9d7273a086d175b7b57c5228e664dd27cdd24e4486966adf125e1c32204d01ee

Sharing

Copy URL

Twitter E-mail

General

Target

9d7273a086d175b7b57c5228e664dd27cdd24e4486966adf125e1c32204d01ee
Size

178KB
MD5

90c47aca3b9794dcfef4905d352bd5a6
SHA1

e61b2f4bd740a0092f6c11ef88de7bcb45320f6a
SHA256

9d7273a086d175b7b57c5228e664dd27cdd24e4486966adf125e1c32204d01ee
SHA512

b11a0a33ffb999f80111f92b095d9eff07df9b027aac236ea09e3cfff23344896dad06f272cdc15f8e1d30757c730b8ffa295c41912c42a8284adf2796c1cb1d
SSDEEP

3072:+Auky+gepBxdWluM29ubEyyK62ZMKh7XC9kN3lpfat5DYhwtwvzSrU:+N+vpBxsEubE3+lk9kdlps8wtwvzS4

Score

N/A

Malware Config

Signatures

Files

9d7273a086d175b7b57c5228e664dd27cdd24e4486966adf125e1c32204d01ee
.exe windows x86

701bde019a740c7f58788ad5de3cbaf0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
SystemTimeToTzSpecificLocalTime
lstrcmpW
DuplicateHandle
GetProcAddress
GetCurrentThread
MultiByteToWideChar
GetTempPathW
WaitForSingleObject
SetLastError
OpenProcess
InitializeCriticalSection
CloseHandle
lstrcpynW
lstrlenW
CreateThread
lstrcmpiW
FindResourceExW
CreateEventW
LoadResource
FindResourceW
LockResource
LoadLibraryExW
InterlockedIncrement
SizeofResource
SetEvent
GetLastError
InterlockedDecrement
GetCurrentThreadId
GetModuleHandleW
DeleteCriticalSection
VirtualFree
HeapCreate
RtlUnwind
GetModuleHandleA
VirtualAlloc
LoadLibraryA
GetStartupInfoW
SetUnhandledExceptionFilter
RaiseException
GetModuleFileNameW
FreeLibrary
GetCommandLineW
GetCurrentProcessId
Sleep
GetTempFileNameW
UnhandledExceptionFilter
GetLocaleInfoA
GetACP
InterlockedExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
QueryPerformanceFrequency
QueryPerformanceCounter
ResetEvent
CreateFileW
GetFileAttributesExW
FindFirstFileW
FindNextFileW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
CopyFileW
MoveFileExW
GetTickCount
FlushFileBuffers
SetFilePointer
ReadFile
WriteFile
GetFileSize
GetSystemTimeAsFileTime
FindClose
FileTimeToSystemTime
CreateProcessW
GetCurrentProcess
ReleaseMutex
EnterCriticalSection
LeaveCriticalSection
InterlockedCompareExchange
CreateMutexW
RemoveDirectoryW
GetExitCodeProcess
FileTimeToLocalFileTime
GetVersionExW
WideCharToMultiByte
GetThreadLocale
GetDateFormatW
GetTimeFormatW
ExitProcess
IsDebuggerPresent
TerminateProcess

user32

UnregisterClassA
CharLowerW
LoadStringW
DispatchMessageW
TranslateMessage
GetMessageW
PostThreadMessageW
KillTimer
wvsprintfW
SetTimer
CharNextW

ole32

CoImpersonateClient
CoCreateGuid
CoRevertToSelf
CoCreateInstance
CoTaskMemRealloc
CoUninitialize
CoRegisterClassObject
CoInitializeSecurity
CoInitialize
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2

oleaut32

SysFreeString
RegisterTypeLi
UnRegisterTypeLi
VarUI4FromStr
SysAllocString
LoadTypeLi
SysStringLen

advapi32

CloseServiceHandle
GetSecurityDescriptorLength
GetSidSubAuthority
RegCloseKey
RegDeleteValueW
MakeSelfRelativeSD
InitializeSid
CheckTokenMembership
FreeSid
AllocateAndInitializeSid
OpenThreadToken
RegQueryValueExW
ControlService
SetSecurityDescriptorDacl
StartServiceW
GetSecurityDescriptorDacl
QueryServiceStatus
SetSecurityDescriptorGroup
GetSecurityDescriptorGroup
RegSetValueExW
ChangeServiceConfigW
SetSecurityDescriptorOwner
RegCreateKeyExW
OpenServiceW
GetSecurityDescriptorOwner
DeleteService
OpenSCManagerW
ChangeServiceConfig2W
CreateServiceW
IsValidSid
RegQueryInfoKeyW
SetServiceStatus
GetLengthSid
DeregisterEventSource
ReportEventW
RegisterEventSourceW
RegisterServiceCtrlHandlerW
RegEnumKeyExW
GetAclInformation
AddAce
StartServiceCtrlDispatcherW
InitializeAcl
InitializeSecurityDescriptor
MakeAbsoluteSD
SetSecurityDescriptorControl
RegOpenKeyExW
CopySid
RegDeleteKeyW
GetSecurityDescriptorSacl
GetSidLengthRequired
GetSecurityDescriptorControl

shlwapi

StrRetToStrW
SHQueryValueExW
PathStripPathW

crypt32

CertFreeCertificateContext
CertNameToStrW
CryptQueryObject
CertEnumCertificatesInStore
CertCloseStore
CertDuplicateCertificateContext

shell32

SHGetFolderLocation
SHCreateDirectoryExW
SHFileOperationW
SHGetDesktopFolder

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

wintrust

WinVerifyTrust

Sections

.text
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

701bde019a740c7f58788ad5de3cbaf0

Headers

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

advapi32

shlwapi

crypt32

shell32

version

wintrust

Sections

.text Size: 119KB - Virtual size: 119KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 7KB - Virtual size: 15KB

.rsrc Size: 21KB - Virtual size: 20KB

.text
Size: 119KB - Virtual size: 119KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 7KB - Virtual size: 15KB

.rsrc
Size: 21KB - Virtual size: 20KB