a68197242d530c9e9b013d8bd3e2ff366c23f1bb93e5b3e90b3efd010359d603

Sharing

Copy URL

Twitter E-mail

General

Target

a68197242d530c9e9b013d8bd3e2ff366c23f1bb93e5b3e90b3efd010359d603
Size

60KB
MD5

e6885ae5261fec9cba2d853dc391b264
SHA1

dc30bff958b074b6f5d9a8cb0eb2e8f68fc62ec7
SHA256

a68197242d530c9e9b013d8bd3e2ff366c23f1bb93e5b3e90b3efd010359d603
SHA512

7c22eb1caa9b268f8caadd081d606806fdbc6087398c849f8fc7d261138e775e93636151a84c3e8de170c85f50d1fe477910dcd5b17fe95190981a4aff5dfd2a
SSDEEP

768:e9Hdb1fz0jzlhEBIJdQAQ1pIPrfPJXdEYw0uzMTPkmARSdiY2APbhG5gRY:e9Hb8hHJmHIPrfBGcPi25Ps5

Score

1^/10

Malware Config

Signatures

Files

a68197242d530c9e9b013d8bd3e2ff366c23f1bb93e5b3e90b3efd010359d603
.exe windows x86

4ceb1298ca5ff9fb7d4f66c2c4a83b34

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHGetValueA
StrPBrkA
PathAddExtensionA
StrNCatA
PathCanonicalizeA
StrToIntExA

kernel32

WriteProcessMemory
RequestWakeupLatency
VirtualLock
SetConsoleOutputCP
lstrlenW
VirtualProtect
DeleteCriticalSection
lstrcpyW
LocalUnlock
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetProcessHeap
SetEndOfFile
GetLocaleInfoA
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
CreateFileA
CloseHandle
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapAlloc
GetCommandLineA
GetStartupInfoA
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
MultiByteToWideChar
GetLastError
ReadFile
SetHandleCount
GetFileType
SetFilePointer
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement

comdlg32

PrintDlgA
PrintDlgExW
ChooseColorW
CommDlgExtendedError
GetFileTitleA
GetSaveFileNameA

mscms

AssociateColorProfileWithDeviceA
SetStandardColorSpaceProfileW
SelectCMM
GetColorProfileHeader

mswsock

GetServiceW
MigrateWinsockConfiguration
GetAcceptExSockaddrs
GetAddressByNameA
GetNameByTypeW
EnumProtocolsW
NPLoadNameSpaces
dn_expand

ws2_32

WSAJoinLeaf
htonl
WSAAddressToStringA
WSCUnInstallNameSpace
WSAGetServiceClassInfoW
shutdown
WSCInstallNameSpace
WSAProviderConfigChange

urlmon

IsAsyncMoniker
SetSoftwareUpdateAdvertisementState
CoInternetCompareUrl
GetClassURL
ReleaseBindInfo
ObtainUserAgentString
GetClassFileOrMime

ole32

CoInstall

Exports

Exports

_CredPackAuthenticationBufferW@20
_CredUIParseUserNameW@20
_CredUIPromptForWindowsCredentialsW@36
_CredUIReadSSOCredW@8
_CredUIStoreSSOCredW@16
_CredUnPackAuthenticationBufferW@36

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ceb1298ca5ff9fb7d4f66c2c4a83b34

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

comdlg32

mscms

mswsock

ws2_32

urlmon

ole32

Exports

Exports

Sections

.text Size: 41KB - Virtual size: 40KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 11KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 41KB - Virtual size: 40KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 11KB

.reloc
Size: 4KB - Virtual size: 3KB