00f8e77c5cc03b18fb85a1c9686e2fe1ce746bf31c810f0c5972f4a6bda8f084

Sharing

Copy URL Twitter E-mail

General

Target

00f8e77c5cc03b18fb85a1c9686e2fe1ce746bf31c810f0c5972f4a6bda8f084
Size

176KB
MD5

ea46e81967b11082410b713650ff36bb
SHA1

c6e4a2983dc7c5af85d950052ca1ee0c75fe30ae
SHA256

00f8e77c5cc03b18fb85a1c9686e2fe1ce746bf31c810f0c5972f4a6bda8f084
SHA512

b30d6991ae0dc0df3da004c7976b1f05f292483777a4f5482dbe058c05f579ab8d62a6f02ac364d268646ea09cf593bae2157f4810314c383e02c7581958a670
SSDEEP

3072:kKFb5WPd9Ujw5T6j8hbYGk/ooScB7CU5+HEVZImTXx/kU:kKFb5gUjw16j+x6oKH5Mo+mTn

Score

N/A

Malware Config

Signatures

Files

00f8e77c5cc03b18fb85a1c9686e2fe1ce746bf31c810f0c5972f4a6bda8f084
.exe windows x86

564e49df2b7d21ffb7249256e8364c33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
HeapAlloc
GetProcessHeap
LocalSize
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GetTickCount
WaitForMultipleObjects
TerminateProcess
GetLocalTime
GetCurrentProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentThreadId
GetSystemInfo
GetComputerNameA
SetErrorMode
GetStartupInfoA
GetModuleHandleA
GetSystemDirectoryA
CreateFileA
WriteFile
lstrcmpiA
InitializeCriticalSection
CreateThread
CreateProcessA
MoveFileA
SetFilePointer
ReadFile
GetFileSize
CloseHandle
LocalAlloc
LocalReAlloc
LocalFree
FindClose
GetLogicalDriveStringsA
GetVolumeInformationA
GetDiskFreeSpaceExA
GetDriveTypeA
FreeLibrary
lstrlenA
lstrcpyA
CreateDirectoryA
GetLastError
DeleteFileA
MultiByteToWideChar
WideCharToMultiByte
GetWindowsDirectoryA
lstrcatA
GetProcAddress
GetVersionExA
GetPrivateProfileStringA
lstrcmpA
CancelIo
InterlockedExchange
EnterCriticalSection
VirtualFree
Sleep
LoadLibraryA
OpenProcess

user32

ExitWindowsEx
MessageBoxA
GetForegroundWindow
GetAsyncKeyState
GetKeyState
LoadCursorA
BlockInput
SendMessageA
keybd_event
MapVirtualKeyA
mouse_event
SetCapture
WindowFromPoint
SetCursorPos
CloseClipboard
SetClipboardData
EmptyClipboard
CharNextA
GetClipboardData
GetSystemMetrics
SetRect
GetDC
GetDesktopWindow
ReleaseDC
GetCursorPos
DestroyCursor
GetCursorInfo
GetWindowThreadProcessId
IsWindowVisible
CloseDesktop
SetThreadDesktop
CloseWindow
IsWindow
DispatchMessageA
TranslateMessage
wsprintfA
GetMessageA
OpenClipboard
PostMessageA
OpenDesktopA
GetThreadDesktop
GetUserObjectInformationA
OpenInputDesktop

advapi32

ClearEventLogA
LookupAccountNameA
LsaClose
LsaRetrievePrivateData
LsaOpenPolicy
LsaFreeMemory
RegCloseKey
RegSetValueExA
RegCreateKeyExA
CloseEventLog
OpenEventLogA
CloseServiceHandle
DeleteService
OpenSCManagerA
FreeSid
RegSetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegQueryInfoKeyA
RegRestoreKeyA
RegSaveKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
LookupAccountSidA
GetTokenInformation
RegOpenKeyA
CreateProcessAsUserA
SetTokenInformation
IsValidSid

shell32

SHGetSpecialFolderPathA

msvcrt

_strrev
_strnicmp
sprintf
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
calloc
_beginthreadex
strncat
wcscpy
_errno
strcat
strncpy
strncmp
strrchr
atoi
_strcmpi
_except_handler3
free
malloc
strcpy
strcmp
strchr
memcmp
strstr
strlen
memset
??2@YAPAXI@Z
putchar
??3@YAXPAX@Z
memcpy
puts
__CxxFrameHandler
_CxxThrowException
memmove
ceil
_ftol

ws2_32

getpeername
accept
listen
sendto
recvfrom
__WSAFDIsSet
bind
ntohs
inet_addr
inet_ntoa
send
closesocket
select
recv
connect
getsockname
socket
gethostbyname
htons
setsockopt
WSAIoctl

msvcp60

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ

netapi32

NetUserAdd
NetLocalGroupAddMembers

userenv

CreateEnvironmentBlock

Sections

.data
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

564e49df2b7d21ffb7249256e8364c33

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

msvcrt

ws2_32

msvcp60

netapi32

userenv

Sections

.data Size: 148KB - Virtual size: 144KB

.rsrc Size: 24KB - Virtual size: 22KB

.data
Size: 148KB - Virtual size: 144KB

.rsrc
Size: 24KB - Virtual size: 22KB