a494f517e7abe47c974d186ae7e59ede7a0c45f62574c21beca0aeeebea4295e

Sharing

Copy URL Twitter E-mail

General

Target

a494f517e7abe47c974d186ae7e59ede7a0c45f62574c21beca0aeeebea4295e
Size

4.0MB
MD5

2e0e4fa5c03888ebe195aa7a4a1c4e2a
SHA1

8954772410ce91fdd33428fd606d4614c794b1c8
SHA256

a494f517e7abe47c974d186ae7e59ede7a0c45f62574c21beca0aeeebea4295e
SHA512

3cad5c563ebaae858fc26d1d34310b0187358413dd24f6aeba1eeabd0c55db423dc617bf7cef67b99d0facc307e2182966c75280503e440340aec1393bad9fc9
SSDEEP

98304:uT/2XlWb8PMt2ABmEEaoHr9DBqXAkob68:RXlA0AvIk868

Score

N/A

Malware Config

Signatures

Files

a494f517e7abe47c974d186ae7e59ede7a0c45f62574c21beca0aeeebea4295e
.exe windows x86

f05b24ce31b5e3f37c6a3b50aaf891ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

activeds

ord6
ord4
ord3
ord5

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

mfc42

ord665
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4425
ord324
ord641
ord4229
ord5232
ord5268
ord2841
ord2448
ord1979
ord4710
ord6052
ord5186
ord2044
ord2107
ord3903
ord6663
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord4424
ord3738
ord561
ord815
ord609
ord795
ord2514
ord2621
ord1134
ord1247
ord4376
ord4853
ord3597
ord4234
ord2575
ord4396
ord3574
ord6055
ord1776
ord5290
ord3402
ord3721
ord1146
ord4375
ord2302
ord6215
ord2642
ord6880
ord6199
ord4160
ord2863
ord2379
ord755
ord470
ord4083
ord2919
ord913
ord5594
ord6782
ord6567
ord6569
ord5601
ord802
ord542
ord3439
ord700
ord4852
ord4998
ord1669
ord5834
ord1200
ord1601
ord539
ord1841
ord4589
ord4588
ord4899
ord4370
ord4892
ord4533
ord5076
ord4340
ord4347
ord4889
ord4531
ord4545
ord4543
ord4526
ord4529
ord4524
ord4963
ord4960
ord4108
ord6054
ord5281
ord3748
ord1725
ord5260
ord2091
ord4432
ord364
ord784
ord4241
ord4720
ord1175
ord3610
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord616
ord656
ord2370
ord6334
ord3874
ord3698
ord765
ord2864
ord2803
ord1099
ord3054
ord3425
ord3880
ord3810
ord2763
ord3701
ord2233
ord1949
ord4284
ord2086
ord5981
ord1945
ord4299
ord6197
ord3571
ord3619
ord3626
ord2414
ord4275
ord5875
ord6172
ord1641
ord5789
ord2860
ord640
ord5785
ord1640
ord323
ord816
ord562
ord5787
ord283
ord5683
ord4278
ord4202
ord5710
ord350
ord354
ord3616
ord3127
ord5651
ord858
ord823
ord6282
ord6283
ord2764
ord4129
ord1228
ord389
ord5207
ord5356
ord2393
ord924
ord922
ord926
ord941
ord537
ord2818
ord939
ord535
ord2614
ord825
ord540
ord800
ord860
ord3663
ord5265
ord1816
ord5572
ord4189
ord2915
ord861
ord6877
ord568
ord819
ord6145
ord5863
ord912
ord4204
ord4188
ord3438
ord5593
ord397
ord500
ord699
ord772
ord6394
ord5450
ord6383
ord5440
ord5856
ord6142
ord5860
ord398
ord2652
ord1168
ord567
ord5240
ord1576

msvcrt

realloc
_mbsnbcmp
_splitpath
_stricmp
_strnicmp
_setmbcp
__CxxFrameHandler
_mbscmp
atoi
free
malloc
_CxxThrowException
_mbschr
_mbsnicmp
_mbsstr
sprintf
_controlfp
atol
isdigit
_ismbcdigit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
strrchr
strncpy
strncmp
_mbsicmp

kernel32

GetModuleHandleA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetWindowsDirectoryA
CreateThread
CreateProcessA
GetSystemDirectoryA
GetFileAttributesA
CreateDirectoryA
InterlockedDecrement
SetLastError
GetFullPathNameA
GetCurrentProcessId
WideCharToMultiByte
OpenProcess
TerminateProcess
GetVersionExA
LoadLibraryA
GetCurrentProcess
FindResourceA
SizeofResource
LoadResource
LockResource
HeapAlloc
HeapFree
HeapDestroy
HeapCreate
GetShortPathNameA
ExpandEnvironmentStringsA
lstrlenA
lstrcpyA
GetUserDefaultLangID
FormatMessageA
LocalFree
MultiByteToWideChar
lstrlenW
Sleep
GetProcAddress
FreeLibrary
OpenFile
_lclose
GetLastError
CloseHandle
GetStartupInfoA

user32

DrawIcon
EnableWindow
GetWindowLongA
AppendMenuA
GetSystemMenu
IsIconic
PostMessageA
GetSystemMetrics
GetClientRect
IsWindow
SetWindowLongA
GetSysColor
GetWindowRect
LoadIconA
FindWindowA
GetParent
GetWindow
MessageBeep
InvalidateRect
OffsetRect
SendMessageA

gdi32

PatBlt
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
CreateFontA

advapi32

CryptDestroyKey
CryptDestroyHash
LookupPrivilegeValueA
CryptReleaseContext
CryptHashData
RegOpenKeyA
StartServiceA
OpenServiceA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
DeleteService
ControlService
QueryServiceStatus
CryptDecrypt
AdjustTokenPrivileges
CryptSetKeyParam
CryptDeriveKey
OpenProcessToken
RegOpenKeyExA
CryptCreateHash
CryptAcquireContextA
CryptEncrypt
RegCloseKey
RegQueryValueExA
RegFlushKey
RegSetValueExA
RegCreateKeyExA
RegEnumKeyA

shell32

ShellExecuteA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListA

ole32

StgOpenStorageOnILockBytes
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
CoUninitialize
CoInitialize

oleaut32

VariantInit
VariantClear
SysAllocStringLen
SysFreeString
SysAllocString

imagehlp

MakeSureDirectoryPathExists

Sections

.text
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f05b24ce31b5e3f37c6a3b50aaf891ae

Headers

File Characteristics

Imports

activeds

version

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

imagehlp

Sections

.text Size: 112KB - Virtual size: 110KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 8KB - Virtual size: 5KB

.rsrc Size: 3.8MB - Virtual size: 3.8MB

.text
Size: 112KB - Virtual size: 110KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 8KB - Virtual size: 5KB

.rsrc
Size: 3.8MB - Virtual size: 3.8MB