fcf0b2723fb07c1723f4ee9c8f709015c3b6e08bcbf7325b62a969dd8b7080c1

Sharing

Copy URL Twitter E-mail

General

Target

fcf0b2723fb07c1723f4ee9c8f709015c3b6e08bcbf7325b62a969dd8b7080c1
Size

2.7MB
MD5

a253537683f49168ce56fc5f2ecbdb7f
SHA1

59b06a76fc217353ad8495ef22c07f504a643d48
SHA256

fcf0b2723fb07c1723f4ee9c8f709015c3b6e08bcbf7325b62a969dd8b7080c1
SHA512

bb138aebcb43d35614d1ff830ccc7d271ebc1c17bf17f836447885a3a27c15f1408b3d147127f82202bbc176b9b8af27c53e2b35a2a2d19489042a59afb1c2b7
SSDEEP

49152:MRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRH60606060606060606060606060W:frrrrrrrrrrrrrrrrrrrrrrrrrrrrrrf

Score

N/A

Malware Config

Signatures

Files

fcf0b2723fb07c1723f4ee9c8f709015c3b6e08bcbf7325b62a969dd8b7080c1
.exe windows x86

fbf78a613457cf63186bbb96cee7dcbc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc80u

ord2386
ord1959
ord1894
ord2402
ord2407
ord5633
ord2390
ord2392
ord266
ord265
ord2460
ord5398
ord2121
ord4101
ord1178
ord860
ord287
ord2265
ord5441
ord3645
ord6086
ord2788
ord4755
ord3873
ord2361
ord4232
ord3483
ord1562
ord658
ord3396
ord2011
ord605
ord715
ord620
ord745
ord587
ord2239
ord3327
ord4475
ord2832
ord5562
ord5209
ord5226
ord4562
ord3942
ord5222
ord5220
ord2925
ord1911
ord3826
ord5378
ord6215
ord4535
ord5096
ord3677
ord1007
ord3800
ord5579
ord2009
ord2054
ord566
ord4320
ord757
ord6274
ord3795
ord6272
ord4008
ord4032
ord3824
ord1049
ord5971
ord2077
ord1536
ord4226
ord3158
ord2409
ord4314
ord4743
ord354
ord1058
ord6061
ord6282
ord1634
ord1172
ord1572
ord1785
ord5316
ord3286
ord3635
ord1472
ord2155
ord4574
ord3176
ord4256
ord4238
ord3869
ord1392
ord5908
ord5485
ord6720
ord3189
ord5199
ord1542
ord1661
ord6161
ord6002
ord1662
ord4884
ord4729
ord6293
ord4206
ord578
ord5327
ord5178
ord2489
ord304
ord5711
ord2876
ord557
ord5484
ord5558
ord5414
ord1182
ord4119
ord3570
ord6172
ord6166
ord6160
ord4026
ord3781
ord3861
ord5444
ord564
ord3508
ord755
ord6003
ord2348
ord3192
ord2696
ord380
ord6747
ord5713
ord2310
ord2340
ord1571
ord2397
ord2648
ord2379
ord2381
ord2399
ord1925
ord2169
ord1271
ord2163
ord1513
ord1270
ord6273
ord3796
ord347
ord6275
ord3339
ord4961
ord1353
ord1955
ord1647
ord1479
ord1646
ord1590
ord2531
ord6700
ord2725
ord2086
ord2829
ord1582
ord4301
ord6721
ord2708
ord5911
ord2856
ord1611
ord2534
ord282
ord3155
ord1608
ord1198
ord2640
ord3940
ord2527
ord1393
ord3712
ord4234
ord3713
ord3157
ord3198
ord5148
ord3703
ord1899
ord2638
ord5636
ord3756
ord5067
ord3943
ord326
ord6271
ord4480
ord5171
ord4179
ord4255
ord5210
ord3311
ord709
ord501
ord741
ord3204
ord572
ord2362
ord3397
ord5196
ord6031
ord4716
ord4276
ord2261
ord1591
ord5956
ord5231
ord2985
ord5229
ord920
ord925
ord2366
ord929
ord2260
ord927
ord3678
ord931
ord5609
ord2384
ord1719
ord2404
ord4109
ord2388
ord4112
ord5727
ord2394
ord6063
ord3395
ord283
ord899
ord896
ord1000
ord3290
ord777
ord6284
ord655
ord1189
ord421
ord313
ord629
ord384
ord5083
ord3249
ord531
ord1908
ord2311
ord1146
ord1430
ord762
ord2897
ord383
ord1176
ord1079
ord5433
ord1105
ord723
ord577
ord293
ord280
ord3990
ord774
ord776
ord1118
ord5524
ord764

