fdf2ee4300d9190e95c9370a7282cc7377b242e3866b6db515658544895ce609

Sharing

Copy URL Twitter E-mail

General

Target

fdf2ee4300d9190e95c9370a7282cc7377b242e3866b6db515658544895ce609
Size

351KB
MD5

b6d1eb7098f760d5568175a0e837089e
SHA1

f1c85e717731ac603074c79228717c53a4ec7592
SHA256

fdf2ee4300d9190e95c9370a7282cc7377b242e3866b6db515658544895ce609
SHA512

605687c44402e76842224fb379cfe485a96f8a7f090df3e5b3e0b653f81a5186b6982877ae7360b4acc808f2fdd07b09a8f2bb20c6239a2d981983653f5d8c5a
SSDEEP

6144:fUboMwSWEvtvWqmWD/o9cKOXvH2ncnDuZzgmAOObXjtmSc:fXSiW+cNvlnDuLmtbc

Score

N/A

Malware Config

Signatures

Files

fdf2ee4300d9190e95c9370a7282cc7377b242e3866b6db515658544895ce609
.exe windows x86

0304221a407728ce64b81f290878bf99

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
GlobalAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetCommandLineW
CreateFileMappingW
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
ResetEvent
SetEvent
CreateEventW
CreateThread
GetCurrentThreadId
GlobalUnlock
GlobalLock
GetProcessHeap
HeapFree
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
FindNextFileW
OutputDebugStringW
GetModuleHandleW
GetProcAddress
InterlockedDecrement
Sleep
GetModuleFileNameW
InterlockedIncrement
WaitForSingleObject
CloseHandle
GetLastError
lstrlenW
GetExitCodeThread
PulseEvent
CreateFileA
GetVersion
GetDriveTypeW
DeleteFileW
SetFileAttributesW
CopyFileW
MoveFileWithProgressW
CopyFileExW
MoveFileW
MoveFileExW
FindClose
FindFirstFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
GetFileSize
SetEndOfFile
SetFileTime
SetFilePointer
WriteFile
ReadFile
FreeLibrary
LoadLibraryW
GetVersionExW
GetFileAttributesW
SetErrorMode
QueryDosDeviceW
GetOverlappedResult
DeviceIoControl
ReleaseMutex
CreateMutexW
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
CreateFileW
GetVolumeInformationW
GetSystemDirectoryW
GetComputerNameW
GetCurrentProcessId
lstrcmpW
lstrcpynW
GetCurrentProcess
SystemTimeToFileTime
LocalFileTimeToFileTime
GetSystemTimeAsFileTime
DeleteCriticalSection
InitializeCriticalSection

user32

EnableWindow
OpenClipboard
GetClipboardData
GetActiveWindow
EmptyClipboard
SetClipboardData
TranslateMessage
DispatchMessageW
PostThreadMessageW
MessageBoxW
CharUpperW
IsClipboardFormatAvailable
GetMessageW
MsgWaitForMultipleObjects
LoadStringW
CloseClipboard
CharNextW

advapi32

StartServiceW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegOpenCurrentUser
RegSetValueExW
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
CreateServiceW
ChangeServiceConfig2W
RegDeleteValueW
SetServiceStatus
ControlService
DeleteService
OpenSCManagerW
OpenServiceW
CloseServiceHandle

ole32

CoCreateGuid
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
CoInitializeEx
CoUninitialize
CoInitialize
OleRun
CoCreateInstance
CoResumeClassObjects

oleaut32

SysFreeString
UnRegisterTypeLi
RegisterTypeLi
SysAllocString
VariantInit
SysStringByteLen
GetErrorInfo
VariantChangeType
VariantClear
SysStringLen

atl90

ord64
ord17
ord23
ord61
ord68
ord56
ord49
ord67
ord20

shlwapi

StrRetToStrW
PathStripToRootW
PathIsDirectoryW

msvcp90

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

msvcr90

_wtoi
_wstat64
islower
toupper
_wtof
wcsspn
_wtoi64
localeconv
wcspbrk
_except_handler4_common
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson
_controlfp_s
ceil
isalpha
_wmkdir
_close
_wsopen_s
_errno
memmove_s
strncpy_s
realloc
_vsnwprintf_s
wcsstr
wcsrchr
_mbsicmp
_mbscmp
_mbsnbcpy_s
calloc
_snwprintf_s
swscanf_s
_wcsicmp
wcschr
malloc
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
_invalid_parameter_noinfo
??_V@YAXPAX@Z
memset
memcpy_s
??2@YAPAXI@Z
_wcsdup
free
_purecall
__CxxFrameHandler3
wcsncpy_s
wcscpy_s
_CxxThrowException
??3@YAXPAX@Z
strcpy_s
_time64
isleadbyte
_localtime64_s
floor
__RTDynamicCast

iphlpapi

GetAdaptersInfo

setupapi

SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
CM_Get_Parent
CM_Get_DevNode_Registry_PropertyW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW

shell32

SHGetFolderLocation
SHGetPathFromIDListW
SHFileOperationW
SHGetDesktopFolder
SHGetMalloc

Sections

.text
Size: 253KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0304221a407728ce64b81f290878bf99

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

atl90

shlwapi

msvcp90

msvcr90

iphlpapi

setupapi

shell32

Sections

.text Size: 253KB - Virtual size: 252KB

.rdata Size: 63KB - Virtual size: 63KB

.data Size: 4KB - Virtual size: 13KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 24KB - Virtual size: 23KB

.text
Size: 253KB - Virtual size: 252KB

.rdata
Size: 63KB - Virtual size: 63KB

.data
Size: 4KB - Virtual size: 13KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 24KB - Virtual size: 23KB