2241ad60b98a042b0d735269d813541e6db0911d93e1d03402ff6cbc296a9c70

Sharing

Copy URL

Twitter E-mail

General

Target

2241ad60b98a042b0d735269d813541e6db0911d93e1d03402ff6cbc296a9c70
Size

255KB
MD5

ee3f0efa3ead31e6c1410578a9c3a323
SHA1

278d357b33af3ef0d559c69945e47a2702bef5ec
SHA256

2241ad60b98a042b0d735269d813541e6db0911d93e1d03402ff6cbc296a9c70
SHA512

34fc7be711f78b4078de6222fb504ef7291b951054f196e97ac63269d042873856e5891e65bd52c8c1a7e5a6ecc9d7d39115fc2b81461298de29bb6e649fde2e
SSDEEP

6144:I9YP/Sez9/69SwCOEXnFtj2UKwc6OjXpSvd8JcoOTD:K9vCnFZ0wSX0d8+oOX

Score

N/A

Malware Config

Signatures

Files

2241ad60b98a042b0d735269d813541e6db0911d93e1d03402ff6cbc296a9c70
.exe windows x86

41dc0ff9e904665d636216f282f96bde

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

kernel32

InterlockedExchange
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
LocalUnlock
GetCurrentProcessId
GetSystemTimeAsFileTime
lstrcpyA
CloseHandle
GetVersionExA
GetCurrentDirectoryA
LocalAlloc
LoadLibraryA
LocalLock
CreateNamedPipeA
GetProcAddress
lstrcmpiA
GetLastError
GetSystemDirectoryA
Sleep
EnumResourceTypesA
WriteFile
GetProcessHeap
GetCurrentThread
ConnectNamedPipe
WaitForSingleObject
HeapFree
InterlockedDecrement
HeapAlloc
FreeLibrary
lstrlenA
CreateFileA

user32

PostMessageA
IsWindow
AppendMenuA
EnumDesktopsA
FrameRect
CreatePopupMenu
SetMenu
ShowWindow
DispatchMessageA
GetSystemMetrics
SetWindowTextA
LoadCursorA
SetDlgItemTextA
GetCursorPos
SetWindowPos
DefWindowProcA
MoveWindow
GetDlgItem
EnableMenuItem
ReleaseDC
PeekMessageA
CreateWindowExA
AppendMenuW
InvalidateRect
MessageBoxA
SetWindowLongA
SetRect
TrackPopupMenuEx
GetWindowTextA
GetCursorInfo
GetWindowWord
SetDlgItemInt
TranslateMessage
GetDC
GetIconInfo
SetWindowWord
BeginPaint
SendMessageA
GetWindowTextLengthA
SetFocus
CreateMenu
GetClientRect
FindWindowExA
DrawIcon
wsprintfA
LoadIconA
GetParent
DrawTextA
FillRect
SendDlgItemMessageA
PostQuitMessage
RegisterClassExA
InsertMenuItemA
GetWindowRect
SetTimer
SetWindowRgn
EndPaint
EndDialog

gdi32

RealizePalette
Ellipse
Rectangle
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
DeleteObject
SetBkMode
SetBkColor
CreateBitmapIndirect
StretchBlt
CreateFontA
DeleteDC
CreateHatchBrush
SetTextColor
LineTo
FrameRgn
BitBlt
MoveToEx
SelectPalette
CreateRoundRectRgn
CreatePen
GetTextMetricsA
CreateICA
CreateEllipticRgnIndirect
GetObjectA
GetStockObject
UpdateColors
CreateSolidBrush
CreateFontIndirectA
TextOutA

advapi32

ImpersonateNamedPipeClient
ControlService
IsValidSecurityDescriptor
OpenSCManagerA
OpenServiceA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
OpenThreadToken
CloseServiceHandle

ole32

CoUninitialize
CoInitializeSecurity
CoInitializeEx
CoCreateInstance

oleaut32

SysFreeString
VariantInit
VariantClear
SysAllocString

netapi32

NetWkstaUserGetInfo
NetApiBufferFree
NetGetDCName
NetShareGetInfo
NetShareEnum

msvcp90

??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

avicap32

capCreateCaptureWindowA

shlwapi

StrToIntExA
PathRemoveFileSpecA
ord12

pdh

PdhAddCounterW
PdhCloseQuery
PdhCollectQueryData
PdhOpenQueryA

gdiplus

GdiplusStartup
GdipCloneImage
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipAlloc
GdiplusShutdown
GdipFree

rasapi32

RasGetErrorStringA
RasValidateEntryNameA

rasdlg

RasDialDlgA

msvcr90

_lock
__dllonexit
_unlock
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
_except_handler4_common
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_onexit
_exit
_cexit
__getmainargs
_amsg_exit
memset
_CxxThrowException
??2@YAPAXI@Z
??3@YAXPAX@Z
_vsnprintf
rand
??_V@YAXPAX@Z
printf
strncpy
wprintf
_mbsstr
_wgetenv
malloc
calloc
free
sprintf
_controlfp_s
_decode_pointer
_invoke_watson
_XcptFilter
__CxxFrameHandler3

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 111KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

41dc0ff9e904665d636216f282f96bde

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

netapi32

msvcp90

avicap32

shlwapi

pdh

gdiplus

rasapi32

rasdlg

msvcr90

Sections

.text Size: 71KB - Virtual size: 70KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 111KB - Virtual size: 113KB

.rsrc Size: 57KB - Virtual size: 56KB

.text
Size: 71KB - Virtual size: 70KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 111KB - Virtual size: 113KB

.rsrc
Size: 57KB - Virtual size: 56KB