msvcr80

_vswprintf
wcstoul
??0exception@std@@QAE@ABQBD@Z
memset
__CxxFrameHandler3
memcpy
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
calloc
_purecall
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
wcsncpy
?what@exception@std@@UBEPBDXZ
_vsnwprintf
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
free
malloc
_wtoi64
wcsstr
memmove
memcpy_s
wcschr
wcsncmp
_itow
_wunlink
fwrite
fread
feof
ftell
fseek
fclose
_wfopen
_wcsicmp
_wsplitpath
_except_handler4_common
_invoke_watson
_controlfp_s
_wcsnicmp
_wtol
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_CxxThrowException

kernel32

GetProcAddress
TerminateProcess
CreateDirectoryW
GetTickCount
OutputDebugStringW
LockResource
LoadResource
SizeofResource
FindResourceW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
WriteFile
CloseHandle
ReadFile
CreateFileW
GetLastError
GetFileSize
SetFilePointer
LoadLibraryW
GetVersionExW
CreateMutexW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
CreateEventW
LeaveCriticalSection
CreateThread
TerminateThread
Sleep
GetExitCodeThread
SetEvent
SystemTimeToFileTime
GetCurrentDirectoryW
LocalFileTimeToFileTime
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetFileAttributesW
DeleteFileW
SetFileAttributesW
WritePrivateProfileStringW
GetCurrentProcess
WaitForSingleObject
LocalFree
GetCurrentProcessId
lstrlenW
WideCharToMultiByte
FormatMessageW
SetThreadLocale
MultiByteToWideChar

user32

GetSystemMetrics
GetDC
SendMessageW
MessageBoxW
IsWindow
RedrawWindow
GetParent
KillTimer
InvalidateRect
SetTimer
UpdateWindow
EnableWindow
GetClientRect
OffsetRect
SetCursor
GetSysColor
FillRect
GetWindowRect
GetWindowThreadProcessId
IsIconic
PostQuitMessage
DrawIcon
GetWindowLongW
SetWindowLongW
RegisterWindowMessageW
PeekMessageW
SetLayeredWindowAttributes
LoadIconW

gdi32

GetTextExtentPoint32W
GetObjectW
CreateCompatibleBitmap
CreateSolidBrush
BitBlt
Rectangle
SetViewportOrgEx
GetViewportOrgEx
CreateFontIndirectW
CreateCompatibleDC
DeleteObject
GetStockObject

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW

shell32

SHGetFolderPathW
ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathUnquoteSpacesW
PathFileExistsW
PathAppendW

ole32

CoCreateGuid
CoTaskMemFree
CreateStreamOnHGlobal
CoTaskMemAlloc

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime

urlmon

FindMimeFromData

toolkitpro1112vc80u

?XTPSkinManager@@YAPAVCXTPSkinManager@@XZ
?LoadSkin@CXTPSkinManager@@QAEHPB_W0@Z

gdiplus

GdipCloneImage
GdiplusStartup
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetPageScale
GdipSetPageUnit
GdipSetSmoothingMode
GdipDrawImageRectI
GdipFree
GdipAlloc
GdipCreateBitmapFromStream
GdipDisposeImage
GdipGetImageHeight
GdipGetImageWidth

msvcp80

??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

wininet

HttpAddRequestHeadersA
HttpOpenRequestA
InternetSetOptionW
InternetWriteFile
HttpSendRequestExW
InternetReadFile
HttpSendRequestW
HttpEndRequestW
HttpQueryInfoW
InternetOpenW
InternetCloseHandle
InternetConnectW
HttpOpenRequestW

dump

?RegisterCrashHandler@@YAHPB_W0@Z

Sections

.text
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fbf78a613457cf63186bbb96cee7dcbc

Headers

File Characteristics

Imports

mfc80u

msvcr80

kernel32

user32

gdi32

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

urlmon

toolkitpro1112vc80u

gdiplus

msvcp80

wininet

dump

Sections

.text Size: 124KB - Virtual size: 122KB

.rdata Size: 56KB - Virtual size: 54KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 2.6MB - Virtual size: 2.6MB

.text
Size: 124KB - Virtual size: 122KB

.rdata
Size: 56KB - Virtual size: 54KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 2.6MB - Virtual size: 2.6MB