dd99f8d577804b5b5f9a1757a37369563cb9338700f3061af4671e6f69b2a0f5

Sharing

Copy URL Twitter E-mail

General

Target

dd99f8d577804b5b5f9a1757a37369563cb9338700f3061af4671e6f69b2a0f5
Size

238KB
MD5

0d357d4104b7a65aa5a2a7dd2e2ad301
SHA1

1ba3a87161499ba6af44840ff5bbf5964b98b8f9
SHA256

dd99f8d577804b5b5f9a1757a37369563cb9338700f3061af4671e6f69b2a0f5
SHA512

48d881a310ebb84204adcb52c4d5aa6adb7795aa54d8893e40fcf919cc07c3c645bad76acbd8d9b939a2bfa517f4a09222a4cfa133e6ed6e0ad9feef62ac1388
SSDEEP

6144:t1c8zLAl0DybcdHkPPoO1i+26tFuyMko/:MILQA5ioOwSFuyMn/

Score

N/A

Malware Config

Signatures

Files

dd99f8d577804b5b5f9a1757a37369563cb9338700f3061af4671e6f69b2a0f5
.exe windows x86

78692938da5fbe4c9821c789e5e8987c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegOpenKeyExW
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenCurrentUser
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
RegQueryValueExW
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegDeleteValueA
GetSidSubAuthority
GetServiceDisplayNameW
RegQueryMultipleValuesA
SaferiSearchMatchingHashRules
BuildSecurityDescriptorA
PrivilegedServiceAuditAlarmA
GetUserNameW
ImpersonateSelf
SetInformationCodeAuthzPolicyW
SetServiceStatus
ConvertAccessToSecurityDescriptorW
GetMultipleTrusteeOperationW
GetMultipleTrusteeA
ReportEventW
SystemFunction010
SaferSetLevelInformation
LsaSetQuotasForAccount
ReadEventLogW
ProcessTrace
EnableTrace
OpenEncryptedFileRawW
MD4Init
StartServiceCtrlDispatcherW
SetEntriesInAccessListW
ElfRegisterEventSourceA
RegGetKeySecurity
ElfOpenBackupEventLogW
RegFlushKey
LsaOpenTrustedDomainByName
RegReplaceKeyW
FreeSid
UpdateTraceW
ElfOpenBackupEventLogA
InitiateSystemShutdownA
LsaDelete
BuildTrusteeWithObjectsAndSidW
RegCreateKeyA
RemoveTraceCallback
RegLoadKeyA
GetLengthSid
GetServiceKeyNameW
SystemFunction027
OpenTraceA
ConvertStringSDToSDDomainA
NotifyChangeEventLog
CryptGetDefaultProviderW
ObjectPrivilegeAuditAlarmW
I_ScSetServiceBitsW

user32

GetFocus
wsprintfA
EqualRect
MessageBoxA
GetClientRect
SetCursor
GetForegroundWindow
DestroyWindow
GetKeyState
ShowWindow
CallWindowProcA
UnregisterClassA
CharNextA
PtInRect
SetWindowLongA
IntersectRect
SetWindowPos
IsWindow
GetParent
IsChild
InvalidateRect
UnionRect
ReleaseDC
LoadCursorA
SetFocus
GetWindowLongA
DefWindowProcA
SetWindowRgn
OffsetRect
GetDC

kernel32

lstrcpyA
RaiseException
lstrcatA
FlushInstructionCache
TlsAlloc
TlsGetValue
TlsFree
lstrlenW
lstrcmpiA
lstrlenA
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
CloseHandle
SizeofResource
OutputDebugStringA
CreateDirectoryW
GetTempPathW
WriteConsoleA
GetConsoleCP
VirtualAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteFileA
FindResourceA
HeapDestroy
GetTempPathA
FreeEnvironmentStringsA
WriteFile
CreateFileA
FlushFileBuffers
WritePrivateProfileStringA
VirtualProtect
LCMapStringA
GetStdHandle
TerminateThread
FreeEnvironmentStringsW
GetConsoleMode
DeleteCriticalSection
CreateMutexA
MulDiv
HeapFree
LoadLibraryExA
WaitForSingleObjectEx
CreateThread
FreeLibrary
IsDBCSLeadByte
GetFileType
GetOEMCP
ReadFile
WaitForSingleObject
GetTempFileNameW
TlsSetValue
GetModuleHandleA
GetThreadLocale
GetLocalTime
GetProcessHeap
HeapSize
FindNextFileA
HeapReAlloc
VirtualFree
WriteConsoleW
VirtualQuery
GlobalLock
GetConsoleOutputCP
LoadResource
LCMapStringW
WaitForMultipleObjects
FindClose
CreateFileW
HeapAlloc
SetStdHandle
SetHandleCount
WideCharToMultiByte
GetCurrentThreadId
UnhandledExceptionFilter
CreateEventA
CreateMutexW
SetFilePointer
IsDebuggerPresent
IsProcessorFeaturePresent
DeleteFileW
GetSystemInfo
ReleaseMutex
FindFirstFileA
GlobalUnlock
SetFileAttributesA
GetCommandLineA
SetLastError
IsValidCodePage
GetACP
GlobalAlloc
lstrcmpA
RtlUnwind
GetCurrentDirectoryA
VirtualAllocEx

ole32

OleRegGetUserType
CoTaskMemRealloc
OleSaveToStream
OleRegEnumVerbs
CreateOleAdviseHolder
CoCreateInstance
OleRegGetMiscStatus
CreateDataAdviseHolder
OleLoadFromStream
CoTaskMemFree
CoTaskMemAlloc
WriteClassStm
StringFromGUID2

gdi32

SetWindowOrgEx
DeleteMetaFile
GetDeviceCaps
LPtoDP
CreateMetaFileA
DeleteDC
SetMapMode
CloseMetaFile
SetWindowExtEx
TextOutA
CreateRectRgnIndirect
RestoreDC
SetViewportOrgEx
SetTextAlign
CreateDCA
SaveDC

oleaut32

VariantCopy
VariantInit
SysAllocString
SysFreeString
SysStringByteLen
SysAllocStringByteLen
OleCreatePropertyFrame
SysStringLen
RegisterTypeLi
DispCallFunc
LoadTypeLi
UnRegisterTypeLi
VariantClear
VarUI4FromStr
VariantChangeType
LoadRegTypeLi

pngfilt

DllGetClassObject

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 211KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 954KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78692938da5fbe4c9821c789e5e8987c

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

user32

kernel32

ole32

gdi32

oleaut32

pngfilt

Sections

.text Size: 18KB - Virtual size: 17KB

.rdata Size: 211KB - Virtual size: 211KB

.data Size: 6KB - Virtual size: 954KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 18KB - Virtual size: 17KB

.rdata
Size: 211KB - Virtual size: 211KB

.data
Size: 6KB - Virtual size: 954KB

.rsrc
Size: 2KB - Virtual size: 1KB