5e678f16cd7f4ade8ef95a40ee415ee66abb270e698830f5fa414565f7fa7e85

Sharing

Copy URL Twitter E-mail

General

Target

5e678f16cd7f4ade8ef95a40ee415ee66abb270e698830f5fa414565f7fa7e85
Size

160KB
MD5

424c21a157affcee1cdd749e851d9ee0
SHA1

d50bfbce001db37f8fb357ad12833d501dec3811
SHA256

5e678f16cd7f4ade8ef95a40ee415ee66abb270e698830f5fa414565f7fa7e85
SHA512

6f56f6eb1628fb99bf8c6b91648d0b7488594de1de75e97b57c4237c5058422f9b789c45bba252bf466098703c7b00b5cf8914574b657da95244cdffb9e11fa2
SSDEEP

3072:Ar58Mpd5R+nSVrzMqpJ7i/l/C/LPS4i8HZZGC7:GpoUYq7OpKPO8HZsG

Score

N/A

Malware Config

Signatures

Files

5e678f16cd7f4ade8ef95a40ee415ee66abb270e698830f5fa414565f7fa7e85
.exe windows x86

d5233e9c236c1859f9f84993ec227e97

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

hccutils

LoadIMAGE
LoadBITMAP
LoadSTRINGW
LoadICON
FindResources

kernel32

CreateEventA
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
lstrlenA
lstrcmpiA
GetModuleFileNameA
GetModuleHandleW
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
CreateMutexA
GetCurrentThreadId
GetCommandLineA
Sleep
GetConsoleCP
SetStdHandle
SetFilePointer
InitializeCriticalSectionAndSpinCount
GetLastError
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
GetStdHandle
WriteFile
HeapCreate
HeapReAlloc
VirtualFree
LCMapStringA
ExitProcess
LCMapStringW
SetLastError
TlsFree
TlsSetValue
TlsAlloc
CloseHandle
LoadLibraryA
FreeLibrary
GetModuleHandleA
GetProcAddress
FlushFileBuffers
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapAlloc
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess

user32

DestroyMenu
GetWindowLongW
FindWindowA
CharNextA
CharNextW
SetWindowLongW
GetCursorPos
DestroyWindow
SendMessageW
RegisterWindowMessageA
IsWindow
CreateDialogParamW
ShowWindow
GetDC
GetSystemMetrics
ReleaseDC
PostQuitMessage
SetTimer
KillTimer
CreatePopupMenu
AppendMenuA
SetForegroundWindow
TrackPopupMenu
DestroyIcon
DefWindowProcA
GetDlgItem
SendMessageA
GetDesktopWindow
GetWindowRect
SetWindowTextW
wsprintfW
RegisterClassA
CreateWindowExA
PostMessageA
GetMessageA
DispatchMessageA
PostThreadMessageA

gdi32

GetDIBits
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetBkColor
BitBlt
SetTextColor
DeleteDC
DeleteObject

advapi32

RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

Shell_NotifyIconW

ole32

CoCreateInstance
CoSuspendClassObjects
CoTaskMemAlloc
CoTaskMemFree
CoRegisterClassObject
CoRevokeClassObject
CoTaskMemRealloc
StringFromGUID2
CoUninitialize
CoInitialize
CLSIDFromProgID

oleaut32

SysAllocStringByteLen
SysStringByteLen
SysFreeString
SysStringLen
SysAllocString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
SafeArrayGetVartype
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
VariantClear

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

noprbbi
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d5233e9c236c1859f9f84993ec227e97

Headers

DLL Characteristics

File Characteristics

Imports

hccutils

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 96KB - Virtual size: 96KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 15KB - Virtual size: 22KB

.rsrc Size: 30KB - Virtual size: 31KB

noprbbi Size: - Virtual size: 4KB

.text
Size: 96KB - Virtual size: 96KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 15KB - Virtual size: 22KB

.rsrc
Size: 30KB - Virtual size: 31KB

noprbbi
Size: - Virtual size: 4KB