9e67390f34f8b68e743e2a9b02ff1b54d27e0c77482fe94fd5dc37bd9bff5c87

Sharing

Copy URL Twitter E-mail

General

Target

9e67390f34f8b68e743e2a9b02ff1b54d27e0c77482fe94fd5dc37bd9bff5c87
Size

172KB
MD5

3bc2cb0f03d0cbd4843c6b4401892d3e
SHA1

3eb3f8e9ffa5637aa1cf4f855a7dfe01b369bc64
SHA256

9e67390f34f8b68e743e2a9b02ff1b54d27e0c77482fe94fd5dc37bd9bff5c87
SHA512

1febf46b6492ed54c614700f6dc83417e42968348dcadaa196d8efa2ae471b154f9e3b42f3fd690238953b1b35cc402fece212bd0af45a3f52b71c74576325bf
SSDEEP

3072:sYNNwTekg7+04o41rOVInPkSQFRtUMoK:GTUqDR6w1K

Score

N/A

Malware Config

Signatures

Files

9e67390f34f8b68e743e2a9b02ff1b54d27e0c77482fe94fd5dc37bd9bff5c87
.dll windows x86

cdbebc829fb77b539aa46bf54c8934fd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

netapi32

Netbios

kernel32

CreateProcessW
GetLastError
CloseHandle
Sleep
GetTickCount
CreateEventW
WaitForSingleObject
SetEvent
CreateThread
MultiByteToWideChar
WideCharToMultiByte
SetFilePointer
SystemTimeToFileTime
GetFileAttributesW
CreateFileW
ReadFile
GetCurrentDirectoryW
LocalFileTimeToFileTime
CreateDirectoryW
WriteFile
SetFileTime
FindClose
FindFirstFileW
GetWindowsDirectoryW
GetTempFileNameW
GetSystemTime
CreateFileA
GetProcessHeap
SetEndOfFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSection
LoadLibraryA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
GetCurrentThreadId
GetCommandLineA
GetVersionExA
RaiseException
RtlUnwind
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
ExitProcess
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetConsoleCP
GetConsoleMode
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FlushFileBuffers
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEnvironmentVariableW

advapi32

RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW

ole32

StringFromGUID2
CoCreateGuid
CoCreateInstance
CoInitialize
CoUninitialize
CoInitializeEx

wininet

HttpQueryInfoW
InternetReadFile
HttpSendRequestW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetCloseHandle
InternetAttemptConnect
InternetCheckConnectionW
InternetOpenW
InternetConnectW

shlwapi

SHDeleteKeyW

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cdbebc829fb77b539aa46bf54c8934fd

Headers

File Characteristics

Imports

netapi32

kernel32

advapi32

ole32

wininet

shlwapi

Sections

.text Size: 104KB - Virtual size: 103KB

.rdata Size: 40KB - Virtual size: 38KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 880B

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 104KB - Virtual size: 103KB

.rdata
Size: 40KB - Virtual size: 38KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 880B

.reloc
Size: 12KB - Virtual size: 8KB