b51c9d436e8dd5ffa96f0f23303860ef3c7d484bf607c9defe3f55e19263f361

Sharing

Copy URL Twitter E-mail

General

Target

b51c9d436e8dd5ffa96f0f23303860ef3c7d484bf607c9defe3f55e19263f361
Size

340KB
MD5

6e7706743f97dbf7a3745a1f74661b53
SHA1

ed03a4e232c35313d7a182fb80e9af24d22d76ef
SHA256

b51c9d436e8dd5ffa96f0f23303860ef3c7d484bf607c9defe3f55e19263f361
SHA512

e793533daa7981512113abae8b5a696b0d93cc3e90a380dae48aee69ea1f6ac33326252a6c0a83e3a902c0af3e52168a4a801971b676a0d133eaa3e05bfb796b
SSDEEP

6144:Lc3WkrJnrSfdg6vxr9UbtsvHgT7pr4xQrZEVzXHJeHfj7IhT8YLXzo+JAt:L2f1wZJOxprYQ+VDHJe/j7IhNLXr

Score

N/A

Malware Config

Signatures

Files

b51c9d436e8dd5ffa96f0f23303860ef3c7d484bf607c9defe3f55e19263f361
.exe windows x86

7df0d91cc3c4202609b6d1f97b8c684d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strcmp
_snprintf
sprintf
memcpy
_vsnprintf
strrchr
wcsncpy
_wcsicmp
wcsstr
_except_handler3
_adjust_fdiv
malloc
memmove
_initterm
memset
free
_snwprintf

advapi32

ChangeServiceConfigW
FreeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
RegQueryValueExA
RegQueryValueExW
RegSetValueExW
RegEnumValueA
RegCloseKey
RegOpenKeyW
CloseServiceHandle
StartServiceW
ChangeServiceConfig2W
CreateServiceW
OpenServiceW
OpenSCManagerW
RegDeleteValueW
QueryServiceStatus
ControlService
RegOpenKeyExW
RegDeleteKeyW
RegOpenKeyExA
RegCreateKeyW
RegCreateKeyExW
RegSetValueExA
RegCreateKeyA
RegSetValueW
RegCreateKeyExA

gdi32

BitBlt
DeleteDC
ExtCreatePen
GetDeviceCaps
CreateDCW
AddFontResourceA
CreateCompatibleDC
CreateCompatibleBitmap
GetStockObject
CreatePen
CreateSolidBrush
SelectObject
CreateFontIndirectW

kernel32

GetModuleHandleA
lstrcatW
FindResourceA
GetSystemDirectoryW
FreeLibrary
GetProcAddress
GetUserDefaultUILanguage
LoadLibraryA
GetLastError
Sleep
WaitForSingleObject
GetSystemDefaultUILanguage
LocalFree
CreateSemaphoreA
CloseHandle
LCMapStringW
InterlockedExchange
CreateEventW
ReleaseMutex
CompareStringW
EnterCriticalSection
GlobalMemoryStatusEx
GetPrivateProfileStringW
GetWindowsDirectoryW
GetThreadLocale
GetACP
GlobalFree
CreateProcessW
GetCommandLineA
ResetEvent
DeleteFileW
lstrcmpiW
lstrcmpW
MultiByteToWideChar
GetVersion
GetConsoleOutputCP
TlsAlloc
lstrcpyA
CreateThread
ReadFile
GetStdHandle
GetComputerNameW
CompareStringA
FormatMessageW
lstrcpynW
PulseEvent
DisableThreadLibraryCalls
QueryPerformanceCounter
OpenSemaphoreA
FindAtomA
GetTempPathA
GetTickCount
DeleteFileA
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
TlsFree
GetOEMCP
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsSetValue
OpenEventA
lstrlenA
AddAtomA
lstrlenW
lstrcpyW
OpenEventW
SetLastError
LocalAlloc
GetModuleHandleW
InterlockedIncrement
GetModuleFileNameW
WriteFile
HeapFree
CreateMutexA
FindResourceW
FindNextFileA
HeapAlloc
GetComputerNameExW
GetTempFileNameA
GetVersionExA
GetProcessHeap
HeapCreate
SetEvent
SetFilePointer
GetSystemDefaultLangID
FlushFileBuffers
SetFilePointerEx
SetFileAttributesA
LeaveCriticalSection
CreateFileA
WaitForSingleObjectEx
GetStartupInfoA
GlobalAlloc
ExpandEnvironmentStringsA
GetLocalTime
GetModuleFileNameA
GetAtomNameA
lstrcpynA
CreateMutexW

