d45013e9ae43c20a93febf4f9045f7d654ccd2d57627438f3bd2a48302cf5262

Sharing

Copy URL Twitter E-mail

General

Target

d45013e9ae43c20a93febf4f9045f7d654ccd2d57627438f3bd2a48302cf5262
Size

2.3MB
MD5

5e0fcabb2a2c333deb9f852f904a60c3
SHA1

60d73c28c81dfc7a0725d943c6600d5d9f1b773b
SHA256

d45013e9ae43c20a93febf4f9045f7d654ccd2d57627438f3bd2a48302cf5262
SHA512

d132cfd7dbc586c7637cabdbf4cf8528abd3de2024ae1dba479f2b2205bdf4decbfc8217f03c9b2efef920e58569d5c93e25202e0af64466e6202e5d568a8dd9
SSDEEP

12288:oBw6aYC8mYuW6njlJnhUx4Hfp4n/19oSEJI11/1x:o2LYuW6nHnSUCFEJI11/1x

Score

N/A

Malware Config

Signatures

Files

d45013e9ae43c20a93febf4f9045f7d654ccd2d57627438f3bd2a48302cf5262
.exe windows x86

3200a645f6f3aef202d063d479d4f0d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord537
ord1233
ord2642
ord4123
ord4299
ord924
ord6215
ord5787
ord3521
ord6402
ord2582
ord4402
ord3640
ord693
ord4243
ord6762
ord6696
ord6654
ord2754
ord2714
ord4023
ord6877
ord2862
ord5148
ord4694
ord3293
ord3092
ord1270
ord1232
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord6189
ord6172
ord5873
ord5789
ord5794
ord5678
ord5736
ord5579
ord5571
ord6061
ord5864
ord3596
ord6021
ord6194
ord3573
ord3693
ord2380
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord616
ord3089
ord3706
ord5781
ord2713
ord3873
ord3754
ord3753
ord3546
ord922
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord1175
ord4622
ord3738
ord561
ord815
ord434
ord5575
ord641
ord2514
ord2141
ord1205
ord2621
ord1134
ord2725
ord5265
ord4376
ord4853
ord4998
ord6052
ord1775
ord5280
ord4425
ord3597
ord324
ord2302
ord4710
ord4234
ord3610
ord5161
ord5162
ord5160
ord4905
ord4742
ord4976
ord4948
ord4358
ord4377
ord4854
ord4835
ord3699
ord656
ord768
ord489
ord2863
ord6283
ord6282
ord4277
ord2764
ord3996
ord3005
ord2136
ord3499
ord2515
ord355
ord6905
ord4224
ord1601
ord6334
ord1099
ord5710
ord5683
ord668
ord356
ord4129
ord939
ord1980
ord3178
ord4058
ord2781
ord2770
ord5440
ord6383
ord5450
ord6394
ord2086
ord6241
ord4033
ord5303
ord4699
ord5715
ord565
ord817
ord1948
ord2726
ord4226
ord6379
ord6453
ord2152
ord2116
ord2108
ord2078
ord1768
ord818
ord765
ord3742
ord3698
ord860
ord2818
ord926
ord1200
ord2915
ord5572
ord941
ord6605
ord535
ord858
ord3797
ord6199
ord2860
ord2614
ord3619
ord823
ord2567
ord472
ord5788
ord4297
ord4133
ord283
ord1088
ord6358
ord4160
ord2122
ord1168
ord6880
ord2859
ord5875
ord540
ord3874
ord800
ord2864
ord5981
ord5053
ord2405
ord2379
ord4284
ord556
ord609
ord809
ord3574
ord4396
ord3402
ord2575
ord470
ord2452
ord755
ord1146
ord1641
ord1105
ord289
ord323
ord1640
ord5785
ord6197
ord1138
ord640
ord613
ord4275
ord795
ord2414
ord3663
ord3626
ord825
ord567
ord3721
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord5714
ord3571
ord1576

