a5288c1815fe15ff9353120e9940a093461e8f2072fadc55a5324733bd0d78b0

Sharing

Copy URL Twitter E-mail

General

Target

a5288c1815fe15ff9353120e9940a093461e8f2072fadc55a5324733bd0d78b0
Size

250KB
MD5

62ef81041618a65a205c37a05fcca949
SHA1

7efd04bfb084331ee9d937a4beca004d8d32b3c8
SHA256

a5288c1815fe15ff9353120e9940a093461e8f2072fadc55a5324733bd0d78b0
SHA512

1ee0d1fba9747af120a428b286afe15074c1c7e8c1dcc015bb139d1780f58ad0a6ced229fa8edc63af5e1faa6d0650aa66efe9cc0a3c788a7eb4126c0af605bc
SSDEEP

6144:vdMNt9jEJCPBwnOOQJEWLOxA2322oVvZMy0:A9oJIQOxOxjo/l0

Score

N/A

Malware Config

Signatures

Files

a5288c1815fe15ff9353120e9940a093461e8f2072fadc55a5324733bd0d78b0
.exe windows x86

71acbb336a3638a4c2775a9ca1df7bfc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
MultiByteToWideChar
GetThreadLocale
GetProcessHeap
LoadLibraryW
SetCurrentDirectoryW
GetExitCodeProcess
GetVersionExW
InitializeCriticalSection
CompareFileTime
Sleep
WaitForSingleObject
SystemTimeToFileTime
GetLocalTime
GetCurrentThread
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
FileTimeToSystemTime
FindResourceW
LoadResource
lstrcmpiW
RaiseException
GetModuleFileNameW
GetLastError
GetModuleHandleW
lstrlenW
GetCurrentDirectoryW
SetEvent
CreateEventW
GetCurrentProcess
GetVersion
GetProcAddress
GetModuleHandleA

user32

CharNextW
LoadBitmapA
SetWindowPos
CreateAcceleratorTableW
CreateDesktopW
SetParent
MessageBoxA
GetClassInfoA
LoadMenuIndirectA
RegisterClassExA
InvalidateRgn
GetMenuItemInfoA
CharPrevW
PostMessageW
ActivateKeyboardLayout
GetMenuItemInfoW
CreateDialogParamA
EmptyClipboard
GetDlgItemTextA
DialogBoxParamA
UnregisterClassA
GetClassInfoExA
TrackPopupMenuEx
CharPrevA
LoadMenuW
RegisterWindowMessageW
EnableMenuItem

advapi32

RegQueryValueExW
RegDeleteValueW
RegQueryInfoKeyW
OpenThreadToken
GetTokenInformation
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegSetValueExW
RegCloseKey

ole32

CoCreateInstance
StringFromCLSID

oleaut32

SysFreeString
VarUI4FromStr
SysAllocString
VarBstrCmp
VariantCopy
SafeArrayLock
SafeArrayUnlock
SafeArrayCreate
SafeArrayRedim
SafeArrayDestroy
SafeArrayGetUBound
SafeArrayGetLBound
VariantClear
SysStringLen
LoadRegTypeLi
LoadTypeLi
VariantInit
RegisterTypeLi
UnRegisterTypeLi
SysAllocStringLen
VarBstrCat

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

cfgmgr32

CM_Free_Log_Conf
CM_Next_Range

gdi32

GetRasterizerCaps
CreateBitmapIndirect
RemoveFontResourceA
SelectBrushLocal
CreateFontIndirectExA
CreateSolidBrush
CreateICW
AddFontResourceW
CreateFontA
CreatePolygonRgn

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.GsA
Size: 106KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.EryAb
Size: 112KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

71acbb336a3638a4c2775a9ca1df7bfc

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

version

cfgmgr32

gdi32

Sections

.text Size: 3KB - Virtual size: 3KB

.edata Size: 12KB - Virtual size: 12KB

.rdata Size: 3KB - Virtual size: 39KB

.GsA Size: 106KB - Virtual size: 159KB

.data Size: 6KB - Virtual size: 158KB

.EryAb Size: 112KB - Virtual size: 178KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 3KB - Virtual size: 3KB

.edata
Size: 12KB - Virtual size: 12KB

.rdata
Size: 3KB - Virtual size: 39KB

.GsA
Size: 106KB - Virtual size: 159KB

.data
Size: 6KB - Virtual size: 158KB

.EryAb
Size: 112KB - Virtual size: 178KB

.rsrc
Size: 6KB - Virtual size: 5KB