727e407a55834cc55e62a7be52a9d05fa4c4ca1bd8dc776e4c04981fc6cf6bf4

Sharing

Copy URL Twitter E-mail

General

Target

727e407a55834cc55e62a7be52a9d05fa4c4ca1bd8dc776e4c04981fc6cf6bf4
Size

688KB
MD5

0b4ef200c65d6149a0aeb8d17e580f4d
SHA1

cd6e3da46c922561d26086e6284fc117953fe094
SHA256

727e407a55834cc55e62a7be52a9d05fa4c4ca1bd8dc776e4c04981fc6cf6bf4
SHA512

ec5a8a66eec3f9ceb1ca6a8c5032e5b2a38f1a8682812915faa48f0053731e8694d1ce02aa5bcfdc579286e29055325eba2c1b8e21925698caa0637ee8f6ceb4
SSDEEP

12288:U0cs6DF6zy4ZhFLdSlp3TP5G3REjnAMABMioRFEuNUPsoz32Mgw6QJ+W6ADxHioX:UIU9ALduzsBMiuWb876J+E1RpBR

Score

N/A

Malware Config

Signatures

Files

727e407a55834cc55e62a7be52a9d05fa4c4ca1bd8dc776e4c04981fc6cf6bf4
.exe windows x86

fd921943afdde99d1867b17a720e7f60

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
??1type_info@@UAE@XZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_amsg_exit
_wcmdln
exit
_except_handler3
_cexit
_XcptFilter
_exit
_c_exit
?terminate@@YAXXZ
_onexit
__dllonexit
memset
_beginthread
_wtol
wcscpy
swscanf
_wcsdup
wcsstr
_setjmp3
longjmp
strncmp
_wsplitpath
_wcsnicmp
_ltow
_vsnwprintf
wcsrchr
_wtoi64
_wtoi
wcstod
_wcsicmp
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
realloc
_iob
fprintf
fread
fflush
fwrite
_vsnprintf
calloc
??1exception@@UAE@XZ
wcstoul
wcscmp
wcsncmp
wcschr
wcslen
??2@YAPAXI@Z
__CxxFrameHandler
malloc
memmove
??3@YAXPAX@Z
_CxxThrowException
free
_CIpow

kernel32

GetStartupInfoW
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetVersionExA
GetModuleHandleA
LockFile
LockFileEx
UnlockFileEx
UnlockFile
GetFileInformationByHandle
SetEndOfFile
GetCommandLineW
GetCurrentThreadId
Sleep
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
FreeLibrary
lstrcpynW
GetModuleFileNameW
CreateThread
WaitForSingleObject
SetEvent
CreateEventW
CompareStringW
FlushFileBuffers
RaiseException
InitializeCriticalSection
DeleteCriticalSection
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExW
GetLastError
LCMapStringW
GetUserDefaultLCID
lstrlenW
lstrlenA
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
GetFileAttributesW
CloseHandle
ReadFile
SetFilePointer
CreateFileW
MoveFileW
DeleteFileW
GlobalUnlock
GlobalLock
GetTempFileNameW
GetTempPathW
WriteFile
HeapFree
GetProcessHeap
HeapReAlloc
HeapAlloc
HeapCreate
SystemTimeToFileTime
MultiByteToWideChar
GlobalFree
GlobalAlloc
GetDiskFreeSpaceExW
lstrcmpiW
GetModuleHandleW

user32

ReleaseDC
GetDC
GetDesktopWindow
LoadImageA
FindWindowA
CharNextW
PostThreadMessageA
DispatchMessageA
LoadStringW
SetTimer
GetMessageA

gdi32

GetDIBits
GetObjectW
DeleteObject

advapi32

RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW

ole32

CoCreateInstance
CoTaskMemFree
CLSIDFromString
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateGuid
StringFromGUID2
CreateStreamOnHGlobal
CoUninitialize
CoInitializeEx
CoRevokeClassObject
CoRegisterClassObject
CoInitialize

oleaut32

VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SafeArrayDestroy
VariantTimeToSystemTime
VariantChangeTypeEx
VariantCopy
VariantClear
VariantInit
VarBstrCmp
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocString

wininet

InternetCloseHandle
HttpQueryInfoW
InternetOpenUrlW
InternetOpenW
InternetGetConnectedState

shlwapi

PathFindExtensionW

Exports

Exports

_resetstkoflw

Sections

.text
Size: 575KB - Virtual size: 575KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fd921943afdde99d1867b17a720e7f60

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

advapi32

ole32

oleaut32

wininet

shlwapi

Exports

Exports

Sections

.text Size: 575KB - Virtual size: 575KB

.data Size: 13KB - Virtual size: 17KB

.rsrc Size: 16KB - Virtual size: 16KB

.bdata Size: 76KB - Virtual size: 76KB

.text
Size: 575KB - Virtual size: 575KB

.data
Size: 13KB - Virtual size: 17KB

.rsrc
Size: 16KB - Virtual size: 16KB

.bdata
Size: 76KB - Virtual size: 76KB