4ba83269555d9d4440078eaf76c70cd944aabd5d98e6261c78cb8485a73b886d

Sharing

Copy URL Twitter E-mail

General

Target

4ba83269555d9d4440078eaf76c70cd944aabd5d98e6261c78cb8485a73b886d
Size

171KB
MD5

060a43dbf7c83ceceebd84d624f97e9c
SHA1

d26f164847fe7cdc194f0e410564f66971ea1d07
SHA256

4ba83269555d9d4440078eaf76c70cd944aabd5d98e6261c78cb8485a73b886d
SHA512

89ea026be549c590931a5da600ff997a95450c339dd9324325a5124541c51ebe0811497d6da22ca225fa467d553d5125da1c14daa39eac9aad99a3ef36987996
SSDEEP

3072:5mU2Bp1B99qm6xfwqOtuKgDu1Cp0UCBMKEwzxsIYKj0No9:5m31B99qm61wqOtuKau120tBMKEUsrKj

Score

N/A

Malware Config

Signatures

Files

4ba83269555d9d4440078eaf76c70cd944aabd5d98e6261c78cb8485a73b886d
.exe windows x86

37f666883ef2150f211bfe4eee49de30

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc100u

ord1292
ord7624
ord7548
ord11784
ord13854
ord4744
ord2164
ord11476
ord11477
ord13381
ord7108
ord13387
ord8530
ord3684
ord3625
ord11864
ord7126
ord1739
ord14162
ord10976
ord13267
ord11469
ord7179
ord13570
ord13567
ord13572
ord13569
ord13571
ord13568
ord3416
ord5261
ord11228
ord11236
ord4086
ord7391
ord9498
ord11240
ord11209
ord11845
ord5118
ord9328
ord6140
ord890
ord6869
ord1312
ord12001
ord341
ord374
ord945
ord919
ord265
ord4355
ord11982
ord2184
ord4356
ord9525
ord13132
ord2773
ord12951
ord4805
ord12510
ord6711
ord8509
ord5199
ord5161
ord4802
ord11163
ord1006
ord11123
ord8179
ord10058
ord10412
ord3627
ord2981
ord2980
ord2756
ord5556
ord12606
ord2417
ord8277
ord8347
ord5828
ord381
ord457
ord948
ord12502
ord4358
ord1014
ord3752
ord5558
ord12610
ord2887
ord13047
ord7385
ord2418
ord14146
ord14148
ord14147
ord14145
ord14149
ord14132
ord14059
ord14060
ord8270
ord11081
ord3402
ord10937
ord13380
ord8112
ord11210
ord6247
ord10045
ord8393
ord2853
ord12724
ord11246
ord11244
ord1501
ord1508
ord1514
ord1512
ord1519
ord4388
ord4425
ord4396
ord4408
ord4404
ord4400
ord4430
ord4421
ord4392
ord4434
ord4413
ord4379
ord4383
ord4416
ord6080
ord5799
ord7967
ord4360
ord3397
ord8264
ord2746
ord1300
ord917
ord6318
ord337
ord7929
ord6243
ord11940
ord7529
ord11998
ord12186
ord11516
ord280
ord11997
ord5855
ord7973
ord6073
ord788
ord3428
ord3999
ord14067
ord3992
ord2665
ord13382
ord7109
ord13388
ord6156
ord10725
ord12557
ord5276
ord2339
ord11116
ord3491
ord2952
ord2951
ord2852
ord11159
ord4642
ord4923
ord5115
ord8483
ord4901
ord5143
ord4645
ord4794
ord4623
ord5325
ord6931
ord6932
ord6922
ord4792
ord7393
ord9333
ord8346
ord5883
ord897
ord2185
ord5801
ord3446
ord1987
ord5862
ord1934
ord2062
ord1298
ord266
ord296
ord1212
ord6145
ord1950
ord286
ord1479
ord4290
ord13133
ord2078
ord1296
ord6661
ord6870
ord2884
ord4512
ord902
ord1476
ord7006
ord2089

msvcr100

_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_controlfp_s
_invoke_watson
_onexit
_lock
__dllonexit
_unlock
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
wcscmp
printf
realloc
_errno
calloc
strtoul
_wsopen
_lseek
_close
_read
_filelength
_wsplitpath_s
wcsncmp
vswprintf_s
swprintf_s
_time64
swscanf_s
wcsncpy_s
wcsncat_s
wcscpy_s
_wcsicmp
_snwprintf
wcsrchr
memcpy
free
wcslen
wcschr
_swprintf
_wcsupr
wcsncpy
__CxxFrameHandler3
memset
malloc
fseek
ftell
_waccess
_wfopen
fgetws
fclose
wcsstr

kernel32

IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
SetUnhandledExceptionFilter
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
InterlockedExchange
GetCurrentThread
LocalAlloc
GetCurrentProcess
LocalFree
GetVersionExW
VerSetConditionMask
VerifyVersionInfoW
CreateProcessW
GetExitCodeProcess
CreateEventW
WaitForSingleObject
LoadLibraryExW
QueryPerformanceCounter
InitializeCriticalSection
SetErrorMode
CloseHandle
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
FreeLibrary
GetDateFormatW
lstrlenW
ActivateActCtx
GetLastError
DeactivateActCtx
SetLastError
GetProcAddress
GetModuleHandleW
LoadLibraryW
CreateThread
Sleep
lstrcpyW
lstrcatW
lstrcmpiW
InterlockedIncrement
InterlockedDecrement

user32

TranslateMessage
PeekMessageW
SendMessageW
GetClientRect
GetActiveWindow
GetLastActivePopup
GetKeyState
GetSystemMetrics
LoadIconW
DrawIconEx
DestroyIcon
GetParent
InvalidateRect
ScreenToClient
GetWindowRect
FillRect
InflateRect
CopyRect
DrawStateW
GetForegroundWindow
LoadStringW
UpdateWindow
MessageBoxW
ReleaseDC
GetDC
LoadImageW
EnableWindow
DispatchMessageW

gdi32

GetObjectW
DeleteObject
CreatePatternBrush
SetPixel
GetPixel
BitBlt
RoundRect
SelectObject
CreateCompatibleBitmap
CreatePen
GetDIBColorTable
GetTextExtentPoint32W
RealizePalette
GetDeviceCaps
CreateCompatibleDC
CreateHalftonePalette
CreatePalette
CreateSolidBrush

advapi32

RegDeleteKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
ImpersonateSelf
OpenThreadToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
RevertToSelf
FreeSid
OpenProcessToken

shell32

ShellExecuteW
SHChangeNotify

comctl32

_TrackMouseEvent
ord17

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 93KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

37f666883ef2150f211bfe4eee49de30

Headers

DLL Characteristics

File Characteristics

Imports

mfc100u

msvcr100

kernel32

user32

gdi32

advapi32

shell32

comctl32

Sections

.text Size: 54KB - Virtual size: 53KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 5KB - Virtual size: 7KB

.rsrc Size: 93KB - Virtual size: 96KB

.text
Size: 54KB - Virtual size: 53KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 5KB - Virtual size: 7KB

.rsrc
Size: 93KB - Virtual size: 96KB