ac7f4524d2a378f485a137241ab1d3f4be09ff555e89c0479e1aa0349e8ac0f5

Sharing

Copy URL

Twitter E-mail

General

Target

ac7f4524d2a378f485a137241ab1d3f4be09ff555e89c0479e1aa0349e8ac0f5
Size

256KB
MD5

6e36c0576447827fb1e95fd6db4b66d9
SHA1

5d7c5fca8fb528751218fbddc10c34ea74d79a1d
SHA256

ac7f4524d2a378f485a137241ab1d3f4be09ff555e89c0479e1aa0349e8ac0f5
SHA512

7714e1b260142e091e8f19f53557b7157d7a70abec005695e45fa37ba9d24ac54f04092f7bb7f247c8bfe9c48b8bd6c65701741302ecab5ef9b4c0c1605cde8d
SSDEEP

6144:PSQteu9YbISqOjzixQdHRfC1Ykc9ygxu/xzD:PSQPSqaZ2SIn

Score

N/A

Malware Config

Signatures

Files

ac7f4524d2a378f485a137241ab1d3f4be09ff555e89c0479e1aa0349e8ac0f5
.exe windows x86

1c76c6f2c68b2f0d66383345abf6d3ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord4129
ord6662
ord540
ord941
ord800
ord5710
ord858
ord535
ord4277
ord922
ord5683
ord2841
ord2448
ord5450
ord5834
ord6394
ord924
ord2044
ord2107
ord4160
ord3584
ord3643
ord696
ord543
ord394
ord803
ord860
ord2614
ord6283
ord6282
ord537
ord6418
ord2393
ord5572
ord2915
ord1263
ord6307
ord909
ord4167
ord521
ord5628
ord2818
ord2820
ord548
ord4185
ord1166
ord4278
ord2763
ord2764
ord6055
ord1776
ord5290
ord4837
ord4424
ord3742
ord567
ord818
ord4275
ord6442
ord1233
ord5440
ord6383
ord3402
ord3721
ord795
ord1146
ord1168
ord5875
ord926
ord536
ord3698
ord654
ord686
ord765
ord341
ord384
ord2370
ord2302
ord3571
ord2452
ord2096
ord6241
ord6334
ord939
ord2827
ord3811
ord6215
ord4224
ord4219
ord2581
ord4401
ord1771
ord6366
ord2413
ord2024
ord3639
ord699
ord692
ord397
ord3626
ord2414
ord3803
ord2859
ord4123
ord4188
ord2753
ord2754
ord4124
ord4976
ord4299
ord640
ord6654
ord283
ord1640
ord323
ord3797
ord613
ord5789
ord289
ord3089
ord5981
ord5593
ord3438
ord912
ord5858
ord2061
ord6876
ord2582
ord4402
ord3370
ord3640
ord693
ord6888
ord6007
ord3998
ord3996
ord4284
ord2862
ord3286
ord6675
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord2528
ord2621
ord1134
ord5161
ord1247
ord755
ord5785
ord470
ord3258
ord1265
ord2233
ord665
ord1979
ord5442
ord5186
ord354
ord940
ord1908
ord1690
ord5288
ord4439
ord2054
ord4431
ord771
ord1008
ord496
ord4259
ord1768
ord4715
ord4204
ord2152
ord1232
ord1175
ord6199
ord5849
ord2919
ord3663
ord2379
ord2864
ord6880
ord6453
ord4710
ord6374
ord5163
ord2385
ord5241
ord4407
ord1775
ord4078
ord6052
ord2514
ord4998
ord4854
ord4377
ord5265
ord4358
ord4948
ord4742
ord4905
ord5160
ord5162
ord6197
ord3092
ord1641
ord3619
ord4258
ord768
ord489
ord1907
ord825
ord823
ord491
ord4425
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4835
ord3798
ord5287
ord4353
ord2639
ord955
ord2860
ord1199
ord3126
ord1576
ord5651
ord541
ord5608
ord1799
ord6139
ord6142
ord6140
ord5857
ord5860
ord5602
ord5606
ord5603
ord538
ord287
ord500
ord610
ord772
ord3579
ord3353
ord6883
ord290
ord614
ord6143
ord801
ord350
ord3613
ord6467
ord2727
ord3616
ord3127
ord2730
ord4003
ord4226
ord2729
ord743
ord446

msvcrt

__set_app_type
__p__commode
__p__fmode
_except_handler3
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
atol
_beginthreadex
_controlfp
memset
rand
_purecall
strlen
_mbsicmp
strchr
memcmp
__CxxFrameHandler
sprintf
_mbscmp
memcpy
_splitpath
_mbsrchr
_setmbcp
memmove

kernel32

OpenEventA
TerminateThread
SetThreadPriority
WaitForSingleObject
OpenMutexA
CreateMutexA
ReleaseMutex
QueryPerformanceFrequency
QueryPerformanceCounter
DeleteFileA
lstrcpynA
Sleep
GetModuleFileNameA
SetFilePointer
SetEndOfFile
GetFileSize
GetLastError
HeapAlloc
WriteFile
GetProcessHeap
HeapFree
ResetEvent
CreateFileA
CloseHandle
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FindFirstFileA
lstrcmpA
FindNextFileA
FindClose
SetEvent
CopyFileA
SetFileAttributesA
CreateEventA
CreateDirectoryA
GetFileAttributesA
lstrcpyA
GetProcAddress
LoadLibraryA
FreeLibrary
GetModuleHandleA
GetStartupInfoA
WaitForMultipleObjects
lstrlenA
MultiByteToWideChar
GetTempFileNameA
GetTempPathA
WideCharToMultiByte
lstrlenW

user32

GetDC
KillTimer
LoadCursorA
GetSysColor
SetTimer
DefWindowProcA
BringWindowToTop
SetForegroundWindow
LoadIconA
GetWindowTextA
EnumWindows
FillRect
InvalidateRect
DrawStateA
DestroyIcon
CopyRect
SetRect
DrawFocusRect
PtInRect
ReleaseDC
SendMessageA
LoadImageA
SetCursor
ShowCursor
GetMessagePos
ScreenToClient
GetClientRect
OffsetRect
GetWindowRect
GetDesktopWindow
IsWindow
PostMessageA
EnableWindow
GetParent

gdi32

CreateCompatibleDC
GetStockObject
CreateFontIndirectA
BitBlt
GetTextMetricsA
GetObjectA
GetCurrentObject
DeleteObject

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

SHFileOperationA
ShellExecuteA

comctl32

ImageList_GetIconSize
ImageList_GetIcon
ord17
ImageList_ReplaceIcon
ImageList_AddMasked

ole32

StgCreateDocfile
CoTaskMemAlloc
CoCreateInstance
CoInitialize
StgOpenStorage
CoCreateGuid
CoTaskMemFree

wininet

InternetReadFileExA
InternetErrorDlg
HttpQueryInfoA
HttpAddRequestHeadersA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetCloseHandle
InternetOpenA
InternetSetStatusCallback

wsock32

htonl
ntohl

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1c76c6f2c68b2f0d66383345abf6d3ee

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

shell32

comctl32

ole32

wininet

wsock32

Sections

.text Size: 104KB - Virtual size: 103KB

.rdata Size: 36KB - Virtual size: 33KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 108KB - Virtual size: 107KB

.text
Size: 104KB - Virtual size: 103KB

.rdata
Size: 36KB - Virtual size: 33KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 108KB - Virtual size: 107KB