookupPrivilegeValueA
RegQueryInfoKeyW
InitializeAcl
RegCreateKeyExW
RegSetValueExW
GetTokenInformation
OpenProcessToken
RegQueryValueExA
CryptAcquireContextA
EqualSid
InitializeSecurityDescriptor
CloseServiceHandle
FreeSid
AddAccessAllowedAceEx
RegEnumKeyExW
RegQueryValueExW
AddAccessAllowedAce
RegOpenKeyExW
CryptReleaseContext
GetLengthSid
OpenThreadToken
RegEnumValueW
RegSetValueExA
CryptHashData
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyExA
DeregisterEventSource

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 144KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

336c2d9bde677717ab56fdd3336bc8e8

Headers

File Characteristics

Imports

kernel32

ole32

advapi32

Sections

.text Size: 48KB - Virtual size: 44KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 144KB - Virtual size: 244KB

.rsrc Size: 16KB - Virtual size: 15KB

.text
Size: 48KB - Virtual size: 44KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 144KB - Virtual size: 244KB

.rsrc
Size: 16KB - Virtual size: 15KB