6386a1af7ddff9f36349fb4682e5bdcbe4acbdbdfc1f32419e68380bfc29f0e8

Sharing

Copy URL Twitter E-mail

General

Target

6386a1af7ddff9f36349fb4682e5bdcbe4acbdbdfc1f32419e68380bfc29f0e8
Size

196KB
MD5

16b1d9b70423817385e8342f71bd9a30
SHA1

c09b64ddd0555bc8887da4dec4c99aee5e8cea39
SHA256

6386a1af7ddff9f36349fb4682e5bdcbe4acbdbdfc1f32419e68380bfc29f0e8
SHA512

50d3f144a214ce4e4fcba7626cb43eb1f8bb0aa8ebd6e0f2c1c2a50536ec8a4f79114dee86dc4aef0233c25cf14c11f61fec975aec10ca20ba23442de27162f8
SSDEEP

3072:hFvcuiK62AMnHiV67gOHTCPcmbZUU/C2cDBBKKLelM9fHyIuwA/YbYxIc8iNe3B1:XkuhZPCPLUU8GkfHqI

Score

N/A

Malware Config

Signatures

Files

6386a1af7ddff9f36349fb4682e5bdcbe4acbdbdfc1f32419e68380bfc29f0e8
.exe windows x86

973fad75d7fe693ad5b253171a4d8feb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42u

ord4270
ord755
ord470
ord6451
ord6399
ord4199
ord4219
ord6279
ord6278
ord3084
ord1787
ord4078
ord1921
ord5706
ord4124
ord4667
ord4269
ord2717
ord3948
ord3396
ord6371
ord4480
ord2546
ord2504
ord5727
ord3917
ord1089
ord5193
ord2388
ord3341
ord5296
ord5298
ord4074
ord4692
ord5303
ord5285
ord5710
ord4616
ord3733
ord815
ord561
ord6113
ord2613
ord1644
ord3805
ord6654
ord5679
ord537
ord2644
ord1662
ord1105
ord3050
ord940
ord860
ord1165
ord5852
ord1634
ord3397
ord3614
ord3716
ord809
ord795
ord556
ord3621
ord2406
ord1088
ord2114
ord3792
ord5871
ord2746
ord6354
ord6193
ord6871
ord6597
ord922
ord6920
ord2914
ord3875
ord925
ord800
ord6195
ord4229
ord2294
ord825
ord324
ord641
ord3592
ord4419
ord4621
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord1143
ord1230
ord6437
ord6211
ord818
ord567
ord3737
ord4418
ord941
ord6918
ord6655
ord927
ord4197
ord1567
ord4272
ord6865
ord1569
ord4155
ord5286
ord1768
ord6051
ord2371
ord355
ord3494
ord3092
ord4050
ord3090
ord1771
ord5947
ord6330
ord3871
ord2350
ord6390
ord5446
ord6379
ord5436
ord3658
ord2854
ord2859
ord2855
ord2444
ord4282
ord1197
ord823
ord942
ord2910
ord5568
ord6868
ord3517
ord858
ord4273
ord861
ord4704
ord538
ord535
ord540
ord2810
ord2606
ord5949
ord3131
ord4459
ord3254
ord3142
ord2977
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5276
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord1767
ord4073
ord6048
ord2506
ord4992
ord4847
ord4370
ord920
ord5261

msvcrt

_controlfp
__CxxFrameHandler
wcscmp
wcstol
wcscat
swprintf
_snwprintf
exit
_ftol
wcsncpy
wcslen
free
_wcsupr
_wcsdup
malloc
wcsrchr
wcscpy
_wtoi
wcstod
rand
srand
time
wcsstr
_wsplitpath
_exit
_XcptFilter
_wcmdln
__wgetmainargs
_initterm
wcstoul
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit

