e9bfb8aa995b687268300658b9eac11b9d29d78aa0e16a9a3f3f7974e6406b15

Sharing

Copy URL

Twitter E-mail

General

Target

e9bfb8aa995b687268300658b9eac11b9d29d78aa0e16a9a3f3f7974e6406b15
Size

75KB
MD5

360ca1642ed1f870024ad263fef8beb0
SHA1

170f2c1126a8a113fa299c319d18272a8afc092c
SHA256

e9bfb8aa995b687268300658b9eac11b9d29d78aa0e16a9a3f3f7974e6406b15
SHA512

3ec44720830e3928d4afb6d08a38e35d14f9f20f7d55cdae0b0050cad927af99de1526e4b9f9cb3724e157b3ada622bafeeb263331a2ddaadb606e5106c384be
SSDEEP

1536:9aX51pVH9hsgNGLs6BLM1frxz/HTfcKKBaJG:OfJGLs6BwNxnfTKsG

Score

1^/10

Malware Config

Signatures

Files

e9bfb8aa995b687268300658b9eac11b9d29d78aa0e16a9a3f3f7974e6406b15
.exe windows x64

58373ffd0758633945b3da12825958c0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

oleaut32

SysAllocString
SysFreeString

mpr

WNetCancelConnection2W
WNetCloseEnum
WNetOpenEnumW
WNetEnumResourceW
WNetAddConnection2W

msvcrt

_wfopen
_vsnwprintf
memset
fgetws
feof
fclose
_getch

shlwapi

StrChrW
StrStrIW
StrCmpNIW
StrCmpIW
StrStrIA
SHRegSetUSValueW

advapi32

LookupAccountSidW
GetTokenInformation
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
StartServiceW
QueryServiceStatusEx
GetUserNameW
OpenServiceA
OpenSCManagerW
OpenSCManagerA
EnumServicesStatusA
DeleteService
CreateServiceW
ControlService
CloseServiceHandle
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW

netapi32

NetGetJoinInformation
NetShareEnum
NetApiBufferFree
NetGetDCName

kernel32

CopyFileW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
lstrcpyA
AllocConsole
WriteConsoleW
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
SetFileAttributesW
DeviceIoControl
lstrcmpiW
OpenProcess
lstrcmpiA
GetModuleFileNameW
GetTempPathW
CreateProcessW
GetSystemInfo
GlobalMemoryStatus
GetComputerNameW
GetStdHandle
GetCurrentProcessId
TerminateProcess
GetComputerNameA
lstrlenA
TlsAlloc
SetErrorMode
ExitProcess
GetCommandLineW
RtlVirtualUnwind
HeapAlloc
GetProcessHeap
lstrcpyW
lstrcatW
lstrlenW
FindClose
FindFirstFileW
FindNextFileW
GetVolumeInformationW
GetLastError
HeapFree
CreateFileW
WriteFile
CloseHandle
SetLastError
HeapReAlloc
GetDriveTypeW
WideCharToMultiByte
Sleep
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentProcess
SetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventA
CreateThread
GetTickCount64
CreateSemaphoreA
ResetEvent
TerminateThread
GetFileSizeEx
ReadFile
SetEndOfFile
SetFileInformationByHandle
SetFilePointerEx
TlsGetValue
TlsSetValue
DeleteFileW

activeds

ord9

user32

wsprintfW

ole32

CoCreateInstance
CoInitializeSecurity
CoSetProxyBlanket
CoInitializeEx

ntdll

RtlGetVersion
ZwQuerySystemInformation
RtlGetNativeSystemInformation

shell32

CommandLineToArgvW
ord680

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.c
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.r
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.d
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

58373ffd0758633945b3da12825958c0

Headers

DLL Characteristics

File Characteristics

Imports

oleaut32

mpr

msvcrt

shlwapi

advapi32

netapi32

kernel32

activeds

user32

ole32

ntdll

shell32

Sections

.text Size: 6KB - Virtual size: 6KB

.c Size: 25KB - Virtual size: 25KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1KB - Virtual size: 1KB

.r Size: 17KB - Virtual size: 17KB

.d Size: 16KB - Virtual size: 16KB

.text
Size: 6KB - Virtual size: 6KB

.c
Size: 25KB - Virtual size: 25KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1KB - Virtual size: 1KB

.r
Size: 17KB - Virtual size: 17KB

.d
Size: 16KB - Virtual size: 16KB