8c59fb47b56ee5f120cf79f6e65ba366da20ecdc6ab333ad1e636b7b7dfc5436

Sharing

Copy URL Twitter E-mail

General

Target

8c59fb47b56ee5f120cf79f6e65ba366da20ecdc6ab333ad1e636b7b7dfc5436
Size

591KB
MD5

66b30f732c50d853f1678b0b074acd10
SHA1

6c3f910cfb2a2f2ac7969ae4c1f4896e1b035a9d
SHA256

8c59fb47b56ee5f120cf79f6e65ba366da20ecdc6ab333ad1e636b7b7dfc5436
SHA512

a35a17bdfee6ec684bdb5331ea5324e48b9e2b786185ef5eda08977760b37e77370ae118d9f8df5a48ec628d1e9d3e570e6cacf01342153aa5e0b4344659c796
SSDEEP

12288:Ktq+K5Lm5Qq+T97agHqNmJ0YM12P73kkPoJk6H:Ktq+Ym5QnHqNmJ0YMAP73Zqk6H

Score

N/A

Malware Config

Signatures

Files

8c59fb47b56ee5f120cf79f6e65ba366da20ecdc6ab333ad1e636b7b7dfc5436
.exe windows x86

ea9cee6dd73ba96ecf6be1869a307f13

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpEndRequestW
InternetGetConnectedState
InternetWriteFile
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
HttpQueryInfoA
InternetReadFile
InternetCrackUrlA
InternetConnectA
HttpOpenRequestA
HttpAddRequestHeadersW
HttpSendRequestExA

kernel32

IsValidLocale
EnumSystemLocalesA
CloseHandle
DeleteCriticalSection
OpenEventW
CreateEventW
EnterCriticalSection
GetLastError
LeaveCriticalSection
InitializeCriticalSection
GetTickCount
GetModuleHandleW
SetEvent
WaitForSingleObject
GetProcAddress
Sleep
LoadLibraryW
SetErrorMode
GetLocaleInfoW
GetConsoleCP
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
GetDriveTypeA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetModuleHandleA
CreateThread
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
ReleaseMutex
OutputDebugStringA
OutputDebugStringW
GetModuleFileNameA
GetSystemTimeAsFileTime
GetModuleFileNameW
GetCurrentProcess
CreateFileW
ReadFile
GetVersionExW
QueryPerformanceCounter
InterlockedIncrement
MultiByteToWideChar
WideCharToMultiByte
VirtualAlloc
LoadLibraryA
VirtualFree
VirtualProtect
FindFirstFileW
FindClose
CreateDirectoryW
FindNextFileW
DeleteFileW
RemoveDirectoryW
GetFileSize
WriteFile
lstrlenA
FreeLibrary
HeapAlloc
HeapFree
GetProcessHeap
LocalAlloc
LocalFree
GetSystemDirectoryW
DeviceIoControl
CreateFileA
lstrcpyA
GetSystemDirectoryA
lstrcatA
CopyFileA
HeapReAlloc
GlobalAlloc
SetLastError
GlobalFree
SetFilePointer
VirtualQuery
CreateProcessW
SetUnhandledExceptionFilter
FormatMessageW
TerminateProcess
lstrlenW
GetLocalTime
lstrcatW
IsDebuggerPresent
GetCurrentThreadId
GetCurrentProcessId
lstrcpyW
OpenFileMappingW
InitializeCriticalSectionAndSpinCount
GetCommandLineW
GetTempPathW
GetLocaleInfoA
MoveFileExW
GetFileAttributesW
FileTimeToSystemTime
SetFileAttributesW
ExitThread
OpenMutexW
QueryPerformanceFrequency
FlushFileBuffers
ConnectNamedPipe
CreateNamedPipeW
InterlockedExchange
GetOverlappedResult
DisconnectNamedPipe
InterlockedDecrement
GetStartupInfoW
UnhandledExceptionFilter
FileTimeToLocalFileTime
GetDriveTypeW
ResumeThread
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
RtlUnwind
RaiseException
GetCPInfo
LCMapStringA
LCMapStringW
HeapSize
ExitProcess
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
GetFullPathNameW
GetCurrentDirectoryA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetConsoleMode

user32

wsprintfW
IsCharAlphaNumericW
wvsprintfW
GetSystemMetrics
SetRectEmpty
wsprintfA
SetWindowLongW
CreateWindowExW
DispatchMessageW
DefWindowProcW
GetWindowLongW
LoadIconW
DestroyWindow
SetTimer
GetMessageW
UnregisterClassW
KillTimer
LoadCursorW
TranslateMessage
RegisterClassW
PostThreadMessageW

ws2_32

WSACleanup
gethostbyname
gethostbyaddr
WSASetLastError
getservbyname
getservbyport
ntohs
htons
WSAGetLastError
htonl
inet_addr
inet_ntoa
send
closesocket
connect
setsockopt
recv
socket
WSAStartup

imm32

ImmDisableIME

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

advapi32

GetNamedSecurityInfoW
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegCreateKeyW
CryptAcquireContextW
CryptImportKey
CryptSetKeyParam
CryptEncrypt
CryptDestroyKey
CryptReleaseContext
CryptDecrypt
AllocateAndInitializeSid
SetEntriesInAclW
InitializeSecurityDescriptor
RegCreateKeyExW
SetSecurityDescriptorSacl
GetLengthSid
BuildExplicitAccessWithNameW
GetSecurityDescriptorSacl
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorW
InitializeAcl
RegOpenKeyExW
SetNamedSecurityInfoW
AddAccessAllowedAceEx
LookupAccountSidW
GetTokenInformation
OpenProcessToken
RegOpenKeyW
CryptGetKeyParam
SetSecurityDescriptorDacl

shell32

ShellExecuteW
SHGetFolderPathW
SHGetSpecialFolderPathW

Sections

.text
Size: 353KB - Virtual size: 353KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 29KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 93KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ea9cee6dd73ba96ecf6be1869a307f13

Headers

DLL Characteristics

File Characteristics

Imports

wininet

kernel32

user32

ws2_32

imm32

version

advapi32

shell32

Sections

.text Size: 353KB - Virtual size: 353KB

.rdata Size: 79KB - Virtual size: 78KB

.data Size: 29KB - Virtual size: 54KB

.rsrc Size: 27KB - Virtual size: 26KB

.reloc Size: 93KB - Virtual size: 96KB

.text
Size: 353KB - Virtual size: 353KB

.rdata
Size: 79KB - Virtual size: 78KB

.data
Size: 29KB - Virtual size: 54KB

.rsrc
Size: 27KB - Virtual size: 26KB

.reloc
Size: 93KB - Virtual size: 96KB