b97897c22e76df7e0be8f0551b5898e97190778fac8f5229df12ff45a50d5da5

Sharing

Copy URL Twitter E-mail

General

Target

b97897c22e76df7e0be8f0551b5898e97190778fac8f5229df12ff45a50d5da5
Size

268KB
MD5

8441a3a57e4aa1b714713ea2a9edce1a
SHA1

b70ada6bad2424ff066f551512eb9934eab147b9
SHA256

b97897c22e76df7e0be8f0551b5898e97190778fac8f5229df12ff45a50d5da5
SHA512

529c5fa3d608d50f9e5007e251e36d4adeb48ae0c668c537581a3a09d123de63fe2554595f68c1f831cb3e352905d77f96fc65d28b113ea5b88f387c2e79a105
SSDEEP

6144:BO8SFarbBCT2Tllzl4X5xwyu4JeGPf3n4X1Jd:MVs9wox4X5mzIeGPPk

Score

N/A

Malware Config

Signatures

Files

b97897c22e76df7e0be8f0551b5898e97190778fac8f5229df12ff45a50d5da5
.exe windows x86

095b10a766affd05a4fcfd92f0d97bf8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteKeyA
RegOpenKeyA
RegCreateKeyExA
RegQueryValueExW
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegSetValueExA
RegDeleteValueA
RegCloseKey
RegQueryValueExA
RegOpenCurrentUser
RegOpenKeyExW

kernel32

ReleaseMutex
CreateMutexW
WaitForSingleObject
WaitForMultipleObjects
GetTempFileNameW
IsValidCodePage
CreateDirectoryW
SizeofResource
FlushInstructionCache
IsProcessorFeaturePresent
FlushFileBuffers
WideCharToMultiByte
lstrcpyA
HeapDestroy
SetLastError
MulDiv
CreateEventA
RaiseException
WriteConsoleW
GetCurrentThreadId
VirtualProtect
FindResourceA
DeleteFileW
HeapReAlloc
GetSystemTimeAsFileTime
WritePrivateProfileStringA
HeapSize
GlobalUnlock
GetOEMCP
LCMapStringW
CloseHandle
HeapAlloc
VirtualQuery
CreateThread
GetConsoleCP
GetLocalTime
GlobalAlloc
IsDBCSLeadByte
GetProcessHeap
WriteConsoleA
LoadLibraryExA
GetSystemInfo
IsDebuggerPresent
TlsSetValue
EnterCriticalSection
CreateMutexA
WaitForSingleObjectEx
CreateFileW
VirtualFree
lstrlenW
FindNextFileA
FindFirstFileA
ReadFile
TlsAlloc
lstrcatA
TlsFree
TlsGetValue
LCMapStringA
GetModuleHandleA
UnhandledExceptionFilter
lstrlenA
LeaveCriticalSection
CreateFileA
GetACP
SetFileAttributesA
SetUnhandledExceptionFilter
SetStdHandle
SetFilePointer
GetConsoleOutputCP
DeleteFileA
lstrcmpA
SetHandleCount
HeapFree
DeleteCriticalSection
lstrcmpiA
OutputDebugStringA
TerminateThread
GetTempPathW
GetFileType
VirtualAlloc
FreeEnvironmentStringsA
GlobalLock
WriteFile
FreeLibrary
GetCommandLineA
GetThreadLocale
GetTempPathA
GetStdHandle
FindClose
RtlUnwind
FreeEnvironmentStringsW
LoadResource
GetConsoleMode
GetVersion

oleaut32

SysFreeString
SysAllocString
UnRegisterTypeLi
VarUI4FromStr
VariantCopy
VariantInit
LoadRegTypeLi
RegisterTypeLi
DispCallFunc
SysAllocStringByteLen
SysStringByteLen
VariantChangeType
OleCreatePropertyFrame
LoadTypeLi
VariantClear
SysStringLen

gdi32

DeleteDC
RestoreDC
GetDeviceCaps
CreateRectRgnIndirect
SetWindowOrgEx
TextOutA
SaveDC
CreateMetaFileA
SetWindowExtEx
SetMapMode
CreateDCA
LPtoDP
SetViewportOrgEx
SetTextAlign
DeleteMetaFile
CloseMetaFile

ole32

CoTaskMemAlloc
CreateDataAdviseHolder
CreateOleAdviseHolder
CoCreateInstance
StringFromGUID2
CoTaskMemFree
OleRegGetMiscStatus
OleSaveToStream
OleRegEnumVerbs
OleLoadFromStream
WriteClassStm
CoTaskMemRealloc
OleRegGetUserType

user32

ReleaseDC
InvalidateRect
MessageBoxA
UnionRect
UnregisterClassA
IsWindow
LoadCursorA
GetForegroundWindow
GetKeyState
IntersectRect
CallWindowProcA
DestroyWindow
ShowWindow
GetDC
OffsetRect
IsChild
GetFocus
wsprintfA
GetClientRect
EqualRect
DefWindowProcA
PtInRect
CharNextA
SetWindowRgn
GetWindowLongA
SetWindowLongA
SetWindowPos
GetParent
SetCursor
SetFocus

cmutil

CmMalloc
SzToWzWithAlloc
MakeBold
ReleaseBold

authz

AuthziInitializeAuditParamsFromArray
AuthzGetInformationFromContext

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.GzBIx
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MFmXD
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PjXbGgd
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yvgClM
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ljdv
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TxXjs
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cHtetRN
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 213KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.HiDiV
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MlvqK
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.LjqYfGo
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lduid
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

095b10a766affd05a4fcfd92f0d97bf8

Headers

File Characteristics

Imports

advapi32

kernel32

oleaut32

gdi32

ole32

user32

cmutil

authz

Sections

.text Size: 20KB - Virtual size: 20KB

.GzBIx Size: 1KB - Virtual size: 1KB

.MFmXD Size: 2KB - Virtual size: 2KB

.PjXbGgd Size: 1KB - Virtual size: 1KB

.yvgClM Size: 512B - Virtual size: 176B

.rdata Size: 5KB - Virtual size: 4KB

.ljdv Size: 2KB - Virtual size: 1KB

.TxXjs Size: 2KB - Virtual size: 1KB

.cHtetRN Size: 3KB - Virtual size: 2KB

.data Size: 213KB - Virtual size: 1.6MB

.HiDiV Size: 2KB - Virtual size: 2KB

.rsrc Size: 7KB - Virtual size: 6KB

.MlvqK Size: 2KB - Virtual size: 2KB

.LjqYfGo Size: 1KB - Virtual size: 1KB

.lduid Size: 2KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 20KB

.GzBIx
Size: 1KB - Virtual size: 1KB

.MFmXD
Size: 2KB - Virtual size: 2KB

.PjXbGgd
Size: 1KB - Virtual size: 1KB

.yvgClM
Size: 512B - Virtual size: 176B

.rdata
Size: 5KB - Virtual size: 4KB

.ljdv
Size: 2KB - Virtual size: 1KB

.TxXjs
Size: 2KB - Virtual size: 1KB

.cHtetRN
Size: 3KB - Virtual size: 2KB

.data
Size: 213KB - Virtual size: 1.6MB

.HiDiV
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 7KB - Virtual size: 6KB

.MlvqK
Size: 2KB - Virtual size: 2KB

.LjqYfGo
Size: 1KB - Virtual size: 1KB

.lduid
Size: 2KB - Virtual size: 1KB