71da8761db13eb2382ec007e539d563675da8cb4624796ba802f1309fb653a5e

Sharing

Copy URL Twitter E-mail

General

Target

71da8761db13eb2382ec007e539d563675da8cb4624796ba802f1309fb653a5e
Size

834KB
MD5

727c0d499916af30f146aa39b9187cf0
SHA1

cd658f40f51280e477b150533e181936b072efec
SHA256

71da8761db13eb2382ec007e539d563675da8cb4624796ba802f1309fb653a5e
SHA512

db28796f05e80e2255bc0f30d19ebb7689b3446a2cf9844dbdc73e2cfe76ba1a81e5968518ca8cbe9e33cf62ecea98012056625b021832bd15fec1474c672d79
SSDEEP

12288:+WiB5YsmB7GylqgMuLK8SB1eSM57kiA5KXaZf6NerkZLnyM+fl:+l7NljM5TAwNLnKl

Score

N/A

Malware Config

Signatures

Files

71da8761db13eb2382ec007e539d563675da8cb4624796ba802f1309fb653a5e
.exe windows x64

97a8d127c8cef271fc4ea9aa229bd379

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExA
RegOpenKeyExA

kernel32

GetTickCount
GetPrivateProfileStringW
GetTimeFormatW
lstrcmpW
Sleep
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
IsProcessorFeaturePresent
GetProcAddress
LoadLibraryA
GetModuleHandleA
OutputDebugStringA
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
GetLastError
FindResourceW
LoadResource
SizeofResource
LockResource
InitializeCriticalSection
DeleteCriticalSection
GetCommandLineW
MulDiv
QueryPerformanceFrequency
GlobalLock
GlobalAlloc
GlobalUnlock
lstrlenW
GetPrivateProfileIntW
GlobalFree
HeapSetInformation
GetWindowsDirectoryW
GetPrivateProfileSectionW

gdi32

GetStockObject
SelectObject
CreateDCW
CreateFontIndirectW
DeleteDC
SetTextColor
GetDeviceCaps
SetBkColor
DeleteObject
GetObjectW
GetGlyphOutlineW
GetOutlineTextMetricsW
CreateFontW
ExcludeClipRect
GetCurrentObject

user32

OffsetRect
IntersectRect
GetDlgItem
EndDialog
SendDlgItemMessageW
LoadStringW
IsDlgButtonChecked
CheckRadioButton
GetDlgItemTextW
SetDlgItemTextW
EnableWindow
DialogBoxParamW
CreateWindowExW
EndPaint
SetCursor
SetTimer
ScreenToClient
GetMessageW
PostQuitMessage
DispatchMessageW
EnumDisplaySettingsW
DefWindowProcW
SetWindowTextW
AdjustWindowRect
UpdateWindow
SendMessageW
GetSystemMetrics
RegisterClassW
SystemParametersInfoA
MessageBoxW
FillRect
CheckDlgButton
SetWindowPos
PeekMessageW
SystemParametersInfoW
GetWindowTextW
InvalidateRect
UnionRect
SetRect
LoadIconW
TranslateMessage
BeginPaint
SetRectEmpty
GetClientRect
LoadCursorW
KillTimer
DrawTextW
PostMessageW

msvcrt

??3@YAXPEAX@Z
??2@YAPEAX_K@Z
rand
iswdigit
free
_finite
__C_specific_handler
qsort
_atoi64
_vsnwprintf
calloc
malloc
realloc
time
srand
_exit
__getmainargs
sinf
acosf
_XcptFilter
__setusermatherr
cosf
_ismbblead
_cexit
exit
_acmdln
_initterm
_amsg_exit
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
memcpy
memset
sqrtf
atan2f

comctl32

ord17

comdlg32

ChooseFontW
ChooseColorW
GetOpenFileNameW

ole32

CoUninitialize
CreateStreamOnHGlobal
CoInitializeEx
CoCreateInstance

usp10

ScriptStringAnalyse
ScriptStringFree
ScriptStringGetOrder

winbrand

BrandingFormatString

d3d9

Direct3DCreate9

winmm

timeGetTime

glu32

gluTessVertex
gluTessCallback
gluTessNormal
gluTessProperty
gluTessBeginContour
gluTessEndContour
gluTessEndPolygon
gluNewTess
gluTessBeginPolygon
gluDeleteTess

Sections

.text
Size: 238KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vmp0
Size: 508KB - Virtual size: 1.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

97a8d127c8cef271fc4ea9aa229bd379

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

comctl32

comdlg32

ole32

usp10

winbrand

d3d9

winmm

glu32

Sections

.text Size: 238KB - Virtual size: 238KB

.data Size: 37KB - Virtual size: 58KB

.pdata Size: 4KB - Virtual size: 4KB

.rsrc Size: 37KB - Virtual size: 36KB

.reloc Size: 7KB - Virtual size: 7KB

.vmp0 Size: 508KB - Virtual size: 1.8MB

.text
Size: 238KB - Virtual size: 238KB

.data
Size: 37KB - Virtual size: 58KB

.pdata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 37KB - Virtual size: 36KB

.reloc
Size: 7KB - Virtual size: 7KB

.vmp0
Size: 508KB - Virtual size: 1.8MB