kernel32

GetModuleHandleW
GetCurrentDirectoryW
WinExec
GetWindowsDirectoryW
GetVersionExW
TryEnterCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
GetTickCount
DeleteCriticalSection
InitializeCriticalSection
LocalFree
CreateDirectoryW
GetShortPathNameW
GetCommandLineW
GetLocaleInfoW
CreateProcessW
CloseHandle
GetLastError
lstrcpyW
lstrcatW
WideCharToMultiByte
WritePrivateProfileStringW
lstrcmpW
FreeLibrary
LoadLibraryW
GetProcAddress
GetModuleFileNameW
GetFileAttributesW
WaitForSingleObject
lstrlenW
GetPrivateProfileStringW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
LoadLibraryExW
GetStartupInfoW

user32

EnableWindow
SetWindowPos
LockWorkStation
GetLastInputInfo
PeekMessageW
SendMessageW
MessageBeep
InvalidateRect
PtInRect
ScreenToClient
GetMessagePos
InflateRect
CopyIcon
PostMessageW
LoadCursorW
SetCursor
PostQuitMessage
SystemParametersInfoW
GetSysColor
GetClientRect
wsprintfW
GetWindow
GetWindowRect
ShowCursor
KillTimer
LoadIconW
SetTimer
CreateIconIndirect
GetWindowTextW
IsWindowVisible
IsWindow
GetWindowLongW
ClipCursor
GetCursorPos
GetWindowRgn
ReleaseDC
SetWindowLongW
FindWindowExW
GetClassNameW
WindowFromPoint
GetSystemMetrics
FindWindowW
GetParent
EnumWindows
GetDC
GetForegroundWindow
GetLastActivePopup
GetActiveWindow
LoadImageW
DialogBoxIndirectParamW
EndDialog
MoveWindow
WinHelpW
EndPaint
BeginPaint
EnableMenuItem
GetSystemMenu
SetForegroundWindow
LoadStringW
DestroyWindow
SetFocus
CreateWindowExW
FillRect
DrawEdge
DrawStateW
DestroyCursor
DestroyIcon
GetIconInfo
OpenInputDesktop

gdi32

GetTextExtentPoint32W
GetObjectW
CreateFontIndirectW
GetStockObject
SetBkMode
BitBlt
CreateSolidBrush
CreateCompatibleBitmap
GetTextMetricsW
SetBkColor
SetTextColor
LineTo
MoveToEx
CreatePen
TextOutW
SetTextJustification
GetDeviceCaps
StretchBlt
CreateBitmap
CreateCompatibleDC
CreateDIBSection
SelectObject
DeleteDC
CreateRectRgn
DeleteObject
OffsetRgn

advapi32

RegFlushKey
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryValueW
RegSetValueExW
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptReleaseContext
CryptCreateHash
CryptAcquireContextW
RegCreateKeyExW

shell32

ShellExecuteW
SHGetFolderPathW
ShellExecuteExW

gdiplus

GdipCloneImage
GdipCloneBrush
GdipDisposeImage
GdipCreateFromHDC
GdipLoadImageFromFile
GdipDrawImagePointsI
GdipReleaseDC
GdipDeleteGraphics
GdipCreateRegionHrgn
GdipCreateRegionRectI
GdipSetClipRegion
GdipDeleteRegion
GdipFree
GdipSetClipRectI
GdipCreateSolidFill
GdipFillRectangleI
GdipDeleteBrush
GdiplusShutdown
GdiplusStartup
GdipAlloc

shlwapi

PathFileExistsW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

comctl32

ord17
ImageList_GetImageCount
ImageList_GetIcon

msvcp60

??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ

Sections

.text
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

973fad75d7fe693ad5b253171a4d8feb

Headers

File Characteristics

Imports

mfc42u

msvcrt

kernel32

user32

gdi32

advapi32

shell32

gdiplus

shlwapi

version

comctl32

msvcp60

Sections

.text Size: 148KB - Virtual size: 144KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 16KB - Virtual size: 21KB

.rsrc Size: 8KB - Virtual size: 6KB

.text
Size: 148KB - Virtual size: 144KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 16KB - Virtual size: 21KB

.rsrc
Size: 8KB - Virtual size: 6KB