9816cd09e45d23bcb83e0367bf4abac7ca9fad0bd7cfa8ace827b3f18bd2a70b

Sharing

Copy URL

Twitter E-mail

General

Target

9816cd09e45d23bcb83e0367bf4abac7ca9fad0bd7cfa8ace827b3f18bd2a70b
Size

259KB
MD5

b2b218083c76956a3dd40de510b65c27
SHA1

4822b6d15e0c464c0d18790698c7c6234cb474df
SHA256

9816cd09e45d23bcb83e0367bf4abac7ca9fad0bd7cfa8ace827b3f18bd2a70b
SHA512

70a057d0747629c4f186693a85005a20d7a4c8078272dac629e2de5fb36c1f7ab72bc79d8f3f77f757436b83fd012869b769b99e537229182931d48cb5068cdb
SSDEEP

6144:vx9PP90i6dC9i2e3ijBHJ6/gkToLcXKAJEBdW7YXxglx3Jysk+:p9n90i6YivuB8tgeLQaljJk

Score

N/A

Malware Config

Signatures

Files

9816cd09e45d23bcb83e0367bf4abac7ca9fad0bd7cfa8ace827b3f18bd2a70b
.exe windows x86

ab90d46e5ea5228006ef44ca800e71dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
OpenEventA
LeaveCriticalSection
IsDebuggerPresent
EnterCriticalSection
OpenMutexA
PulseEvent
VirtualUnlock
HeapAlloc
GlobalMemoryStatusEx
GetModuleHandleA
VirtualLock
CreateMutexA
SleepEx
GlobalMemoryStatus
VirtualAlloc
CreateEventA
SetUnhandledExceptionFilter
HeapReAlloc
GetProcessHeap
CloseHandle
GetSystemDirectoryA
ExpandEnvironmentStringsW
CreateSemaphoreW
UnhandledExceptionFilter
GetSystemTimeAsFileTime
CreateSemaphoreA
FreeLibrary
VirtualProtect
DeleteCriticalSection
GetCurrentThreadId
OutputDebugStringA
WaitForSingleObjectEx
WaitForSingleObject
lstrcpyA
ReleaseMutex
OpenSemaphoreA
QueryPerformanceFrequency
VirtualFree
lstrcpyW
HeapDestroy
OpenProcess
HeapFree
HeapValidate
GetTempFileNameA
GetTempPathA
GetWindowsDirectoryA
ExpandEnvironmentStringsA
GetModuleHandleW
ReleaseSemaphore
GetSystemInfo
HeapSize
SetErrorMode
ResetEvent
IsValidLocale
VirtualAllocEx

user32

OemToCharBuffA
GetSystemMetrics
CharToOemBuffA
ExitWindowsEx
CharLowerA
CharLowerW
CharUpperW
CharUpperA
wsprintfA

advapi32

AddAccessAllowedAce
GetLengthSid
LookupAccountSidA
InitializeAcl
OpenThreadToken
SetSecurityDescriptorSacl
DuplicateToken
AllocateAndInitializeSid
SetSecurityDescriptorDacl
SetThreadToken
InitializeSecurityDescriptor
OpenProcessToken
GetUserNameA
DuplicateTokenEx
CopySid
FreeSid
EqualSid
RevertToSelf
AdjustTokenPrivileges
GetTokenInformation
LookupPrivilegeValueA
ImpersonateLoggedOnUser

shlwapi

PathUnExpandEnvStringsA
PathUnExpandEnvStringsW
PathIsRootA
SHRegOpenUSKeyA
PathIsUNCServerW
SHReleaseThreadRef
SHRegEnumUSValueA
SHDeleteValueA
SHRegCloseUSKey
StrIsIntlEqualA
PathIsDirectoryEmptyW
AssocQueryStringByKeyW
SHSkipJunction
PathFindFileNameW
StrCmpLogicalW
UrlIsNoHistoryA
PathRemoveBackslashW
PathFindExtensionW
PathSearchAndQualifyW
UrlUnescapeW
PathIsUNCServerShareA
StrStrIA
SHRegDeleteUSValueA
PathCreateFromUrlA
StrSpnW
PathIsLFNFileSpecW
StrFormatKBSizeA
PathGetDriveNumberW
HashData
SHDeleteValueW
PathFindSuffixArrayW
PathRemoveBackslashA
PathFindFileNameA
UrlGetLocationA
PathBuildRootW
SHStrDupA
UrlCanonicalizeW
SHRegCreateUSKeyW
StrToIntW

msdart

MPCSUninitialize
?sm_wDefaultSpinCount@CCritSec@@1GA
MpHeapAlloc

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.gZmP
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.YcZHVwV
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ESGZHgW
Size: 1024B - Virtual size: 711B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 209KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.WvWd
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uXdb
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.IRysj
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.VInjsTj
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ab90d46e5ea5228006ef44ca800e71dd

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

msdart

Sections

.text Size: 20KB - Virtual size: 20KB

.gZmP Size: 1KB - Virtual size: 1KB

.YcZHVwV Size: 2KB - Virtual size: 2KB

.ESGZHgW Size: 1024B - Virtual size: 711B

.rdata Size: 209KB - Virtual size: 208KB

.WvWd Size: 2KB - Virtual size: 2KB

.uXdb Size: 3KB - Virtual size: 2KB

.data Size: 7KB - Virtual size: 460KB

.IRysj Size: 1KB - Virtual size: 1KB

.rsrc Size: 6KB - Virtual size: 6KB

.VInjsTj Size: 3KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 20KB

.gZmP
Size: 1KB - Virtual size: 1KB

.YcZHVwV
Size: 2KB - Virtual size: 2KB

.ESGZHgW
Size: 1024B - Virtual size: 711B

.rdata
Size: 209KB - Virtual size: 208KB

.WvWd
Size: 2KB - Virtual size: 2KB

.uXdb
Size: 3KB - Virtual size: 2KB

.data
Size: 7KB - Virtual size: 460KB

.IRysj
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 6KB - Virtual size: 6KB

.VInjsTj
Size: 3KB - Virtual size: 2KB