a509f788a78a5d386e6b1ab3bc8a56edf470f348717f0bd7bd7681559be14874

Sharing

Copy URL Twitter E-mail

General

Target

a509f788a78a5d386e6b1ab3bc8a56edf470f348717f0bd7bd7681559be14874
Size

326KB
MD5

881c9c0ef17cd963ff86d5b8aad21c63
SHA1

79c5c1623355c3ddc19cd3333f55128cd8f9f938
SHA256

a509f788a78a5d386e6b1ab3bc8a56edf470f348717f0bd7bd7681559be14874
SHA512

1c3bcd40fc2864edf0e3775c9151eae217eb0700a082fc7b32a2bbf97702a8697715ca4048537deefb7f5ac79e60077a8665260c8e593cca80d732873aafa13b
SSDEEP

6144:qErLeIpA4Vkks4BFhDmlnsDHWKT0waZTT2yA/PRPOS65Nvlvou+rREh:vrikts4FtQ20wDpPOS0lvgEh

Score

N/A

Malware Config

Signatures

Files

a509f788a78a5d386e6b1ab3bc8a56edf470f348717f0bd7bd7681559be14874
.exe windows x86

1b1c512296e1e6b48127bc280b7928f9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_snprintf
sprintf
_vsnprintf
strrchr
wcsncpy
_wcsicmp
memmove
strcmp
wcsstr
memcpy
_except_handler3
_adjust_fdiv
malloc
_initterm
free
memset
_snwprintf

advapi32

ChangeServiceConfigW
FreeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
RegQueryValueExA
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegOpenKeyW
CloseServiceHandle
StartServiceW
ChangeServiceConfig2W
RegOpenKeyExA
CreateServiceW
OpenServiceW
OpenSCManagerW
RegDeleteValueW
QueryServiceStatus
ControlService
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyW
RegCreateKeyExW
RegEnumValueA
RegSetValueExA
RegCreateKeyA
RegSetValueW
RegCreateKeyExA

gdi32

CreateCompatibleBitmap
SelectObject
DeleteDC
ExtCreatePen
GetDeviceCaps
BitBlt
GetStockObject
AddFontResourceA
CreateSolidBrush
CreatePen
CreateCompatibleDC
CreateDCW
CreateFontIndirectW

kernel32

GlobalMemoryStatusEx
GetACP
lstrcatW
GetSystemDefaultLangID
SetFilePointer
GetSystemDirectoryW
GetModuleHandleA
LeaveCriticalSection
ResetEvent
GetOEMCP
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
TlsFree
Sleep
WaitForSingleObject
LocalFree
CloseHandle
GetStdHandle
ReleaseMutex
PulseEvent
GlobalFree
CompareStringW
GetPrivateProfileStringW
GetUserDefaultUILanguage
GetWindowsDirectoryW
CreateProcessW
GetTempFileNameA
DeleteFileW
lstrcmpiW
GetAtomNameA
GetComputerNameExW
lstrlenA
TlsSetValue
CreateEventW
lstrcmpW
SetEvent
MultiByteToWideChar
lstrcpyA
GetSystemDefaultUILanguage
CompareStringA
GlobalAlloc
lstrcpynW
GetStartupInfoA
AddAtomA
FindResourceW
CreateThread
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
HeapCreate
GetCurrentProcessId
GetVersion
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
WaitForSingleObjectEx
SetUnhandledExceptionFilter
GetConsoleOutputCP
lstrlenW
lstrcpyW
OpenSemaphoreA
DeleteFileA
SetLastError
LocalAlloc
GetModuleHandleW
GetModuleFileNameW
FindNextFileA
WriteFile
GetThreadLocale
CreateSemaphoreA
InterlockedExchange
OpenEventW
TlsAlloc
HeapFree
CreateMutexA
HeapAlloc
GetProcessHeap
FlushFileBuffers
EnterCriticalSection
FormatMessageW
GetTempPathA
GetCommandLineA
SetFilePointerEx
CreateFileA
GetComputerNameW
ExpandEnvironmentStringsA
GetLocalTime
GetModuleFileNameA
FindResourceA
LCMapStringW
GetVersionExA
InterlockedIncrement
OpenEventA
lstrcpynA
FindAtomA
ReadFile
SetFileAttributesA
CreateMutexW

