3cbac678a990ba271ae772c08e10f5e14717f0f23828d35d4853bca20d51003d

Sharing

Copy URL Twitter E-mail

General

Target

3cbac678a990ba271ae772c08e10f5e14717f0f23828d35d4853bca20d51003d
Size

148KB
MD5

b91b2d0082b59d5a62f0da5e4dee83d0
SHA1

2bbe0115cc787cd70736ff0852df8b8be5fb72c5
SHA256

3cbac678a990ba271ae772c08e10f5e14717f0f23828d35d4853bca20d51003d
SHA512

51afbf68e136233b2cb9c89a2bfa25bba9b9dbcb516799e6d85b2c2d450cfaf887be6d28a42f3f8ccf666dbcd5cb17b68811b709b53f1fff7c0a3e7e3ea44685
SSDEEP

3072:5jlBYArtgwkVCxq+Y1Gu5s/0ewGJm9socjId:5JKAZgFCU5u0ewGTBjC

Score

N/A

Malware Config

Signatures

Files

3cbac678a990ba271ae772c08e10f5e14717f0f23828d35d4853bca20d51003d
.dll windows x86

c942c5e5dffeb969430d176a0dd33ddf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsW
GetVersionExW
FindFirstFileW
lstrcpynW
GetFileAttributesW
GetCommandLineW
LocalAlloc
LocalFree
VerSetConditionMask
VerifyVersionInfoW
GetModuleHandleW
MultiByteToWideChar
GetStdHandle
GetFileType
WriteConsoleW
SetLastError
GetConsoleOutputCP
HeapReAlloc
VirtualFree
GetStringTypeW
VirtualQuery
GetSystemInfo
VirtualProtect
SetErrorMode
LCMapStringW
GetLastError
WideCharToMultiByte
LCMapStringA
QueryPerformanceCounter
GetModuleHandleA
GlobalAddAtomA
SetThreadContext
GetThreadContext
WaitForDebugEvent
ContinueDebugEvent
WaitForSingleObject
OpenFile
GetProcessHeap
HeapAlloc
DisableThreadLibraryCalls
OpenProcess
CloseHandle
ReadProcessMemory
lstrcmpiW
FreeLibrary
LeaveCriticalSection
MapViewOfFile
OpenMutexW
OpenEventW
EnterCriticalSection
UnmapViewOfFile
SetEvent
InterlockedIncrement
IsBadReadPtr
ReleaseMutex
InterlockedDecrement
MulDiv
WaitForMultipleObjects
InitializeCriticalSection
CreateFileW
SetFilePointer
ReadFile
GlobalFree
GlobalUnlock
GetProfileStringW
lstrcpyW
GetCurrentDirectoryW
Sleep
ExitThread

user32

SetWindowLongW
GetParent
RegisterClassW
GetWindow
EnumChildWindows
EndDialog
IsDlgButtonChecked
InvalidateRect
SetFocus
GetDC
ExitWindowsEx
LoadStringW
GetWindowThreadProcessId
FindWindowExA
ShowWindow
FillRect
EndPaint
IsWindowVisible
DefWindowProcW
DialogBoxParamW
GetActiveWindow
DestroyWindow
WinHelpW
GetWindowLongW
CreateWindowExW
GetDlgCtrlID
ChildWindowFromPointEx
GetSystemMetrics
SetWindowTextW
GetWindowRect
GetWindowTextW
ReleaseDC
SetActiveWindow
SetCursor
LoadCursorW
EndDeferWindowPos
BeginDeferWindowPos
SetDlgItemTextW
GetClientRect
EnableWindow
ClientToScreen
SetClassLongW
CheckDlgButton
DeferWindowPos

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

SetSecurityDescriptorDacl
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
InitializeAcl
AddAuditAccessAceEx
AddAccessDeniedAceEx
GetSecurityDescriptorSacl
CopySid
GetSidLengthRequired
GetSidSubAuthorityCount
FreeSid
AllocateAndInitializeSid
ChangeServiceConfigW
CloseServiceHandle
CreateServiceW
OpenServiceW
OpenSCManagerW
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegSetKeySecurity
RegCreateKeyExW
ChangeServiceConfig2W
SetSecurityDescriptorSacl

msvcrt

vswprintf
fwprintf
setlocale
exit
wcstok
wcslen
wcscpy
malloc
free

winmm

DefDriverProc

Exports

Exports

AnyAccesses
DirectlyWithoutServerTheTo
InstancesSoftware
OtherwiseOrDoOrAdminister
YouToInstancesIdentified

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 874B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c942c5e5dffeb969430d176a0dd33ddf

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

msvcrt

winmm

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 20KB - Virtual size: 142KB

.rsrc Size: 12KB - Virtual size: 11KB

.reloc Size: 4KB - Virtual size: 874B

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 20KB - Virtual size: 142KB

.rsrc
Size: 12KB - Virtual size: 11KB

.reloc
Size: 4KB - Virtual size: 874B