ow571qp9x[.]zipqvyzyncp

Sharing

Copy URL

Twitter E-mail

General

Target

ow571qp9x.zipqvyzyncp
Size

476KB
MD5

edd5e7e742a9cf2c2b410d9208278042
SHA1

f1db2c4189850281f2fa163903750e7e549ee165
SHA256

fa6aea596a04b6bd957babd156bbd40cafa2b0662390cc2fd30953fb48ec61fc
SHA512

1c550da3d70359464b1082c93f76bad93aaa0bd059d6d5c3a80bd5808352b68e3be34b6574ae5a569f54cdbb120619cbede08ebfbb7ba455482159d80b400b73
SSDEEP

12288:S7fimEsIsmY4K08oM1Wd8t5KQhNdv5zl:S7aVRBn7x6jt7

Score

N/A

Malware Config

Signatures

Files

ow571qp9x.zipqvyzyncp
.dll windows x86

03540fe05cb0473f2f956a0d0a682262

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutGetPitch

ws2_32

WSACleanup
inet_addr

opengl32

glBegin

comctl32

ImageList_ReplaceIcon

kernel32

GetModuleFileNameW
CloseHandle
CreateFileW
GetProcessVersion
DeleteTimerQueue
VirtualAllocEx
InitAtomTable

wininet

InternetReadFile

user32

IsWinEventHookInstalled
GetClassNameA
TranslateMessage
CreateWindowExA
FillRect
BlockInput
DefMDIChildProcW
GetWindowTextA
GetWindowContextHelpId

crypt32

CryptUnregisterOIDFunction
CertCreateContext

setupapi

SetupDiOpenDeviceInterfaceW

esent

JetInit

advapi32

CryptGenKey
RegCloseKey
CryptAcquireContextW
CryptContextAddRef
CreateRestrictedToken

msvcrt

memset
wcscoll

gdi32

GetViewportOrgEx
SetWindowOrgEx
Polyline

imm32

ImmGetCandidateListW

pdh

PdhAddCounterW

ntdsapi

DsGetDomainControllerInfoW

shlwapi

AssocGetPerceivedType

rpcrt4

RpcMgmtSetCancelTimeout
NdrGetUserMarshalInfo

iphlpapi

GetIpAddrTable

ole32

CoCreateInstanceEx
StringFromGUID2
CoGetObjectContext

lz32

LZCopy

oleaut32

VarCyFromR4

wintrust

WintrustSetRegPolicyFlags

Exports

Exports

Vmcoqkxldefhrsw

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 404KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

03540fe05cb0473f2f956a0d0a682262

Headers

DLL Characteristics

File Characteristics

Imports

winmm

ws2_32

opengl32

comctl32

kernel32

wininet

user32

crypt32

setupapi

esent

advapi32

msvcrt

gdi32

imm32

pdh

ntdsapi

shlwapi

rpcrt4

iphlpapi

ole32

lz32

oleaut32

wintrust

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 404KB - Virtual size: 402KB

.data Size: 24KB - Virtual size: 30KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 404KB - Virtual size: 402KB

.data
Size: 24KB - Virtual size: 30KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 8KB - Virtual size: 4KB