f61aef53561ca4ecb8a05762aed416d54aeae7ad88f16e8e22df182ba30d8290

Sharing

Copy URL Twitter E-mail

General

Target

f61aef53561ca4ecb8a05762aed416d54aeae7ad88f16e8e22df182ba30d8290
Size

306KB
MD5

289281df2a41a59bc8e8b6ae4e21ab98
SHA1

5e5de7a1cbc572103507082e081ee8f346184265
SHA256

f61aef53561ca4ecb8a05762aed416d54aeae7ad88f16e8e22df182ba30d8290
SHA512

b63f0fdd1ab1eac22de78a5a599caf00edddb1ddf01fd136314ce04470559ebfbc8ddc9062b3193d14b23d27d60a3c3c810ac4689d2e2b68f4761756b6bac5ff
SSDEEP

6144:lV0qLI3Rsz/9FB++XRAu5A8fxZEOHHrpm1XUZLxEZEOHHrpm1XUZLxqMNq:lV0t3RC/97SuT/tLpm1EwtLpm1E29

Score

N/A

Malware Config

Signatures

Files

f61aef53561ca4ecb8a05762aed416d54aeae7ad88f16e8e22df182ba30d8290
.exe windows x86

4e1a86783cfeae12a3f41abcfaac0918

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegGetValueW
RegCloseKey

kernel32

GetNativeSystemInfo
GetPhysicallyInstalledSystemMemory
GetModuleHandleW
FindClose
FindNextFileW
FindFirstFileW
RemoveDirectoryW
DeleteFileW
SetFileAttributesW
SetFilePointer
CreateFileW
ReadFile
GetLastError
CreateDirectoryExW
GetSystemWow64DirectoryW
SetCurrentDirectoryW
GetComputerNameW
FreeLibrary
EnterCriticalSection
LoadLibraryW
GetFileSize
CreateEventW
GlobalUnlock
GlobalLock
GlobalAlloc
GetCurrentDirectoryW
GetCommandLineW
RegisterApplicationRestart
HeapSetInformation
MultiByteToWideChar
GetDateFormatW
GetTimeFormatW
GetLocaleInfoW
GetNumberFormatW
CreateThread
ResetEvent
DeleteCriticalSection
SetEvent
TerminateThread
CloseHandle
GetTempPathW
GetTickCount
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
LocalAlloc
InitializeCriticalSection
WaitForSingleObject
GetVersionExW
DnsHostnameToComputerNameW
LocalFree
lstrlenW
LeaveCriticalSection
FormatMessageW
UnhandledExceptionFilter

gdi32

CreateSolidBrush
GetObjectW
CreateFontIndirectW
TextOutW
EndPage
EndDoc
StartPage
StartDocW
GetTextExtentPoint32W
GetDeviceCaps
CreateFontW
SetTextColor

user32

SetClassLongW
SetRect
BeginPaint
GetSysColor
FillRect
EndPaint
SetFocus
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetSubMenu
SetMenuItemInfoW
GetFocus
UpdateWindow
ScreenToClient
CopyRect
GetDCEx
DrawFocusRect
ReleaseDC
PtInRect
SetCursor
ReleaseCapture
LoadIconW
SetCapture
GetClientRect
IsWindowEnabled
RedrawWindow
SetTimer
EndDialog
GetWindowTextW
GetDlgItem
SendMessageW
EnableWindow
SetWindowTextW
CheckRadioButton
SetDlgItemTextW
IsDlgButtonChecked
LoadStringW
KillTimer
DialogBoxParamW
PostMessageW
MessageBoxW
SetWindowPlacement
SystemParametersInfoW
CheckDlgButton
InflateRect
OffsetRect
MoveWindow
LoadAcceleratorsW
SetMenu
GetClipboardData
LoadMenuW
IsWindowVisible
IsClipboardFormatAvailable
PostQuitMessage
DestroyAcceleratorTable
DispatchMessageW
TranslateMessage
IsDialogMessageW
TranslateAcceleratorW
GetMessageW
CreateDialogParamW
LoadCursorW
ShowWindow
GetWindowRect
InvalidateRect

mfc42u

ord6565
ord826
ord269
ord1173
ord1240
ord1571
ord600
ord6867
ord2559
ord5790
ord6168
ord5871
ord5785
ord640
ord6921
ord6919
ord5781
ord2755
ord5597
ord6563
ord2757
ord5618
ord802
ord542
ord394
ord698
ord4182
ord5588
ord911
ord396
ord860
ord323
ord1633
ord6466
ord2442
ord825
ord861
ord858
ord5568
ord2910
ord800
ord540
ord2606
ord538
ord4124
ord913
ord1165
ord535
ord4155
ord823
ord922
ord5706
ord2756
ord1594
ord2810
ord940
ord4184
ord6278
ord941
ord398
ord700
ord2809
ord501
ord909
ord773
ord696
ord5586
ord3430
ord5596
ord1083
ord4180
ord5617
ord998
ord2819
ord6928
ord1184
ord834
ord6218
ord6279
ord2768
ord5852
ord4197
ord925
ord927
ord2805
ord4199
ord3432
ord3658
ord349
ord3608
ord3121
ord5647
ord2385
ord1560
ord537
ord1172
ord3621
ord2406
ord268
ord3614
ord1634
ord352
ord942
ord2813
ord3806
ord2776

msvcrt

_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_controlfp
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_vsnwprintf
__CxxFrameHandler3
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_wcsicoll
_wtoi
_wcsicmp
memcpy
_purecall
malloc
swprintf_s
wcstol
_callnewh
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
??0exception@@QAE@XZ
wcsncpy_s
_wtol
_ftol2_sse
wcstod
_wcsupr
free
_CxxThrowException
_ftol2
wcstoul
iswalpha
memset

atl

ord30

ntdll

WinSqmAddToStream

oleaut32

SysFreeString
SysAllocString
VariantClear
VariantChangeType
VariantInit
SysStringLen
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SysAllocStringLen

ole32

StringFromCLSID
CoTaskMemFree
CoInitializeSecurity
CoCreateInstance
CoCreateGuid
CoInitialize
CoUninitialize

shlwapi

StrFormatByteSizeEx

setupapi

SetupIterateCabinetW

comdlg32

GetOpenFileNameW
PrintDlgExW
GetSaveFileNameW

shell32

CommandLineToArgvW

comctl32

InitCommonControlsEx

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4e1a86783cfeae12a3f41abcfaac0918

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

mfc42u

msvcrt

atl

ntdll

oleaut32

ole32

shlwapi

setupapi

comdlg32

shell32

comctl32

Sections

.text Size: 137KB - Virtual size: 136KB

.data Size: 1KB - Virtual size: 20KB

.rsrc Size: 147KB - Virtual size: 146KB

.reloc Size: 19KB - Virtual size: 37KB

.text
Size: 137KB - Virtual size: 136KB

.data
Size: 1KB - Virtual size: 20KB

.rsrc
Size: 147KB - Virtual size: 146KB

.reloc
Size: 19KB - Virtual size: 37KB