user32

FindWindowW
DispatchMessageA
UnregisterClassA
SetForegroundWindow
wsprintfW
GetForegroundWindow
ShowWindow
LoadIconA
SetWindowTextW
LoadCursorA
FindWindowExA
SystemParametersInfoW
MessageBoxW
LoadIconW
SetDlgItemTextW
GetClipboardSequenceNumber
GetCursor
TranslateMessage
SendDlgItemMessageW
GetInputState
GetDC
GetSysColor
CountClipboardFormats
GetDesktopWindow
CharNextW
UpdateWindow
GetDlgItem
SetFocus
PostQuitMessage
LoadStringW
GetMessageA
IsWindow
SendMessageA
GetDoubleClickTime
LoadMenuA
GetWindowLongW
GetProcessDefaultLayout
SetWindowLongW
GetFocus
GetParent
GetCaretBlinkTime
ReleaseDC
DefWindowProcA
SendMessageW
FindWindowA
GetActiveWindow

ole32

CoInitialize
CoUninitialize
CoCreateInstance

cfgmgr32

CM_Get_DevNode_Status

setupapi

SetupDefaultQueueCallbackW
SetupGetStringFieldW
SetupFindFirstLineW
SetupDiRegisterDeviceInfo
SetupCloseInfFile
SetupDiGetActualSectionToInstallW
SetupOpenInfFileW
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
SetupDiGetSelectedDevice
SetupQueryInfVersionInformationW
SetupGetInfInformationW
SetupDiGetDriverInstallParamsW
SetupDiEnumDriverInfoW
SetupDiGetDeviceRegistryPropertyW
SetupDiOpenDevRegKey
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiClassGuidsFromNameW
SetupDiSetSelectedDevice
SetupDiOpenDeviceInterfaceRegKey
SetupDiEnumDeviceInterfaces
SetupDiSetClassInstallParamsW
SetupDiGetClassInstallParamsW
SetupDiGetWizardPage
SetupDiCallClassInstaller
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiCreateDeviceInfoW
SetupDiClassNameFromGuidW
SetupDiCreateDeviceInfoList
SetupDiRemoveDevice
SetupDiDeleteDevRegKey
SetupDiRemoveDeviceInterface
SetupDiDeleteDeviceInterfaceRegKey
SetupDiGetDeviceInterfaceDetailW
SetupFindNextLine
SetupDiCreateDeviceInterfaceRegKeyW
SetupOpenAppendInfFileW
SetupDiCreateDeviceInterfaceW
SetupTermDefaultQueueCallback
SetupDiInstallDevice
SetupInitDefaultQueueCallbackEx
SetupDiCreateDevRegKeyW
SetupDiSetDriverInstallParamsW

shell32

SHGetFolderPathW

mscms

InstallColorProfileW
AssociateColorProfileWithDeviceW

Sections

.text
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 200KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 810B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1b1c512296e1e6b48127bc280b7928f9

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

gdi32

kernel32

user32

ole32

cfgmgr32

setupapi

shell32

mscms

Sections

.text Size: 114KB - Virtual size: 113KB

.data Size: 200KB - Virtual size: 238KB

.bss Size: - Virtual size: 6KB

.tls Size: 1024B - Virtual size: 810B

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 114KB - Virtual size: 113KB

.data
Size: 200KB - Virtual size: 238KB

.bss
Size: - Virtual size: 6KB

.tls
Size: 1024B - Virtual size: 810B

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 5KB - Virtual size: 5KB