76b32a90fd6724a790d57edf3a450ab1e5307582128de874dcce941009ebcfce

Sharing

Copy URL

Twitter E-mail

General

Target

76b32a90fd6724a790d57edf3a450ab1e5307582128de874dcce941009ebcfce
Size

222KB
MD5

6b0773f21048f716bc2cb18e3d45da20
SHA1

cb32d956b407c5f60535098656d30f2e379a2a26
SHA256

76b32a90fd6724a790d57edf3a450ab1e5307582128de874dcce941009ebcfce
SHA512

c60f5fb600eabba00e8294c80c2ed83905b5ad1574ed6bdfc4c734417ffa51004a80f87ad7c1b555e3a576ed4103dc346ad302940759249ac1838e33e8441723
SSDEEP

3072:eYpXBM8gMM7GSA7bKJvma9klKJ/ziokxujxfbbzzKascqoRmMqtw:XK1mVKZiQ9fbvaPoRpqa

Score

N/A

Malware Config

Signatures

Files

76b32a90fd6724a790d57edf3a450ab1e5307582128de874dcce941009ebcfce
.exe windows x86

0536e3bd95753a9a57d0b81af47e5e5f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

hccutils

LoadBITMAP
LoadSTRINGW
LoadICON
LoadIMAGE
FindResources

kernel32

CreateEventA
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
lstrlenA
lstrcmpiA
GetModuleFileNameA
GetModuleHandleW
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
CreateMutexA
GetCurrentThreadId
GetCommandLineA
Sleep
VirtualFree
VirtualAlloc
GetConsoleCP
SetStdHandle
SetFilePointer
InitializeCriticalSectionAndSpinCount
GetLastError
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
GetStdHandle
WriteFile
HeapCreate
HeapReAlloc
LCMapStringA
ExitProcess
LCMapStringW
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
CloseHandle
GetVersionExA
LoadLibraryA
FreeLibrary
GetModuleHandleA
GetProcAddress
FlushFileBuffers
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
LocalFree
LeaveCriticalSection
GetACP
GetCPInfo
GetStartupInfoA
VirtualQuery
GetSystemInfo
VirtualProtect
HeapFree
HeapAlloc
RtlUnwind
IsDebuggerPresent
EnterCriticalSection

user32

GetCursorPos
GetWindowLongW
CharNextW
PostThreadMessageA
SetWindowLongW
FindWindowA
DestroyMenu
CharNextA
SendMessageW
RegisterWindowMessageA
IsWindow
CreateDialogParamW
ShowWindow
GetDC
GetSystemMetrics
ReleaseDC
PostQuitMessage
SetTimer
KillTimer
CreatePopupMenu
AppendMenuA
SetForegroundWindow
TrackPopupMenu
DestroyIcon
DestroyWindow
GetDlgItem
SendMessageA
GetDesktopWindow
GetWindowRect
SetWindowTextW
wsprintfW
RegisterClassA
CreateWindowExA
PostMessageA
GetMessageA
DispatchMessageA
DefWindowProcA

gdi32

GetDIBits
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetBkColor
BitBlt
SetTextColor
DeleteDC
DeleteObject

advapi32

RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

Shell_NotifyIconW

ole32

CLSIDFromProgID
CoInitialize
CoUninitialize
StringFromGUID2
CoCreateInstance
CoSuspendClassObjects
CoTaskMemFree
CoRegisterClassObject
CoRevokeClassObject
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

VariantClear
SysAllocStringByteLen
SysStringByteLen
SysFreeString
SysStringLen
SysAllocString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
SafeArrayGetVartype
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy

shlwapi

StrStrIA

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0536e3bd95753a9a57d0b81af47e5e5f

Headers

DLL Characteristics

File Characteristics

Imports

hccutils

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

Sections

.text Size: 97KB - Virtual size: 96KB

.rdata Size: 18KB - Virtual size: 18KB

.data Size: 15KB - Virtual size: 22KB

.rsrc Size: 83KB - Virtual size: 84KB

.text
Size: 97KB - Virtual size: 96KB

.rdata
Size: 18KB - Virtual size: 18KB

.data
Size: 15KB - Virtual size: 22KB

.rsrc
Size: 83KB - Virtual size: 84KB