709d9d79383f1bf35a45382a4cd539862d0123de8c08960ef9d1bed3bdbbf1be

Sharing

Copy URL Twitter E-mail

General

Target

709d9d79383f1bf35a45382a4cd539862d0123de8c08960ef9d1bed3bdbbf1be
Size

131KB
MD5

77c868d0eee7ffe3b19c5828a09d5eb0
SHA1

c4f356f0664027226e7fa0e889ea8d328d9f9053
SHA256

709d9d79383f1bf35a45382a4cd539862d0123de8c08960ef9d1bed3bdbbf1be
SHA512

5470dc1d1a0b4fa2b7c02326d982140c411e743a2ff11468177b35c2dfa24c8ad8e03e052115cb662ae794bfb30cd52933b18b6cbe474600d1008309e5a56eae
SSDEEP

3072:GoKH80vXoJbTRAwZyDURVMQABMHc/uO06D6w4QZcj0iFmKyaT:3yXop1AwCURVMQ8hWFw4QZ3GT

Score

N/A

Malware Config

Signatures

Files

709d9d79383f1bf35a45382a4cd539862d0123de8c08960ef9d1bed3bdbbf1be
.exe windows x86

a2216e1dfb5226ffca1675ba7b42940c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapCreate
SetErrorMode
LoadLibraryExA
ExitProcess
GetSystemInfo
GlobalUnlock
WritePrivateProfileStringA
RemoveDirectoryA
GetDriveTypeA
MoveFileA
GetLocaleInfoA
ReadFile
lstrlenA
FindResourceA
MultiByteToWideChar
DeleteCriticalSection
CreateProcessA
GetLastError
GetTickCount
GetFileSize
GetPrivateProfileStringA
GetVolumeInformationA
FileTimeToSystemTime
GetModuleHandleA
GetModuleFileNameA
FormatMessageA
GetSystemTime
GetFileAttributesA
GetDiskFreeSpaceA
SystemTimeToFileTime
GetCurrentThread
GetComputerNameA
EnterCriticalSection
lstrcatA
SetThreadPriority
HeapDestroy
GetVersion
GetThreadPriority
IsBadReadPtr
SetFileAttributesA
WriteFile
CreateFileA
InterlockedExchange
GetCurrentThreadId
LoadResource
GetFileTime
CreateFileMappingA
WaitForSingleObject
FreeLibrary
LockResource
LoadLibraryA
InterlockedDecrement
lstrcmpA
ResumeThread
SetEndOfFile
Sleep
GlobalFree
LocalFree
GetStartupInfoA
WideCharToMultiByte
lstrlenW
SetFilePointer
CreateMutexA
GlobalMemoryStatus
GetVersionExA
GetTempPathA
UnmapViewOfFile
GlobalLock
MapViewOfFile
InitializeCriticalSection
CloseHandle
InterlockedIncrement
GetProcAddress
GlobalAlloc
LocalAlloc
SetFileTime
VirtualProtectEx
lstrcpyA

user32

SetMenuItemInfoA
SendMessageA
GetMenuItemInfoA
EqualRect
LockWindowUpdate
GetDesktopWindow
GetWindow
CreateCaret
GetMessagePos
AdjustWindowRectEx
IntersectRect
SetWindowPos
GetSubMenu
IsWindowVisible
RegisterWindowMessageA
InflateRect
GetCapture
GetWindowLongA
CopyRect
GetSysColor
GetMenuItemID
SetRectEmpty
GetSystemMetrics
MapWindowPoints
SetLastErrorEx
DrawIconEx
EndDeferWindowPos
UpdateWindow
DestroyCaret
DrawTextA
TrackPopupMenu
SystemParametersInfoA
MessageBoxA
wvsprintfA
IsWindow
SetWindowLongA
CallNextHookEx
IsMenu
DeferWindowPos
InsertMenuA
DeleteMenu
RedrawWindow
FillRect
GetTopWindow
SetCursor
PtInRect
ModifyMenuA
GetMenuState
DrawFrameControl
GetDC
RemoveMenu
GetDCEx
GetClassLongA
SetCapture
GetNextDlgTabItem
CreateWindowExA
PostQuitMessage
GetMenuItemCount
HideCaret
LoadCursorA
ReleaseDC
IsRectEmpty
IsIconic
WindowFromPoint
InvalidateRect
WaitMessage
GetActiveWindow
GetKeyState
FlashWindow
SetCaretPos
OffsetRect
ScreenToClient
PostMessageA
ClientToScreen
LoadImageA
CheckMenuItem
SetWindowsHookExA
DestroyMenu
DispatchMessageA
IsZoomed
AppendMenuA
GetMessageA
GetParent
EnableMenuItem
RegisterClipboardFormatA
GetMenuDefaultItem
KillTimer
DrawEdge
ShowCaret
LoadBitmapA
SetMenuDefaultItem
GetCursorPos
UnhookWindowsHookEx
ReleaseCapture
GetWindowRect
SetRect
LoadMenuA
GetMenu
SetParent
SetForegroundWindow
EnableWindow
GetMenuStringA
BringWindowToTop
GetClientRect
GetDlgCtrlID
SetWindowContextHelpId
PeekMessageA
BeginDeferWindowPos
MapDialogRect
CreatePopupMenu
UnionRect
GetSystemMenu
SetTimer
PostThreadMessageA