user32

FindWindowA
FindWindowW
CountClipboardFormats
UnregisterClassA
SetForegroundWindow
GetProcessDefaultLayout
wsprintfW
ReleaseDC
ShowWindow
UpdateWindow
SetWindowTextW
LoadIconA
SystemParametersInfoW
SendMessageA
GetInputState
MessageBoxW
LoadCursorA
LoadIconW
GetDesktopWindow
SetDlgItemTextW
GetCursor
SendDlgItemMessageW
FindWindowExA
TranslateMessage
GetSysColor
DefWindowProcA
GetDlgItem
GetCaretBlinkTime
GetFocus
SetFocus
PostQuitMessage
LoadStringW
CharNextW
DispatchMessageA
LoadMenuA
GetDoubleClickTime
GetForegroundWindow
GetMessageA
IsWindow
GetWindowLongW
SetWindowLongW
GetClipboardSequenceNumber
GetParent
GetDC
SendMessageW
GetActiveWindow

ole32

CoInitialize
CoUninitialize
CoCreateInstance

cfgmgr32

CM_Get_DevNode_Status

setupapi

SetupDefaultQueueCallbackW
SetupGetStringFieldW
SetupFindFirstLineW
SetupDiRegisterDeviceInfo
SetupCloseInfFile
SetupDiGetActualSectionToInstallW
SetupOpenInfFileW
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
SetupDiGetSelectedDevice
SetupQueryInfVersionInformationW
SetupGetInfInformationW
SetupDiGetDriverInstallParamsW
SetupDiEnumDriverInfoW
SetupDiGetDeviceRegistryPropertyW
SetupDiOpenDevRegKey
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiClassGuidsFromNameW
SetupDiSetSelectedDevice
SetupDiOpenDeviceInterfaceRegKey
SetupDiEnumDeviceInterfaces
SetupDiSetClassInstallParamsW
SetupDiGetClassInstallParamsW
SetupDiGetWizardPage
SetupDiCallClassInstaller
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiCreateDeviceInfoW
SetupDiClassNameFromGuidW
SetupDiCreateDeviceInfoList
SetupDiRemoveDevice
SetupDiDeleteDevRegKey
SetupDiRemoveDeviceInterface
SetupDiDeleteDeviceInterfaceRegKey
SetupDiGetDeviceInterfaceDetailW
SetupFindNextLine
SetupDiCreateDeviceInterfaceRegKeyW
SetupOpenAppendInfFileW
SetupDiCreateDeviceInterfaceW
SetupTermDefaultQueueCallback
SetupDiInstallDevice
SetupInitDefaultQueueCallbackEx
SetupDiCreateDevRegKeyW
SetupDiSetDriverInstallParamsW

shell32

SHGetFolderPathW

mscms

InstallColorProfileW
AssociateColorProfileWithDeviceW

Sections

.text
Size: 99KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 203KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 360B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7df0d91cc3c4202609b6d1f97b8c684d

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

gdi32

kernel32

user32

ole32

cfgmgr32

setupapi

shell32

mscms

Sections

.text Size: 99KB - Virtual size: 96KB

.data Size: 203KB - Virtual size: 263KB

.bss Size: - Virtual size: 360B

.tls Size: 1KB - Virtual size: 1KB

.rsrc Size: 30KB - Virtual size: 30KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 99KB - Virtual size: 96KB

.data
Size: 203KB - Virtual size: 263KB

.bss
Size: - Virtual size: 360B

.tls
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 30KB - Virtual size: 30KB

.reloc
Size: 4KB - Virtual size: 4KB