b8fa73a41e720f17f6319925fcbe41906d7935283d0e3d023629d2707c59d8a4

Sharing

Copy URL Twitter E-mail

General

Target

b8fa73a41e720f17f6319925fcbe41906d7935283d0e3d023629d2707c59d8a4
Size

356KB
MD5

c54b01acdf42aba7b55ca7d59001b75f
SHA1

3defd9c7b8a829502823b0c9b593c533c8a1842e
SHA256

b8fa73a41e720f17f6319925fcbe41906d7935283d0e3d023629d2707c59d8a4
SHA512

d340615b45ae4e01e40907ac12760dfd80a8b4363e86f7ee5f2ccc390f7e42b837a9a262fa2ed8cb7efbf197bf817e4019b71eced5a661a015da110a6d465100
SSDEEP

6144:r4Y1u2GlUUZjnrNNuqb5K0tqffo5nSfseRzZoU0+hpWi7VaGKSsNmq:fs3U2nrLb5KffoSfsqzGyci7VaGKJNj

Score

N/A

Malware Config

Signatures

Files

b8fa73a41e720f17f6319925fcbe41906d7935283d0e3d023629d2707c59d8a4
.exe windows x86

555c3d0176c4b8b8b757294d6c07008c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFolderPathW
SHChangeNotify
SHGetSpecialFolderLocation
SHGetPathFromIDListW

setupapi

SetupOpenAppendInfFileW
SetupAddInstallSectionToDiskSpaceListW
SetupRemoveInstallSectionFromDiskSpaceListW
SetupAdjustDiskSpaceListW
SetupInstallFromInfSectionW
SetupSetDirectoryIdW
SetupInstallFilesFromInfSectionW

comctl32

CreatePropertySheetPageW

rpcrt4

NdrServerCall2
NdrClientCall2
UuidCreate
RpcBindingFree
RpcMgmtSetCancelTimeout
RpcStringFreeW
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcCancelThread

user32

GetDC
SendMessageA
ReleaseDC
CountClipboardFormats
SendMessageW
GetDlgItem
SetDlgItemTextW
GetDesktopWindow
GetDlgItemTextW
TranslateMessage
DestroyWindow
GetClipboardViewer
GetCursor
LoadBitmapA
SystemParametersInfoW
ShowWindow
DefWindowProcW
EnumWindows
GetForegroundWindow
DispatchMessageW
PeekMessageW
PostMessageW
CharNextW
UnregisterClassA
MsgWaitForMultipleObjects
LoadStringW
DefWindowProcA
GetMessageA
MessageBoxW
CheckRadioButton
CreateDialogParamW
DispatchMessageA
GetActiveWindow
EnableWindow
GetDoubleClickTime
SetWindowLongW
GetParent
PostQuitMessage
GetClipboardSequenceNumber
wsprintfW
FindWindowA
EndDialog
GetClipboardOwner
CreateWindowExA
UpdateWindow
LoadIconA
SendDlgItemMessageW
FindWindowExA
DialogBoxParamW

gdi32

SelectObject
AddFontResourceA
SetPixel
DeleteObject
ExtCreatePen
GetPixel
DeleteDC
CreateBrushIndirect
BitBlt
CreateFontIndirectW
GetStockObject
CreateSolidBrush
GetDeviceCaps

advapi32

ChangeServiceConfigW
OpenSCManagerW
GetLengthSid
InitializeSecurityDescriptor
InitializeAcl
AddAccessAllowedAceEx
SetSecurityDescriptorDacl
SetFileSecurityW
FreeSid
LookupAccountNameW
AllocateAndInitializeSid
RegFlushKey
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegEnumValueA
RegSetValueExW
RegNotifyChangeKeyValue
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegDeleteValueW
RegCloseKey
RegQueryInfoKeyA
CreateServiceW
RegEnumKeyExA
OpenServiceW
ControlService
DeleteService
CloseServiceHandle
QueryServiceStatus
StartServiceW
EnumDependentServicesW
CryptReleaseContext
CryptDestroyKey
CryptGenKey
CryptAcquireContextW
QueryServiceConfigW
RegOpenKeyExA
RegQueryValueExA
ChangeServiceConfig2W

