69436772a781089fb740f60ede0209d50b69b9250c3af1953c47f780ccb2422b

Sharing

Copy URL Twitter E-mail

General

Target

69436772a781089fb740f60ede0209d50b69b9250c3af1953c47f780ccb2422b
Size

1.4MB
MD5

2435901c8c9bb2f19dc166dfe0c59abc
SHA1

588855fde93bd4f275e2ea8b8d82a439eac3db10
SHA256

69436772a781089fb740f60ede0209d50b69b9250c3af1953c47f780ccb2422b
SHA512

f0ff27bf34c18ada9ccb38d51316b934c468a73d127ebffa05d4c21ffbfd7df121d6b6d6784c39a2621cf9fe49ad99f95f32f347449fb0a8dbce070b0f143eb3
SSDEEP

3072:nuGgITsSI10JYU4oM3CO/NO9Si2UNATBfkrIxOeStx51Ds9+RH6TNfTpX+vu:uGlLI14YUa3W3ATBMrUOeK5LRaTL9

Score

N/A

Malware Config

Signatures

Files

69436772a781089fb740f60ede0209d50b69b9250c3af1953c47f780ccb2422b
.exe windows x86

1abf135f63ef18922405fe5c31919942

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc80u

ord4276
ord4716
ord3397
ord1118
ord3174
ord572
ord3286
ord347
ord602
ord4255
ord5210
ord715
ord4480
ord4179
ord3943
ord6271
ord5715
ord2638
ord5067
ord5917
ord3703
ord1899
ord5397
ord3713
ord5148
ord293
ord5410
ord3712
ord4238
ord5584
ord2527
ord1393
ord3155
ord5519
ord2640
ord3940
ord5643
ord2534
ord1608
ord5638
ord2856
ord1611
ord3204
ord5723
ord2708
ord5911
ord5884
ord4301
ord6721
ord6053
ord2829
ord1572
ord577
ord4155
ord2725
ord1634
ord265
ord266
ord762
ord4226
ord587
ord1536
ord2077
ord2366
ord1894
ord3417
ord605
ord4032
ord741
ord620
ord3327
ord4475
ord2832
ord5562
ord5209
ord5226
ord4562
ord4535
ord3942
ord3677
ord2239
ord5222
ord5220
ord2925
ord1911
ord566
ord3826
ord757
ord5378
ord6215
ord5096
ord1007
ord1925
ord5579
ord2009
ord2054
ord3824
ord4320
ord1049
ord6274
ord5971
ord3795
ord6272
ord2011
ord4008
ord2271
ord5558
ord2279
ord3925
ord2086
ord2742
ord4101
ord1582
ord4234
ord777
ord2745
ord5524
ord3311
ord2261
ord283
ord2260
ord1472
ord6700
ord4026
ord2460
ord3176
ord2255
ord899
ord4743
ord4256
ord4314
ord1431
ord5199
ord896
ord2648
ord1392
ord4119
ord5908
ord3189
ord2651
ord6720
ord282
ord1542
ord1661
ord1662
ord1479
ord1079
ord280
ord4884
ord4729
ord5914
ord421
ord4206
ord6086
ord655
ord5178
ord5105
ord5283
ord5279
ord1058
ord383
ord629
ord6284
ord774
ord1430
ord1785
ord1434
ord3756
ord354
ord776
ord4098
ord4574
ord6063
ord3635
ord1086
ord2365
ord3990
ord386
ord631
ord1198
ord2985
ord1591
ord709
ord5956
ord501
ord5231
ord5229
ord920
ord925
ord929
ord1271
ord3678
ord927
ord931
ord2384
ord6058
ord2404
ord5196
ord2388
ord2394
ord5633
ord2392
ord2390
ord2407
ord2402
ord2386
ord2409
ord2397
ord2379
ord2381
ord2399
ord2169
ord1270
ord2163
ord1513
ord6273
ord3796
ord6275
ord3339
ord4961
ord1353
ord3157
ord5171
ord1955
ord2521
ord5727
ord1647
ord5607
ord6033
ord1646
ord6056
ord3296
ord1590
ord5604
ord2311
ord2531
ord6050
ord3800
ord764

msvcr80

?what@exception@std@@UBEPBDXZ
_findfirst64i32
_findnext64i32
_findclose
_mkdir
_invalid_parameter_noinfo
fopen
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
fclose
fwrite
_CRT_RTC_INITW
_fstat64i32
_read
_lseek
_unlock
__set_app_type
_encode_pointer
__p__fmode
__p__commode
??0exception@std@@QAE@XZ
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
memcpy
_stat64i32
calloc
free
malloc
_CxxThrowException
strcat
strcpy
strlen
_errno
_stricmp
_strdup
_close
_open
__CxxFrameHandler3
__dllonexit
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_adjust_fdiv
memset
strrchr
strcmp

kernel32

TerminateProcess
GetCurrentProcess
GetSystemTimeAsFileTime
IsDebuggerPresent
GetCurrentProcessId
lstrlenW
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
WritePrivateProfileStringW
DeleteFileW
OutputDebugStringW
MultiByteToWideChar
FindFirstFileW
WideCharToMultiByte
FindClose
GetModuleFileNameW
GetDiskFreeSpaceExW
InterlockedExchange
Sleep
UnhandledExceptionFilter
GetStartupInfoW
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
DebugBreak
GetProcAddress
LoadLibraryA
FreeLibrary
HeapFree
HeapAlloc
GetProcessHeap
VirtualQuery
InterlockedCompareExchange

user32

TabbedTextOutW
SetWindowRgn
SetRect
SendMessageW
GetSystemMenu
OffsetRect
InvalidateRect
GetWindowRect
LoadIconW
SetCapture
ReleaseCapture
LoadBitmapW
PostQuitMessage
AppendMenuW
DrawIcon
GetSystemMetrics
IsIconic
PeekMessageW
GetParent
GetClientRect
GetSysColor
EnableWindow
GrayStringW
FillRect
DrawTextExW
DrawTextW

gdi32

RectVisible
GetStockObject
Escape
BitBlt
CreateSolidBrush
ExtTextOutW
CreateRoundRectRgn
CreateCompatibleBitmap
TextOutW
CreateCompatibleDC
PtVisible

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW

comctl32

_TrackMouseEvent
InitCommonControlsEx
ord17

ole32

CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitialize

msvcp80

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1abf135f63ef18922405fe5c31919942

Headers

File Characteristics

Imports

mfc80u

msvcr80

kernel32

user32

gdi32

shell32

comctl32

ole32

msvcp80

Sections

.text Size: 72KB - Virtual size: 71KB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.text
Size: 72KB - Virtual size: 71KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB