ac735e654d3d1b16bcaf7b4e3226b84320250d7eb2186a80ddd5c8bee07699c4

Sharing

Copy URL

Twitter E-mail

General

Target

ac735e654d3d1b16bcaf7b4e3226b84320250d7eb2186a80ddd5c8bee07699c4
Size

384KB
MD5

63531e12073407ef7ecbd75c974c82fc
SHA1

a5ff7b44a037eb0809fa3d8897888ab554be914d
SHA256

ac735e654d3d1b16bcaf7b4e3226b84320250d7eb2186a80ddd5c8bee07699c4
SHA512

8fd5a04013c38da03835e1eb41ef2c84316df6a0d9882af05b1f5b010ac7a6c076ae10364fb3a9e7f218695544c60667da4c13fe9d8949b86d55b168d2e1dea9
SSDEEP

6144:ICTJ2AMutoRKFLOW3xLasZzZHJTdnqKVIQeS5h9n4xoXgkYzf0FiQGEgiX:Hl2AbtoRKNOdsZtHtlR2QewseQk4cDg

Score

N/A

Malware Config

Signatures

Files

ac735e654d3d1b16bcaf7b4e3226b84320250d7eb2186a80ddd5c8bee07699c4
.dll windows x86

7f21ad44f845fae25d0c0deed68b3f2d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

tolower
strcat
qsort
putc
memset
memmove
memcpy
malloc
iswspace
iswpunct
iswdigit
iswalpha
free
asin
_wcsset
_vsnwprintf
_vsnprintf
_unlock
_stricmp
_onexit
_lock
_isnan
_initterm
_i64toa
_finite
_controlfp
_beep
_amsg_exit
__dllonexit
__CxxFrameHandler
_XcptFilter
_CxxThrowException
_CIsqrt
_CIsin
_CIcos
_CIatan2
_CIatan
_CIasin
_CIacos

kernel32

_llseek
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjects
WaitCommEvent
VirtualAlloc
UnhandledExceptionFilter
TransactNamedPipe
TerminateProcess
SizeofResource
CloseHandle
CreateFileA
CreateMutexA
CreateThread
DebugBreak
DeleteAtom
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
ExitProcess
FindResourceA
FindResourceW
FlushViewOfFile
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetFileSizeEx
GetFullPathNameW
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetTickCount
GetVersion
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsProcessorFeaturePresent
IsValidCodePage
LeaveCriticalSection
LoadLibraryA
LoadResource
LockResource
MapViewOfFileEx
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
RtlUnwind
SetFilePointerEx
GetProcessPriorityBoost

advapi32

LsaClearAuditLog
RegEnumKeyExA
RegQueryValueExA
RegCloseKey

gdi32

SetBkColor
SelectObject
SelectClipPath
MoveToEx
GetTextMetricsW
GetTextMetricsA
GetObjectW
GetObjectA
GetGlyphOutlineA
SetBkMode
GetCharacterPlacementW
ExtTextOutW
ExtTextOutA
DeleteObject
DeleteDC
CreateFontIndirectW
CreateFontIndirectA
CreateDIBSection
CreateCompatibleDC
SetMapMode
SetTextAlign
TranslateCharsetInfo
GetFontLanguageInfo

ole32

CreateStreamOnHGlobal

Exports

Exports

Bufferiv
ConcatenateMeshes
EnumerateGuids
GetBufferf
GetFirstRow
MatrixAffineTransformation
SaveFileMemory
Vec2Hermite

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f21ad44f845fae25d0c0deed68b3f2d

Headers

File Characteristics

Imports

msvcrt

kernel32

advapi32

gdi32

ole32

Exports

Exports

Sections

.text Size: 66KB - Virtual size: 65KB

.rdata Size: 179KB - Virtual size: 178KB

.data Size: 70KB - Virtual size: 71KB

.rsrc Size: 64KB - Virtual size: 64KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 66KB - Virtual size: 65KB

.rdata
Size: 179KB - Virtual size: 178KB

.data
Size: 70KB - Virtual size: 71KB

.rsrc
Size: 64KB - Virtual size: 64KB

.reloc
Size: 3KB - Virtual size: 3KB