a672c34e686778a6762be5a6ee743fa9683576f4e8e5905cc94a553fc0dc9668

Sharing

Copy URL Twitter E-mail

General

Target

a672c34e686778a6762be5a6ee743fa9683576f4e8e5905cc94a553fc0dc9668
Size

147KB
MD5

1bcfc03726ba5392eb78bcecf0a445f6
SHA1

0a9016c5e783130c04eef74e30412c04b6670a56
SHA256

a672c34e686778a6762be5a6ee743fa9683576f4e8e5905cc94a553fc0dc9668
SHA512

259c54f8ff882440eb66c5827e53b72ce27682ea7dbc2e15eb4accf44840e064e7ab9309a54f37b4d317a6ca136a25a5aa180d4c03af265aebc514c8e6dc1530
SSDEEP

3072:e801qpLZVxhMLnFfIjFbruQw2GcXRWvdjEZR4JCgotOjWdPgq:espJhMlUFbiQw2GcXRQErXgeOjWdI

Score

N/A

Malware Config

Signatures

Files

a672c34e686778a6762be5a6ee743fa9683576f4e8e5905cc94a553fc0dc9668
.exe windows x86

8add8f9f2ba49f61f63419008f4386df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

OffsetRect
EnableWindow
EndDialog
ShowWindow
SetWindowTextW
SetWindowLongW
SendMessageW
DialogBoxParamW
GetWindowTextW
GetWindowLongW
GetThreadDesktop
GetParent

msvcrt

wcscmp
_except_handler3

gdi32

CloseEnhMetaFile

setupapi

SetupDiInstallDevice
CM_Create_DevNodeA
SetupCloseLog
SetupOpenLog
SetupLogErrorW
SetupDiSetClassInstallParamsW
SetupDiOpenDevRegKey
SetupDiCreateDevRegKeyW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassInstallParamsW
CMP_Report_LogOn

advapi32

RegCloseKey
RegSetValueExW
RegSetKeySecurity
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
OpenServiceW
OpenSCManagerW
InitializeSid
ConvertStringSecurityDescriptorToSecurityDescriptorW
ControlService
CloseServiceHandle
ChangeServiceConfigW
AddAce

kernel32

GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetLastError
GetCurrentThreadId
GetCurrentProcess
GetComputerNameW
GetCommandLineA
ExitProcess
DisableThreadLibraryCalls
CompareStringW
GetWindowsDirectoryW
LocalAlloc
MultiByteToWideChar
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
GetTickCount
VirtualAlloc
VirtualFree
lstrcmpiW
CloseHandle

shell32

ShellExecuteW
SHOpenFolderAndSelectItems
SHSetUnreadMailCountW

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8add8f9f2ba49f61f63419008f4386df

Headers

DLL Characteristics

File Characteristics

Imports

user32

msvcrt

gdi32

setupapi

advapi32

kernel32

shell32

Sections

.text Size: 37KB - Virtual size: 36KB

.rdata Size: 73KB - Virtual size: 72KB

.data Size: 34KB - Virtual size: 34KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 37KB - Virtual size: 36KB

.rdata
Size: 73KB - Virtual size: 72KB

.data
Size: 34KB - Virtual size: 34KB

.rsrc
Size: 2KB - Virtual size: 2KB