a5b988a1aa0ce2a304a87d247f6f6e32eed934c335192f73c52d4b366a3edeb5

Sharing

Copy URL Twitter E-mail

General

Target

a5b988a1aa0ce2a304a87d247f6f6e32eed934c335192f73c52d4b366a3edeb5
Size

208KB
MD5

2afc703a5fb182585123625d5213cc60
SHA1

8048b509652bf8d034beff109a8a31643f26718c
SHA256

a5b988a1aa0ce2a304a87d247f6f6e32eed934c335192f73c52d4b366a3edeb5
SHA512

533a3dd7e8181e3d48de016b72558a5f00d54e2d11fe41d0619f44a5fce407460e64ec1e69be763719fae6980d731c85ddc23acbd79681f62f6b915ca8e4483e
SSDEEP

3072:KZEZbEXfG0bN9Na7G8T9lOcBYdRsGqBjZ/0KcoIE9:KiVf8bNJ8T9lOcqdtqBK

Score

N/A

Malware Config

Signatures

Files

a5b988a1aa0ce2a304a87d247f6f6e32eed934c335192f73c52d4b366a3edeb5
.dll windows x86

d68099df983cfefc55a0884e27f520a7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetFileSecurityW
GetLengthSid
GetTokenInformation
OpenProcessToken
OpenThreadToken
RegCloseKey
RegCreateKeyExA
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExA
RegQueryValueExW
RevertToSelf
SetThreadToken

gdi32

GetOutlineTextMetricsA
EudcLoadLinkW

kernel32

VirtualAlloc
CloseHandle
CompareStringW
CreateDirectoryW
CreateFileA
CreateFileW
CreateMutexW
DeleteFileA
DeleteFileW
DeviceIoControl
FileTimeToDosDateTime
FindClose
FindFirstFileW
FreeLibrary
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetDriveTypeW
GetEnvironmentVariableW
GetFileAttributesExW
GetFileAttributesW
GetFileSize
GetProcAddress
GetTempFileNameW
GetTickCount
GlobalFree
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
LoadLibraryA
LocalAlloc
LocalFree
MoveFileW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
ReadFile
ReleaseMutex
SetEndOfFile
SetEvent
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFileTime
Sleep
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcatW
lstrcmpiW
lstrcpyW
lstrlenW
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
IsBadWritePtr
DeleteCriticalSection
ExitProcess
FatalAppExitA
RtlUnwind
SetStdHandle
GetLastError
GetFileType
TerminateProcess
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
InterlockedIncrement
GetExitCodeProcess
CreateProcessW
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
SetConsoleCtrlHandler
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
RaiseException
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
SetEnvironmentVariableA

ole32

CoRevertToSelf

user32

SetCaretPos
wvsprintfA
DefWindowProcW
DestroyWindow
MessageBoxA
MsgWaitForMultipleObjects
PostQuitMessage
SetThreadDesktop
UnregisterClassW
VkKeyScanExW
wsprintfA
wsprintfW

Exports

Exports

ibwe

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d68099df983cfefc55a0884e27f520a7

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

ole32

user32

Exports

Exports

Sections

.text Size: 116KB - Virtual size: 115KB

.rdata Size: 28KB - Virtual size: 26KB

.data Size: 48KB - Virtual size: 57KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 116KB - Virtual size: 115KB

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 48KB - Virtual size: 57KB

.reloc
Size: 12KB - Virtual size: 8KB