1640f42b2992a7a41f2804f45ffbad2ee36fac538865a0b875ee12a0ca53f026

Sharing

Copy URL

Twitter E-mail

General

Target

1640f42b2992a7a41f2804f45ffbad2ee36fac538865a0b875ee12a0ca53f026
Size

14.6MB
MD5

6eaf6f6a28b0cae784a04a59c36a102b
SHA1

63ccbdf14e6621c98ada7e4228c7b100c4850e16
SHA256

1640f42b2992a7a41f2804f45ffbad2ee36fac538865a0b875ee12a0ca53f026
SHA512

e5490f763ffab322f1e98ad342474cb1a168d3d740d628ab1982a5516b0456af406d68c307255566249e2480d84bb3f0097d31fc4596b8b2f443dcfd92513d0e
SSDEEP

196608:4RPoqFr6cC5APwjHD+nqNFneTLIOMNjKdeNeC6JVc5g4C/GdAsMD0xwr:yoer6nnjHFneTLIOMwUNP6b

Score

N/A

Malware Config

Signatures

Files

1640f42b2992a7a41f2804f45ffbad2ee36fac538865a0b875ee12a0ca53f026
.dll windows x86

9b71ebc0c84682bbfa1a880890e795b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend

kernel32

GetTickCount
GetPrivateProfileStringW
GlobalAlloc
lstrlenW
lstrcpynW
WideCharToMultiByte
GetUserDefaultUILanguage
GetLocaleInfoW
InterlockedIncrement
InterlockedDecrement
FindFirstFileW
FindNextFileW
FindClose
ExpandEnvironmentStringsW
GetModuleFileNameW
GetSystemDirectoryW
InitializeCriticalSection
GetProcAddress
CompareFileTime
GetACP
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
EnterCriticalSection
QueryPerformanceCounter
LoadLibraryA
LoadLibraryW
LoadResource
SizeofResource
FindResourceW
LockResource
GetCurrentThreadId
GetCurrentProcessId
CreateFileA
GlobalUnlock
GlobalLock
GlobalFree
CloseHandle
GetFileAttributesExW
GetSystemTimeAsFileTime
GetThreadLocale
FreeLibrary
CreateMutexA
WaitForSingleObject
ReleaseMutex
LeaveCriticalSection
DeleteCriticalSection
IsDebuggerPresent
CompareStringW
VirtualAlloc
VirtualFree
QueryPerformanceFrequency
GetModuleHandleA
GetModuleFileNameA
TlsGetValue
GetCurrentThread
DuplicateHandle
TlsSetValue
TlsAlloc

user32

EndPaint
CreatePopupMenu
DestroyMenu
GetMenuItemCount
InsertMenuItemW
GetMenuInfo
SetMenuInfo
InvalidateRect
DefWindowProcW
LoadCursorW
RegisterClassExW
GetKeyState
DestroyIcon
EnumDisplaySettingsW
GetMonitorInfoW
MonitorFromWindow
MessageBeep
RegisterClipboardFormatW
GetClipboardData
IsClipboardFormatAvailable
ReleaseDC
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
ReleaseCapture
PtInRect
GetClientRect
SystemParametersInfoW
MapVirtualKeyW
DestroyWindow
ScrollWindowEx
GetDC
ClientToScreen
SetCapture
SetWindowPos
SetLayeredWindowAttributes
SendMessageW
BeginPaint
SetWindowLongW
GetWindowLongW
CreateWindowExW
ShowWindow
UpdateWindow

gdi32

CreateCompatibleDC
SelectObject
DeleteObject
BitBlt
CreateCompatibleBitmap
DeleteDC
CreateDIBSection

comdlg32

GetOpenFileNameW

advapi32

SetSecurityDescriptorDacl
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegQueryValueExW
InitializeSecurityDescriptor

shell32

SHGetFileInfoW
DragFinish
DragQueryFileW

ole32

OleGetClipboard
OleDuplicateData
ReleaseStgMedium

msvcp80

_Inf
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcr80

_localtime64_s
fseek
ftell
_fdopen
strcmp
memcmp
_ftime64
_stat32
_dup
_getcwd
_CIatan2
_CIsqrt
_mktime64
isxdigit
rand_s
strftime
_mkdir
fputc
_beginthread
_endthread
_fpclass
fflush
fopen
_errno
vfprintf
_iob
strlen
fwrite
_purecall
abort
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
ceil
_invalid_parameter_noinfo
isspace
tolower
islower
_snprintf
fprintf
__iob_func
isalpha
strncmp
_vscprintf
vsprintf
memmove
isdigit
strncpy
malloc
free
memmove_s
_time64
_difftime64
_isnan
_wcsdup
_nextafter
sprintf
toupper
strstr
strchr
srand
rand
qsort
isprint
isalnum
strncat
_localtime64
_vsnprintf_s
_finite
_copysign
_strdup
_wcsicmp
swprintf_s
sprintf_s
_wfopen_s
_fstat64
_fileno
fread
fclose
atoi
sscanf
_gmtime64
strtoul
longjmp
realloc
calloc
_setjmp3
memset
memcpy
_CIpow
strtod
__CxxFrameHandler3
_stricmp
strrchr
getenv
puts
floor
_CIfmod
_CIlog
strtol
exit
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_vsnprintf
?terminate@@YAXXZ
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_CIsin
_CIcos
_CxxThrowException
_CItan
_CIexp
_CIatan
_CIasin
_CIacos
printf
_strnicmp
_CIlog10

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

wininet

InternetGetCookieW
InternetSetCookieW

shlwapi

PathIsUNCA
UrlCreateFromPathA
PathGetCharTypeW
UrlIsW
PathCreateFromUrlW
PathFileExistsA
PathCombineW
PathFileExistsW
UrlCreateFromPathW
PathFindExtensionW
PathFindFileNameW
SHGetValueW
PathIsUNCW
PathRenameExtensionW

winmm

timeGetTime

ws2_32

gethostbyname
WSAStartup
listen
bind
htons
ioctlsocket
closesocket
WSAGetLastError
getsockopt
recv
send
socket
connect
__WSAFDIsSet
getsockname
select

Exports

Exports

??4_Init_locks@std@@QAEAAV01@ABV01@@Z
WebKitAGGetAPI
icudt36_dat

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11.2MB - Virtual size: 11.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 260KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9b71ebc0c84682bbfa1a880890e795b5

Headers

File Characteristics

Imports

msimg32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

msvcp80

msvcr80

version

wininet

shlwapi

winmm

ws2_32

Exports

Exports

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rdata Size: 11.2MB - Virtual size: 11.2MB

.data Size: 120KB - Virtual size: 151KB

.rsrc Size: 8KB - Virtual size: 4KB

.reloc Size: 260KB - Virtual size: 257KB

.text Size: 212KB - Virtual size: 212KB

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 11.2MB - Virtual size: 11.2MB

.data
Size: 120KB - Virtual size: 151KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 260KB - Virtual size: 257KB

.text
Size: 212KB - Virtual size: 212KB