cb328d3f670e944e9227ce41ad0e7ee36662135c84d9520ad289d5ad49ad0bb9

Sharing

Copy URL Twitter E-mail

General

Target

cb328d3f670e944e9227ce41ad0e7ee36662135c84d9520ad289d5ad49ad0bb9
Size

180KB
MD5

919b23e8b59005c8424b896078d0cc28
SHA1

6f5156af51f0f4bf32810d84f3b1814f8721f40c
SHA256

cb328d3f670e944e9227ce41ad0e7ee36662135c84d9520ad289d5ad49ad0bb9
SHA512

f4a7c7600e958f7da3da9cd28458f2d29f17a95e4f3dfd7eb8d9777b9c63b3d4facdb4ce9cd5021e2fc425649ace4eb281cd3b5891564f204709f5ce1150e6fa
SSDEEP

3072:kh9C5VpTmzUFaKqO1rTwTyaXC17R/w4ZTRICj4DcikTAUNlqe:D5PR1qO1rc+aSL11ICMDciyAY

Score

N/A

Malware Config

Signatures

Files

cb328d3f670e944e9227ce41ad0e7ee36662135c84d9520ad289d5ad49ad0bb9
.exe windows x86

dfc76770b661d566be31581f16c0da06

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CreateFileMappingW
InterlockedIncrement
InterlockedDecrement
SetEvent
lstrlenW
MultiByteToWideChar
lstrlenA
SetLastError
GetModuleFileNameW
GlobalUnlock
GlobalLock
GlobalAlloc
ExitProcess
GetCommandLineW
GetTimeFormatW
GetDateFormatW
GetLocalTime
RaiseException
MapViewOfFile
GetCurrentThreadId
GetModuleHandleW
LocalFree
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
Sleep
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetProcAddress
InterlockedCompareExchange
GetVersionExA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
FlushInstructionCache
DeleteCriticalSection
InitializeCriticalSection
CreateFileW
SetFilePointer
GetSystemDefaultLangID
WriteFile
CloseHandle
FindFirstFileW
FindNextFileW
FindClose
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
LeaveCriticalSection
EnterCriticalSection

user32

UnregisterClassA
MoveWindow
GetParent
GetWindowRect
SystemParametersInfoW
MapWindowPoints
GetDC
GetClientRect
GetWindowLongW
SetWindowContextHelpId
GetDlgItem
GetWindow
SendDlgItemMessageW
SetWindowPos
PostMessageW
SendMessageW
CreateWindowExW
MapDialogRect
DestroyWindow
PostQuitMessage
RegisterWindowMessageW
PostThreadMessageW
ShowWindow
SetWindowTextW
SetWindowLongW
GetMessageW
SetForegroundWindow
TranslateMessage
DispatchMessageW

gdi32

GetDeviceCaps

advapi32

RegSetValueExW
RegOpenKeyW
RegQueryValueExW
RegCreateKeyExW
RegCloseKey

shell32

SHGetSpecialFolderPathW

ole32

CoUninitialize
CoCreateInstance
CreateStreamOnHGlobal
CoInitialize

oleaut32

GetErrorInfo
SysStringByteLen
SysAllocStringByteLen
SysAllocString
LoadTypeLi
LoadRegTypeLi
DispCallFunc
SysAllocStringLen
VariantClear
VariantInit
SysStringLen
SysFreeString

atl80

ord58
ord37
ord64
ord44
ord43
ord11
ord10
ord47
ord42
ord48
ord31
ord60
ord54

msvcr80

_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson
_controlfp_s
__dllonexit
_encode_pointer
_unlock
??3@YAXPAX@Z
free
wcsstr
memcpy_s
_CxxThrowException
memmove_s
_initterm_e
malloc
_recalloc
__CxxFrameHandler3
_wtoi
vswprintf_s
memset
??_V@YAXPAX@Z
calloc
??_U@YAPAXI@Z
wcsrchr
_vscwprintf
??2@YAPAXI@Z
_itoa_s
_wtof
_except_handler4_common
?terminate@@YAXXZ

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dfc76770b661d566be31581f16c0da06

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

atl80

msvcr80

Sections

.text Size: 40KB - Virtual size: 37KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 116KB - Virtual size: 116KB

.text
Size: 40KB - Virtual size: 37KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 116KB - Virtual size: 116KB