aa4748473c59958043834e59ddbfc44ad390198d2232a07c904c68dd5d75eecd

Sharing

Copy URL Twitter E-mail

General

Target

aa4748473c59958043834e59ddbfc44ad390198d2232a07c904c68dd5d75eecd
Size

116KB
MD5

956486f20eff71e11d5452c9364ad394
SHA1

10616f4c8a418df2e9057a7b1a909b9ab6d79b48
SHA256

aa4748473c59958043834e59ddbfc44ad390198d2232a07c904c68dd5d75eecd
SHA512

99fda34c42c0478b7c27f0c7a4c55c452e749494f052ef90fb7202c506511e5194079c258da61bdde15e96d20d4510baf254f46005d4175df716a3fd2b48cfc4
SSDEEP

1536:dc4Crc9Bp0Kyw+8EFCDP4QmkXO7ItooI0mCXR3qX0mR0pSMFW:dcC9Bm312wQPXO7ItooI78oEmRX

Score

N/A

Malware Config

Signatures

Files

aa4748473c59958043834e59ddbfc44ad390198d2232a07c904c68dd5d75eecd
.dll windows x86

b817aa62908c3a233b05947328b8226f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
HeapReAlloc
VirtualAlloc
WideCharToMultiByte
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
GetVersion
RtlUnwind
HeapFree
HeapAlloc
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetCommandLineA
FreeResource
WriteFile
lstrlenA
lstrcpyA
GetTickCount
lstrcpynA
DeleteFileA
InterlockedDecrement
LocalAlloc
LocalFree
GetShortPathNameA
GetCurrentDirectoryA
TlsSetValue
DuplicateHandle
GetCurrentProcess
GetCurrentThread
TlsGetValue
SetEvent
CloseHandle
WaitForSingleObject
CreateThread
ResetEvent
CreateEventW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetVersionExA
TlsAlloc
TlsFree
GetCurrentProcessId
InterlockedExchangeAdd
InterlockedIncrement
VirtualProtect
VirtualFree
GetStringTypeW

user32

MoveWindow
SendMessageA
wsprintfA
DestroyWindow
InvalidateRect
GetWindowLongA
SetDlgItemTextA
GetParent
ShowWindow
PostMessageA
DefWindowProcA
SetTimer
CreateWindowExA
RegisterClassA
CharNextA
LoadStringA
GetSystemMetrics
LoadAcceleratorsA
LoadIconA
GetWindowRect
SetWindowLongA
GetSysColor
IsWindowEnabled
EndDialog
GetTopWindow
SendDlgItemMessageA
GetDC
GetDlgItem
ReleaseDC
SetFocus
IsZoomed
IsIconic
EnableMenuItem
SetWindowTextA
GetWindowPlacement
SetForegroundWindow

advapi32

GetSecurityDescriptorDacl
OpenProcessToken
GetTokenInformation
EqualSid
CryptGetUserKey
CryptExportKey
RegOpenKeyExW
RegCreateKeyExA
RegFlushKey
RegSetValueExA
RegCreateKeyA
RegOpenKeyExA
RegOpenKeyA
CryptCreateHash
GetSecurityDescriptorLength
RegCloseKey
CryptReleaseContext
GetLengthSid
CryptAcquireContextW
CryptAcquireContextA
CryptDestroyKey
LookupAccountSidW
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
SetKernelObjectSecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
AddAce
GetAce
InitializeAcl
GetAclInformation
CryptImportKey

gdi32

RealizePalette
SelectPalette
SetTextColor
SetBkColor
SelectObject
GetTextExtentPoint32A
BitBlt
CreateCompatibleDC
CreateDIBSection
GetStockObject
DeleteDC

rpcrt4

NdrClientCall2
UuidCreate
UuidFromStringW
RpcMgmtSetCancelTimeout

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b817aa62908c3a233b05947328b8226f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

rpcrt4

Sections

.text Size: 48KB - Virtual size: 46KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 48KB - Virtual size: 79KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 48KB - Virtual size: 46KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 48KB - Virtual size: 79KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB