1d5c01c4bbd9a2aa650ad153c6c637ead70384cc2466a16448a1b4d8b9ab0cef

Sharing

Copy URL

Twitter E-mail

General

Target

1d5c01c4bbd9a2aa650ad153c6c637ead70384cc2466a16448a1b4d8b9ab0cef
Size

200KB
MD5

54936a50920efc3ed448c893db728967
SHA1

2ce6da4d50affca347fdc578c290c7087538f175
SHA256

1d5c01c4bbd9a2aa650ad153c6c637ead70384cc2466a16448a1b4d8b9ab0cef
SHA512

7cbdb936330dae3bad2343bbbf3db95051f2b44030b4e17c2b09bbbb152fe24dfa1d5c429ca5ab454989eb2fe7581eda0a278384de6b81dc6dbec2ae6e53535c
SSDEEP

6144:nHjflCVM2jfSK9jJJ3l4iDniF5QCyIrqDuTA0RsOd:nHjflCVM2OQtDiFaFSHRD

Score

N/A

Malware Config

Signatures

Files

1d5c01c4bbd9a2aa650ad153c6c637ead70384cc2466a16448a1b4d8b9ab0cef
.exe windows x86

739dd6f0503e3fb73b4a0d490247e59d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
WaitForSingleObject
Sleep
lstrcpynA
GetCurrentThreadId
InterlockedIncrement
CreateThread
CreateEventA
IsDBCSLeadByte
InterlockedDecrement
SetEvent
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetProcAddress
LoadLibraryA
ReadFile
CreateFileA
OpenEventA
GetModuleHandleA
LockResource
FindResourceExA
GetTickCount
lstrcatA
FormatMessageA
FindClose
FindFirstFileA
CreateMutexA
OpenMutexA
SetFilePointer
UnlockFile
SetEndOfFile
WriteFile
LockFile
GetFileSize
ReleaseMutex
SetLastError
OutputDebugStringA
GetTimeFormatA
GetDateFormatA
GetSystemTime
lstrcpyA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
ExitProcess
LocalFree
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetModuleFileNameA
GetShortPathNameA
lstrcmpiW
lstrcmpiA
lstrlenA
CloseHandle
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
LocalAlloc
InterlockedExchange

user32

wsprintfA
CharNextA
CharUpperA
TranslateMessage
DispatchMessageA
GetMessageA
PostThreadMessageA
MessageBoxA
PostMessageA
FindWindowA
PostQuitMessage
DefWindowProcA
RegisterClassExA
CreateWindowExA
CloseWindow
LoadStringA

advapi32

ReportEventA
StartServiceA
ControlService
OpenSCManagerA
OpenServiceA
CloseServiceHandle
QueryServiceStatus
RegQueryInfoKeyA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegisterEventSourceA
SetServiceStatus
RegEnumKeyExA
CreateServiceA
DeleteService
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
DeregisterEventSource

shell32

SHGetFileInfoA

ole32

OleRun
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CLSIDFromProgID
CoInitializeEx
CoUninitialize
CoInitializeSecurity
CoSuspendClassObjects
StringFromGUID2
CoCreateInstance
CoResumeClassObjects
IIDFromString
ProgIDFromCLSID
CoCreateGuid
StringFromCLSID

hpvaut32

ord10
ord314
ord313
ord149
ord150
ord4
ord7
ord162
ord277
ord163
ord186
ord12
ord9
ord8
ord161
ord2
ord6
ord200

hpvcp70

?_Nomemory@std@@YAXXZ

hpvcr70

_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__security_error_handler
_callnewh
wcslen
memset
??0exception@@QAE@ABV0@@Z
_ltoa
??1exception@@UAE@XZ
_ultoa
strstr
strncat
printf
strchr
atol
__RTDynamicCast
wcsstr
memmove
_mbscmp
realloc
_purecall
vsprintf
puts
??_V@YAXPAX@Z
__CxxFrameHandler
??3@YAXPAX@Z
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
??0exception@@QAE@XZ
__setusermatherr
_mbschr
_mbsrchr
_mbsstr
_CxxThrowException
_except_handler3
malloc
free

Sections

.text
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

739dd6f0503e3fb73b4a0d490247e59d

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

hpvaut32

hpvcp70

hpvcr70

Sections

.text Size: 84KB - Virtual size: 82KB

.rdata Size: 32KB - Virtual size: 29KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 4KB

.rrdata Size: 68KB - Virtual size: 68KB

.text
Size: 84KB - Virtual size: 82KB

.rdata
Size: 32KB - Virtual size: 29KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 4KB

.rrdata
Size: 68KB - Virtual size: 68KB