87dd87c8b96cd45146a2206259f618798ad4bd2bb1c5691ed68fefb1a5e03290

Sharing

Copy URL Twitter E-mail

General

Target

87dd87c8b96cd45146a2206259f618798ad4bd2bb1c5691ed68fefb1a5e03290
Size

138KB
MD5

6676bf48ff9114c87e1bb9728c9bc080
SHA1

565540d71cb42c69f80dd00ba41dd52254f3c552
SHA256

87dd87c8b96cd45146a2206259f618798ad4bd2bb1c5691ed68fefb1a5e03290
SHA512

aa710a6e3c6c69bc9a1645ae4916ced9d01e92c0fae9652fb00cc88b8c116cf3c83073acc02031defb539bdb5deacbb088a2b30d5943e97911c619419cfa4d52
SSDEEP

3072:seD1iUumsYC2BoFPCD5aFluB2HOKRwoLDzNS/6g75/cl4gwm7b:seQRcuFPCD5aFluBQJwinNozgi

Score

N/A

Malware Config

Signatures

Files

87dd87c8b96cd45146a2206259f618798ad4bd2bb1c5691ed68fefb1a5e03290
.exe windows x86

54559c66fc5b457bd8a5f2418e3537ac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryA
GlobalFree
GetLocaleInfoA
GetComputerNameA
InterlockedDecrement
Sleep
LoadLibraryA
UnmapViewOfFile
GetSystemTime
FormatMessageA
GetVersionExA
lstrcpyA
DeleteCriticalSection
HeapDestroy
GetTickCount
CreateMutexA
GetFileAttributesA
EnterCriticalSection
GetTempPathA
lstrlenA
ExitProcess
HeapAlloc
HeapCreate
VirtualProtectEx
LoadLibraryExA
LoadResource
GetDiskFreeSpaceA
WaitForSingleObject
InterlockedIncrement
FindResourceA
GetSystemInfo
SetFileAttributesA
GetThreadPriority
GlobalAlloc
GetFileSize
GetModuleHandleA
GetProcAddress
LocalAlloc
FreeLibrary
WritePrivateProfileStringA
GetVersion
MapViewOfFile
CreateProcessA
GetModuleFileNameA
lstrcatA
GetCurrentThreadId
GetPrivateProfileStringA
CreateFileMappingA
IsBadReadPtr
LocalFree
ReadFile
MultiByteToWideChar
GetFileTime
LockResource
GetCurrentThread
SystemTimeToFileTime
ResumeThread
WideCharToMultiByte
GetVolumeInformationA
FileTimeToSystemTime
GlobalUnlock
MoveFileA
GlobalMemoryStatus
InterlockedExchange
SetFileTime
SetFilePointer
CreateFileA
SetThreadPriority
GetStartupInfoA
lstrlenW
GetLastError
CloseHandle
lstrcmpA
GetDriveTypeA
WriteFile
GlobalLock
InitializeCriticalSection
SetEndOfFile

user32

SetCursor
GetParent
EnableMenuItem
SetWindowLongA
GetNextDlgTabItem
InsertMenuA
ShowCaret
RedrawWindow
ReleaseDC
GetMessagePos
KillTimer
ClientToScreen
GetMenu
ReleaseCapture
GetMenuItemInfoA
AdjustWindowRectEx
DispatchMessageA
GetWindow
InflateRect
DrawIconEx
DestroyMenu
SetWindowsHookExA
SetCaretPos
LockWindowUpdate
HideCaret
IsIconic
CreatePopupMenu
SetWindowPos
RegisterWindowMessageA
UnhookWindowsHookEx
SendMessageA
GetDC
MapWindowPoints
SetParent
LoadCursorA
DrawFrameControl
GetCursorPos
EndDeferWindowPos
CreateWindowExA
DeferWindowPos
IsRectEmpty
FillRect
LoadMenuA
GetCapture
GetMenuDefaultItem
PtInRect
SetLastErrorEx
GetKeyState
EnableWindow
BeginDeferWindowPos
WaitMessage
ModifyMenuA
GetTopWindow
GetDesktopWindow
DeleteMenu
SetCapture
GetDlgCtrlID
CallNextHookEx
InvalidateRect
SetTimer
FlashWindow
OffsetRect
RegisterClipboardFormatA
GetWindowLongA
wvsprintfA
MessageBoxA
WindowFromPoint
IsWindowVisible
LoadImageA
UpdateWindow
GetMenuItemCount
GetMenuStringA
GetMenuItemID
PeekMessageA
SystemParametersInfoA
IsZoomed
IntersectRect
GetClientRect
ScreenToClient
DestroyCaret
EqualRect
SetMenuDefaultItem
SetMenuItemInfoA
GetMessageA
SetRect
GetWindowRect
IsWindow
GetSystemMetrics
PostThreadMessageA
GetSysColor
CreateCaret
TrackPopupMenu
CheckMenuItem
GetSubMenu
GetDCEx
LoadBitmapA
PostMessageA
GetClassLongA
RemoveMenu
GetActiveWindow
MapDialogRect
DrawEdge
UnionRect
SetForegroundWindow
GetSystemMenu
IsMenu
SetRectEmpty
CopyRect
GetMenuState
SetWindowContextHelpId
DrawTextA
BringWindowToTop
PostQuitMessage
AppendMenuA

