d46a44ac2594eee40878d246a0a32e565416e19fcd9c3111bca92c1acc253ae3

Sharing

Copy URL Twitter E-mail

General

Target

d46a44ac2594eee40878d246a0a32e565416e19fcd9c3111bca92c1acc253ae3
Size

688KB
MD5

042249fb5653d0bf4b3d4dfff5680470
SHA1

529e0104c857783b34733b1d802ba36662e9e495
SHA256

d46a44ac2594eee40878d246a0a32e565416e19fcd9c3111bca92c1acc253ae3
SHA512

083d606d136c802676c085f34f5eaf4c508a8d28be8f02b76ac11cc5f4e6a88f089b6abfc3af3b62795a696f4f76111fa56663e13c6782cbc927b3f685c20518
SSDEEP

12288:Kzvjye+WuEkHG3WoJAWZtLo9zE+cswPyviTWVH20n+DjYO9P5m6HCJrYbHkUXvXY:kh+W/kHGBJXZtqz/cZ9WVH23l5THCJ0R

Score

N/A

Malware Config

Signatures

Files

d46a44ac2594eee40878d246a0a32e565416e19fcd9c3111bca92c1acc253ae3
.exe windows x86

b02339207d03024d72fd2f09ca2f7a8a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord2514
ord2621
ord1134
ord2818
ord540
ord800
ord2764
ord537
ord1199
ord1247
ord2725
ord535
ord860
ord858
ord6930
ord6928
ord1200
ord823
ord6199
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord324
ord4234
ord3610
ord6055
ord1776
ord5290
ord3402
ord3721
ord1146
ord656
ord567
ord543
ord2302
ord665
ord1979
ord6385
ord5186
ord354
ord6673
ord4160
ord2863
ord2379
ord755
ord470
ord6453
ord940
ord3874
ord5981
ord2864
ord4129
ord609
ord6215
ord6877
ord6197
ord6380
ord2642
ord3092
ord6378
ord3619
ord809
ord2614
ord556
ord3626
ord3663
ord2414
ord4275
ord5875
ord1641
ord2860
ord1088
ord2122
ord3797
ord2859
ord6880
ord4224
ord926
ord941
ord2827
ord939
ord3337
ord3811
ord2575
ord4396
ord3574
ord1576
ord795
ord803
ord641
ord3584
ord815
ord825
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord1168
ord4673

msvcrt

exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
_acmdln
_mbsstr
memmove
_ftol
_setmbcp
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_controlfp
__CxxFrameHandler
strstr
_mbscmp
_CxxThrowException
atol
srand
time
rand

kernel32

GetSystemDirectoryA
WritePrivateProfileStringA
SetFileAttributesA
DeleteCriticalSection
ResetEvent
Sleep
GetTickCount
CreateEventA
InitializeCriticalSection
lstrlenA
GetCurrentProcessId
GlobalAddAtomA
CreateThread
SetSystemTime
SetEvent
lstrcpyA
WinExec
lstrcatA
GetPrivateProfileStringA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
CloseHandle
GetLastError
GetPrivateProfileIntA
CreateFileMappingA
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
ExitProcess

user32

GetDC
GetParent
SetWindowLongA
LoadCursorA
ReleaseDC
EnableWindow
InvalidateRect
GetFocus
MessageBeep
UnregisterHotKey
IsIconic
SetCursor
InflateRect
GetSystemMetrics
GetWindowTextA
DrawIcon
GetWindowRect
EnumWindows
SendMessageA
PostMessageA
LoadIconA
RegisterHotKey
AppendMenuA
GetSystemMenu
SetTimer
GetClientRect

gdi32

GetObjectA
CreateFontIndirectA
GetStockObject
GetTextExtentPoint32A

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyExA

shell32

ShellExecuteA

gdiplus

GdipGetImageHeight
GdipDrawImageRectI
GdipGetImageWidth
GdipLoadImageFromFile
GdipDisposeImage
GdipImageSelectActiveFrame
GdipCreateFromHDC
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipAlloc
GdipFree
GdipCloneImage
GdipDeleteGraphics
GdiplusShutdown
GdiplusStartup

wsock32

socket
WSAGetLastError
inet_ntoa
ioctlsocket
inet_addr
gethostbyname
closesocket
recv
send
__WSAFDIsSet
select
connect
htons

msvcp60

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z

dc

DC_Check
DC_GetLastError
DC_Uninit
DC_Init2
DC_GetImg
DC_SetResult
DC_GetCJ
DC_CheckUpdate
DC_Reg

winmm

PlaySoundA

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 640KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b02339207d03024d72fd2f09ca2f7a8a

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

shell32

gdiplus

wsock32

msvcp60

dc

winmm

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 640KB - Virtual size: 640KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 640KB - Virtual size: 640KB