a6a1ae9260281ec3351b2238f762cfd8f73213f38c2c0e002988fb3b0f5c9ca1

Sharing

Copy URL Twitter E-mail

General

Target

a6a1ae9260281ec3351b2238f762cfd8f73213f38c2c0e002988fb3b0f5c9ca1
Size

370KB
MD5

58b6ca8b2c099840ff9ef2fa0434876d
SHA1

9b85508d22d59dae1b9ee01a8b862269d3ed0d82
SHA256

a6a1ae9260281ec3351b2238f762cfd8f73213f38c2c0e002988fb3b0f5c9ca1
SHA512

616c42c65fa735d983524b882a146ad4a3d4c4e7ac949a2328c48ccee77a63cc1c0651da9db6ae2c8a8ae6ecab02ec54a9581b4f3c2e12f41dfb1e1168b6fcb1
SSDEEP

6144:Kl3tBcshrDMl9/B0y/lzpU7UZcpcRdAsYXVlOsnshO2k2gWNgVlf9qpzG:KptBcqDM3/B0ylzp6cIcuFlOsszRNq9p

Score

N/A

Malware Config

Signatures

Files

a6a1ae9260281ec3351b2238f762cfd8f73213f38c2c0e002988fb3b0f5c9ca1
.exe windows x86

9153aa16a34a359c1c1dc03fb5ddbd31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_wtol
wcsstr
wcslen
memcmp
_snprintf
memset
_adjust_fdiv
free
_CxxThrowException
_except_handler3
??3@YAXPAX@Z
_purecall
??1type_info@@UAE@XZ
memmove
__CxxFrameHandler
realloc
??2@YAPAXI@Z
wcsncpy
_ftol
_vsnwprintf
_onexit
__dllonexit
wcscpy
malloc
?terminate@@YAXXZ
_initterm

kernel32

CompareStringW
InterlockedCompareExchange
GetUserDefaultUILanguage
LocalFree
FormatMessageW
GetNumberFormatW
CloseHandle
WaitForSingleObject
SetEvent
CreateTimerQueueTimer
DeleteTimerQueueTimer
LoadLibraryA
ResetEvent
OpenEventW
CreateEventW
GetPrivateProfileStringW
LoadLibraryW
FileTimeToSystemTime
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetFileAttributesW
GetVersionExA
WideCharToMultiByte
lstrlenA
GetModuleFileNameA
UnmapViewOfFile
VirtualAlloc
IsBadReadPtr
FreeLibrary
MapViewOfFile
CreateFileMappingA
GetSystemDirectoryW
GetVersion
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
lstrcpynW
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
GetLastError
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrlenW
GetVersionExW
GetThreadLocale
GetModuleHandleA
GetLocaleInfoA
GetACP
InterlockedExchange
CreateProcessW
GetProcAddress
Sleep
CreateDirectoryW
SetLastError
CreateFileW
WriteFile
FlushFileBuffers
GetSystemTime
GetFileSize
CreateFileMappingW
SetFilePointer
SetEndOfFile
ReleaseMutex
CreateMutexW
ExpandEnvironmentStringsW
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
lstrcatW
lstrcpyW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
GetCurrentThread
MultiByteToWideChar
VerifyVersionInfoW
HeapReAlloc
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapAlloc
HeapFree
GetSystemInfo

comctl32

InitCommonControlsEx

advapi32

RegOpenKeyW
RegDeleteKeyW
RegDeleteValueW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
InitiateSystemShutdownExW
RegQueryValueExW
ImpersonateSelf
CopySid
GetLengthSid
IsValidSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetUserNameW
OpenThreadToken
RevertToSelf
SetThreadToken
GetTokenInformation
DuplicateTokenEx
CheckTokenMembership
AllocateAndInitializeSid
FreeSid
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey

user32

SetCapture
ScreenToClient
ReleaseCapture
InvalidateRect
EndPaint
BeginPaint
SetCursor
LoadCursorW
FillRect
PtInRect
DrawFocusRect
GetFocus
GetSysColor
ExitWindowsEx
GetDlgItemTextW
IsWindow
IsDlgButtonChecked
KillTimer
EnableWindow
ShowScrollBar
EndDialog
SetWindowTextW
IsWindowVisible
GetWindowTextLengthW
LockWindowUpdate
RedrawWindow
SetTimer
ShowWindow
SetWindowPos
SendMessageW
LoadStringW
DestroyWindow
GetWindowLongW
SetWindowLongW
SetFocus
GetDlgItem
GetParent
PostMessageW
CharNextW
SetDlgItemTextW
DialogBoxParamW
CreateDialogParamW
DefWindowProcW
CreateWindowExW
MapWindowPoints
GetWindowRect
ReleaseDC
DrawTextW
CopyRect
GetDC
GetClientRect
SystemParametersInfoW
GetWindow
GetWindowTextW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoCreateFreeThreadedMarshaler
StringFromGUID2
CoCreateInstance
CoDisconnectObject
CoQueryProxyBlanket
CoInitializeEx
CoUninitialize
CoWaitForMultipleHandles
CoSetProxyBlanket

rpcrt4

UuidCreateNil
UuidCompare
UuidFromStringW
UuidToStringW
UuidCreate
RpcStringFreeW

crypt32

CryptProtectData
CryptUnprotectData

ntdll

VerSetConditionMask

gdi32

GetTextExtentPoint32W
GetTextMetricsW
GetObjectW
CreateFontIndirectW
SetBkMode
DeleteObject
SetTextColor
SelectObject

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 244KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9153aa16a34a359c1c1dc03fb5ddbd31

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

comctl32

advapi32

user32

ole32

rpcrt4

crypt32

ntdll

gdi32

Sections

.text Size: 71KB - Virtual size: 71KB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 244KB - Virtual size: 245KB

.bss Size: - Virtual size: 12KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 71KB - Virtual size: 71KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 244KB - Virtual size: 245KB

.bss
Size: - Virtual size: 12KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 3KB