b16711d1a24f5c9e5c26642fcc6d12f462673ff2fbf4180b6bd8261613f1f795

Sharing

Copy URL Twitter E-mail

General

Target

b16711d1a24f5c9e5c26642fcc6d12f462673ff2fbf4180b6bd8261613f1f795
Size

1.2MB
MD5

e8793a3025b97944375f53825fbbbe11
SHA1

f51646165c1af861d879c5ffd000ff330aa5ac72
SHA256

b16711d1a24f5c9e5c26642fcc6d12f462673ff2fbf4180b6bd8261613f1f795
SHA512

096958018724513619207003c7f59e35aec9ec4a64afeda84457f0fb09a19844394c24474e5ee1e72ea6375dd8b1e9bc1d8620adcc3c962372b827c4618c9ab3
SSDEEP

24576:zw18gTwuOHkvwfhtcKYLxnUKLmYNr6KzS8R5SpnzTL9al:z83Oq4yVUQJ6KzSpnzTZal

Score

N/A

Malware Config

Signatures

Files

b16711d1a24f5c9e5c26642fcc6d12f462673ff2fbf4180b6bd8261613f1f795
.exe windows x86

9a534a7b26ae97f8fd953c7f3ab4dd6e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ConnectNamedPipe
ReadFile
WaitForSingleObject
FlushFileBuffers
CreateNamedPipeA
GetVersionExA
lstrcpynA
CreateThread
GetLastError
Sleep
GetTempPathA
GetTempFileNameA
GetTickCount
GetSystemDirectoryW
InterlockedDecrement
ExitThread
GetModuleFileNameW
CopyFileW
DisconnectNamedPipe
lstrlenA
FlushConsoleInputBuffer
LoadLibraryA
FreeLibrary
GlobalMemoryStatus
GetCurrentProcessId
QueryPerformanceCounter
FindClose
FindFirstFileA
FindNextFileA
MultiByteToWideChar
GetStdHandle
GetFileType
GetVersion
GetModuleHandleA
GetProcAddress
GetCurrentThreadId
lstrlenW
LocalFree
GetStartupInfoA
CloseHandle
FormatMessageA
ExpandEnvironmentStringsA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SetLastError
SleepEx
OutputDebugStringA

user32

wsprintfA
wvsprintfA
MessageBoxA
GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW
wsprintfW

advapi32

RegisterEventSourceA
RegSetValueExW
RegDeleteValueA
RegSetValueExA
RegCloseKey
GetUserNameW
ConvertStringSecurityDescriptorToSecurityDescriptorA
RegOpenKeyExA
RegCreateKeyA
RegEnumValueA
RegOpenKeyA
RegQueryValueExA
DeregisterEventSource
ReportEventA

shell32

SHGetFolderPathW

ole32

CoInitializeSecurity
CoInitializeEx
CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear
GetErrorInfo
CreateErrorInfo
SetErrorInfo
VariantChangeType

ws2_32

WSAStartup
closesocket
WSAGetLastError
recv
send
getsockname
ntohs
bind
htons
getsockopt
getpeername
shutdown
setsockopt
connect
socket
WSASetLastError
freeaddrinfo
getaddrinfo
__WSAFDIsSet
select
ioctlsocket
gethostname
WSACleanup

msvcrt

fgets
fopen
qsort
fputs
fflush
fputc
_errno
isspace
memchr
getenv
strerror
_gmtime64
isalnum
isalpha
_beginthreadex
_stat64
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
sprintf
__p__fmode
fclose
realloc
__dllonexit
_onexit
strlen
strchr
_strtoi64
fseek
isxdigit
tolower
sscanf
memmove
_stricmp
__iob_func
fread
fwrite
free
atoi
srand
strcmp
malloc
_chmod
_fdopen
_open
_vsnprintf
vfprintf
raise
ferror
_setmode
_fileno
ftell
feof
_wfopen
fprintf
_localtime64
isupper
signal
_getch
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_CxxThrowException
_except_handler3
??2@YAPAXI@Z
??3@YAXPAX@Z
memcpy
wcsstr
wcslen
wcsncmp
mbstowcs
strtol
strrchr
__set_app_type
rand
calloc
strcat
strncat
isdigit
strncmp
memset
strncpy
_strdup
strcpy
_time64
_controlfp
strstr
__p__commode
_strnicmp
strtoul

gdi32

DeleteDC
GetBitmapBits
BitBlt
GetObjectA
SelectObject
CreateCompatibleBitmap
GetDeviceCaps
CreateCompatibleDC
DeleteObject
CreateDCA

Sections

.text
Size: 885KB - Virtual size: 885KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 270KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a534a7b26ae97f8fd953c7f3ab4dd6e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

ws2_32

msvcrt

gdi32

Sections

.text Size: 885KB - Virtual size: 885KB

.rdata Size: 270KB - Virtual size: 269KB

.data Size: 27KB - Virtual size: 35KB

.reloc Size: 46KB - Virtual size: 46KB

.text
Size: 885KB - Virtual size: 885KB

.rdata
Size: 270KB - Virtual size: 269KB

.data
Size: 27KB - Virtual size: 35KB

.reloc
Size: 46KB - Virtual size: 46KB