af5ac96f947abe90b92233ac58b98e8b4f7ea77467e6d8b5d0f4e083d07272f8

Sharing

Copy URL Twitter E-mail

General

Target

af5ac96f947abe90b92233ac58b98e8b4f7ea77467e6d8b5d0f4e083d07272f8
Size

1.2MB
MD5

cb35be77ca409df7860c3e28a7ed8630
SHA1

50536442bad819d00aa137debfe169d6b6354a93
SHA256

af5ac96f947abe90b92233ac58b98e8b4f7ea77467e6d8b5d0f4e083d07272f8
SHA512

f8057ea822927d48113fb705958cce9970b8f5afe945e0527ceb271dabb164c1890b46d282bdc2e5362d303bfe9471e41af2bec16fe0908d6acdebd4aa285821
SSDEEP

24576:OqX4AjL1ucl02rvDw3SSSqSSSSWSSSShSSSeCT:OqX4AjLjNrvDwNT

Score

N/A

Malware Config

Signatures

Files

af5ac96f947abe90b92233ac58b98e8b4f7ea77467e6d8b5d0f4e083d07272f8
.exe windows x86

b60f1136c7cfac3db542898794f5889c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord6696
ord2092
ord1783
ord2938
ord3499
ord2515
ord355
ord4033
ord2915
ord2814
ord3810
ord668
ord1980
ord3181
ord2781
ord2770
ord356
ord2614
ord3619
ord3663
ord3626
ord2414
ord1641
ord2859
ord1871
ord4133
ord4297
ord5788
ord2860
ord472
ord1567
ord268
ord283
ord2754
ord4277
ord2763
ord1949
ord5821
ord3662
ord812
ord818
ord1176
ord414
ord559
ord713
ord2809
ord2970
ord1270
ord1232
ord4287
ord6144
ord3089
ord4275
ord755
ord470
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord6189
ord6021
ord6172
ord5873
ord5789
ord5794
ord5678
ord5736
ord5579
ord5571
ord6061
ord5864
ord3596
ord3571
ord640
ord6194
ord5785
ord1640
ord323
ord3573
ord2379
ord5053
ord6458
ord3693
ord786
ord1706
ord430
ord2461
ord3318
ord5572
ord6389
ord941
ord519
ord703
ord6311
ord2764
ord4171
ord5445
ord404
ord3216
ord4042
ord2504
ord5903
ord5510
ord1652
ord429
ord3754
ord3752
ord6128
ord2634
ord6130
ord2864
ord6141
ord3984
ord3989
ord5859
ord5862
ord2233
ord4045
ord5610
ord5604
ord6605
ord763
ord2450
ord483
ord3874
ord4160
ord2527
ord482
ord4333
ord3811
ord3127
ord3616
ord798
ord1997
ord6407
ord5651
ord5194
ord350
ord533
ord5466
ord2096
ord384
ord2652
ord1669
ord2841
ord5450
ord6394
ord5440
ord6383
ord2107
ord4544
ord3274
ord4622
ord3579
ord439
ord736
ord5495
ord4083
ord5685
ord4226
ord3402
ord3610
ord656
ord2089
ord816
ord4299
ord562
ord2575
ord3706
ord4396
ord3574
ord686
ord609
ord6880
ord4284
ord5781
ord3797
ord1146
ord5856
ord923
ord801
ord6376
ord2847
ord2844
ord4243
ord6453
ord6781
ord6242
ord2862
ord6762
ord1829
ord1109
ord5933
ord434
ord5575
ord465
ord464
ord4476
ord2141
ord861
ord839
ord433
ord4400
ord3630
ord682
ord5786
ord2801
ord2740
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord616
ord2080
ord6215
ord4220
ord2584
ord3654
ord2438
ord6270
ord1644
ord6883
ord5608
ord6007
ord3286
ord4881
ord4694
ord5148
ord807
ord3289
ord2097
ord4163
ord2120
ord554
ord2863
ord2380
ord2567
ord1175
ord2919
ord3517
ord2405
ord3337
ord1938
ord4268
ord3295
ord6154
ord2530
ord4056
ord5471
ord4121
ord2389
ord5086
ord1710
ord1715
ord5234
ord6369
ord5064
ord5248
ord2444
ord4023
ord2569
ord2714
ord4598
ord5158
ord4873
ord613
ord289
ord2921
ord5883
ord2408
ord5279
ord4366
ord5885
ord6146
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3738
ord561
ord815
ord2621
ord1134
ord4615
ord4538
ord4774
ord1842
ord2723
ord2390
ord3059
ord5100
ord5103
ord4303
ord3350
ord5012
ord975
ord5472
ord3403
ord2879
ord2878
ord4151
ord4077
ord5237
ord5282
ord2649
ord1665
ord4436
ord5252
ord4427
ord674
ord366
ord4242
ord4499
ord1945
ord5076
ord4341
ord4349
ord4723
ord4890
ord4531
ord4545
ord4543
ord4526
ord4529
ord4524
ord4964
ord4961
ord4108
ord5240
ord3748
ord1726
ord5260
ord4432
ord560
ord813
ord4273
ord4613
ord4614
ord2535
ord4370
ord4588
ord4589
ord3742
ord2152
ord5787
ord6197
ord6379
ord5875
ord6905
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4402
ord1776
ord4078
ord6055
ord2582
ord3597
ord4425
ord5280
ord4407
ord1775
ord6052
ord2514
ord4998
ord4853
ord4376
ord5265
ord354
ord5186
ord6385
ord1979
ord2367
ord2366
ord4224
ord5981
ord6334
ord2370
ord2289
ord2298
ord3301
ord4710
ord3092
ord6199
ord4234
ord2302
ord324
ord567
ord641
ord693
ord3640
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord3370
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord1656
ord3749
ord665
ord3996
ord3998
ord6907
ord922
ord2820
ord4278
ord551
ord2818
ord926
ord924
ord1200
ord823
ord825
ord6282
ord6283
ord5710
ord1168
ord537
ord5683
ord540
ord4129
ord858
ord800
ord860
ord541
ord535
ord1576

