b5bb1fc8b41a9155c599a488f6bd13bdd8add2869f95e68d8a01d484e77096b3

Sharing

Copy URL Twitter E-mail

General

Target

b5bb1fc8b41a9155c599a488f6bd13bdd8add2869f95e68d8a01d484e77096b3
Size

196KB
MD5

f2b37760f024dfa35730f0324e577f4f
SHA1

6aa3487285aaa655e62ccc4e2eebad84146e9877
SHA256

b5bb1fc8b41a9155c599a488f6bd13bdd8add2869f95e68d8a01d484e77096b3
SHA512

4187315555801c1e70359c8dc59d0853df75cb86f0d481789d1d680e1d955a693e97f9b7742791ed76d130cf346ab7574ef6bc8116fa98b71904bf8dee43fd07
SSDEEP

3072:0NtilnRB/LrRP+Y6HOkdsRc1kXYx/DBE0oTeAVRpQ3z3qoNqxk:44DX06m1kHvNqD3q

Score

N/A

Malware Config

Signatures

Files

b5bb1fc8b41a9155c599a488f6bd13bdd8add2869f95e68d8a01d484e77096b3
.dll windows x86

8769bf10e41af045096d52cc19078fe6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
ReadFile
FindFirstFileW
FindClose
FindNextFileW
GetCurrentProcessId
GetComputerNameW
VirtualAlloc
VirtualFree
SetFilePointer
DeviceIoControl
GetFileAttributesW
TlsSetValue
TlsGetValue
GetTickCount
GetSystemTimeAsFileTime
SetFileAttributesW
SetPriorityClass
ExpandEnvironmentStringsW
LoadLibraryA
CreateEventW
SetProcessShutdownParameters
SetConsoleCtrlHandler
SetEnvironmentVariableW
GetEnvironmentVariableW
IsDebuggerPresent
GetOEMCP
GetACP
GetCPInfo
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
HeapReAlloc
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
GetVersion
RtlUnwind
HeapFree
HeapAlloc
RaiseException
TlsAlloc
GetStringTypeW
CreateSemaphoreW
ReleaseMutex
GetUserDefaultLCID
CompareFileTime
DeleteFileW
lstrcatW
GetModuleFileNameW
lstrcpynW
lstrcmpiW
LCMapStringW
lstrcpyW
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
DisableThreadLibraryCalls
InterlockedCompareExchange
InterlockedExchange
LocalFree
LockResource
CreateThread
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
LoadResource
GetExitCodeThread
WaitForSingleObject
Sleep
GetCommandLineW
CreateMutexW
InterlockedIncrement
GetProcAddress
FreeLibrary
InterlockedDecrement
lstrlenW
GetCurrentThreadId
lstrcmpW
FormatMessageW
CreateFileW
CreateProcessW
CloseHandle
FindResourceExW
VirtualProtect
GetStringTypeA
GetCommandLineA

user32

SetWindowTextW
EnableWindow
SendMessageW
GetDlgItem
DestroyMenu
ClientToScreen
InsertMenuW
EndDialog
TranslateMessage
PeekMessageW
SetForegroundWindow
GetLastActivePopup
FindWindowW
GetDlgCtrlID
LoadImageW
MessageBoxW
DefWindowProcW
CharNextW
SendMessageA
LoadStringW
DispatchMessageW
GetWindowTextW
GetSystemMetrics
GetWindowRect
IsWindowEnabled
ShowWindow
GetClientRect
SetWindowLongW
GetWindowLongW
SetTimer
CharLowerW
GetDC
ReleaseDC
SystemParametersInfoW
ScreenToClient
CreateWindowExW
SetWindowPos
PostMessageW
CallWindowProcW
TrackPopupMenu

advapi32

LsaClose
CryptReleaseContext
CryptDestroyKey
CryptDecrypt
CryptGenRandom
RevertToSelf
RegCloseKey
ReportEventW
RegisterEventSourceW
CryptAcquireContextW
CryptGetUserKey
RegQueryValueExW
RegOpenKeyW
RegSetValueExW
IsTokenRestricted
RegCreateKeyExW
ElfReportEventW
LsaOpenPolicy
LsaQueryInformationPolicy
ImpersonateLoggedOnUser
LsaSetInformationPolicy
LsaSetDomainInformationPolicy
RegCreateKeyW
SystemFunction007
RegDeleteValueW
RegDeleteKeyW
OpenProcessToken
GetTokenInformation
IsValidSid
GetSidSubAuthority
GetSidSubAuthorityCount
RegOpenKeyExW
LsaFreeMemory

gdi32

SelectObject
ExtTextOutW
SetTextColor
DeleteObject
CreateFontIndirectW
LineDDA
LineTo
MoveToEx
CreatePen
SetBkColor
GetDeviceCaps
GetLayout

ole32

CoCreateGuid
PropVariantClear
CoTaskMemFree
StringFromGUID2
CoInitialize
CoCreateInstance
CoUninitialize

rpcrt4

RpcImpersonateClient
RpcRevertToSelf
RpcBindingInqAuthClientW
RpcStringFreeW
UuidToStringW
UuidCreate

Sections

.text
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8769bf10e41af045096d52cc19078fe6

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

ole32

rpcrt4

Sections

.text Size: 124KB - Virtual size: 121KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 16KB - Virtual size: 48KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 124KB - Virtual size: 121KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 16KB - Virtual size: 48KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 6KB