de56575a24381395ca9bb074e7830fdd0a64f368caa0200eab60b3de1266d856

Sharing

Copy URL

Twitter E-mail

General

Target

de56575a24381395ca9bb074e7830fdd0a64f368caa0200eab60b3de1266d856
Size

252KB
MD5

3381a8362587384e210c87989baf1c63
SHA1

7629ab5fb235793248f5574d81f0e0f53113dd4d
SHA256

de56575a24381395ca9bb074e7830fdd0a64f368caa0200eab60b3de1266d856
SHA512

905f0b211370f604d9c9c5b6844c68dd4a4c9b151482201afbf1241ee4941f887afe0bb4642d429ac03f6f3df0459fe41d86fe9a67c2cad23b5c79732fbf49fd
SSDEEP

6144:E1rwii7st1Y+S6pYQCR+gs74dVGwG+oISthMZzLkV:ET+sH4wgsLMFkV

Score

N/A

Malware Config

Signatures

Files

de56575a24381395ca9bb074e7830fdd0a64f368caa0200eab60b3de1266d856
.exe windows x86

729e2b8cebe03557fa750328914aa7f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

ws2_32

WSACleanup
inet_ntoa
gethostbyname
gethostname
WSAStartup

kernel32

GetProcessHeap
RaiseException
CreateMutexW
CreateDirectoryW
RemoveDirectoryW
SetErrorMode
GetExitCodeThread
MoveFileW
GetSystemTime
GetCurrentThreadId
IsDebuggerPresent
SetUnhandledExceptionFilter
GetSystemDirectoryW
FileTimeToSystemTime
GlobalAlloc
lstrlenW
lstrcmpiW
DosDateTimeToFileTime
ExpandEnvironmentStringsA
WaitForSingleObject
CreateEventW
LoadResource
FindResourceW
FreeLibrary
LocalFree
lstrlenA
OpenEventW
SystemTimeToFileTime
GetLocalTime
GetModuleHandleW
GetTempPathW
lstrcmpW
GetProcAddress

user32

GetForegroundWindow
MessageBoxW

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
CreateProcessAsUserW
SetSecurityInfo
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetSecurityDescriptorDacl
GetSecurityInfo
DuplicateTokenEx
RegQueryValueExA
RegOpenKeyExA
DeregisterEventSource
ReportEventW
RegisterEventSourceW
GetTokenInformation
OpenProcessToken
ControlService
QueryServiceStatus
CloseServiceHandle
OpenServiceW
OpenSCManagerW
StartServiceW
QueryServiceConfigW
ImpersonateLoggedOnUser
RevertToSelf
SetThreadToken
LookupAccountSidW
GetUserNameW

shell32

ShellExecuteW

shlwapi

PathGetDriveNumberW

quartz

AMGetErrorTextA
DllUnregisterServer
DBToAmpFactor
AMGetErrorTextW
DllRegisterServer
AmpFactorToDB
DllCanUnloadNow

dsauth

StoreSetSearchSubTree
StoreInitHandle

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.o
Size: 1KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.NCfFn
Size: 5KB - Virtual size: 558KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.HFHP
Size: 81KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.G
Size: 1KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ReMw
Size: 2KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BmRgDG
Size: 135KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

729e2b8cebe03557fa750328914aa7f2

Headers

File Characteristics

Imports

version

ws2_32

kernel32

user32

advapi32

shell32

shlwapi

quartz

dsauth

Sections

.text Size: 13KB - Virtual size: 12KB

.o Size: 1KB - Virtual size: 69KB

.rdata Size: 3KB - Virtual size: 21KB

.NCfFn Size: 5KB - Virtual size: 558KB

.HFHP Size: 81KB - Virtual size: 169KB

.G Size: 1KB - Virtual size: 47KB

.ReMw Size: 2KB - Virtual size: 122KB

.data Size: 6KB - Virtual size: 160KB

.BmRgDG Size: 135KB - Virtual size: 196KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 13KB - Virtual size: 12KB

.o
Size: 1KB - Virtual size: 69KB

.rdata
Size: 3KB - Virtual size: 21KB

.NCfFn
Size: 5KB - Virtual size: 558KB

.HFHP
Size: 81KB - Virtual size: 169KB

.G
Size: 1KB - Virtual size: 47KB

.ReMw
Size: 2KB - Virtual size: 122KB

.data
Size: 6KB - Virtual size: 160KB

.BmRgDG
Size: 135KB - Virtual size: 196KB

.rsrc
Size: 2KB - Virtual size: 2KB