1754d64016c758a65cb85df328ffd502a7255a6855d976e3bdeb497f95201848

Sharing

Copy URL

Twitter E-mail

General

Target

1754d64016c758a65cb85df328ffd502a7255a6855d976e3bdeb497f95201848
Size

663KB
MD5

259716fa526d79543988edace76417a7
SHA1

d932ebd91d7ce77bb7be00abbb308c1cb3961d2b
SHA256

1754d64016c758a65cb85df328ffd502a7255a6855d976e3bdeb497f95201848
SHA512

e639e7c73f8e78f1cc01801673245c303943195f2d39aa0da00104bfba4c69dfaea35d733824f73776beb8691421c207f8e314609942ff502f7c2c52377b5820
SSDEEP

12288:HPSEujS44WCfXXQIhA+NlM5Chr9rNLP1PCZK099CAYVZ:HMS4/0Xvh/lM54N7CZKC9CBz

Score

N/A

Malware Config

Signatures

Files

1754d64016c758a65cb85df328ffd502a7255a6855d976e3bdeb497f95201848
.exe windows x86

32a6f16badd7ac651a61ebb9fbf0f414

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr90

_amsg_exit
_cexit
strcat
_except_handler4_common
_crt_debugger_hook
__FrameUnwindFilter
_encoded_null
_decode_pointer
_encode_pointer
sprintf
free
strcpy

kernel32

SetUnhandledExceptionFilter
IsDebuggerPresent
GetPrivateProfileSectionNamesW
CreateFileA
CreateProcessW
OutputDebugStringW
FindResourceExA
LoadLibraryW
UnhandledExceptionFilter
GetFileAttributesA
GetFileAttributesW
GetFileSizeEx
GetStartupInfoA
VirtualAlloc
GetProcessVersion
GetLocalTime
LoadLibraryA
SetProcessShutdownParameters
ExpandEnvironmentStringsW
Sleep
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetCurrentProcess
TerminateProcess
FatalAppExitW

user32

GetWindowContextHelpId
BringWindowToTop
AnyPopup
ClientToScreen
CharPrevW
SetWindowContextHelpId
GetDesktopWindow
CreateWindowExW

gdi32

CloseFigure
BeginPath
CreateFontIndirectA
CreateDCW
FillPath
CombineRgn
ArcTo

shell32

DragQueryPoint

comctl32

CreateStatusWindowW

winhttp

WinHttpAddRequestHeaders
WinHttpOpen

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcm90

?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@P$AAVException@3@@Z
?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXP$AAVEventHandler@System@@@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVException@System@@0@Z
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6GJPAX@Z0@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@@Z

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CONST
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 632KB - Virtual size: 632KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

32a6f16badd7ac651a61ebb9fbf0f414

Headers

DLL Characteristics

File Characteristics

Imports

msvcr90

kernel32

user32

gdi32

shell32

comctl32

winhttp

msvcp90

msvcm90

mscoree

Sections

.text Size: 28KB - Virtual size: 27KB

.data Size: 512B - Virtual size: 2KB

CONST Size: 1KB - Virtual size: 1KB

.rsrc Size: 632KB - Virtual size: 632KB

.text
Size: 28KB - Virtual size: 27KB

.data
Size: 512B - Virtual size: 2KB

CONST
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 632KB - Virtual size: 632KB