94ae14bfcab7212a4192c3234c8ddc5a7be0620cff4ec826c29406c08df6225d

Sharing

Copy URL

Twitter E-mail

General

Target

94ae14bfcab7212a4192c3234c8ddc5a7be0620cff4ec826c29406c08df6225d
Size

244KB
MD5

edcb3ca50250e6885c3042c48d92c021
SHA1

6177757d92cadba83f67729cc880aec75a6575da
SHA256

94ae14bfcab7212a4192c3234c8ddc5a7be0620cff4ec826c29406c08df6225d
SHA512

38bc3fc243482c0fc254c96f79c3bb4aec253e261e136008f8ddcfb41dfa797225358cccf088a6cbcbae64144bb1ebf0614ca7a168ac329e980c100f31d5bfaa
SSDEEP

3072:poma/ThMV7U3NMjjw9lIAAS7zTfbfrOuF17qVGrU995IBGA:WmeThuzjoyAAA3bfKI1mVGUYj

Score

1^/10

Malware Config

Signatures

Files

94ae14bfcab7212a4192c3234c8ddc5a7be0620cff4ec826c29406c08df6225d
.exe windows x86

159cb5cdf6fd2842e1fba88c0c27706b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
GetModuleFileNameA
EnterCriticalSection
GetLastError
FlushFileBuffers
LeaveCriticalSection
Sleep
GetModuleFileNameW
GetProcessHeap
DebugBreak
GetModuleHandleA
InitializeCriticalSection
WriteFile
CreateFileA
GetVersion
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
HeapAlloc
HeapFree
RaiseException
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualAlloc
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
RtlUnwind
HeapSize
FreeLibrary
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetVersionExA
CreateNamedPipeA
DeviceIoControl
GetOEMCP
VirtualQuery

advapi32

CryptImportKey
CryptReleaseContext
CryptSetKeyParam
SetSecurityDescriptorSacl
StartServiceA
LookupAccountNameA
CryptAcquireContextA
CryptEncrypt
CryptCreateHash
CryptDestroyKey
CryptVerifySignatureA
CryptDestroyHash
CryptHashData
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
CryptGenRandom
OpenSCManagerA
QueryServiceStatus
CloseServiceHandle
OpenServiceA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
InitializeAcl
AddAccessAllowedAce
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorA

winscard

SCardReleaseContext
SCardListReadersA
SCardTransmit
g_rgSCardT0Pci
SCardEstablishContext
g_rgSCardT1Pci
SCardGetAttrib
SCardConnectA
SCardDisconnect

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA

Sections

.text
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

159cb5cdf6fd2842e1fba88c0c27706b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

winscard

setupapi

Sections

.text Size: 194KB - Virtual size: 193KB

.rdata Size: 30KB - Virtual size: 30KB

.data Size: 5KB - Virtual size: 21KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 194KB - Virtual size: 193KB

.rdata
Size: 30KB - Virtual size: 30KB

.data
Size: 5KB - Virtual size: 21KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 12KB - Virtual size: 11KB