e1e64b9fe38f8a58699cd69ca0323ec0fa4acdf37e294e7efb9643ccbdb81218

Sharing

Copy URL

Twitter E-mail

General

Target

e1e64b9fe38f8a58699cd69ca0323ec0fa4acdf37e294e7efb9643ccbdb81218
Size

161KB
MD5

04bc6142f7f7f8284f172982bfa1bf00
SHA1

5348b8becbe295e857bc1a01ba91e4b8edbf07d4
SHA256

e1e64b9fe38f8a58699cd69ca0323ec0fa4acdf37e294e7efb9643ccbdb81218
SHA512

ce93fa79340ef293e49ad2b922911c31b2c76f6062402cc0a03f3173f61e746748929d2314702474b3d07c1bc1400714deb262da02af4f98cd24e5c6e1b9435b
SSDEEP

3072:bulVpo1iOyxPF/pstBaDqwONnct43bBl3N2UktIpYoUhFCsy4IqljStaeyEsde:bulDwiOyPF/p/uwONct43D92UVgCsy4w

Score

N/A

Malware Config

Signatures

Files

e1e64b9fe38f8a58699cd69ca0323ec0fa4acdf37e294e7efb9643ccbdb81218
.exe windows x86

7298d33de3b54edd1b71843accd54a85

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc90u

ord6699
ord4490
ord5979
ord2479
ord5939
ord2081
ord935
ord813
ord811
ord600
ord9965
ord280
ord296
ord5851
ord2694
ord2676
ord7766
ord12617
ord12165
ord13136
ord10304
ord10457
ord9972
ord13194
ord12404
ord5663
ord5680
ord4347
ord5674
ord3217
ord2087
ord404
ord5535
ord5770
ord663
ord266
ord400
ord6693
ord5943
ord4213
ord5830
ord6741
ord5548
ord1048
ord4179
ord6035
ord2206
ord2251
ord4747
ord6803
ord4173
ord6801
ord4967
ord4211
ord6018
ord4996
ord5676
ord4423
ord4043
ord4448
ord406
ord665
ord2490
ord265
ord4681
ord4905
ord4348
ord2891
ord4071
ord4081
ord4080
ord2764
ord2893
ord2774
ord4519
ord6013
ord3115
ord2966
ord4728
ord4405
ord3112
ord2983
ord1607
ord285
ord3220
ord1599
ord9272
ord7138
ord7332
ord2953
ord8452
ord2771
ord2537
ord3534
ord2955
ord1272
ord1137
ord286
ord801

msvcr90

memset
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
fclose
fprintf
fopen
__CxxFrameHandler3

kernel32

LoadLibraryW
FreeLibrary
MapViewOfFile
GetTickCount
Sleep
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetCommandLineW
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
CloseHandle
CreateToolhelp32Snapshot
Process32NextW
CreateFileMappingW
Process32FirstW
GetProcAddress
GetLastError
GetModuleFileNameW

user32

MessageBoxW

advapi32

RegOpenKeyExW
RegQueryValueExW

shell32

ShellExecuteW

comctl32

InitCommonControlsEx

kkbase

??1CIniFile@@UAE@XZ
??0CIniFile@@QAE@XZ
?AnsiToUnicode@KK_Base@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PBD@Z
?UnicodeToAnsi@KK_Base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PB_W@Z
?SetPath@CIniFile@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetStringKeyValue@CIniFile@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@00@Z
?Utf8ToUnicode@KK_Base@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PBD@Z

msvcp90

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7298d33de3b54edd1b71843accd54a85

Headers

DLL Characteristics

File Characteristics

Imports

mfc90u

msvcr90

kernel32

user32

advapi32

shell32

comctl32

kkbase

msvcp90

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 69KB - Virtual size: 69KB

.reloc Size: 66KB - Virtual size: 68KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 69KB - Virtual size: 69KB

.reloc
Size: 66KB - Virtual size: 68KB