30c7accc1a56b86e2c818cc800faf582bcdbe77013d125414c3223bae1d57c42

Sharing

Copy URL Twitter E-mail

General

Target

30c7accc1a56b86e2c818cc800faf582bcdbe77013d125414c3223bae1d57c42
Size

168KB
MD5

62051609857614f17f79c68de9038d4f
SHA1

a01f0ff1d27dfb4dd105ca482703040959e0ef47
SHA256

30c7accc1a56b86e2c818cc800faf582bcdbe77013d125414c3223bae1d57c42
SHA512

cd191ad1b0ca95495b4f9c3b8f9d054d70826830d9f9186a77705a4ca31a8995a5dac66c4a92085b87d8b128fab0d594965141563e9873b3373a07275f4e9c91
SSDEEP

3072:f3u9PqzsXvhCCBBjPRYUxIksXNO4l9qheTxu4csqy5veS/iOfR3nuP:29Pqzs/Yfohx4c7yePOxY

Score

N/A

Malware Config

Signatures

Files

30c7accc1a56b86e2c818cc800faf582bcdbe77013d125414c3223bae1d57c42
.exe windows x86

c77c124efcb6dfd9bb585152333a1d9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord5952
ord5950
ord5801
ord3096
ord3094
ord3090
ord3091
ord1782
ord1778
ord5071
ord5068
ord5763
ord2887
ord2778
ord3082
ord3353
ord3579
ord724
ord424
ord6605
ord3626
ord3663
ord2414
ord4034
ord3797
ord3138
ord2860
ord1641
ord5981
ord6055
ord4078
ord1776
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord3798
ord4837
ord4054
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord3742
ord6197
ord6379
ord2135
ord567
ord818
ord4299
ord3706
ord6880
ord5290
ord4275
ord2379
ord2688
ord764
ord1233
ord3028
ord2251
ord4046
ord2145
ord2144
ord6225
ord5231
ord5247
ord4601
ord824
ord826
ord3005
ord4021
ord4020
ord1576
ord4003
ord1153
ord1168
ord1232
ord537
ord540
ord2614
ord2915
ord5572
ord860
ord858
ord535
ord800
ord539
ord1601
ord2725
ord2621
ord2864
ord823
ord6442
ord6215
ord825
ord561
ord815
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord4441
ord4673

msvcrt

_controlfp
?terminate@@YAXXZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__CxxFrameHandler
atol
??1type_info@@UAE@XZ
_setmbcp
_CxxThrowException
_strnicmp
_ltoa
time
fclose
fputs
fopen
strncpy
_mbsnbcpy
strstr
strncmp
_stat
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
sprintf

kernel32

GetEnvironmentVariableA
LoadLibraryA
GetProcAddress
FreeLibrary
ExitProcess
CloseHandle
OpenMutexA
InterlockedExchange
GetTimeZoneInformation
GetSystemDirectoryA
GetFileTime
GetVolumeInformationA
SetErrorMode
GetModuleHandleA
GetStartupInfoA
CreateFileA
GetLastError
CreateMutexA
GetVersionExA
GetCurrentProcessId
GetTempPathA
SetEnvironmentVariableA
lstrcpyA
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
CreateSemaphoreA
ReleaseSemaphore
Sleep
WaitForSingleObject
LocalFree

user32

ScreenToClient
GetWindowRect
SetParent
GetClientRect
IsZoomed
BroadcastSystemMessage
ClientToScreen
wsprintfA
SetForegroundWindow
GetSystemMetrics
SetRect
AdjustWindowRectEx
EnableWindow
SetFocus
SetCapture
ReleaseCapture
EqualRect
SendMessageA
SetWindowRgn
SystemParametersInfoA
PtInRect
LoadCursorA
CopyRect
OffsetRect
UpdateWindow
RegisterWindowMessageA
PostMessageA
FindWindowA

gdi32

SetROP2
Rectangle
DeleteDC
OffsetRgn
CreateRectRgnIndirect
CreateRectRgn
CombineRgn
CreateDCA

advapi32

RegSetValueExA
RegEnumKeyExA
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

ole32

CoInitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize

oleaut32

VariantClear
SysFreeString
VariantInit
SysAllocString

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.drdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c77c124efcb6dfd9bb585152333a1d9e

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Sections

.text Size: 48KB - Virtual size: 46KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 20KB - Virtual size: 18KB

.rsrc Size: 24KB - Virtual size: 22KB

.drdata Size: 60KB - Virtual size: 60KB

.text
Size: 48KB - Virtual size: 46KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 20KB - Virtual size: 18KB

.rsrc
Size: 24KB - Virtual size: 22KB

.drdata
Size: 60KB - Virtual size: 60KB