0e1cf80fa01874d3a75a5742d60b47f3095396bf2f7e84533242f0aa3a908f77

Sharing

Copy URL

Twitter E-mail

General

Target

0e1cf80fa01874d3a75a5742d60b47f3095396bf2f7e84533242f0aa3a908f77
Size

335KB
MD5

1d2f19e6de40e227272aef52c19a1b00
SHA1

273e96049da70394dbf155534ca6f92d0cf06b8f
SHA256

0e1cf80fa01874d3a75a5742d60b47f3095396bf2f7e84533242f0aa3a908f77
SHA512

d3326b2fff35ca950e2e66d636b0247b607824c3910085e2ddacc0f92874ccd161054d614336b7062c931bd96f7432794fc197b8f57f3f875556283ce66020a5
SSDEEP

6144:0VRUlp3rz/obmREyYjlC1xMP1A8FOrG0e3pRugZsNilHOfPf8KHl3QMIJoOeB5F+:hPnoyREyYjbSvr3e73Zsw6fxHlgfoTXI

Score

N/A

Malware Config

Signatures

Files

0e1cf80fa01874d3a75a5742d60b47f3095396bf2f7e84533242f0aa3a908f77
.exe windows x86

c1200e37254c7a08d02a36b65c45df4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLangID
OpenProcess
GetProcessHeap
HeapAlloc
HeapFree
ReleaseMutex
CreateMutexW
CreateDirectoryW
CopyFileW
DeleteFileW
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryExW
ResumeThread
GetFileSize
FindNextFileW
GetWindowsDirectoryW
GetTempPathW
SetFileAttributesW
GetFullPathNameW
GetComputerNameW
GetLongPathNameW
MoveFileW
InterlockedExchangeAdd
GetPrivateProfileStringW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
GetThreadLocale
GetLocaleInfoA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
GetVersionExA
Sleep
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
GetFileAttributesW
LoadLibraryA
ExpandEnvironmentStringsW
FindClose
SetEndOfFile
DeleteCriticalSection
SetFilePointer
LoadLibraryW
FindFirstFileW
GetFileSizeEx
InitializeCriticalSection
WriteFile
GetACP
CreateFileW
GetModuleFileNameW
ReadFile
OpenFileMappingW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
ResetEvent
GetLastError
InterlockedExchange
FindResourceW
GetVersionExW
lstrlenW
WaitForSingleObject
GetVolumeInformationW
CreateEventW
lstrcpyW
WaitForMultipleObjects
FreeLibrary
GetProcAddress
SetEvent
EnterCriticalSection
GetCurrentThreadId
SetLastError
RaiseException
CloseHandle
FlushInstructionCache
MoveFileExW
GetModuleHandleW
LeaveCriticalSection
GetCurrentProcess
GetTempFileNameW

user32

UnregisterClassA
GetForegroundWindow
SetPropW
GetClassLongW
GetPropW
RemovePropW
DialogBoxParamW
TranslateMessage
GetClassInfoExW
DestroyIcon
DestroyWindow
DrawTextW
GetSystemMetrics
DrawIcon
KillTimer
ReleaseDC
AppendMenuW
LoadIconW
GetMenuState
CreatePopupMenu
DestroyMenu
RegisterWindowMessageW
CreateWindowExW
wsprintfW
GetWindowDC
TrackPopupMenu
GetSubMenu
LoadCursorW
SetForegroundWindow
GetCursorPos
CheckMenuItem
PostQuitMessage
DefWindowProcW
SetRect
SetTimer
CallWindowProcW
RegisterClassExW
ShowScrollBar
ShowWindow
SetScrollRange
AttachThreadInput
GetWindowThreadProcessId
GetDC
LoadStringW
MessageBoxW
DrawIconEx
SetCursor
BeginPaint
EndPaint
IsMenu
DrawStateW
FillRect
CopyRect
GetSysColor
GetMenuItemInfoW
SetMenuItemInfoW
GetMenuItemCount
EndDialog
GetWindowRect
IsWindow
GetDlgItem
SetWindowPos
SetWindowTextW
GetWindow
GetWindowLongW
MapWindowPoints
GetParent
SystemParametersInfoW
GetClientRect
DispatchMessageW
SetWindowLongW
GetActiveWindow
PeekMessageW
SendMessageW
GetMessageW

gdi32

ExtTextOutW
BitBlt
CreateSolidBrush
GetCurrentObject
CreateCompatibleDC
SetViewportOrgEx
SetBkColor
GetBkMode
CreateCompatibleBitmap
CreatePen
SetTextColor
GetTextMetricsW
CreateFontIndirectW
GetTextExtentPoint32W
DeleteObject
SelectObject
GetObjectW
SetBkMode
DeleteDC

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegQueryValueExW
RegDeleteValueW
RegSetValueExW
RegOpenKeyW
RegCloseKey
RegOpenKeyExW
GetUserNameW
RegCreateKeyW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHFileOperationW
ShellExecuteExW
Shell_NotifyIconW

ole32

OleUninitialize
CoCreateGuid
CoInitialize
CoUninitialize
StringFromGUID2
CoCreateInstance
OleInitialize
CoTaskMemFree

shlwapi

StrCpyNW

comctl32

ImageList_Remove
ImageList_GetIcon
ImageList_Create
ImageList_GetIconSize
ImageList_ReplaceIcon

msvcr80

wcsrchr
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
abort
_calloc_crt
__iob_func
fclose
fsetpos
fseek
fgetpos
fwrite
fgetc
ungetc
setvbuf
fflush
ungetwc
fputwc
fgetwc
memset
__crtGetStringTypeW
__uncaught_exception
___lc_handle_func
___lc_codepage_func
___mb_cur_max_l_func
__pctype_func
_malloc_crt
_free_locale
_ui64toa_s
_create_locale
__crtLCMapStringW
setlocale
__CxxFrameHandler3
_CxxThrowException
_beginthreadex
signal
memmove
wcschr
_vsnwprintf_s
_errno
towlower
towupper
wcsncpy_s
_splitpath_s
_stricmp
wcsstr
wcsncpy
_wcsicmp
memcpy
??3@YAXPAX@Z
memmove_s
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
memcpy_s
??_V@YAXPAX@Z
_purecall
realloc
malloc
free
_invalid_parameter_noinfo
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
_recalloc
swprintf_s
sprintf
strlen
_controlfp_s

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

Sections

.text
Size: 180KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c1200e37254c7a08d02a36b65c45df4e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

shlwapi

comctl32

msvcr80

version

Sections

.text Size: 180KB - Virtual size: 176KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 8KB - Virtual size: 7KB

.rsrc Size: 100KB - Virtual size: 100KB

.text
Size: 180KB - Virtual size: 176KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 100KB - Virtual size: 100KB