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
wcslen
_setmbcp
_mbscmp
__CxxFrameHandler
_acmdln
memcpy
atoi
atof
strcpy
strlen
_ftol
strtoul
_mbstok
memset
abs
isdigit
isprint
_ismbcdigit
_XcptFilter
_exit
_CxxThrowException
exit
??1type_info@@UAE@XZ
__dllonexit
_onexit
_controlfp

kernel32

GetModuleHandleA
GetTickCount
CopyFileA
ExitProcess
Sleep
IsBadReadPtr
VirtualAlloc
FreeLibrary
VirtualFree
HeapReAlloc
HeapAlloc
LoadLibraryA
GetProcAddress
GetProcessHeap
CreateFileA
WriteFile
CloseHandle
FindResourceA
LoadResource
LockResource
GlobalAlloc
GlobalFree
lstrcmpA
MulDiv
GlobalSize
GlobalLock
GlobalUnlock
GlobalReAlloc
GetVersionExA
RemoveDirectoryA
DeleteFileA
FindFirstFileA
FindClose
CreateDirectoryA
MultiByteToWideChar
GetLastError
lstrlenA
lstrcpyA
LocalFree
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
lstrlenW
WideCharToMultiByte
GetStartupInfoA

user32

GetClientRect
KillTimer
GetKeyState
IntersectRect
GetClassInfoA
DefWindowProcA
IsWindow
SetRect
LoadCursorA
SetCursor
FillRect
FrameRect
InflateRect
DrawEdge
DrawTextA
GetDC
ReleaseDC
SystemParametersInfoA
EnableWindow
SendMessageA
GetWindowRect
ScreenToClient
IsWindowVisible
GetFocus
GetDoubleClickTime
TranslateAcceleratorA
IsIconic
GetSystemMenu
GetMenu
LoadAcceleratorsA
EnableMenuItem
GetWindow
OffsetRect
LoadMenuA
GetMenuStringA
GetMenuItemCount
GetMenuItemID
ModifyMenuA
GetSubMenu
CreatePopupMenu
AppendMenuA
CheckMenuItem
SetFocus
SetWindowLongA
MessageBeep
GetCursorPos
InvalidateRect
TabbedTextOutA
IsRectEmpty
GrayStringA
LoadBitmapA
LoadImageA
GetIconInfo
DestroyIcon
DrawIcon
LoadIconA
ClientToScreen
WindowFromPoint
GetActiveWindow
CopyRect
GetWindowLongA
SetWindowRgn
GetCapture
ReleaseCapture
SetCapture
ClipCursor
SetTimer
PtInRect
InvertRect
PostMessageA
GetMessagePos
GetParent
GetSystemMetrics
GetSysColor
IsClipboardFormatAvailable

gdi32

ExtTextOutA
Escape
GetObjectA
AbortDoc
EndDoc
EndPage
StartPage
StartDocA
CreateFontA
CreateEllipticRgn
CreateRectRgn
CreateRoundRectRgn
FrameRgn
CreatePatternBrush
DeleteObject
TextOutA
CreateRectRgnIndirect
Rectangle
CreateDCA
DeleteDC
SetTextColor
SetBkColor
StretchBlt
SelectObject
CreateBitmap
SetPixel
SetBitmapBits
GetBitmapBits
GetPixel
PatBlt
RectVisible
PtVisible
CreatePen
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetBkColor
GetDeviceCaps
GetTextMetricsA
GetCurrentObject
GetTextExtentPoint32A
GetStockObject
CreateSolidBrush
CreateFontIndirectA

comdlg32

PrintDlgA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

shell32

SHGetDesktopFolder
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA

comctl32

ImageList_Add
ImageList_GetImageInfo
ImageList_Draw
ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_AddMasked
_TrackMouseEvent
ImageList_GetIcon

ole32

CLSIDFromProgID
OleInitialize
OleRun
CoUninitialize
CoInitialize
OleUninitialize
CoCreateInstance
CLSIDFromString

oleaut32

SetErrorInfo
GetErrorInfo
VariantChangeType
SysAllocString
VariantInit
SysFreeString
SysAllocStringByteLen
SysStringLen
SysStringByteLen
VariantClear
CreateErrorInfo
VariantCopy

Sections

.text
Size: 400KB - Virtual size: 397KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 584KB - Virtual size: 580KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b60f1136c7cfac3db542898794f5889c

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

gdi32

comdlg32

advapi32

shell32

comctl32

ole32

oleaut32

Sections

.text Size: 400KB - Virtual size: 397KB

.rdata Size: 72KB - Virtual size: 68KB

.data Size: 84KB - Virtual size: 81KB

.idata Size: 12KB - Virtual size: 11KB

.rsrc Size: 584KB - Virtual size: 580KB

.reloc Size: 36KB - Virtual size: 34KB

.text
Size: 400KB - Virtual size: 397KB

.rdata
Size: 72KB - Virtual size: 68KB

.data
Size: 84KB - Virtual size: 81KB

.idata
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 584KB - Virtual size: 580KB

.reloc
Size: 36KB - Virtual size: 34KB