0732a1fb792b0654fd5183813238212b4cde9aa84664f732b1a713bbf830fda4

Sharing

Copy URL Twitter E-mail

General

Target

0732a1fb792b0654fd5183813238212b4cde9aa84664f732b1a713bbf830fda4
Size

153KB
MD5

3418e830634f529298bce6392a625539
SHA1

70397b16d7c1f576d943fe7814645c2c30530b7b
SHA256

0732a1fb792b0654fd5183813238212b4cde9aa84664f732b1a713bbf830fda4
SHA512

75cf3dbb270d3bf4d6c493844d2ed9ece926739be00466d2e59b29e9541e689fe6b2b56627d4452d72f85dbe29ab4f0af7793cbb1ff6277c48159442849ab670
SSDEEP

3072:jqawGppE4Nzy/cLeH25340R8uzLiQEpoPoe89I4Hmk+30:j2GppEGyz2m0muv+NrBmkm0

Score

N/A

Malware Config

Signatures

Files

0732a1fb792b0654fd5183813238212b4cde9aa84664f732b1a713bbf830fda4
.exe windows x86

c79253649e6c0d370fca0b3765971ffe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToFileTime
ResumeThread
CompareFileTime
SetErrorMode
DeleteFileW
SetEndOfFile
FlushFileBuffers
SetThreadPriority
lstrcatW
DeviceIoControl
TryEnterCriticalSection
MapViewOfFile
UnmapViewOfFile
RaiseException
LeaveCriticalSection
CreateMutexW
GetSystemTimeAsFileTime
GetQueuedCompletionStatus
lstrcpyW
GetProcessHeap
ReleaseMutex
FindCloseChangeNotification
UnhandledExceptionFilter
HeapAlloc
CreateIoCompletionPort
lstrcmpW
lstrlenW
EnterCriticalSection
GetModuleHandleW
GetDriveTypeW
GetPrivateProfileStringW
GetSystemDirectoryW
TlsAlloc
IsDebuggerPresent
SetPriorityClass
WaitForSingleObject
SetFilePointer
GetComputerNameW
GetFileTime
GetTimeFormatW
PulseEvent
lstrlenA
ReleaseSemaphore
OpenSemaphoreW
CreateFileMappingW
CreateProcessW
OpenMutexW
ResetEvent
DuplicateHandle
WriteFile
FormatMessageW
GetSystemInfo
FindFirstChangeNotificationW
lstrcpynW
GetWindowsDirectoryW
WideCharToMultiByte
LocalAlloc
CreateSemaphoreW
CreateEventW
CreateFileW
GetCurrentThreadId
CreateThread
lstrcmpA
SetLastError
OpenProcess
GetPriorityClass
TlsFree
ExpandEnvironmentStringsW
TlsSetValue
GetPrivateProfileIntW
TerminateThread
SetCurrentDirectoryW
FindNextChangeNotification
LoadLibraryExW
FindNextFileW
FreeLibrary
GetFileSize
GetDateFormatW
GetSystemTime
DeleteCriticalSection
SetUnhandledExceptionFilter
OpenFileMappingW
CloseHandle
HeapReAlloc
GetCurrentDirectoryW
OutputDebugStringW
OpenEventW
GetTempFileNameW
FindClose
GetTempPathW
TlsGetValue
SetProcessWorkingSetSize
LocalFree
FindFirstFileW
GetLocalTime
HeapFree
VirtualAlloc

user32

MsgWaitForMultipleObjects
MessageBoxW
wsprintfW
PeekMessageW
LoadStringW
DispatchMessageW
FindWindowW

psapi

EnumProcessModules
GetModuleFileNameExW

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenProcessToken
EnumDependentServicesW
CreateProcessAsUserW
RegOpenKeyA
RegSetValueExW
RegOpenKeyExW
RegQueryValueExA
GetTokenInformation
StartServiceW
SetSecurityDescriptorDacl
RegQueryValueExW
OpenSCManagerW
QueryServiceStatus
InitializeSecurityDescriptor
RegOpenKeyW
RegCloseKey
ControlService
RegDeleteValueW
OpenServiceW
CloseServiceHandle

activeds

AllocADsMem
BinarySDToSecurityDescriptor
ConvertSecDescriptorToVariant
ADsFreeEnumerator

itss

DllMain
DllGetClassObject

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.hD
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kwF
Size: 512B - Virtual size: 333B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RIy
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.BxMBD
Size: 512B - Virtual size: 554B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 213KB - Virtual size: 457KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c79253649e6c0d370fca0b3765971ffe

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

psapi

advapi32

activeds

itss

Sections

.text Size: 16KB - Virtual size: 15KB

.hD Size: 1KB - Virtual size: 1KB

.kwF Size: 512B - Virtual size: 333B

.rdata Size: 4KB - Virtual size: 3KB

.RIy Size: 1KB - Virtual size: 2KB

.BxMBD Size: 512B - Virtual size: 554B

.data Size: 213KB - Virtual size: 457KB

.rsrc Size: 9KB - Virtual size: 9KB

.text
Size: 16KB - Virtual size: 15KB

.hD
Size: 1KB - Virtual size: 1KB

.kwF
Size: 512B - Virtual size: 333B

.rdata
Size: 4KB - Virtual size: 3KB

.RIy
Size: 1KB - Virtual size: 2KB

.BxMBD
Size: 512B - Virtual size: 554B

.data
Size: 213KB - Virtual size: 457KB

.rsrc
Size: 9KB - Virtual size: 9KB