a200356b1148429a960937454920fda0361fc68308962d4241595b3269fa5692

Sharing

Copy URL Twitter E-mail

General

Target

a200356b1148429a960937454920fda0361fc68308962d4241595b3269fa5692
Size

73KB
MD5

3544e2fa7d44db6e89bf7937125bf160
SHA1

f1731127920c5be34655b280f0baa0431f78773b
SHA256

a200356b1148429a960937454920fda0361fc68308962d4241595b3269fa5692
SHA512

0ec485fe070da57fb2a35c97d76124d3c43fa8fbb7cd0508e35d454090fa19da89b5ab80cd85be24eed73512e81cadbc35e7d46273098e51c8287c72ed5aa3b9
SSDEEP

1536:zwB293lWaoVXnUutaeBxARXp081H9NzzT52KXjhxhAl2PU2Gto:zwc9g/ltrxM0gHnzzTIMjhxhAl2PUO

Score

N/A

Malware Config

Signatures

Files

a200356b1148429a960937454920fda0361fc68308962d4241595b3269fa5692
.exe windows x86

119e1be3ae0732df90f0dab4486da717

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

olecli32

ErrQueryOpen
LeRelease
DibCopy
ErrReconnect
DibGetData
LeReconnect
ErrGetUpdateOptions
OleLockServer
ErrCopyFromLink
LeActivate
ErrQueryOutOfDate
LeSetTargetDevice
OleDelete
DibRelease
OleGetData
OleClose
PbCreateFromTemplate
DefCreateFromTemplate
OleEnumObjects
OleSetColorScheme
ErrObjectConvert
BmGetData
BmClone
GenDraw
BmChangeData
OleRegisterClientDoc

kernel32

GetTickCount
QueryDepthSList
GetModuleHandleA
FindActCtxSectionStringW
VirtualQueryEx
LoadLibraryA
GetMailslotInfo
QueryInformationJobObject
QueueUserWorkItem
ChangeTimerQueueTimer
DeactivateActCtx
GetDiskFreeSpaceW
GetFullPathNameW
EnumResourceTypesA
GetCurrencyFormatW
GetLongPathNameW
RegisterWowBaseHandlers
VirtualAlloc
SetConsoleInputExeNameW
CreateJobObjectA
BaseFlushAppcompatCache
GetTempFileNameW
BackupRead
BeginUpdateResourceA
CompareStringW
LZStart
SetComputerNameExA
GetFullPathNameA
GetModuleHandleW
GlobalAlloc
ExpandEnvironmentStringsA
SetPriorityClass
GetConsoleCommandHistoryA
SetConsoleIcon

advapi32

SetSecurityInfoExW
RegSetValueW
DeleteService
ChangeServiceConfigW
QueryServiceConfig2W
SaferComputeTokenFromLevel
ElfOpenBackupEventLogA
LsaClose
CryptVerifySignatureA
CredWriteW
SystemFunction041
SystemFunction007
LogonUserExA
RegDisablePredefinedCache
GetNamedSecurityInfoA
BuildImpersonateTrusteeW
SetSecurityInfo
DuplicateToken
StartServiceCtrlDispatcherW
BuildTrusteeWithNameA
SetNamedSecurityInfoExA
SystemFunction021
GetAccessPermissionsForObjectA
SetEntriesInAuditListW
SystemFunction014
SystemFunction028
CredpConvertTargetInfo
CredWriteDomainCredentialsA
RegDeleteValueW
AbortSystemShutdownW
SystemFunction017
WmiDevInstToInstanceNameW
GetAclInformation
AddAccessDeniedAceEx
CreateProcessWithLogonW

shdocvw

SHAddSubscribeFavorite
DoAddToFavDlg
URLQualifyW
SetQueryNetSessionCount
URLQualifyA
HlinkFindFrame
DoOrganizeFavDlgW
DllGetVersion
SoftwareUpdateMessageBox
DllRegisterWindowClasses
AddUrlToFavorites
SHGetIDispatchForFolder
OpenURL
DoPrivacyDlg
ImportPrivacySettings
HlinkFrameNavigate
DoOrganizeFavDlg
DoFileDownload
HlinkFrameNavigateNHL
DoAddToFavDlgW

hid

HidP_GetUsagesEx
HidD_SetConfiguration
HidD_GetSerialNumberString
HidP_GetSpecificValueCaps
HidD_GetMsGenreDescriptor
HidP_GetUsages
HidD_GetManufacturerString
HidD_GetFeature
HidD_GetHidGuid
HidD_GetAttributes
HidD_FlushQueue
HidD_Hello
HidD_SetNumInputBuffers
HidP_GetCaps
HidP_GetScaledUsageValue
HidP_GetData
HidP_GetUsageValueArray
HidP_SetUsages
HidP_GetUsageValue
HidP_GetExtendedAttributes
HidD_SetOutputReport
HidP_SetScaledUsageValue
HidP_GetValueCaps
HidD_GetPhysicalDescriptor
HidP_SetUsageValueArray
HidP_GetButtonCaps
HidP_SetUsageValue

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 586B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

119e1be3ae0732df90f0dab4486da717

Headers

DLL Characteristics

File Characteristics

Imports

olecli32

kernel32

advapi32

shdocvw

hid

Sections

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 1024B - Virtual size: 586B

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 1024B - Virtual size: 586B

.rsrc
Size: 3KB - Virtual size: 2KB