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_iob
_exit
__CxxFrameHandler
_ftol
??1type_info@@UAE@XZ
_setmbcp
_strupr
_chdir
_CxxThrowException
_XcptFilter
_mbsnbcpy
_mbsstr
vsprintf
free
sprintf
_mbscmp
atoi
isxdigit
strncpy
_makepath
_splitpath
memmove
_access
fclose
_filelength
fopen
strrchr
atof
exit
wcstombs
wcslen
wcscat
wcscpy
strncmp
calloc
fprintf
ceil
malloc
_wcsicmp
strstr
wcschr
_wcsupr
wcsncpy
fflush
wcsstr
wcscmp
wcsncmp
toupper
printf
qsort
_beginthreadex
_endthreadex
time
fputc
fgetc
__dllonexit
_onexit
_controlfp

kernel32

GetFileSize
CreateFileW
SetThreadPriority
ResumeThread
SystemTimeToFileTime
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
ReadFile
FindNextFileW
FindNextFileA
FindFirstFileW
WideCharToMultiByte
FindFirstFileA
Sleep
CloseHandle
WriteFile
CreateFileA
FreeLibrary
LoadLibraryA
GetWindowsDirectoryA
lstrcpyA
WinExec
lstrlenA
lstrcatA
lstrcpynA
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
GetLastError
GetCurrentProcess
GetVersionExA
DeleteFileA
GetTickCount
CreateDirectoryA
WaitForSingleObject
CreateProcessA
GetStartupInfoA
CreatePipe
RemoveDirectoryA
GetProcAddress
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
DeviceIoControl
ResetEvent
CreateEventA
GetDriveTypeA
GetSystemTime
InitializeCriticalSection
DeleteCriticalSection
MultiByteToWideChar
LocalFree
GetTimeZoneInformation

user32

DrawIconEx
GetClassNameA
GetKeyState
ReleaseCapture
SetCapture
GrayStringA
DrawTextA
TabbedTextOutA
GetClassInfoA
DefWindowProcA
RegisterWindowMessageA
UnionRect
DrawEdge
GetFocus
PeekMessageA
PostQuitMessage
SetForegroundWindow
RedrawWindow
IsWindowVisible
GetSystemMetrics
SetRect
SystemParametersInfoA
GetCursorPos
CopyIcon
IsWindow
GetMessagePos
DrawIcon
PtInRect
SetTimer
MessageBeep
SetWindowLongA
KillTimer
FrameRect
LoadImageA
LoadIconA
GetIconInfo
GetDC
CreateIconIndirect
ReleaseDC
GetSysColor
FillRect
DrawStateA
OffsetRect
GetClientRect
CopyRect
InflateRect
DrawFocusRect
GetWindowRect
AttachThreadInput
LoadCursorA
IsIconic
GetSubMenu
TrackPopupMenuEx
PostMessageA
ClientToScreen
WindowFromPoint
GetActiveWindow
InvalidateRect
GetSystemMenu
AppendMenuA
TranslateMessage
DispatchMessageA
EnableWindow
IsRectEmpty
ScreenToClient
SetWindowRgn
SetCursor
GetParent
GetNextDlgTabItem
SendMessageA
GetWindowLongA
DestroyIcon
DestroyCursor
DestroyMenu
LoadBitmapA
ExitWindowsEx

gdi32

CreatePolygonRgn
FillRgn
FrameRgn
CombineRgn
CreateBrushIndirect
CreatePenIndirect
RoundRect
GetTextExtentPointA
CreateRoundRectRgn
CreateRectRgn
Rectangle
CreatePen
Polygon
StretchBlt
CreateSolidBrush
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetBkColor
PatBlt
GetTextExtentPoint32A
CreateFontIndirectA
GetPixel
SetPixel
CreateBitmap
SelectObject
SetBkColor
DeleteDC
CreateCompatibleBitmap
GetStockObject
DeleteObject
BitBlt
CreateCompatibleDC
GetObjectA

advapi32

LookupPrivilegeValueA
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueA
RegCreateKeyA
OpenProcessToken
RegCloseKey
AdjustTokenPrivileges

shell32

SHGetPathFromIDListA
ShellExecuteA
ShellExecuteExA
SHBrowseForFolderA

comctl32

ImageList_GetImageInfo
ImageList_SetBkColor
ImageList_GetBkColor
_TrackMouseEvent

ole32

CoCreateInstance
OleRun
CoInitialize
CoUninitialize

oleaut32

VariantClear
SafeArrayDestroy
SysFreeString
VariantInit
DispGetParam
GetErrorInfo
SysAllocString

msimg32

AlphaBlend

Sections

.text
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3200a645f6f3aef202d063d479d4f0d0

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

shell32

comctl32

ole32

oleaut32

msimg32

Sections

.text Size: 184KB - Virtual size: 182KB

.rdata Size: 28KB - Virtual size: 26KB

.data Size: 12KB - Virtual size: 14KB

.rsrc Size: 2.1MB - Virtual size: 2.1MB

.text
Size: 184KB - Virtual size: 182KB

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 12KB - Virtual size: 14KB

.rsrc
Size: 2.1MB - Virtual size: 2.1MB