c6a6172812c31181006633ed1184ee0b4fdead1a179be24fd9a4f3f863a1ec6f

Sharing

Copy URL Twitter E-mail

General

Target

c6a6172812c31181006633ed1184ee0b4fdead1a179be24fd9a4f3f863a1ec6f
Size

88KB
MD5

7295ed7007e735a794c39f185fd021e0
SHA1

c63e19e1e10cfdecdad49bac393973f674c24446
SHA256

c6a6172812c31181006633ed1184ee0b4fdead1a179be24fd9a4f3f863a1ec6f
SHA512

f3c349ac3ecc0990f2f4604916ef129249f439ba838583cb80d5bafc95146f231644270d2a1b74a1d451cab922d1320857082af3d26a83d9bab3fd18c178b08f
SSDEEP

1536:ciS8EKSIYMSR7FO0g8AD8GXN+I7fJ+aCl1fe5:PfE1I/q7FO0gbzoI7h+aS1G5

Score

N/A

Malware Config

Signatures

Files

c6a6172812c31181006633ed1184ee0b4fdead1a179be24fd9a4f3f863a1ec6f
.exe windows x86

78696630fb3c809ea69883f94aef6000

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
InterlockedCompareExchange
Sleep
InterlockedExchange
GetProcessHeap
HeapFree
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetStartupInfoW
OutputDebugStringW

user32

SystemParametersInfoW
EqualRect
ReleaseDC
GetDC
SetWindowPos
GetWindowRect
GetClientRect
SetTimer
KillTimer
GetWindowLongW
SetWindowLongW
UpdateLayeredWindow
GetWindowDC
GetParent
PostQuitMessage
EndPaint
DefWindowProcW
DestroyWindow
SendMessageW
SetForegroundWindow
RegisterWindowMessageW
UpdateWindow
ShowWindow
CreateWindowExW
GetSystemMetrics
RegisterClassExW
LoadCursorW
LoadIconW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
BringWindowToTop
LoadAcceleratorsW
BeginPaint

gdi32

DeleteObject
CreateCompatibleDC
BitBlt
GetDeviceCaps
SelectObject
CreateDIBSection
DeleteDC

comdlg32

GetSaveFileNameW

ole32

OleCreate
OleSetContainedObject
OleDraw
OleUninitialize
OleInitialize

oleaut32

SysAllocString
GetErrorInfo

msvcp80

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ

msvcr80

__p__commode
_adjust_fdiv
__setusermatherr
__p__fmode
_encode_pointer
__set_app_type
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_unlock
__dllonexit
_lock
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_onexit
_decode_pointer
_invoke_watson
_controlfp_s
?terminate@@YAXXZ
wcscpy_s
??2@YAPAXI@Z
wcslen
??3@YAXPAX@Z
wcsncpy
_swprintf
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
?what@exception@std@@UBEPBDXZ
memcmp
??0exception@std@@QAE@ABV01@@Z
??_V@YAXPAX@Z
_purecall
wcscpy
memset
memmove_s
??0exception@std@@QAE@ABQBD@Z
_wcslwr
??1exception@std@@UAE@XZ
wcsstr
_CxxThrowException
_amsg_exit
__CxxFrameHandler3

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78696630fb3c809ea69883f94aef6000

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

ole32

oleaut32

msvcp80

msvcr80

Sections

.text Size: 24KB - Virtual size: 20KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 44KB - Virtual size: 42KB

.text
Size: 24KB - Virtual size: 20KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 44KB - Virtual size: 42KB