cbeb772e53f539ed2a49e088ee50124926d0cb8e6b40c4f651de9efe64c9acc9

Sharing

Copy URL Twitter E-mail

General

Target

cbeb772e53f539ed2a49e088ee50124926d0cb8e6b40c4f651de9efe64c9acc9
Size

621KB
MD5

f1e864c07455d579d0047b79ec5bf4c3
SHA1

af4d46007be3df919552e1fdf839fa90156de5b2
SHA256

cbeb772e53f539ed2a49e088ee50124926d0cb8e6b40c4f651de9efe64c9acc9
SHA512

4483c4c2db7d60a6272da728611b1687ec4cf2b1debc1e5b2f346909f78387f5bcb47c11bacb5ee3bee8c61929cd425958583690e3a49fb63070d3b37a1ed906
SSDEEP

12288:WukphCw567MpRKTLP/CeI4NW2nYb7SK/avYWm1ptoiTw:E4G67CcPqeI4ZaFdtoiTw

Score

N/A

Malware Config

Signatures

Files

cbeb772e53f539ed2a49e088ee50124926d0cb8e6b40c4f651de9efe64c9acc9
.exe windows x86

9cb90e6f05b445da5db8ef758e437471

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GlobalUnlock
GetStdHandle
GetLastError
GetProcAddress
GetLocalTime
LoadLibraryA
GetConsoleScreenBufferInfo
LocalAlloc
WaitForMultipleObjects
GetModuleHandleA
FillConsoleOutputAttribute
CloseHandle
LocalFree
lstrcpyW
lstrcpyA
SetEndOfFile
CreateFileW
WriteConsoleW
SetStdHandle
LoadLibraryW
HeapReAlloc
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
GetACP
HeapSize
GetLocaleInfoW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GlobalLock
lstrlenW
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetFilePointer
ReadFile
ExitProcess
GetModuleHandleW
IsProcessorFeaturePresent
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCPInfo
MultiByteToWideChar
LCMapStringW
WideCharToMultiByte
lstrcatA
LocalReAlloc
MulDiv
SetConsoleCursorPosition
HeapCreate
CreateEventA
ReadConsoleInputA
GlobalAlloc
WriteFile
FlushConsoleInputBuffer
RtlUnwind
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapFree
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetProcessHeap
Sleep
HeapAlloc
FreeLibrary
lstrlenA
DecodePointer
EncodePointer
InterlockedDecrement
InterlockedIncrement
GetEnvironmentStringsW
WaitForSingleObject
CreateFileA
TlsAlloc
FillConsoleOutputCharacterA

user32

BeginDeferWindowPos
SystemParametersInfoA
SetMenuItemInfoA
EndDeferWindowPos
SetClipboardData
UpdateWindow
ShowWindow
OpenClipboard
GetWindow
GetClassLongA
MoveWindow
CreateWindowExW
wvsprintfA
IsWindow
GetMenuItemCount
GetMenuItemID
LoadImageA
EndPaint
DestroyWindow
CloseClipboard
ScreenToClient
GetWindowRect
SendDlgItemMessageA
EnumWindowStationsW
GetSubMenu
LoadStringA
CopyImage
LoadBitmapA
GetParent
LoadIconA
EnumDisplaySettingsA
GetClientRect
SetFocus
SendMessageA
GetMonitorInfoA
GetDC
GetForegroundWindow
GetWindowTextA
MessageBoxA
GetWindowLongA
GetClipboardData
CreateWindowExA
ReleaseDC
EmptyClipboard
MonitorFromWindow
GetMenuState
GetDlgItem
GetMenuItemInfoA
GetMenuStringA
AppendMenuA

gdi32

GetDeviceCaps
GetStockObject
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap

comdlg32

GetOpenFileNameA
ChooseFontA

shell32

Shell_NotifyIconA

ole32

CoInitialize
CoInitializeEx
CoCreateInstance

oleaut32

SysFreeString
SysAllocString

ws2_32

WSCEnumProtocols

userenv

UnloadUserProfile

avifil32

AVIStreamCreate
AVIFileInit

msacm32

acmStreamOpen
acmStreamPrepareHeader
acmStreamClose
acmStreamUnprepareHeader

winmm

mmioClose
mmioAscend
mmioDescend
mmioRead
mmioOpenW
mmioCreateChunk
mmioWrite

shlwapi

StrChrA

comctl32

ord17
InitCommonControlsEx

rpcrt4

UuidCreate
UuidToStringA
UuidToStringW
RpcStringFreeA

opengl32

glViewport
glMatrixMode
glLoadIdentity

glu32

gluPerspective

wtsapi32

WTSQuerySessionInformationA

wsnmp32

ord320

Sections

.text
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9cb90e6f05b445da5db8ef758e437471

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

ole32

oleaut32

ws2_32

userenv

avifil32

msacm32

winmm

shlwapi

comctl32

rpcrt4

opengl32

glu32

wtsapi32

wsnmp32

Sections

.text Size: 105KB - Virtual size: 105KB

.rdata Size: 73KB - Virtual size: 72KB

.data Size: 8KB - Virtual size: 16KB

.ddata Size: 216KB - Virtual size: 215KB

.rsrc Size: 208KB - Virtual size: 207KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 105KB - Virtual size: 105KB

.rdata
Size: 73KB - Virtual size: 72KB

.data
Size: 8KB - Virtual size: 16KB

.ddata
Size: 216KB - Virtual size: 215KB

.rsrc
Size: 208KB - Virtual size: 207KB

.reloc
Size: 9KB - Virtual size: 9KB