gdi32

GetObjectA
StretchBlt
Rectangle
GetCurrentObject
StretchDIBits
SetDIBits
GetDIBits
CreateCompatibleBitmap
PatBlt
CreateDIBitmap
CreateFontIndirectA
GetDeviceCaps
CreatePatternBrush
CreateBitmap
GetTextExtentPoint32A
GetTextExtentPointA
CreateSolidBrush
Polygon
RectInRegion
CreateRectRgn
DeleteObject
CombineRgn
GetTextMetricsA
CreateCompatibleDC
SelectObject
TextOutA
CreateRectRgnIndirect
BitBlt
SetTextColor
SetBitmapBits
CreateDCA
GetStockObject
DeleteDC
GetBitmapBits
ExtTextOutA

advapi32

RegGetKeySecurity
RegCloseKey
RegReplaceKeyA
RegUnLoadKeyA
RegDeleteKeyA
RegSetValueExA
RegQueryInfoKeyA
RegRestoreKeyA
RegFlushKey
RegSetKeySecurity
RegLoadKeyA
RegEnumValueA
RegOpenKeyExA
RegCreateKeyExA
RegSaveKeyA
RegConnectRegistryA
RegEnumKeyExA
RegDeleteValueA
RegNotifyChangeKeyValue
RegQueryValueExA

shell32

SHGetSpecialFolderLocation
ShellExecuteA
SHGetPathFromIDListA
SHFileOperationA
SHBrowseForFolderA
SHGetMalloc

ole32

CoTaskMemFree
CoGetClassObject
StringFromCLSID
CoCreateGuid
StringFromGUID2
CLSIDFromString

oleaut32

VariantClear
SysFreeString
SysAllocStringLen

comctl32

ImageList_EndDrag
ImageList_GetImageCount
ImageList_BeginDrag
ImageList_SetBkColor
ImageList_DragLeave
ImageList_DragEnter
ord8
ImageList_AddMasked
ord17

winmm

waveOutPause
PlaySoundA
mciSendStringA
mciSendCommandA
mciGetErrorStringA

wininet

InternetGetConnectedState
InternetDial
InternetAutodialHangup

wsock32

inet_addr
recv
socket
send
htons
WSAGetLastError
getsockname
gethostbyname
ntohs
getpeername
listen
connect
bind
WSASetLastError
shutdown
WSAAsyncSelect
accept
ioctlsocket
closesocket

avifil32

AVIStreamRelease
AVIStreamOpenFromFileA
AVIFileInit
AVIStreamGetFrame
AVIStreamGetFrameClose
AVIStreamGetFrameOpen
AVIFileExit

msvcrt

_endthread
__RTDynamicCast
gmtime
_open
_setjmp3
?terminate@@YAXXZ
wcscpy
_exit
__p__commode
exit
_fstat
vsprintf
floor
strncpy
atol
ctime
isdigit
__setusermatherr
__set_app_type
_ftol
_acmdln
_strdup
_mbsinc
_mbschr
_mbscmp
_lseek
_chdrive
__p__fmode
time
wcslen
_purecall
isalnum
memmove
malloc
__getmainargs
_onexit
__dllonexit
_setmbcp
_CIpow
_close
_mbctoupper
qsort
_CIacos
_chdir
free
??1type_info@@UAE@XZ
strncat
_initterm
sprintf
_ftime
atof
__CxxFrameHandler
fgets
fclose
_XcptFilter
_except_handler3
isalpha
longjmp
fprintf
clock
atoi
rand
fseek
_adjust_fdiv
fopen
_CxxThrowException
_itoa
??8type_info@@QBEHABV0@@Z
localtime

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2216e1dfb5226ffca1675ba7b42940c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

winmm

wininet

wsock32

avifil32

msvcrt

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 64KB - Virtual size: 105KB

.rsrc Size: 7KB - Virtual size: 7KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 64KB - Virtual size: 105KB

.rsrc
Size: 7KB - Virtual size: 7KB

.reloc
Size: 2KB - Virtual size: 1KB