d0741829d56a403b28abaace6411dc1fe186623038285ef79537d6dece36a08d

Sharing

Copy URL Twitter E-mail

General

Target

d0741829d56a403b28abaace6411dc1fe186623038285ef79537d6dece36a08d
Size

68KB
MD5

1efbd80f6887d4fe5c31499dcffa6d68
SHA1

2516b30a37cbccf40cd09f151e054a479fa29533
SHA256

d0741829d56a403b28abaace6411dc1fe186623038285ef79537d6dece36a08d
SHA512

4e79d9ebb6000bb9a32908bda32c30b49efbdef6811cb4cf7de92953194335aa2931f6068a1d9478769fcc3002412d76abf2aa000b557ad27ea8042208e9f150
SSDEEP

1536:feG2nUrDRBgtvUrn+kEq6EWJMef9WexEHrRFnjb:feGLgtvUrtEq6Enc9iHrvnf

Score

N/A

Malware Config

Signatures

Files

d0741829d56a403b28abaace6411dc1fe186623038285ef79537d6dece36a08d
.exe windows x86

d17e3ee1270dff3ed4658b768960757c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetActiveWindow
OpenClipboard
RegisterClassA
LockSetForegroundWindow
ScrollWindowEx
PostMessageW
LoadIconA
RegisterClassW
DestroyIcon
SetCapture
GetCapture

kernel32

LoadLibraryA
GetFileAttributesA
RaiseException
HeapFree
GetStdHandle
GetExitCodeProcess
GetModuleFileNameA
ExitProcess
SizeofResource
WriteConsoleW
CreateFileMappingA
SetFilePointerEx
InterlockedCompareExchange
HeapDestroy
InterlockedIncrement
TlsFree
GetFileAttributesW
InterlockedExchange
GetFileSize
LCMapStringA
lstrlenW
GetStringTypeA
GetLocaleInfoA
HeapCreate
SetStdHandle
LoadLibraryW
SetEndOfFile
HeapSize
GetACP
FreeEnvironmentStringsW
TryEnterCriticalSection
GetOEMCP
GetVersionExW
LoadResource
EnterCriticalSection
GetModuleFileNameW
LCMapStringW
DeleteCriticalSection
SetErrorMode
GetEnvironmentStringsW
CreateThread
LoadLibraryExW
GetCommandLineW
FindClose
GetStringTypeW
DeleteFileW
CreateFileW
GlobalAlloc
GetConsoleMode
FindFirstFileA
GetModuleHandleW
InitializeCriticalSection
FormatMessageW
SetEvent
CreateEventA
FreeLibraryAndExitThread
LocalAlloc
GetFileSizeEx
SetFilePointer
IsDebuggerPresent
InterlockedDecrement
ReadFile
HeapAlloc
GetSystemInfo
GetConsoleOutputCP
CreateFileA
FindNextFileW
GetStartupInfoW
FindFirstFileW
WaitForSingleObjectEx
FindCloseChangeNotification
GlobalFree
CreateEventW
LeaveCriticalSection
LockResource
LocalFree
GetStartupInfoA
WaitForSingleObject
SetHandleCount
lstrlenA
GetProcAddress
GetModuleHandleA
SetLastError
CompareStringW

gdi32

OffsetRgn
CreateFontIndirectW
FrameRgn
CreatePolygonRgn
GetRgnBox
CreateSolidBrush
CreateDCA
CreateRectRgn

setupapi

SetupGetFileCompressionInfoA

advapi32

OpenSCManagerA
RegDeleteKeyW
CloseEventLog
RegOpenKeyExA
ControlService
DuplicateTokenEx
RegSetKeySecurity
RegSetValueExA
RegCreateKeyExW
RegEnumKeyExA
OpenServiceA
OpenSCManagerW
CreateProcessAsUserA
RegQueryValueExA
GetNumberOfEventLogRecords
AdjustTokenPrivileges
DuplicateToken
RegEnumKeyExW
RegNotifyChangeKeyValue
RegDeleteValueA
RegRestoreKeyA
OpenThreadToken
RegDeleteKeyA
ReadEventLogW
RegEnumValueA
GetFileSecurityA
QueryServiceStatus
OpenEventLogW
RegCreateKeyA
RegCreateKeyExA
OpenServiceW
ImpersonateSelf
BackupEventLogA
RegConnectRegistryA
CloseServiceHandle
OpenEncryptedFileRawW
RegGetKeySecurity
OpenProcessToken
DeregisterEventSource
RegCloseKey
GetUserNameW
GetTokenInformation
IsValidSid
EnumServicesStatusA
RegQueryInfoKeyA
LookupPrivilegeValueA
RegFlushKey
GetUserNameA
InitiateSystemShutdownA

msvcrt

_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
exit
_exit
_XcptFilter

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d17e3ee1270dff3ed4658b768960757c

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

gdi32

setupapi

advapi32

msvcrt

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 48KB - Virtual size: 117KB

.rsrc Size: 512B - Virtual size: 144B

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 48KB - Virtual size: 117KB

.rsrc
Size: 512B - Virtual size: 144B