fd0391f20d8af445e4b77d2a141db796a69770472df845867f6041d27528a9b2

Sharing

Copy URL Twitter E-mail

General

Target

fd0391f20d8af445e4b77d2a141db796a69770472df845867f6041d27528a9b2
Size

139KB
MD5

573a510cae1f2b27d4de5088165936f7
SHA1

66d8cce38db4c2ba79528c6703e8cbabcd6735a6
SHA256

fd0391f20d8af445e4b77d2a141db796a69770472df845867f6041d27528a9b2
SHA512

f11b61f5edefc42fee0586d6f1446b4c9d7224f360b763ef5b094fe5dd9cb45d2988126c8e347ef1ca81ad5e959739634665500a7fb9db09852e7954d5d46539
SSDEEP

3072:+wEJPf4yD874zKXgCs523/vjNTMRIZT47uzRRPPOX+2FbipT86QwClBku60NNmQ4:fQf4y47BgCzvjNQ7uzbavFbipT8RwNuQ

Score

N/A

Malware Config

Signatures

Files

fd0391f20d8af445e4b77d2a141db796a69770472df845867f6041d27528a9b2
.dll windows x86

a0cf73b60f0a559a981e0ebad465d90a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
InterlockedCompareExchange
GlobalUnlock
GetSystemDirectoryA
WinExec
GetFileAttributesW
CreateFileA
GetFileSize
lstrcpyA
LoadLibraryA
GetProcAddress
GetPrivateProfileStringW
IsBadCodePtr
IsBadReadPtr
InterlockedIncrement
IsBadWritePtr
GlobalLock
LoadLibraryExW
lstrcatA
GetPrivateProfileStringA
ReleaseMutex
WaitForSingleObject
IsValidCodePage
WideCharToMultiByte
lstrcpyW
GetCurrentProcessId
LocalAlloc
CreateEventA
DuplicateHandle
GetComputerNameW
GetCurrentThread
lstrcpynW
lstrcmpW
InterlockedDecrement
FindResourceW
SizeofResource
MultiByteToWideChar
DisableThreadLibraryCalls
GetModuleFileNameW
lstrcmpiW
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
GetSystemDefaultLangID
FindResourceExW
LoadResource
LockResource
FreeLibrary
OutputDebugStringA
CloseHandle
InterlockedExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
GetLastError
FormatMessageA
LocalFree
GlobalFree
GetCommandLineA
GlobalAlloc
lstrcmpiA
VirtualProtect

user32

CharToOemA
GetParent
DestroyWindow
IsDialogMessageW
TranslateAcceleratorW
GetDlgCtrlID
GetFocus
GetWindowPlacement
SetWindowPlacement
GetWindowRect
SendMessageW
SetFocus
GetDlgItem
DestroyAcceleratorTable
PostMessageA
LoadStringA
ShowWindow
DefWindowProcA
wsprintfW
CharPrevW
GetNextDlgTabItem
GetDC
ReleaseDC
CharNextW
MessageBoxW

advapi32

ControlService
StartServiceA
QueryServiceStatus
OpenSCManagerA
OpenServiceA
RegSetValueExA
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
RegQueryValueA
RegQueryValueExW
RegEnumKeyExW
RegQueryValueExA
RegOpenKeyExA
CloseServiceHandle
GetTokenInformation
OpenProcessToken
OpenThreadToken
RegCreateKeyExA
RegDeleteValueA
RegQueryInfoKeyA

gdi32

EnumFontFamiliesExW
CreateFontIndirectW
DeleteObject
GetDeviceCaps
GetStockObject
GetObjectW

ole32

CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
CreateBindCtx
CreateGenericComposite
CreateItemMoniker
CoLockObjectExternal
CreateFileMoniker
OleLoadFromStream
GetRunningObjectTable
CreateAntiMoniker

rpcrt4

I_RpcMapWin32Status
RpcBindingFree
NdrClientCall2

msvcr71

printf
_iob
fflush
_adjust_fdiv
_callnewh
_CxxThrowException
memset
malloc
free
realloc
_errno
_unlock
__dllonexit
_lock
strstr
sprintf
wcslen
_wcsicmp
iswctype
bsearch
swscanf
_HUGE
rand
__CppXcptFilter
strchr
atoi
_read
_open
_lseek
_onexit
_amsg_exit
_initterm
exit
_vsnprintf
_stricmp
memmove
_except_handler3

Sections

.text
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a0cf73b60f0a559a981e0ebad465d90a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

ole32

rpcrt4

msvcr71

Sections

.text Size: 123KB - Virtual size: 123KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 36KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 123KB - Virtual size: 123KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 36KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB