dff67cb98c21b195fe19d9a02cbc822b37b58aac72b188b34de9411769cdb72d

Sharing

Copy URL Twitter E-mail

General

Target

dff67cb98c21b195fe19d9a02cbc822b37b58aac72b188b34de9411769cdb72d
Size

289KB
MD5

5f2a22965a8589f0fc09310b24c6d94f
SHA1

4fcaf610222a1df357fa1d14d155a4d146f9b9eb
SHA256

dff67cb98c21b195fe19d9a02cbc822b37b58aac72b188b34de9411769cdb72d
SHA512

cf37429f974843f30540d74fecd84efc8cfbf005a210d169a22ed92fac434e2031ee5fa35c1052b548d76b1455259dfb17af920f14da25bbae03ba48708c56b3
SSDEEP

6144:g3qbAHG42WUXJgcbKox6gSyoFTamQBQqdzBcFTaVWQJ:g6ATaSoNMFTABQqfcFTaW6

Score

N/A

Malware Config

Signatures

Files

dff67cb98c21b195fe19d9a02cbc822b37b58aac72b188b34de9411769cdb72d
.exe windows x86

ea447673f9b0a360a8589277e9fd3b42

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDeferWindowPos
MessageBoxExA
EnumThreadWindows
GetWindowRect
SendDlgItemMessageA
SetParent
GetDlgCtrlID
GetTopWindow
IsWindowUnicode
EndDialog
ShowWindow
GetWindowTextLengthA
SetDlgItemTextA
SetClipboardData
TranslateMessage
DispatchMessageA
LoadCursorA
CreateDialogIndirectParamA

advapi32

RegDeleteValueA
OpenBackupEventLogW
RegCreateKeyExA
AdjustTokenPrivileges
CloseEventLog
RegUnLoadKeyA
RegSetValueA
GetTokenInformation
RegEnumValueA
ClearEventLogA
NotifyChangeEventLog

kernel32

GetStartupInfoA
TlsSetValue
FreeEnvironmentStringsA
SuspendThread
OpenSemaphoreA
ResumeThread
TlsGetValue
GetCurrencyFormatA
GlobalMemoryStatus
LocalReAlloc
HeapValidate
GetACP
SetLocaleInfoA
VirtualQuery
HeapLock
GetCPInfo
GetUserDefaultLangID
OpenMutexA
GetPrivateProfileIntA
GetModuleHandleA
GetProcAddress
LocalHandle
LCMapStringA
VirtualAllocEx
OpenEventA

activeds

ord23
ord3
ord19
ord5
ord21
ord22
ord16
ord8
ord18
ord17

winscard

SCardListReadersA

wtsapi32

WTSSetUserConfigW
WTSQueryUserConfigW
WTSEnumerateServersW
WTSVirtualChannelRead
WTSDisconnectSession
WTSEnumerateSessionsA
WTSSetUserConfigA
WTSWaitSystemEvent
WTSVirtualChannelQuery
WTSEnumerateProcessesA
WTSFreeMemory
WTSVirtualChannelWrite
WTSQueryUserConfigA
WTSOpenServerA

msvcrt

_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 317KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ea447673f9b0a360a8589277e9fd3b42

Headers

File Characteristics

Imports

user32

advapi32

kernel32

activeds

winscard

wtsapi32

msvcrt

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 266KB - Virtual size: 265KB

.data Size: 512B - Virtual size: 317KB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 266KB - Virtual size: 265KB

.data
Size: 512B - Virtual size: 317KB

.rsrc
Size: 17KB - Virtual size: 16KB