015c712bcb61874f4c4a7ed701a3693fc38a6b1e2b9dd051dcfc920df9cfd53c

Sharing

Copy URL

Twitter E-mail

General

Target

015c712bcb61874f4c4a7ed701a3693fc38a6b1e2b9dd051dcfc920df9cfd53c
Size

336KB
MD5

81fe17b0b5d6ec6b37d722446576d2f9
SHA1

140c40a7170d92690772f5ee37f09c5cd7e664a3
SHA256

015c712bcb61874f4c4a7ed701a3693fc38a6b1e2b9dd051dcfc920df9cfd53c
SHA512

640fad8ca7e0239220fcf334fd108eafad1884bd34dcfc8a10baae1daab5de413b6918b21df1bf8cf1ab6182b192a89c3ba47e82e8e52c16bd76b260936f17fb
SSDEEP

3072:b6c2H6ImkrXZ0G1WdBPyZL5j+Z859Nst:b6c2a2lR1WdtcLB+Zyvst

Score

N/A

Malware Config

Signatures

Files

015c712bcb61874f4c4a7ed701a3693fc38a6b1e2b9dd051dcfc920df9cfd53c
.exe windows x86

167c39f30a0971a33b8545f8e6fe8327

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

swprintf
_vsnprintf
_onexit
__dllonexit
_except_handler3
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_adjust_fdiv
_initterm
_wtol
wcsstr
_wtoi
strchr
_wcsnicmp
_ftol
memset
strcmp
memmove
wcscmp
__RTDynamicCast
_purecall
realloc
__CxxFrameHandler
malloc
??2@YAPAXI@Z
free
??3@YAXPAX@Z

ntdll

NtFlushBuffersFile
NtGetPlugPlayEvent
NtReleaseSemaphore
NtDeleteKey
NtQueryMultipleValueKey
NtQueryObject
NtOpenProcessToken
NtQuerySystemInformation

kernel32

lstrlenW
GetModuleHandleW
IsBadWritePtr
GetProcAddress
TlsFree
LoadLibraryW
GetStdHandle
IsBadReadPtr
LocalFree
FreeLibrary
lstrcpynW
GetACP
TryEnterCriticalSection
GetModuleHandleA
lstrcmpW
TlsSetValue
CreateFileA
IsBadStringPtrW
lstrcpyW
QueryPerformanceCounter
GetTickCount
QueryPerformanceFrequency
TlsAlloc
CloseHandle
ReadFile
GetSystemTimeAsFileTime
LoadLibraryA
GetWindowsDirectoryW
FindAtomA
GetUserDefaultLCID
SetEvent
GetSystemDefaultUILanguage
LCMapStringW
AreFileApisANSI
GetVersion
OpenEventA
GlobalFree
FindResourceExW
HeapDestroy
RegisterWaitForSingleObject
GetCurrentProcessId
PulseEvent
UnregisterWait
CreateEventW
OutputDebugStringA
FindResourceExA
lstrcatA
GetLocalTime
HeapAlloc
GetProcessHeap
CreateSemaphoreA
InterlockedExchange
SetLastError
FindResourceW
CreateMutexA
HeapFree
GetConsoleOutputCP
TlsGetValue
GetSystemDefaultLCID
UnregisterWaitEx
FindClose
WaitForSingleObject
WaitForMultipleObjects
CreateThread
QueueUserWorkItem
lstrlenA
CreateSemaphoreW
WideCharToMultiByte
GetEnvironmentStringsA
MultiByteToWideChar
GetCurrentProcess
GetComputerNameW
OpenEventW
GetLastError
InterlockedDecrement
VirtualAlloc
InterlockedIncrement
GetTempPathA
DeleteCriticalSection
GetUserDefaultUILanguage
GetCurrentDirectoryA
Sleep
GetCommandLineW
InitializeCriticalSection
FreeEnvironmentStringsA
InterlockedCompareExchange
GetOEMCP
GetCurrentThreadId
GlobalAlloc
GetThreadLocale
EnterCriticalSection
SleepEx
LeaveCriticalSection
IsSystemResumeAutomatic
OpenMutexA
GetLogicalDrives
HeapCreate
GetTempFileNameA
LocalAlloc
DisableThreadLibraryCalls

ole32

CoInitializeEx
CoUninitialize
IIDFromString
StringFromIID
CoCreateFreeThreadedMarshaler
CreateBindCtx
CLSIDFromString
StringFromCLSID
CoTaskMemFree
CoCreateInstance
StringFromGUID2

ws2_32

WSAIoctl
WSASocketW

advapi32

RegOpenKeyExW
RegQueryInfoKeyA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegEnumValueA
GetUserNameW
RegQueryValueExW

user32

FindWindowA
CreateWindowExA
GetInputState
ReleaseDC
GetWindowLongW
GetCaretBlinkTime
GetMessageA
UnregisterClassW
DestroyWindow
DispatchMessageW
UnregisterClassA
GetSystemMetrics
TranslateMessage
GetDC
PostQuitMessage
PeekMessageW
GetClipboardViewer
GetSysColor
UnregisterDeviceNotification
UpdateWindow
GetDesktopWindow
GetCapture
MsgWaitForMultipleObjectsEx
RegisterDeviceNotificationW
GetForegroundWindow
GetActiveWindow
GetProcessDefaultLayout
CreateWindowExW
RegisterClassW
DefWindowProcW
LoadStringW
LoadIconA
DispatchMessageA
DefWindowProcA
wsprintfA
SetWindowLongW

winmm

mixerGetLineControlsA
mixerClose
mixerOpen
mixerGetControlDetailsA
timeGetTime

rtutils

TraceRegisterExW
TraceVprintfExA
TraceDeregisterW

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 200KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 81KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

167c39f30a0971a33b8545f8e6fe8327

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

ntdll

kernel32

ole32

ws2_32

advapi32

user32

winmm

rtutils

Sections

.text Size: 71KB - Virtual size: 71KB

.rdata Size: 31KB - Virtual size: 30KB

.data Size: 200KB - Virtual size: 198KB

.bss Size: - Virtual size: 81KB

.rsrc Size: 29KB - Virtual size: 29KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 71KB - Virtual size: 71KB

.rdata
Size: 31KB - Virtual size: 30KB

.data
Size: 200KB - Virtual size: 198KB

.bss
Size: - Virtual size: 81KB

.rsrc
Size: 29KB - Virtual size: 29KB

.reloc
Size: 3KB - Virtual size: 3KB