407941db23219fd6fb58045524d37985044b779ac77211468e5f13f027aa3587

Sharing

Copy URL Twitter E-mail

General

Target

407941db23219fd6fb58045524d37985044b779ac77211468e5f13f027aa3587
Size

259KB
MD5

fd8dac52fa451b1f3418b7a158891453
SHA1

dcb5fbce88ef1b497287f500c037a112f1c8ed3a
SHA256

407941db23219fd6fb58045524d37985044b779ac77211468e5f13f027aa3587
SHA512

5e970ff5ce5dfa306bfc97799af1aab5d2061dd7cdfdb689eef824e08aeb820ddefc986b9f6844d4edeadc920c4c25e41da416ae0df1b7b108c9f876e2f90893
SSDEEP

6144:hx9PP90i6dC9i2e3ijBHJ6/gkToLcXKAJEBdW7YXxglx3Jysk+:v9n90i6YivuB8tgeLQaljJk

Score

N/A

Malware Config

Signatures

Files

407941db23219fd6fb58045524d37985044b779ac77211468e5f13f027aa3587
.exe windows x86

ab90d46e5ea5228006ef44ca800e71dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
OpenEventA
LeaveCriticalSection
IsDebuggerPresent
EnterCriticalSection
OpenMutexA
PulseEvent
VirtualUnlock
HeapAlloc
GlobalMemoryStatusEx
GetModuleHandleA
VirtualLock
CreateMutexA
SleepEx
GlobalMemoryStatus
VirtualAlloc
CreateEventA
SetUnhandledExceptionFilter
HeapReAlloc
GetProcessHeap
CloseHandle
GetSystemDirectoryA
ExpandEnvironmentStringsW
CreateSemaphoreW
UnhandledExceptionFilter
GetSystemTimeAsFileTime
CreateSemaphoreA
FreeLibrary
VirtualProtect
DeleteCriticalSection
GetCurrentThreadId
OutputDebugStringA
WaitForSingleObjectEx
WaitForSingleObject
lstrcpyA
ReleaseMutex
OpenSemaphoreA
QueryPerformanceFrequency
VirtualFree
lstrcpyW
HeapDestroy
OpenProcess
HeapFree
HeapValidate
GetTempFileNameA
GetTempPathA
GetWindowsDirectoryA
ExpandEnvironmentStringsA
GetModuleHandleW
ReleaseSemaphore
GetSystemInfo
HeapSize
SetErrorMode
ResetEvent
IsValidLocale
VirtualAllocEx

user32

OemToCharBuffA
GetSystemMetrics
CharToOemBuffA
ExitWindowsEx
CharLowerA
CharLowerW
CharUpperW
CharUpperA
wsprintfA

advapi32

AddAccessAllowedAce
GetLengthSid
LookupAccountSidA
InitializeAcl
OpenThreadToken
SetSecurityDescriptorSacl
DuplicateToken
AllocateAndInitializeSid
SetSecurityDescriptorDacl
SetThreadToken
InitializeSecurityDescriptor
OpenProcessToken
GetUserNameA
DuplicateTokenEx
CopySid
FreeSid
EqualSid
RevertToSelf
AdjustTokenPrivileges
GetTokenInformation
LookupPrivilegeValueA
ImpersonateLoggedOnUser

shlwapi

PathUnExpandEnvStringsA
PathUnExpandEnvStringsW
PathIsRootA
SHRegOpenUSKeyA
PathIsUNCServerW
SHReleaseThreadRef
SHRegEnumUSValueA
SHDeleteValueA
SHRegCloseUSKey
StrIsIntlEqualA
PathIsDirectoryEmptyW
AssocQueryStringByKeyW
SHSkipJunction
PathFindFileNameW
StrCmpLogicalW
UrlIsNoHistoryA
PathRemoveBackslashW
PathFindExtensionW
PathSearchAndQualifyW
UrlUnescapeW
PathIsUNCServerShareA
StrStrIA
SHRegDeleteUSValueA
PathCreateFromUrlA
StrSpnW
PathIsLFNFileSpecW
StrFormatKBSizeA
PathGetDriveNumberW
HashData
SHDeleteValueW
PathFindSuffixArrayW
PathRemoveBackslashA
PathFindFileNameA
UrlGetLocationA
PathBuildRootW
SHStrDupA
UrlCanonicalizeW
SHRegCreateUSKeyW
StrToIntW

msdart

MPCSUninitialize
?sm_wDefaultSpinCount@CCritSec@@1GA
MpHeapAlloc

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.gZmP
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.YcZHVwV
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ESGZHgW
Size: 1024B - Virtual size: 711B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 209KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.WvWd
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uXdb
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.IRysj
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.VInjsTj
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ab90d46e5ea5228006ef44ca800e71dd

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

msdart

Sections

.text Size: 20KB - Virtual size: 20KB

.gZmP Size: 1KB - Virtual size: 1KB

.YcZHVwV Size: 2KB - Virtual size: 2KB

.ESGZHgW Size: 1024B - Virtual size: 711B

.rdata Size: 209KB - Virtual size: 208KB

.WvWd Size: 2KB - Virtual size: 2KB

.uXdb Size: 3KB - Virtual size: 2KB

.data Size: 7KB - Virtual size: 460KB

.IRysj Size: 1KB - Virtual size: 1KB

.rsrc Size: 6KB - Virtual size: 6KB

.VInjsTj Size: 3KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 20KB

.gZmP
Size: 1KB - Virtual size: 1KB

.YcZHVwV
Size: 2KB - Virtual size: 2KB

.ESGZHgW
Size: 1024B - Virtual size: 711B

.rdata
Size: 209KB - Virtual size: 208KB

.WvWd
Size: 2KB - Virtual size: 2KB

.uXdb
Size: 3KB - Virtual size: 2KB

.data
Size: 7KB - Virtual size: 460KB

.IRysj
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 6KB - Virtual size: 6KB

.VInjsTj
Size: 3KB - Virtual size: 2KB