97c257387c4ca596c3f4c3282b50032f2276270e26d936c0eff9a0d25e96769d

Sharing

Copy URL Twitter E-mail

General

Target

97c257387c4ca596c3f4c3282b50032f2276270e26d936c0eff9a0d25e96769d
Size

228KB
MD5

2fc9edd4c85f90ebee7f35ea015e8c44
SHA1

f67117d3817d08f1a8d609288eca51b1c672987f
SHA256

97c257387c4ca596c3f4c3282b50032f2276270e26d936c0eff9a0d25e96769d
SHA512

0f8c6bad0b1f0669e00909402d2e46fd1624742d1a3742b547972b3e56ceec7ed5861968ad01396c461a9b2556dba94f6c1eaf8c34099d0ab6175e01083ba1f8
SSDEEP

3072:ULc7FnCNA9RGdKSPrBFPcZptuvW7mfUNgOelcx0MFg1XsMiFLrMSeFIMk:UACNAXFoBFPcZ7QANgOv0MFg1cNMSd

Score

N/A

Malware Config

Signatures

Files

97c257387c4ca596c3f4c3282b50032f2276270e26d936c0eff9a0d25e96769d
.exe windows x86

0641ce10b9c061e8903289c33e34c2dc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoTaskMemFree
CoTaskMemRealloc
CoUninitialize
ComPs_NdrDllGetClassObject
ComPs_NdrDllRegisterProxy
ComPs_NdrDllUnregisterProxy
CoCreateGuid
CoCreateInstance
StringFromGUID2
CoGetClassObject
CoGetInterceptor
CoInitializeEx
CoTaskMemAlloc

user32

DefWindowProcW
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxParamW
DispatchMessageW
DrawFocusRect
DrawIconEx
EnableWindow
EndDialog
FillRect
FindWindowExW
GetClassInfoW
GetDC
GetDesktopWindow
GetDlgItem
GetDlgItemTextW
CallWindowProcW
GetLastActivePopup
GetParent
GetPropW
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMetrics
GetWindowLongW
GetWindowTextLengthW
GetWindowTextW
InsertMenuItemW
InvalidateRect
IsDlgButtonChecked
IsWindow
IsWindowVisible
LoadCursorW
LoadIconW
LoadImageW
LoadMenuW
LoadStringA
LoadStringW
MessageBoxIndirectW
MessageBoxW
MsgWaitForMultipleObjects
PeekMessageW
PostMessageW
RegisterClipboardFormatW
ReleaseDC
RemoveMenu
RemovePropW
CheckDlgButton
SendDlgItemMessageW
SendMessageW
SetCursor
CheckRadioButton
SetDlgItemInt
SetDlgItemTextW
SetForegroundWindow
SetMenuDefaultItem
SetPropW
SetWindowLongW
SetWindowTextW
ShowWindow
TranslateMessage
WinHelpW
wsprintfW
CreateDialogParamW

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

CreateServiceW
DeleteService
DeregisterEventSource
GetAce
GetFileSecurityW
GetPrivateObjectSecurity
GetSecurityDescriptorDacl
GetSecurityDescriptorLength
GetSidIdentifierAuthority
GetTokenInformation
GetUserNameW
InitializeSecurityDescriptor
IsValidSecurityDescriptor
MakeSelfRelativeSD
OpenProcessToken
OpenSCManagerW
OpenServiceW
OpenThreadToken
QueryServiceConfigW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
AccessCheck
RegSetValueExW
RegisterEventSourceW
RegisterServiceCtrlHandlerExW
ReportEventW
ChangeServiceConfigW
SetFileSecurityW
SetPrivateObjectSecurity
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetServiceStatus
CloseServiceHandle
WmiCloseBlock
WmiOpenBlock
WmiReceiveNotificationsW

shell32

SHGetFolderPathW
ShellExecuteW
ExtractIconExW

kernel32

GetCommState
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeThread
GetProcessAffinityMask
ClearCommError
CloseHandle
GetTimeZoneInformation
LocalAlloc
LocalFree
MultiByteToWideChar
OpenMutexW
ReadFile
ReleaseMutex
ResetEvent
SetCommMask
SetCommState
SetCommTimeouts
CreateEventW
SetEvent
CreateFileW
SetThreadAffinityMask
Sleep
TerminateThread
WaitForSingleObject
CreateMutexW
WriteFile

gdi32

DeleteDC
DeleteObject
ExtTextOutA
ExtTextOutW
GetCharacterPlacementA
GetCharacterPlacementW
CreateCompatibleDC
GetFontLanguageInfo
GetGlyphOutlineA
GetObjectA
GetObjectW
CreateDIBSection
GetTextMetricsA
GetTextMetricsW
MoveToEx
CreateFontIndirectA
CreateFontIndirectW
SelectObject
SetBkColor
SetBkMode
SetMapMode
SetTextAlign
SetTextColor
TranslateCharsetInfo

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0641ce10b9c061e8903289c33e34c2dc

Headers

DLL Characteristics

File Characteristics

Imports

ole32

user32

comdlg32

advapi32

shell32

kernel32

gdi32

Sections

.text Size: 156KB - Virtual size: 155KB

.rdata Size: 30KB - Virtual size: 29KB

.data Size: 17KB - Virtual size: 32KB

.reloc Size: 13KB - Virtual size: 16KB

.rsrc Size: 10KB - Virtual size: 12KB

.text
Size: 156KB - Virtual size: 155KB

.rdata
Size: 30KB - Virtual size: 29KB

.data
Size: 17KB - Virtual size: 32KB

.reloc
Size: 13KB - Virtual size: 16KB

.rsrc
Size: 10KB - Virtual size: 12KB