76a167a2e363880c8acdf83eacce2818904860ec907126d6cc1d37d9bdcafafc

Sharing

Copy URL Twitter E-mail

General

Target

76a167a2e363880c8acdf83eacce2818904860ec907126d6cc1d37d9bdcafafc
Size

636KB
MD5

d716fe033896ebd9ee0f45f82b649f50
SHA1

860043924a3fd1d30d750da0b69a4f9d2bc747ef
SHA256

76a167a2e363880c8acdf83eacce2818904860ec907126d6cc1d37d9bdcafafc
SHA512

8917b088d8d54e712c62b0b85ea1b9ca0cc25b426086b3579d1fcdcc11631a93285e35304eac63786dba496ea92279e56b6b8e717e43c78b5c5b3b6ca5f8b824
SSDEEP

12288:iA8RD4LfQjcYXURXNfhYNT3csUbPpzBBzyCpP:m8L4jcYXeXNfhYT3UbPpzBlpJ

Score

N/A

Malware Config

Signatures

Files

76a167a2e363880c8acdf83eacce2818904860ec907126d6cc1d37d9bdcafafc
.exe windows x86

bb42eacb43fdeb02c1d94201e060ccfd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord5714
ord1146
ord4425
ord4465
ord3136
ord3259
ord1168
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord800
ord815
ord860
ord540
ord561
ord825
ord3663
ord3626
ord641
ord2414
ord2514
ord2621
ord1134
ord4160
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord3147
ord2982
ord1576
ord4353
ord3798
ord6374
ord2648
ord2055
ord4837
ord3749
ord5065
ord6376
ord5261
ord2446
ord4274
ord1727
ord2124
ord5277
ord823
ord2864
ord6215
ord470
ord755
ord2379
ord5307
ord4698
ord5289
ord2725
ord5302
ord4079
ord3346
ord2396
ord5300
ord1089
ord3922
ord5199
ord2512
ord2554
ord5731
ord2863
ord6199
ord2859
ord3908
ord6197
ord5163
ord4673
ord6375
ord4627
ord4486

msvcrt

fputs
fflush
_pctype
sscanf
time
strcmp
memchr
abort
bsearch
tolower
strncpy
__mb_cur_max
__CxxFrameHandler
signal
getenv
_setmbcp
fgets
_except_handler3
fprintf
_setmode
_isctype
_errno
fopen
_vsnprintf
_getch
malloc
_iob
calloc
realloc
free
memmove
strrchr
fseek
ftell
fclose
fwrite
fread
_ftol
qsort
strncmp
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__set_app_type
__p__commode
_stat
_fileno
__p__fmode
_controlfp
strchr

kernel32

ReleaseMutex
GetTickCount
GlobalMemoryStatus
GetStdHandle
FlushConsoleInputBuffer
GetStartupInfoA
FormatMessageA
GetLocalTime
GetCurrentProcessId
GetCurrentThreadId
CreateFileW
GetFileSize
SetFilePointer
SetEndOfFile
WaitForSingleObjectEx
WriteFile
GetLastError
CreateMutexA
CloseHandle
GetModuleFileNameA
SetCurrentDirectoryA
GetFileAttributesA
EnterCriticalSection
LeaveCriticalSection
Sleep
QueryPerformanceCounter
WaitForSingleObject
CreateProcessA
FreeLibrary
LoadLibraryA
GetProcAddress
LoadResource
SizeofResource
FindResourceA
GetVersionExA
GetModuleHandleA

user32

LoadStringA
WaitForInputIdle
EnableWindow
IsWindowVisible
SetForegroundWindow
SetActiveWindow
PtInRect
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
GetDC
ReleaseDC
GetWindowLongA
AdjustWindowRectEx
LoadIconA
FindWindowA
PostMessageA
SetRect

shell32

Shell_NotifyIconA

olepro32

ord251

bcgcbpro671

??1CBCGPDlgImpl@@MAE@XZ
?PreTranslateMessage@CBCGPDialog@@UAEHPAUtagMSG@@@Z
?OnCommand@CBCGPDialog@@MAEHIJ@Z
?GetRuntimeClass@CBCGPDialog@@UBEPAUCRuntimeClass@@XZ
?messageMap@CBCGPDialog@@1UAFX_MSGMAP@@B
?GetMessageMap@CBCGPDialog@@MBEPBUAFX_MSGMAP@@XZ
??0CBCGPDialog@@QAE@IPAVCWnd@@@Z

ws2_32

closesocket
recv
send
WSASetLastError
WSAGetLastError
shutdown

shlwapi

PathFindFileNameA

wininet

InternetQueryDataAvailable
InternetReadFile
InternetCloseHandle

Sections

.text
Size: 312KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb42eacb43fdeb02c1d94201e060ccfd

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

shell32

olepro32

bcgcbpro671

ws2_32

shlwapi

wininet

Sections

.text Size: 312KB - Virtual size: 310KB

.rdata Size: 72KB - Virtual size: 70KB

.data Size: 124KB - Virtual size: 129KB

.rsrc Size: 124KB - Virtual size: 122KB

.text
Size: 312KB - Virtual size: 310KB

.rdata
Size: 72KB - Virtual size: 70KB

.data
Size: 124KB - Virtual size: 129KB

.rsrc
Size: 124KB - Virtual size: 122KB