639d82d8c005399b48f47b4120dffdfeae62195ad161cceead3bc9127b6333c3

Sharing

Copy URL Twitter E-mail

General

Target

639d82d8c005399b48f47b4120dffdfeae62195ad161cceead3bc9127b6333c3
Size

268KB
MD5

708fa74bc8f7dd42f7814aca931cfb1e
SHA1

766185911bb7fd3effa2b40a43e9b0434e4be9d9
SHA256

639d82d8c005399b48f47b4120dffdfeae62195ad161cceead3bc9127b6333c3
SHA512

20bdb163696a632e9f1dd0ea4abb614c856bd3ef8a2f3e2b25b880719810f0e91ae50989e20e8939d250d26c59a91c9d10a4fd50430046443d6eecfd052d8d93
SSDEEP

6144:OSRgvi+TfxwiF1ZNaf7DAS3fO6MLQ9deSL+ZF:hmiLWTkAQak9de6O

Score

N/A

Malware Config

Signatures

Files

639d82d8c005399b48f47b4120dffdfeae62195ad161cceead3bc9127b6333c3
.exe windows x86

bba5791bfec2ea54b1fd789b39266f99

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

secur32

QueryCredentialsAttributesW
FreeContextBuffer
VerifySignature
ApplyControlToken
TranslateNameW

oleaut32

VarR8FromCy
RegisterTypeLibForUser
GetActiveObject
VarCyFromDisp
VarUI4FromStr
VarUI2FromCy
GetRecordInfoFromTypeInfo
VarUI2FromBool

rasapi32

RasSetCredentialsW
RasValidateEntryNameW
RasSetAutodialAddressW
RasSetAutodialEnableW

shell32

ord71
CommandLineToArgvW
ord743
ExtractIconA
ord180

msvcrt

wcschr
_mbctoupper
islower
wcstoul
swscanf
isxdigit
toupper
isspace
sscanf

wininet

InternetCrackUrlW
HttpQueryInfoW
InternetSetOptionW
HttpOpenRequestA
InternetConnectA
InternetOpenW

shlwapi

PathCombineA
PathCanonicalizeW
ChrCmpIA
ChrCmpIW
PathIsUNCServerShareA
PathIsDirectoryA
ord8
PathMakePrettyW
PathParseIconLocationW

comctl32

CreateToolbarEx
InitCommonControlsEx
ImageList_Write
ImageList_GetIcon
ImageList_LoadImageA
ImageList_AddMasked
CreatePropertySheetPageW
ImageList_Draw
DestroyPropertySheetPage

kernel32

MulDiv
GetModuleHandleW
GetUserDefaultLCID
SetLastError
ProcessIdToSessionId
lstrcpynA
GetThreadLocale
lstrlenA
GetQueuedCompletionStatus
CreateFileW
FindNextFileA
UnhandledExceptionFilter

user32

DialogBoxParamW
DdeQueryConvInfo
EqualRect
FindWindowA
CheckMenuItem
ReleaseCapture
AppendMenuW
OemToCharA
IsCharAlphaNumericW
RedrawWindow
GetPropA

gdi32

PatBlt
PtInRegion
CreateICW
StretchDIBits
GetCharWidth32A
RealizePalette
CreatePen

comdlg32

FindTextW
GetSaveFileNameW
ChooseFontA
CommDlgExtendedError
PrintDlgA

advapi32

SetUserFileEncryptionKey
CredReadW
GetSecurityDescriptorRMControl
ObjectOpenAuditAlarmW
CreatePrivateObjectSecurity
LockServiceDatabase
GetLocalManagedApplications

Exports

Exports

?RugsfessDotsFaneLeyscutsdulyarbsdateRetsNidieyryKnowki@@YGKU_SECURITY_DESCRIPTOR@@UYolkhaesGaitJeuxki@@IPCD@Z
KinaQuiddermangaWrenForeFutzFuzzKaneEffsWankex
LeetsentRimyGyroReadeftssitscutai
Liceyechprobo
LionrodejeesSynekinkMopyGuckFarlobasLateSpicWifeinnsal
Magsdonarex
TateTopoGoshZekslushMortfootLickMasaNickLullTogsbrrrEcus
WolfEyraWabsjambkinkiliaFameGeltFadoOxenPikiyakel

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bba5791bfec2ea54b1fd789b39266f99

Headers

DLL Characteristics

File Characteristics

Imports

secur32

oleaut32

rasapi32

shell32

msvcrt

wininet

shlwapi

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

Exports

Exports

Sections

.text Size: 136KB - Virtual size: 135KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 67KB - Virtual size: 66KB

.rsrc Size: 17KB - Virtual size: 17KB

.reloc Size: 29KB - Virtual size: 29KB

.text
Size: 136KB - Virtual size: 135KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 67KB - Virtual size: 66KB

.rsrc
Size: 17KB - Virtual size: 17KB

.reloc
Size: 29KB - Virtual size: 29KB