1f3bfa4d0ca117c571bbc66df326e62a9b22ed8753e31b72001ca26d2c6fbdc2

Sharing

Copy URL Twitter E-mail

General

Target

1f3bfa4d0ca117c571bbc66df326e62a9b22ed8753e31b72001ca26d2c6fbdc2
Size

715KB
MD5

57c50751b8455f7e84eea2dbf3cffd60
SHA1

1dfb51b61728757968319cdba2b96cf1ffd7923b
SHA256

1f3bfa4d0ca117c571bbc66df326e62a9b22ed8753e31b72001ca26d2c6fbdc2
SHA512

4b0914987a62558ff7da388c0d14703dbc75834a34f6f41df28180e72ea30ec66642634f984e3243a2c8a1126f9eb3a3f7cb340b0ce249616c89dc6e41a8a58e
SSDEEP

12288:zoBGC6svMg7iC7zJLX6m5LNa+Vrp2x2E7JY8e/JQud0QSAbTs9Sc3Z6FssqPaGV:zovJ6m5UWrp2x2qJY8e1soT45p6udPaG

Score

N/A

Malware Config

Signatures

Files

1f3bfa4d0ca117c571bbc66df326e62a9b22ed8753e31b72001ca26d2c6fbdc2
.exe windows x86

97891f4626454bbc68d1dee96ec9bc5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GetFileInformationByHandle
WriteFile
CreateThread
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
GetSystemInfo
GlobalUnlock
GlobalLock
GlobalAlloc
GetProcessId
OpenFileMappingW
LoadLibraryA
GetSystemDirectoryA
GetTimeZoneInformation
WritePrivateProfileStringW
SystemTimeToFileTime
GetPrivateProfileStringW
CreateProcessW
FormatMessageW
CreateDirectoryW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
Sleep
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
lstrcpynW
GetVersionExW
GetCommandLineW
CreateMutexW
GetModuleFileNameW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
lstrcmpW
CompareStringW
MulDiv
lstrcmpiW
GetModuleHandleW
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
GetLastError
RaiseException
GetFileAttributesW
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
GetFileSizeEx
CloseHandle
SystemTimeToTzSpecificLocalTime
OpenProcess
LoadLibraryW
GetProcAddress
FreeLibrary
GetProcessTimes
FileTimeToSystemTime
GetSystemTime
lstrlenA
OutputDebugStringW
DebugBreak
FindFirstFileW
GetFullPathNameW
SetLastError
FindClose
FindNextFileW
lstrcpyW
CreateEventW
InterlockedIncrement
ResetEvent
lstrlenW
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
GlobalFree
SetEvent

user32

GetSubMenu
LoadStringW
wvsprintfW
CharNextW
GetGuiResources
DestroyIcon
SetWindowLongW
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
DefWindowProcW
GetWindowLongW
SetWindowPos
GetWindowRect
SendMessageW
InvalidateRect
ShowWindow
IsWindowVisible
RedrawWindow
GetDlgItem
MapWindowPoints
SetRectEmpty
DestroyWindow
CreateWindowExW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
GetClientRect
ScreenToClient
UpdateWindow
IsWindowEnabled
SetCapture
SetFocus
GetParent
GetDlgCtrlID
IsWindow
CallWindowProcW
PtInRect
DrawTextW
FillRect
EnumWindows
GetWindowThreadProcessId
GetCursorInfo
EnumDisplayMonitors
IntersectRect
GetSystemMetrics
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnableMenuItem
AnimateWindow
DrawTextExA
CharUpperW
SetScrollInfo
GetScrollInfo
PostMessageW
DialogBoxParamW
PostQuitMessage
LoadIconW
CopyRect
AdjustWindowRectEx
IsDialogMessageW
EnableWindow
KillTimer
SetTimer
MoveWindow
GetMenu
GetIconInfo
DrawTextExW
DrawIcon
GetActiveWindow
UnregisterClassA
TrackPopupMenu
LoadMenuW
GetWindow
MonitorFromWindow
MonitorFromPoint
GetMonitorInfoW
DestroyMenu
SetMenuItemInfoW
CheckMenuRadioItem
DeleteMenu
EndDialog
MessageBoxW
SetProcessDefaultLayout
LoadImageW
GetDesktopWindow
GetSysColorBrush
GetKeyState
CreateDialogParamW
GetClassNameW
LoadCursorW
GetSysColor
GetFocus
OffsetRect
GetCapture
ReleaseCapture
ReleaseDC
GetDC
EndPaint
BeginPaint
GetCursorPos
SetCursor
DrawFocusRect

