6eed84934292535b1f58ac4a286551da014d9b4ffe117c794eb7db2539fe49f9

Sharing

Copy URL

Twitter E-mail

General

Target

6eed84934292535b1f58ac4a286551da014d9b4ffe117c794eb7db2539fe49f9
Size

148KB
MD5

c80e119de36ee38476a14eea3f2a4a00
SHA1

5588d5e98bbe219ce56501f04809892b96ea16ef
SHA256

6eed84934292535b1f58ac4a286551da014d9b4ffe117c794eb7db2539fe49f9
SHA512

57484a0f1fcf9acccd46ab1096344d6982c1d0b599300ed1ce52bb821dd1ef081c221d9cc5eded0f0bd006da9f8ac1561c6214be1ac06d8fcdc7ca654dcaee5c
SSDEEP

3072:pjlNMxtOwkVC6q+4tNwrGuaSBKKj/XNh2fwEB3WRzHA:pJyvOFCpNYeK7WfwEBmFA

Score

N/A

Malware Config

Signatures

Files

6eed84934292535b1f58ac4a286551da014d9b4ffe117c794eb7db2539fe49f9
.dll windows x86

c942c5e5dffeb969430d176a0dd33ddf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsW
GetVersionExW
FindFirstFileW
lstrcpynW
GetFileAttributesW
GetCommandLineW
LocalAlloc
LocalFree
VerSetConditionMask
VerifyVersionInfoW
GetModuleHandleW
MultiByteToWideChar
GetStdHandle
GetFileType
WriteConsoleW
SetLastError
GetConsoleOutputCP
HeapReAlloc
VirtualFree
GetStringTypeW
VirtualQuery
GetSystemInfo
VirtualProtect
SetErrorMode
LCMapStringW
GetLastError
WideCharToMultiByte
LCMapStringA
QueryPerformanceCounter
GetModuleHandleA
GlobalAddAtomA
SetThreadContext
GetThreadContext
WaitForDebugEvent
ContinueDebugEvent
WaitForSingleObject
OpenFile
GetProcessHeap
HeapAlloc
DisableThreadLibraryCalls
OpenProcess
CloseHandle
ReadProcessMemory
lstrcmpiW
FreeLibrary
LeaveCriticalSection
MapViewOfFile
OpenMutexW
OpenEventW
EnterCriticalSection
UnmapViewOfFile
SetEvent
InterlockedIncrement
IsBadReadPtr
ReleaseMutex
InterlockedDecrement
MulDiv
WaitForMultipleObjects
InitializeCriticalSection
CreateFileW
SetFilePointer
ReadFile
GlobalFree
GlobalUnlock
GetProfileStringW
lstrcpyW
GetCurrentDirectoryW
Sleep
ExitThread

user32

SetWindowLongW
GetParent
RegisterClassW
GetWindow
EnumChildWindows
EndDialog
IsDlgButtonChecked
InvalidateRect
SetFocus
GetDC
ExitWindowsEx
LoadStringW
GetWindowThreadProcessId
FindWindowExA
ShowWindow
FillRect
EndPaint
IsWindowVisible
DefWindowProcW
DialogBoxParamW
GetActiveWindow
DestroyWindow
WinHelpW
GetWindowLongW
CreateWindowExW
GetDlgCtrlID
ChildWindowFromPointEx
GetSystemMetrics
SetWindowTextW
GetWindowRect
GetWindowTextW
ReleaseDC
SetActiveWindow
SetCursor
LoadCursorW
EndDeferWindowPos
BeginDeferWindowPos
SetDlgItemTextW
GetClientRect
EnableWindow
ClientToScreen
SetClassLongW
CheckDlgButton
DeferWindowPos

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

SetSecurityDescriptorDacl
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
InitializeAcl
AddAuditAccessAceEx
AddAccessDeniedAceEx
GetSecurityDescriptorSacl
CopySid
GetSidLengthRequired
GetSidSubAuthorityCount
FreeSid
AllocateAndInitializeSid
ChangeServiceConfigW
CloseServiceHandle
CreateServiceW
OpenServiceW
OpenSCManagerW
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegSetKeySecurity
RegCreateKeyExW
ChangeServiceConfig2W
SetSecurityDescriptorSacl

msvcrt

vswprintf
fwprintf
setlocale
exit
wcstok
wcslen
wcscpy
malloc
free

winmm

DefDriverProc

Exports

Exports

AnyAccesses
DirectlyWithoutServerTheTo
InstancesSoftware
OtherwiseOrDoOrAdminister
YouToInstancesIdentified

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 874B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c942c5e5dffeb969430d176a0dd33ddf

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

msvcrt

winmm

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 20KB - Virtual size: 142KB

.rsrc Size: 12KB - Virtual size: 11KB

.reloc Size: 4KB - Virtual size: 874B

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 20KB - Virtual size: 142KB

.rsrc
Size: 12KB - Virtual size: 11KB

.reloc
Size: 4KB - Virtual size: 874B