2ed50838b909b181f64d4ac5926d8f06bcde683fa8ba79e4e273c2c4997c2ec2

Sharing

Copy URL

Twitter E-mail

General

Target

2ed50838b909b181f64d4ac5926d8f06bcde683fa8ba79e4e273c2c4997c2ec2
Size

522KB
MD5

0a5efa07b0535d5c88027553e18ee950
SHA1

d5c21427da084661f32c0baf810bb5809a9c2158
SHA256

2ed50838b909b181f64d4ac5926d8f06bcde683fa8ba79e4e273c2c4997c2ec2
SHA512

f833aa546f804267d5529b9ebf56da9d5479116be16bcb729fff80bb00968c0d2990272520cda0a83dd6eef3fc806e414d21ea6e10acaab56ab3fa98ac7cce64
SSDEEP

6144:QESQdtRrH8Uqbavdj2jJSVkh+x3840aCOusOkTBksi3Kjqccgg2SjJNO6nNVGEx4:QES8HPqevJ2jCkhqFC5MWsqbTDNx4

Score

N/A

Malware Config

Signatures

Files

2ed50838b909b181f64d4ac5926d8f06bcde683fa8ba79e4e273c2c4997c2ec2
.exe windows x86

8e24e613f052268bddc9d13029d7afe7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegSetValueExW
RegCreateKeyExW
DeregisterEventSource
ReportEventW
RegisterEventSourceW
FreeSid
CheckTokenMembership
DuplicateToken
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
CreateProcessAsUserW
DuplicateTokenEx
RevertToSelf
ImpersonateLoggedOnUser
RegQueryInfoKeyW
RegEnumValueW
OpenThreadToken
GetLengthSid
CopySid
LookupAccountNameW
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA

kernel32

SetEndOfFile
CreateMutexW
GetLocalTime
SystemTimeToFileTime
GetSystemDirectoryW
CreateEventW
ResetEvent
Sleep
CreateProcessW
LoadLibraryW
VirtualProtect
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
DeviceIoControl
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
ReleaseMutex
GetComputerNameW
CompareFileTime
TryEnterCriticalSection
GetExitCodeProcess
GetCurrentProcess
GetProcessHeap
DeleteFileA
MoveFileA
LocalAlloc
GetTempPathA
GetCurrentDirectoryW
CreateMutexA
HeapAlloc
GetVersion
HeapFree
GetSystemDirectoryA
FindFirstFileA
ReadProcessMemory
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
WTSGetActiveConsoleSessionId
GetCurrentProcessId
ProcessIdToSessionId
CompareStringW
RemoveDirectoryW
DeleteFileW
MoveFileExW
FindFirstFileW
CopyFileW
FindNextFileW
FindClose
CreateDirectoryW
GetFileAttributesW
SetFileAttributesW
LocalFree
GetModuleFileNameW
FormatMessageW
CreateThread
CreateFileW
GetFileSize
ReadFile
WaitForMultipleObjects
GetLastError
GetModuleHandleW
OpenEventW
SetEvent
CloseHandle
GetVersionExA
GetStartupInfoW
RtlUnwind
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapSize
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
FreeLibrary
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetUserDefaultLCID

gdi32

StartPage
StartDocA
SetMapMode
GetDeviceCaps
GetStockObject
SetBkMode
SetTextColor
CreateFontA
GetTextFaceA
GetTextMetricsW
SelectObject
DeleteObject
CreateSolidBrush
EndDoc
EndPage
DeleteDC

user32

GetParent
ShowWindow
GetDlgItem
SetTimer
DrawMenuBar
PostMessageW
GetSystemMenu
EnableWindow
SetWindowTextW
SendMessageW
KillTimer
LoadStringW
SetWindowLongW
EnableMenuItem
CheckDlgButton
GetDesktopWindow
LoadStringA
GetSysColor
MessageBoxW
GetDC
GetClientRect
MapWindowPoints
MoveWindow
ReleaseDC
GetWindowLongW
GetDlgCtrlID
SetCursor
CallWindowProcW
FillRect
DrawTextW
DrawFocusRect
LoadCursorW
DestroyCursor
SetDlgItemTextA
IsWindow
IsDlgButtonChecked
SetDlgItemTextW
GetWindowRect
GetSystemMetrics
SetWindowPos

ole32

CoCreateInstance
CoUninitialize
CoSetProxyBlanket
CoInitialize
CoCreateGuid
StringFromGUID2
CLSIDFromProgID

comdlg32

CommDlgExtendedError
PrintDlgA

comctl32

PropertySheetW
CreatePropertySheetPageW

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

wtsapi32

WTSQueryUserToken
WTSEnumerateSessionsW
WTSFreeMemory

crypt32

CryptUnprotectData

shell32

ShellExecuteA

oleaut32

SysAllocString
VariantClear
VariantInit
SysAllocStringByteLen
SysStringLen
SysAllocStringLen
SysFreeString

Sections

.text
Size: 362KB - Virtual size: 362KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 30KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8e24e613f052268bddc9d13029d7afe7

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

ole32

comdlg32

comctl32

userenv

version

wtsapi32

crypt32

shell32

oleaut32

Sections

.text Size: 362KB - Virtual size: 362KB

.data Size: 30KB - Virtual size: 48KB

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 24KB - Virtual size: 23KB

.pdata Size: 80KB - Virtual size: 80KB

.text
Size: 362KB - Virtual size: 362KB

.data
Size: 30KB - Virtual size: 48KB

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 24KB - Virtual size: 23KB

.pdata
Size: 80KB - Virtual size: 80KB