gdi32

SelectPalette
BitBlt
SelectClipRgn
CreateRectRgn
CreatePalette
CreateFontW
GetDIBits
CreateDCW
SetLayout
SetViewportOrgEx
RealizePalette
GetDIBColorTable
CreateHalftonePalette
CreateSolidBrush
Polygon
CreatePen
CreateCompatibleBitmap
CreateCompatibleDC
GetStockObject
CreateFontIndirectW
DeleteDC
SetTextColor
SetStretchBltMode
SetDIBits
StretchBlt
SetBkMode
GetObjectW
SelectObject
TextOutW
DeleteObject

shell32

SHFileOperationW
SHGetFileInfoW
CommandLineToArgvW
ShellExecuteW
ExtractIconW
Shell_NotifyIconW

ole32

CoInitialize
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

VarDecCmp
VarDecFromStr
VarR8FromStr
VarI4FromStr
VarDateFromStr
VarUI4FromStr

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegEnumKeyExW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegEnumValueW
RegQueryValueExW
RegDeleteKeyW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW

ws2_32

htonl
getservbyname
inet_ntoa
gethostbyaddr
getservbyport
ntohs
WSASetLastError
recv
send
closesocket
connect
socket
gethostbyname
WSAGetLastError
inet_addr
WSACleanup
WSAStartup
htons

dnsapi

DnsFree
DnsQuery_W

wininet

InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpEndRequestW
HttpQueryInfoW
InternetReadFile
InternetCloseHandle
InternetWriteFile
HttpSendRequestExW

psapi

GetProcessMemoryInfo

comctl32

_TrackMouseEvent
ImageList_Create
InitCommonControlsEx
ImageList_ReplaceIcon

msvcp90

?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z

msvcr90

strncpy_s
calloc
strcpy_s
strchr
__CxxLongjmpUnwind
fprintf
atoi
wcsncmp
_wtol
_setjmp3
rewind
fwrite
fwprintf
sprintf_s
_wstat64i32
feof
fread
wcscpy_s
wcschr
wcsncpy_s
memcpy_s
_ftelli64
fseek
_fseeki64
ferror
exit
__iob_func
sprintf
fflush
sscanf
getenv
strncpy
strtoul
abort
_CIpow
longjmp
strtod
fputc
_vsnprintf_s
isspace
tolower
isalpha
strncmp
_except_handler4_common
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_controlfp_s
_invoke_watson
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
strcat_s
_localtime64_s
_time64
strftime
malloc
wcsstr
_recalloc
_wcsicmp
free
_purecall
_wfopen_s
fclose
_gmtime64_s
_wdupenv_s
swprintf_s
rand
srand
tmpfile
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
_wtoi
iswspace
iswdigit
wcsrchr
memmove
memmove_s
memset
isalnum
??2@YAPAXI@Z
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
__CxxFrameHandler3
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
??_V@YAXPAX@Z
memcpy
_CxxThrowException
__p__fmode
__set_app_type
??3@YAXPAX@Z
_wfopen
ftell

Sections

.text
Size: 532KB - Virtual size: 531KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97891f4626454bbc68d1dee96ec9bc5b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

comdlg32

advapi32

ws2_32

dnsapi

wininet

psapi

comctl32

msvcp90

msvcr90

Sections

.text Size: 532KB - Virtual size: 531KB

.rdata Size: 88KB - Virtual size: 88KB

.data Size: 5KB - Virtual size: 7KB

.rsrc Size: 28KB - Virtual size: 28KB

.reloc Size: 60KB - Virtual size: 60KB

.text
Size: 532KB - Virtual size: 531KB

.rdata
Size: 88KB - Virtual size: 88KB

.data
Size: 5KB - Virtual size: 7KB

.rsrc
Size: 28KB - Virtual size: 28KB

.reloc
Size: 60KB - Virtual size: 60KB