gdi32

GetBitmapBits
Rectangle
GetObjectA
BitBlt
CreateSolidBrush
DeleteDC
GetTextExtentPoint32A
PatBlt
Polygon
GetStockObject
ExtTextOutA
RectInRegion
CreateRectRgnIndirect
SelectObject
TextOutA
GetTextExtentPointA
StretchDIBits
SetTextColor
SetBitmapBits
CreateDIBitmap
CreatePatternBrush
CreateCompatibleBitmap
CreateRectRgn
StretchBlt
SetDIBits
GetDeviceCaps
GetDIBits
CreateFontIndirectA
CreateBitmap
GetCurrentObject
CombineRgn
CreateCompatibleDC
CreateDCA
GetTextMetricsA
DeleteObject

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHFileOperationA
SHBrowseForFolderA
SHGetMalloc
ShellExecuteA

ole32

CLSIDFromString
StringFromGUID2
StringFromCLSID
CoTaskMemFree
CoCreateGuid
CoGetClassObject

oleaut32

SysFreeString
SysAllocStringLen
VariantClear

comctl32

ord8
ImageList_DragLeave
ImageList_GetImageCount
ImageList_BeginDrag
ImageList_DragEnter
ImageList_SetBkColor
ImageList_EndDrag
ImageList_AddMasked

winmm

waveOutPause
mciSendCommandA
mciSendStringA
mciGetErrorStringA
PlaySoundA

wininet

InternetAutodialHangup
InternetGetConnectedState
InternetDial

wsock32

getsockname
accept
getpeername
WSAAsyncSelect
listen
ioctlsocket
htons
gethostbyname
connect
shutdown
closesocket
inet_addr
recv
socket
WSASetLastError
bind
WSAGetLastError
ntohs
send

avifil32

AVIStreamRelease
AVIStreamOpenFromFileA
AVIStreamGetFrame
AVIFileExit
AVIStreamGetFrameClose
AVIStreamGetFrameOpen
AVIFileInit

msvcrt

isalpha
_exit
_ftol
malloc
_setmbcp
_strdup
__CxxFrameHandler
strncat
__setusermatherr
__p__commode
__RTDynamicCast
_itoa
gmtime
isalnum
_except_handler3
_endthread
_close
_mbctoupper
fclose
_onexit
_CIpow
floor
_chdrive
memmove
_XcptFilter
_mbschr
??8type_info@@QBEHABV0@@Z
atol
_initterm
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__set_app_type
ctime
free
fseek
localtime
__p__fmode
strncpy
_mbsinc
fprintf
exit
vsprintf
_chdir
longjmp
_mbscmp
_acmdln
atoi
wcscpy
__dllonexit
isdigit
_ftime
_CxxThrowException
clock
_purecall
_open
atof
rand
fgets
fopen
_CIacos
wcslen
_lseek
sprintf
qsort
_fstat
time
_adjust_fdiv
__getmainargs
_setjmp3

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

54559c66fc5b457bd8a5f2418e3537ac

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

comctl32

winmm

wininet

wsock32

avifil32

msvcrt

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 71KB - Virtual size: 133KB

.rsrc Size: 14KB - Virtual size: 14KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 71KB - Virtual size: 133KB

.rsrc
Size: 14KB - Virtual size: 14KB

.reloc
Size: 2KB - Virtual size: 1KB