826a50c3b3a87b65c095ad6b15a923c662a006679451dca002e3baee3801ca1c

Sharing

Copy URL

Twitter E-mail

General

Target

826a50c3b3a87b65c095ad6b15a923c662a006679451dca002e3baee3801ca1c
Size

560KB
MD5

65a7eead16096a24c0056bec3133c950
SHA1

e535dbf7ce53e451bb73d213991b2674ab57839a
SHA256

826a50c3b3a87b65c095ad6b15a923c662a006679451dca002e3baee3801ca1c
SHA512

4108439c397eae0fcb323c7068369d8644626b73068c26691310c4f5d330fb6cfff3770d1be7ee4fb17f8b65f06ff07495a0b068bf1471bb006de345067c9d96
SSDEEP

12288:d1NuctthDYOpfqpWUUF51A5O/CrxPIJOA06Q2n:j4ctdpfqwUQG8C0O/6zn

Score

N/A

Malware Config

Signatures

Files

826a50c3b3a87b65c095ad6b15a923c662a006679451dca002e3baee3801ca1c
.exe windows x86

3aae8ad6b8003dc73c344d17e027c656

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

atoi
wcscpy
_strupr
_beginthreadex
calloc
_CIacos
printf
_CIpow
__dllonexit
_onexit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strcat
vsprintf
exit
wcstombs
fwrite
fclose
strrchr
_except_handler3
free
strcmp
malloc
strncpy
sprintf
puts
strcpy
strstr
putchar
memcpy
rand
memcmp
memset
??3@YAXPAX@Z
__CxxFrameHandler
??1type_info@@UAE@XZ
_CxxThrowException
wcslen
mbstowcs
_access
strlen
_ftol
memmove
??2@YAPAXI@Z
_chkesp
fopen
strncat

kernel32

WideCharToMultiByte
lstrlenW
GetModuleHandleA
GetStartupInfoA
LocalFree
GetExitCodeThread
TerminateThread
CreateThread
lstrlenA
MultiByteToWideChar
GetLastError
InterlockedDecrement
GetCurrentProcessId
FreeLibrary
GetLocalTime
GetTickCount
SetEvent
WaitForSingleObject
LoadLibraryA
GetProcAddress
CloseHandle
CreateEventA
Sleep

user32

IsWindow
SendMessageA
CreateWindowExA
GetLastInputInfo
GetMessageA
PostThreadMessageA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

ws2_32

send
select
inet_addr
recv
ntohs
socket
gethostbyname
htons
sendto
connect
WSASocketA
htonl
gethostname
getsockname
setsockopt
closesocket
WSACleanup
WSAStartup

msvcp60

?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

ole32

OleRun
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SysAllocString
VariantInit
CreateErrorInfo
VariantChangeType
SetErrorInfo
GetErrorInfo
VariantClear
SysFreeString

msvfw32

ICSendMessage

winmm

waveOutClose
waveOutUnprepareHeader
waveInStart
waveInReset
waveInOpen
waveInClose
waveInUnprepareHeader
waveOutPrepareHeader
waveOutWrite
waveInPrepareHeader
waveInAddBuffer
waveOutOpen

Sections

.text
Size: 480KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3aae8ad6b8003dc73c344d17e027c656

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

advapi32

ws2_32

msvcp60

ole32

oleaut32

msvfw32

winmm

Sections

.text Size: 480KB - Virtual size: 476KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 32KB - Virtual size: 59KB

.idata Size: 8KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 16KB - Virtual size: 12KB

.text
Size: 480KB - Virtual size: 476KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 32KB - Virtual size: 59KB

.idata
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 16KB - Virtual size: 12KB