6dd503b0dcfb6aceafee5e02e3df1882d33a6abce7a0127c615354f2e0b788d9

Sharing

Copy URL

Twitter E-mail

General

Target

6dd503b0dcfb6aceafee5e02e3df1882d33a6abce7a0127c615354f2e0b788d9
Size

185KB
MD5

ce9fbdc93576a35bc2d232a48ed54366
SHA1

9fc9f4c0125b50572e631a8a1d51ebfd594d3335
SHA256

6dd503b0dcfb6aceafee5e02e3df1882d33a6abce7a0127c615354f2e0b788d9
SHA512

d501cde2cfcb04ae851aaa0ae7934b13a6ab64f6866cc0bfb1f9ee3c65f3fe9e48948a40c1494cfdcc00cce75398c1240dec4be7dde31cb961a4250bd8635543
SSDEEP

3072:y/0i3U/mrQ0cY+CwkntxUMbsYxq7qZKh6p:y/D3U+rQ0cY+t8txTs2q7q

Score

N/A

Malware Config

Signatures

Files

6dd503b0dcfb6aceafee5e02e3df1882d33a6abce7a0127c615354f2e0b788d9
.exe windows x86

3085894d9c6214af5605b988ae9e4922

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr90

scanf
fread
calloc
_invalid_parameter_noinfo
??2@YAPAXI@Z
__setusermatherr
_adjust_fdiv
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
??3@YAXPAX@Z
__p__commode
__p__fmode
_encode_pointer
__set_app_type
?terminate@@YAXXZ
_encoded_null
__FrameUnwindFilter
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_configthreadlocale
_crt_debugger_hook
printf

kernel32

GetFileType
SetLastError
GetModuleHandleA
GetProcessId
GlobalAlloc
GetLastError
GetProcAddress
GetSystemRegistryQuota
GetSystemTimes
LocalFileTimeToFileTime
CompareFileTime
GetNativeSystemInfo
IsProcessorFeaturePresent
LoadLibraryW
LoadLibraryA
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess

user32

CreateWindowExA
ShowWindow
UpdateWindow
SetCursor
GetWindowTextLengthA
AdjustWindowRect
GetClientRect
AnimateWindow
LoadIconW
CreateCaret

gdi32

EndPath
BitBlt
SetPolyFillMode
CreateDiscardableBitmap
StretchBlt
GetPolyFillMode
CreateEllipticRgn
CreateDIBitmap
SetWinMetaFileBits

advapi32

ReportEventA

shell32

DragQueryPoint
DragAcceptFiles
ShellExecuteW

msimg32

GradientFill
TransparentBlt

winhttp

WinHttpConnect
WinHttpOpenRequest

msvcp90

??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??_D?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??_F?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ

msvcm90

?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVException@System@@0@Z
?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@P$AAVException@3@@Z
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6GJPAX@Z0@Z
?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXP$AAVEventHandler@System@@@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@@Z

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.muh
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zoxuso
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3085894d9c6214af5605b988ae9e4922

Headers

DLL Characteristics

File Characteristics

Imports

msvcr90

kernel32

user32

gdi32

advapi32

shell32

msimg32

winhttp

msvcp90

msvcm90

mscoree

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 79KB - Virtual size: 79KB

.data Size: 512B - Virtual size: 70KB

.muh Size: 512B - Virtual size: 10B

.zoxuso Size: 512B - Virtual size: 100B

.rsrc Size: 95KB - Virtual size: 94KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 79KB - Virtual size: 79KB

.data
Size: 512B - Virtual size: 70KB

.muh
Size: 512B - Virtual size: 10B

.zoxuso
Size: 512B - Virtual size: 100B

.rsrc
Size: 95KB - Virtual size: 94KB