netapi32

NetGetJoinInformation
DsGetDcNameW
NetApiBufferFree

kernel32

FormatMessageW
CreateMutexA
GetWindowsDirectoryW
GetProcessHeap
CloseHandle
FindAtomA
WriteFile
SetFilePointer
GetTempFileNameA
InterlockedIncrement
CreateFileW
GetModuleFileNameA
GetLocalTime
GetSystemWindowsDirectoryW
TlsGetValue
OpenSemaphoreW
TlsSetValue
LoadLibraryW
LoadLibraryA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetSystemDefaultLangID
GetCurrentThreadId
HeapFree
FindNextFileA
InterlockedCompareExchange
AreFileApisANSI
QueryPerformanceCounter
GlobalAlloc
GetSystemDefaultLCID
InterlockedDecrement
OpenSemaphoreA
SetLastError
CreateThread
OpenEventW
LCMapStringW
GetVersionExA
SetCurrentDirectoryA
AddAtomA
GetTickCount
GetSystemDefaultUILanguage
HeapAlloc
WaitForSingleObjectEx
GetExitCodeThread
InitializeCriticalSection
GetCommandLineW
GetConsoleOutputCP
DeleteCriticalSection
GetCommandLineA
TlsAlloc
DeleteFileA
LeaveCriticalSection
EnterCriticalSection
GetThreadLocale
GetLastError
HeapDestroy
GetPrivateProfileStringW
GetModuleHandleA
FindResourceExA
GetProcAddress
CreateFileA
FreeLibrary
MultiByteToWideChar
IsDebuggerPresent
lstrlenW
Sleep
SetEvent
CompareStringW
GetSystemDirectoryW
GetComputerNameExW
GetComputerNameW
WideCharToMultiByte
RemoveDirectoryW
CreateSemaphoreW
WaitForSingleObject
ResetEvent
CreateEventW
ReadFile
TlsFree
WritePrivateProfileStringW
InterlockedExchange
FindResourceExW
VirtualAlloc
SetCurrentDirectoryW
GetConsoleCP
lstrlenA
LocalAlloc
FindClose
FindNextFileW
DeleteFileW
SetFileAttributesW
OpenMutexW
GetACP
FindFirstFileW
FindResourceA
CreateDirectoryW
PulseEvent
GetVersionExW
GetExitCodeProcess
CreateMutexW
CreateProcessW
LocalFree
GetAtomNameA
GetUserDefaultUILanguage
TerminateThread

ole32

OleRun
CoCreateInstance
CoUninitialize
CoInitialize
CoInitializeEx

wsock32

MigrateWinsockConfiguration

msvcrt

strchr
fwscanf
strlen
_wfopen
wcschr
_except_handler3
iswspace
_wcsdup
_wtoi
wcsncat
_itow
wcsstr
_vsnwprintf
malloc
fclose
wcsncmp
_initterm
_adjust_fdiv
??1type_info@@UAE@XZ
__dllonexit
memcpy
_onexit
?terminate@@YAXXZ
wcslen
__CxxFrameHandler
??1exception@@UAE@XZ
_purecall
?what@exception@@UBEPBDXZ
wcsrchr
wcscpy
wcscmp
_CxxThrowException
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
swprintf
_snwprintf
memmove
free
wcscat
_wcsicmp

msvcp60

??1bad_alloc@std@@UAE@XZ
??0bad_alloc@std@@QAE@PBD@Z
??0bad_alloc@std@@QAE@ABV01@@Z

Sections

.text
Size: 111KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 209KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 75KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 839B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

555c3d0176c4b8b8b757294d6c07008c

Headers

DLL Characteristics

File Characteristics

Imports

shell32

setupapi

comctl32

rpcrt4

user32

gdi32

advapi32

netapi32

kernel32

ole32

wsock32

msvcrt

msvcp60

Sections

.text Size: 111KB - Virtual size: 108KB

.data Size: 209KB - Virtual size: 213KB

.bss Size: - Virtual size: 75KB

.tls Size: 1024B - Virtual size: 839B

.rsrc Size: 30KB - Virtual size: 30KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 111KB - Virtual size: 108KB

.data
Size: 209KB - Virtual size: 213KB

.bss
Size: - Virtual size: 75KB

.tls
Size: 1024B - Virtual size: 839B

.rsrc
Size: 30KB - Virtual size: 30KB

.reloc
Size: 5KB - Virtual size: 5KB