6f1c4c4baf7d5cff08b26d431b4f17a21cb0aa4056f57fde83d2a415395eb82e

Sharing

Copy URL Twitter E-mail

General

Target

6f1c4c4baf7d5cff08b26d431b4f17a21cb0aa4056f57fde83d2a415395eb82e
Size

532KB
MD5

68686f225fb557027df5f6244cbf56e0
SHA1

e915823b08f7858af84aa57e1cea169f5de3ff07
SHA256

6f1c4c4baf7d5cff08b26d431b4f17a21cb0aa4056f57fde83d2a415395eb82e
SHA512

a1ffefbed18c584ba4bb99bb31d3c6e811fab3b0f61938e14ce1570ff873ad561d9819e8a032c71141b7d338e4f2587c348212e484beebfdf579c6dd1001b017
SSDEEP

12288:y2b1AqSZomgm5pWVvsii1Y7Mz4FYj0eMeTsusg:yMWam54vPi1sMzV0eMeT7s

Score

N/A

Malware Config

Signatures

Files

6f1c4c4baf7d5cff08b26d431b4f17a21cb0aa4056f57fde83d2a415395eb82e
.exe windows x86

e96d93596d0455893bcd83d617641c35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetProcAddress
CloseHandle
GetExitCodeProcess
WaitForMultipleObjects
WaitForSingleObject
TerminateThread
SetEvent
WideCharToMultiByte
lstrlenW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
CreateEventW
RaiseException
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
lstrcmpiW
InterlockedIncrement
InterlockedDecrement
FreeLibrary
LoadLibraryExW
GetCurrentThreadId
CreateThread
LocalFree
GetCommandLineW
ReleaseMutex
CreateMutexW
FlushInstructionCache
GetCurrentProcess
SetLastError
VirtualQuery
LoadLibraryW
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
GetSystemTimeAsFileTime
GetStartupInfoW
ExitThread
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GlobalFree
GlobalAlloc
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
InterlockedCompareExchange
GetProcessHeap
GetModuleFileNameW
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
FormatMessageA
ExpandEnvironmentStringsA
GetStdHandle
GetFileType
PeekNamedPipe
GetLocalTime
CreateDirectoryW
lstrlenA
MultiByteToWideChar
Sleep
GetTickCount
FindFirstFileW
DeleteFileW
FindNextFileW
GetLastError
ReadFile
GetSystemDirectoryA
LoadLibraryA
SleepEx
GetDriveTypeA
SetEndOfFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTimeZoneInformation
CreateFileA
CreateFileW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FindFirstFileA
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapCreate
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetStringTypeW
ExitProcess
GetStringTypeA
GetCurrentDirectoryA
FindClose
GetFileAttributesW
GetVersionExW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
HeapSize
InitializeCriticalSection
GetFullPathNameA
FlushFileBuffers
SetStdHandle
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetConsoleMode
GetConsoleCP
WriteFile
SetFilePointer

user32

PeekMessageW
MsgWaitForMultipleObjects
GetDesktopWindow
LoadIconW
LoadImageW
CallWindowProcW
GetDoubleClickTime
DestroyMenu
CreatePopupMenu
GetCursorPos
AppendMenuW
TrackPopupMenu
PostQuitMessage
LoadCursorW
GetClassInfoExW
KillTimer
PostThreadMessageW
GetMessageW
DispatchMessageW
TranslateMessage
CharUpperW
RegisterWindowMessageW
CharNextW
SetTimer
RegisterClassExW
CreateWindowExW
GetWindowLongW
DefWindowProcW
PostMessageW
IsWindow
SetWindowLongW
DestroyWindow
UnregisterClassA

advapi32

RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegQueryInfoKeyW

shell32

Shell_NotifyIconW
CommandLineToArgvW
ShellExecuteExW
SHGetFolderPathW

ole32

CoRegisterClassObject
CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
CoUninitialize
CoInitialize
CoTaskMemRealloc
CoRevokeClassObject
CoTaskMemFree

oleaut32

SysAllocStringLen
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SysStringLen
VarUI4FromStr
SysStringByteLen
SysAllocStringByteLen
SysAllocString
VariantClear
VariantInit
SysFreeString

wininet

DeleteUrlCacheEntryW

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

urlmon

URLDownloadToFileW
URLDownloadToCacheFileW

wintrust

WinVerifyTrust

crypt32

CryptMsgClose
CertFreeCertificateContext
CertGetNameStringW
CertCreateCertificateContext
CryptMsgGetParam
CertCloseStore
CryptQueryObject

ws2_32

sendto
getservbyport
gethostbyaddr
getservbyname
htonl
inet_ntoa
gethostbyname
inet_addr
WSASetLastError
socket
connect
recvfrom
getpeername
getsockopt
htons
bind
ntohs
getsockname
send
recv
WSAGetLastError
closesocket
WSAStartup
WSACleanup
listen
accept
select
__WSAFDIsSet
ioctlsocket
gethostname
setsockopt

Exports

Exports

curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_maprintf
curl_mfprintf
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape

Sections

.text
Size: 348KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��pPC
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e96d93596d0455893bcd83d617641c35

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

wininet

version

urlmon

wintrust

crypt32

ws2_32

Exports

Exports

Sections

.text Size: 348KB - Virtual size: 344KB

.rdata Size: 76KB - Virtual size: 74KB

.data Size: 8KB - Virtual size: 16KB

.rsrc Size: 12KB - Virtual size: 8KB

��pPC Size: 84KB - Virtual size: 84KB

.text
Size: 348KB - Virtual size: 344KB

.rdata
Size: 76KB - Virtual size: 74KB

.data
Size: 8KB - Virtual size: 16KB

.rsrc
Size: 12KB - Virtual size: 8KB

��pPC
Size: 84KB - Virtual size: 84KB