b89c853ec072c7b60a6f35cfeee4c8472763ddbdfb5f21faf91954fb9d4ed1b5

Sharing

Copy URL Twitter E-mail

General

Target

b89c853ec072c7b60a6f35cfeee4c8472763ddbdfb5f21faf91954fb9d4ed1b5
Size

256KB
MD5

554d806d8b62b55e78df08344b496b6e
SHA1

cca355aa356e6982cbf250304a40645aa34aed2a
SHA256

b89c853ec072c7b60a6f35cfeee4c8472763ddbdfb5f21faf91954fb9d4ed1b5
SHA512

9d7d967f35cd0c8e4b759ff3100771ab8c80f11c0efd634499cfa8cd1e0542ce7e70b0addc336633edf0bf908cb6396dd18ab8a79953fc65d9800989d3f3447e
SSDEEP

6144:as7zZSdW3DtqciZ7jw7KgWRr2VYG4LaMzbpJJB37ZHCoQjdU:asvoWztqh7jtyVKWi/0J

Score

N/A

Malware Config

Signatures

Files

b89c853ec072c7b60a6f35cfeee4c8472763ddbdfb5f21faf91954fb9d4ed1b5
.exe windows x86

9c71ac542d66540a38fce479af62f856

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

NdrCorrelationPass
NDRSContextUnmarshall
I_RpcRequestMutex
NdrSimpleStructFree
RpcRevertToSelf
NdrConformantArrayFree
NdrNonEncapsulatedUnionMarshall
RpcServerUseProtseqW
NdrConformantVaryingArrayBufferSize
RpcSmSetClientAllocFree

secur32

TranslateNameW
AcquireCredentialsHandleW
EncryptMessage
DeleteSecurityContext
SetContextAttributesA
ImportSecurityContextA
MakeSignature
LsaRegisterLogonProcess
InitSecurityInterfaceA

oleaut32

VarCyFromR4
VarI2FromBool
VarUI4FromDate
VarBoolFromUI8
VarI8FromDate
VarI8FromUI2
VarBoolFromUI2
VarCyFromUI2
VarUI1FromUI2
SysReAllocStringLen

rasapi32

RasGetCredentialsA
RasSetSubEntryPropertiesA
RasEnumConnectionsW
RasDeleteEntryA
RasGetEapUserDataW
RasGetEapUserIdentityA
RasGetProjectionInfoW
RasEnumAutodialAddressesA
RasGetCountryInfoW

ole32

OleLockRunning
StgIsStorageILockBytes
OleCreateMenuDescriptor
CoUninitialize
CoInitialize
OleCreateEmbeddingHelper
CoInstall
StgCreateDocfileOnILockBytes
WriteClassStg

shell32

ord688
ord524
Shell_NotifyIconW
ord191
SHParseDisplayName
DragQueryFileA
ShellExecuteExA
ord137

imm32

ImmGetCandidateListCountA
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmRequestMessageW
ImmRegisterWordA
ImmGetDescriptionW
ImmSetOpenStatus
ImmSetCompositionStringA
ImmEscapeW
ImmGetCompositionStringA

glu32

gluTessCallback
gluErrorString
gluTessNormal
gluTessVertex
gluTessProperty
gluNurbsCallback
gluScaleImage
gluNextContour
gluCylinder
gluTessBeginPolygon

opengl32

glIndexfv
glTexImage2D
glCopyTexImage1D
glLightModeliv
glVertex4iv
glVertex4f
wglGetCurrentContext
glClearColor
glClear
glVertex3d

msvcrt

toupper
exit
_time64
sscanf
isxdigit
_mbctoupper
isspace
sprintf

wininet

CommitUrlCacheEntryA
FtpOpenFileA
HttpQueryInfoW
HttpSendRequestW
FtpFindFirstFileA
HttpOpenRequestA
InternetOpenA
HttpSendRequestA

shlwapi

ChrCmpIA
PathIsDirectoryA
PathIsRootW
PathFindExtensionW
ord158
PathAddBackslashA
ord155
PathBuildRootW
PathIsLFNFileSpecA
PathIsURLA
ChrCmpIW
PathIsRelativeA

comctl32

ImageList_Destroy
ImageList_SetIconSize
CreatePropertySheetPageW
DestroyPropertySheetPage
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_Remove
ImageList_Draw

kernel32

GetConsoleTitleA
GetCurrentProcess
UnhandledExceptionFilter
GetConsoleMode
GetDriveTypeW
VirtualQuery
GetSystemInfo
CreateIoCompletionPort
GetCurrentThreadId
GetDiskFreeSpaceExW
GetTempPathA
GetLogicalDriveStringsW
TerminateProcess
GetUserDefaultLCID
SetUnhandledExceptionFilter
GetModuleHandleA

gdi32

GetPixel
GetStockObject
GetRgnBox
CreateDCA
RealizePalette
GetNearestPaletteIndex

comdlg32

PrintDlgExW
PrintDlgA
PrintDlgW
ChooseFontA
FindTextW
PrintDlgExA
ChooseColorW
ChooseColorA
GetOpenFileNameW
FindTextA

advapi32

SetKernelObjectSecurity
ObjectPrivilegeAuditAlarmA
CryptEnumProviderTypesA
CryptGetHashParam
RegisterTraceGuidsW
ControlService
SetFileSecurityA
SetFileSecurityW
ImpersonateSelf
DestroyPrivateObjectSecurity

Exports

Exports

?LilyLootSyphnevefoamWore@@YGEPCMUtagLOGBRUSH@@UMallviolZekswe@@ACMEPCJ@Z
BotssewnIdleKhetDautreppNeneCakyohmsslimJaupfoxyboffKerbKnowmaw
DangBedsPixyYurtWairwapas
EasyalpsoathWastTeamWhoaWandmootprayBrawCohoAverUlanfeu
EticDaffcardBatsRheaBeduHairOradWoosmacewoldZoomPimapan
Pearalpem
PestDoerRugsgleeRillHutsfileThusPinkKhetdoteSicevangPecsgos
ToonpikaHartjossbodsaxleProwhuedKoanYangTeasMowsoximnardbutki

Sections

.iat
Size: - Virtual size: 512B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 233KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 512B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9c71ac542d66540a38fce479af62f856

Headers

DLL Characteristics

File Characteristics

Imports

rpcrt4

secur32

oleaut32

rasapi32

ole32

shell32

imm32

glu32

opengl32

msvcrt

wininet

shlwapi

comctl32

kernel32

gdi32

comdlg32

advapi32

Exports

Exports

Sections

.iat Size: - Virtual size: 512B

.rdata Size: 233KB - Virtual size: 233KB

.rsrc Size: - Virtual size: 512B

.reloc Size: 22KB - Virtual size: 21KB

.iat
Size: - Virtual size: 512B

.rdata
Size: 233KB - Virtual size: 233KB

.rsrc
Size: - Virtual size: 512B

.reloc
Size: 22KB - Virtual size: 21KB