cd68a7195a0324af94831f6cbdfc9121e3c7f0ba4361a38441f070144a798015

Sharing

Copy URL Twitter E-mail

General

Target

cd68a7195a0324af94831f6cbdfc9121e3c7f0ba4361a38441f070144a798015
Size

365KB
MD5

7c3344bd5d1a16e18ea985bba5dbb939
SHA1

1b9cbec6fa76fa64a13308978f9d2173c704084f
SHA256

cd68a7195a0324af94831f6cbdfc9121e3c7f0ba4361a38441f070144a798015
SHA512

44f7f22cdc978667b1652ded54e6e3500444584919fce9a45ac4312557eaa46b9ae1580f4f7258500e857a440e0c09872487e3f4bbed6bd6e4d329948ad77745
SSDEEP

6144:kOpy3668UtgvfFjpslhGPw43q09McgDNx9E/vQ2Vxwmd3PPXcK:c3668UtgvlpjPw4RMPD/W/o2RHXr

Score

N/A

Malware Config

Signatures

Files

cd68a7195a0324af94831f6cbdfc9121e3c7f0ba4361a38441f070144a798015
.exe windows x86

3c85731bcc474bf7d93fcb01e943cb1d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

kernel32

SetFilePointer
WriteConsoleW
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
Sleep
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
GetStdHandle
ExitProcess
GetConsoleMode
GetConsoleCP
WriteFile
GetFileType
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetProcAddress
SetLastError
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
IsProcessorFeaturePresent
DecodePointer
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapCreate
GetStartupInfoW
HeapSetInformation
GetCommandLineA
WideCharToMultiByte
RaiseException
LoadLibraryW
HeapReAlloc
CreateFileW
CloseHandle
FlushFileBuffers
FreeLibrary
GlobalAlloc
GlobalFree
GetVersion
GetSystemInfo
HeapAlloc
GetProcessHeap
HeapFree
EnterCriticalSection
GetProcessHeaps
LocalAlloc
GlobalLock
LoadLibraryA
GlobalSize
GlobalUnlock
lstrlenA
GetCurrentThreadId
GetLastError
GetCommandLineW
GetModuleHandleA
SetStdHandle

user32

CloseClipboard
LoadIconA
AdjustWindowRectEx
RegisterClassW
IsIconic
SendMessageA
GetWindowTextLengthA
GetWindowTextA
InvalidateRect
GetSystemMetrics
LoadImageA
DestroyIcon
PostQuitMessage
CreateWindowExA
SetWindowPos
MessageBoxA
DestroyWindow
DefWindowProcA
GetDlgCtrlID
GetDlgItemTextA
LoadCursorA
SetClipboardData
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
EnableMenuItem
GetWindowRect
TrackPopupMenuEx
RegisterClassExA
CheckRadioButton
IsDlgButtonChecked
EndDialog
GetParent
SetDlgItemTextA
BeginPaint
SetScrollRange
EndPaint
GetDC
ReleaseDC
OpenClipboard
EnumClipboardFormats
GetClipboardFormatNameA
GetClipboardData
GetDialogBaseUnits
DrawTextA
SetWindowTextA
wsprintfA
GetWindowLongA
OffsetRect
InflateRect
GetSysColorBrush
FillRect
ScreenToClient
IsWindow
EnumDesktopsA
SetScrollPos
SendDlgItemMessageA
SetDlgItemInt
SetWindowLongA
GetClientRect
GetMenuItemInfoA
IsWindowEnabled
GetDlgItem
LoadMenuA
ShowCursor

gdi32

DeleteObject
SetBkMode
SetBkColor
GetObjectA
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
TextOutA
GetStockObject
Ellipse
GetTextMetricsA
SetTextColor
SelectPalette
CreateSolidBrush
CreateFontIndirectA

comdlg32

ChooseFontA
FindTextW

advapi32

RegOpenKeyExA
RegSetValueExA
RegCloseKey

shell32

CommandLineToArgvW

ole32

CoGetMalloc
StringFromCLSID
CoTaskMemFree

odbc32

ord26
ord9
ord31
ord43
ord13
ord12
ord72
ord19
ord11
ord41
ord39
ord75
ord24
ord136
ord36

ws2_32

gethostname

comctl32

ImageList_Destroy
InitCommonControlsEx
CreatePropertySheetPageA
ImageList_Create
ImageList_ReplaceIcon
PropertySheetA

oleacc

GetOleaccVersionInfo

setupapi

SetupDiGetClassInstallParamsA
SetupDiSetDeviceRegistryPropertyA
SetupDiGetDeviceInstallParamsA
SetupDiSetDeviceInstallParamsA
SetupDiSetClassInstallParamsA

rasapi32

RasGetConnectionStatistics

Exports

Exports

Init

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gave
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c85731bcc474bf7d93fcb01e943cb1d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

odbc32

ws2_32

comctl32

oleacc

setupapi

rasapi32

Exports

Exports

Sections

.text Size: 73KB - Virtual size: 72KB

.rdata Size: 232KB - Virtual size: 232KB

.data Size: 8KB - Virtual size: 15KB

.gave Size: 2KB - Virtual size: 2KB

.rsrc Size: 39KB - Virtual size: 38KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 73KB - Virtual size: 72KB

.rdata
Size: 232KB - Virtual size: 232KB

.data
Size: 8KB - Virtual size: 15KB

.gave
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 39KB - Virtual size: 38KB

.reloc
Size: 9KB - Virtual size: 9KB