9cddb5b0a06cccb7c462501f350a2dacaf5cc025c86da888167dd3ccfb155664

Sharing

Copy URL

Twitter E-mail

General

Target

9cddb5b0a06cccb7c462501f350a2dacaf5cc025c86da888167dd3ccfb155664
Size

151KB
MD5

88f93a402133122bac2d01919172290e
SHA1

972696c40334cca84749f0088476be07ae252f30
SHA256

9cddb5b0a06cccb7c462501f350a2dacaf5cc025c86da888167dd3ccfb155664
SHA512

b99ac2761eb9ff4e7337835628d94d3891bece067fb065398fb7310a4940e013048447f76385f912b9137f737ac23f28a62ed0b7ff5514d4cd97b00c0d71642f
SSDEEP

3072:4cjQBVu4MmLTNrLocAaKOZleuzTZ7x+oBwh1KExgb4VVNwJ:42quEfLAaK0lFTZ7x+1Nxgb4VVyJ

Score

N/A

Malware Config

Signatures

Files

9cddb5b0a06cccb7c462501f350a2dacaf5cc025c86da888167dd3ccfb155664
.exe windows x86

62043e025354a70c39900aef874e365b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

UrlGetLocationA
UrlIsOpaqueW

comctl32

ImageList_Read
ImageList_Create
ImageList_Draw
CreateStatusWindowW
ImageList_ReplaceIcon

msvcrt

isspace
fread
realloc
towupper
iswspace
_controlfp
toupper
strerror
iswalpha
__set_app_type
fseek
__p__fmode
printf
floor
strcoll
strrchr
mbstowcs
calloc
wcstod
mktime
__p__commode
exit
_amsg_exit
_initterm
_ismbblead
_XcptFilter
strcpy
iswprint
atol
_exit
_cexit
__setusermatherr
clock
setlocale
isprint
__getmainargs

user32

SetClassLongW
GetSubMenu
SwitchToThisWindow
GetMessageA
PostThreadMessageW
IsWindowUnicode
GetMenuItemCount
CheckMenuItem
CopyRect
GetSystemMenu
GetCaretPos
TranslateAcceleratorW
GetUserObjectInformationW
ModifyMenuW
wvsprintfW
CheckDlgButton
wsprintfW
InvertRect
ShowOwnedPopups
SetWindowTextW
FindWindowExW
CreateCursor
OffsetRect
DrawFrameControl
GetDlgItemInt
ShowScrollBar
GetWindowLongA
GetMessagePos
GetDlgItem
IsChild
CreateWindowExW
MessageBoxA
SetMenu
SetWindowLongW
GetMonitorInfoW
CreateDialogIndirectParamW
GrayStringW
GetKeyNameTextW
DrawStateA
DrawStateW
TabbedTextOutW
CreateIconFromResource
FindWindowExA
IsCharUpperA
CreateAcceleratorTableW
DestroyCursor
GetNextDlgTabItem
EqualRect
AdjustWindowRect
HiliteMenuItem
TranslateMessage
GetForegroundWindow
SetScrollInfo
MessageBoxExW
GetMenuItemID
GetTopWindow
ShowWindow
GetDialogBaseUnits
SetWindowPos
SetWindowTextA
SendMessageW
DefFrameProcA
FillRect
RegisterClassExW
SetSysColors
DefWindowProcA
MapVirtualKeyExW
AppendMenuA
RegisterClassW
IsRectEmpty
SetRectEmpty
GetWindowTextW
ChangeMenuW
SystemParametersInfoW
IsCharAlphaW
CharToOemBuffA
DeferWindowPos
IsCharAlphaA
SendMessageA
GetDC
DefWindowProcW
SendMessageTimeoutW
CharNextExA

kernel32

SetHandleCount
LocalFree
FindResourceW
lstrcmpiW
HeapAlloc
UnmapViewOfFile
GetStdHandle
CreateNamedPipeW
GetFullPathNameA
GetTimeFormatA
GetModuleFileNameA
GetAtomNameW
SizeofResource
AreFileApisANSI
GetComputerNameExA
EnterCriticalSection
FlushViewOfFile
IsBadWritePtr
SetupComm
GetComputerNameA
CreateNamedPipeA
lstrcatA
CloseHandle
ClearCommBreak
LCMapStringA
LeaveCriticalSection
CancelIo
MulDiv
GlobalGetAtomNameA
GlobalCompact
lstrcpyW
CancelWaitableTimer
HeapSize
LocalSize
MapViewOfFile
FindFirstChangeNotificationW
GetVersionExW
GlobalFindAtomW
MoveFileW
CreatePipe

Exports

Exports

?HistoryLoggingOn@@YGKDKPAX:O

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdbg
Size: 512B - Virtual size: 115B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.iplan
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.eplan
Size: 512B - Virtual size: 91B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.run
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.0dat
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ram
Size: - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62043e025354a70c39900aef874e365b

Headers

File Characteristics

Imports

shlwapi

comctl32

msvcrt

user32

kernel32

Exports

Exports

Sections

.text Size: 23KB - Virtual size: 23KB

.rdbg Size: 512B - Virtual size: 115B

.iplan Size: 4KB - Virtual size: 4KB

.eplan Size: 512B - Virtual size: 91B

.run Size: 1024B - Virtual size: 728B

.0dat Size: 115KB - Virtual size: 114KB

.data Size: 3KB - Virtual size: 2KB

.ram Size: - Virtual size: 94KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 23KB - Virtual size: 23KB

.rdbg
Size: 512B - Virtual size: 115B

.iplan
Size: 4KB - Virtual size: 4KB

.eplan
Size: 512B - Virtual size: 91B

.run
Size: 1024B - Virtual size: 728B

.0dat
Size: 115KB - Virtual size: 114KB

.data
Size: 3KB - Virtual size: 2KB

.ram
Size: - Virtual size: 94KB

.rsrc
Size: 2KB - Virtual size: 1KB