ca4d1f19882bfe14ee0a10c3a6a2bd8c21f71c5c33bb444cc872fd20dc939560

Sharing

Copy URL Twitter E-mail

General

Target

ca4d1f19882bfe14ee0a10c3a6a2bd8c21f71c5c33bb444cc872fd20dc939560
Size

358KB
MD5

384d3cfa1f1f92309d0c029042f086b6
SHA1

20f84b421be962491e7a7df20253a38245f55fce
SHA256

ca4d1f19882bfe14ee0a10c3a6a2bd8c21f71c5c33bb444cc872fd20dc939560
SHA512

cad51fe208319c6bbfd7313c5f03c277a972c9f83422fcb52c2e3ce0cfc5fc32a7eef3f3567552401c2d7a8886e801228d19a990ec8d571104a6e3ede4509b74
SSDEEP

6144:T2/r9/EcTQGMyMuSmvpmxEkE5rM3fIVF4KTuyo0Y/l/IS0zdGfMa4Nk:T89/EYQ1iVm8ryIVF4Jyo9Gbzi+

Score

N/A

Malware Config

Signatures

Files

ca4d1f19882bfe14ee0a10c3a6a2bd8c21f71c5c33bb444cc872fd20dc939560
.exe windows x86

27f78478bfb3397127a9bb86d9b69860

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
lstrcpyW
LockResource
LoadResource
FindResourceW
UnhandledExceptionFilter
GetCurrentThread
GetProcAddress
InitializeCriticalSection
InterlockedExchange
RaiseException
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
InterlockedDecrement
lstrcatW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrcmpiW
lstrlenW
GetTickCount
InterlockedIncrement
SetLastError
GlobalLock
GlobalUnlock
LoadLibraryW
CreateThread
GetModuleHandleW
FreeLibraryAndExitThread
LocalSize
WaitForSingleObject
GetCurrentProcess
GetLastError
lstrcpynW
CloseHandle
CompareStringW
DisableThreadLibraryCalls
FreeLibrary
LocalFree
LocalAlloc
LoadLibraryA
GetWindowsDirectoryW
GetModuleFileNameW
FormatMessageW

user32

RegisterClassW
LoadBitmapW
SetWindowTextW
GetWindowTextW
GetScrollInfo
OffsetRect
ScrollWindow
DefWindowProcW
MapDialogRect
SystemParametersInfoW
ScreenToClient
ChildWindowFromPoint
SetScrollInfo
InflateRect
SetScrollPos
GetDC
GetWindow
GetDlgItemTextW
PostMessageW
SendDlgItemMessageW
GetWindowRect
MapWindowPoints
SetWindowPos
GetSysColorBrush
SetDlgItemTextW
IsWindowEnabled
WinHelpW
GetWindowLongW
LoadCursorW
SetCursor
ShowWindow
GetClientRect
GetSystemMetrics
CheckDlgButton
IsDlgButtonChecked
SetWindowLongW
GetParent
MessageBoxW
GetFocus
SetFocus
EnableWindow
DialogBoxParamW
EndDialog
LoadIconW
GetDlgItem
SendMessageW
LoadStringW
CreateWindowExW
RegisterWindowMessageW
RegisterClipboardFormatW
FrameRect
GetSysColor
DrawFocusRect
ReleaseDC
ShowScrollBar
DestroyWindow
MoveWindow
GetDlgCtrlID

gdi32

CreateFontIndirectW
GetObjectW
DeleteObject
SetBkMode
SetTextColor
GetTextExtentPoint32W
SetBkColor

shlwapi

StrRChrW
StrChrW
PathAppendW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenThreadToken
DuplicateTokenEx
AdjustTokenPrivileges
SetThreadToken
CopySid
LsaLookupSids
GetSidSubAuthority
GetLengthSid
ConvertSidToStringSidW
EqualSid
GetSecurityDescriptorSacl
GetSecurityDescriptorDacl
GetSecurityDescriptorControl
InitializeAcl
LsaClose
LsaFreeMemory
LsaQueryInformationPolicy
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetSecurityDescriptorSacl
IsValidSid
GetTokenInformation
OpenProcessToken
GetSecurityDescriptorOwner
SetSecurityDescriptorOwner
LsaOpenPolicy
GetSidSubAuthorityCount
LookupAccountNameW
IsValidSecurityDescriptor
EqualPrefixSid

ole32

CoUninitialize
CoCreateInstance
ReleaseStgMedium
CoInitialize

oleaut32

SafeArrayUnaccessData
SysAllocString
SysAllocStringLen
SysReAllocStringLen
SysFreeString
SafeArrayAccessData

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 21B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.o0bb
Size: 306KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.0apa
Size: 2KB - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hjgf
Size: 2KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pqow
Size: 2KB - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.juhg
Size: 2KB - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 2KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

27f78478bfb3397127a9bb86d9b69860

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shlwapi

advapi32

ole32

oleaut32

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 2KB - Virtual size: 956B

.tls Size: 2KB - Virtual size: 21B

.o0bb Size: 306KB - Virtual size: 304KB

.0apa Size: 2KB - Virtual size: 178B

.hjgf Size: 2KB - Virtual size: 136B

.pqow Size: 2KB - Virtual size: 600B

.juhg Size: 2KB - Virtual size: 200B

.CRT Size: 2KB - Virtual size: 8B

.rsrc Size: 18KB - Virtual size: 16KB

.reloc Size: 2KB - Virtual size: 288KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 2KB - Virtual size: 956B

.tls
Size: 2KB - Virtual size: 21B

.o0bb
Size: 306KB - Virtual size: 304KB

.0apa
Size: 2KB - Virtual size: 178B

.hjgf
Size: 2KB - Virtual size: 136B

.pqow
Size: 2KB - Virtual size: 600B

.juhg
Size: 2KB - Virtual size: 200B

.CRT
Size: 2KB - Virtual size: 8B

.rsrc
Size: 18KB - Virtual size: 16KB

.reloc
Size: 2KB - Virtual size: 288KB