d76692427c34faec43f27069558abd2e09ad92f76328313cfdb31edf072bff88

Sharing

Copy URL Twitter E-mail

General

Target

d76692427c34faec43f27069558abd2e09ad92f76328313cfdb31edf072bff88
Size

1.3MB
MD5

02fe028f49ffddca58536e3a32657f00
SHA1

5a0ac52abba0adf47b39d0c95438458a9e16487f
SHA256

d76692427c34faec43f27069558abd2e09ad92f76328313cfdb31edf072bff88
SHA512

6a768c07d24797b7ec49f977eb8193f8d63460dabaad8e0fa0abed62155fb66326f059565fff0ce6c1788aa4e39d8372c64c46675d0b8437e1cfd08cf4a9184f
SSDEEP

12288:qQraIQTlV990Do7DsMLNfr3KfuFXGq1rkQXZyBHAZ0+Nge4MyutNAJfXKUJ5Ro/q:qeaIQTP990ExfBRNRgOYV0rQLd

Score

N/A

Malware Config

Signatures

Files

d76692427c34faec43f27069558abd2e09ad92f76328313cfdb31edf072bff88
.exe windows x86

ee6ebc7b03e59a5d9ba1e48e16f30afd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glLineWidth
glPopMatrix
glPopAttrib
glRasterPos3f
glPushMatrix
glPushAttrib
wglDeleteContext
glInitNames
glRenderMode
glSelectBuffer
glCallLists
glListBase
glEndList
glBitmap
glNewList
glGenLists
glPixelStorei
wglGetCurrentDC
wglMakeCurrent
wglCreateContext
wglGetCurrentContext
glFlush
glGetDoublev
glGetIntegerv
glRotatef
glTranslatef
glDepthFunc
glEnable
glClear
glClearDepth
glClearColor
glLoadIdentity
glMatrixMode
glViewport
glOrtho
glPopName
glPushName
glLoadName
glPointSize
glColor3f
glMaterialfv
glLightModeli
glBegin
glNormal3f
glVertex3f
glEnd
glDepthMask
glBlendFunc
glDisable
glLightfv

glu32

gluUnProject
gluPickMatrix

mfc42

ord4078
ord1776
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5290
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3397
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord3732
ord825
ord800
ord823
ord860
ord556
ord540
ord641
ord809
ord2642
ord3092
ord2301
ord2358
ord2367
ord535
ord3790
ord858
ord922
ord2122
ord1146
ord1168
ord6241
ord6880
ord6197
ord6379
ord4160
ord926
ord2818
ord924
ord5583
ord4224
ord537
ord6215
ord4853
ord3663
ord2841
ord5981
ord2086
ord6334
ord2107
ord5710
ord4220
ord2584
ord3654
ord2438
ord6270
ord2863
ord1644
ord5280
ord6199
ord4299
ord5450
ord5440
ord6383
ord6394
ord324
ord4234
ord2817
ord4710
ord1105
ord3742
ord567
ord818
ord4275
ord2864
ord3626
ord755
ord2414
ord4133
ord4297
ord5788
ord472
ord6172
ord5875
ord6194
ord470
ord6128
ord5787
ord283
ord5768
ord6129
ord5148
ord4694
ord6055
ord2448
ord2298
ord3571
ord1641
ord5834
ord686
ord384
ord2370
ord3996
ord2862
ord2097
ord668
ord2781
ord2770
ord356
ord2393
ord3319
ord547
ord3286
ord3337
ord3910
ord4129
ord5683
ord4202
ord1997
ord6407
ord798
ord5194
ord533
ord3874
ord2362
ord3499
ord2515
ord355
ord941
ord2379
ord4042
ord3216
ord6453
ord2587
ord4406
ord3394
ord3729
ord2380
ord2860
ord2119
ord5465
ord786
ord729
ord2504
ord2558
ord1175
ord1706
ord430
ord2461
ord6389
ord519
ord1567
ord268
ord2528
ord6176
ord5645
ord804
ord2764
ord2763
ord6283
ord3619
ord5873
ord5789
ord1907
ord5161
ord5162
ord5160
ord4905
ord4948
ord4358
ord4377
ord4854
ord5287
ord4835
ord489
ord768
ord1200
ord4976
ord4742
ord4258
ord2294
ord4123
ord1908
ord1690
ord5288
ord4439
ord2054
ord4431
ord2575
ord4396
ord3402
ord3574
ord609
ord771
ord1008
ord496
ord4259
ord1768
ord2078
ord4715
ord2881
ord939
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord1576
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord5214
ord2621
ord1193
ord1134
ord2725
ord1151
ord4530
ord4525
ord4544
ord5685
ord3274
ord3353
ord3579
ord439
ord736
ord2289
ord5495
ord1205
ord4278
ord5572
ord2915
ord2714
ord1771
ord6366
ord2024
ord4401
ord3639
ord692
ord2859
ord665
ord6282
ord1979
ord5442
ord5186
ord354
ord3811
ord6385
ord617
ord296
ord5219
ord6119
ord4317
ord3597
ord4425
ord1775
ord6052
ord2514
ord4998
ord4376
ord5265
ord940
ord2044
ord5199

msvcrt

rename
fclose
printf
fwrite
rewind
fread
fopen
fseek
malloc
free
fgets
fprintf
memmove
_CIacos
_swab
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
atof
_mkdir
_mbsicmp
_ftol
atoi
_mbscmp
getenv
_getcwd
_chdir
_mktemp
__CxxFrameHandler
exit
_setmbcp
_stricmp
_purecall
sprintf
sscanf
vsprintf
??1type_info@@UAE@XZ
_mbslen

kernel32

GetStartupInfoA
GetModuleHandleA
GlobalAlloc
GlobalFree
lstrcmpA
GetFileAttributesA
RemoveDirectoryA
DeleteFileA
WinExec
WaitForSingleObject
GetCurrentThreadId
CreateProcessA
Sleep
CompareFileTime
lstrcpyA
FindClose
FindNextFileA
FindFirstFileA
MulDiv
GetExitCodeProcess

user32

IsWindow
GetSysColor
OffsetRect
DrawFocusRect
CopyRect
IsWindowVisible
GetClassNameA
BringWindowToTop
GetWindowLongA
EnumChildWindows
BeginDeferWindowPos
EqualRect
DeferWindowPos
EndDeferWindowPos
IsIconic
FindWindowA
SetCapture
ReleaseCapture
GetKeyState
GetDlgCtrlID
GetSystemMetrics
DrawIcon
GetSystemMenu
AppendMenuA
LoadBitmapA
UpdateWindow
GetFocus
SetTimer
LoadCursorA
SetCursor
SetRect
GetClientRect
FillRect
GetParent
PostMessageA
EnableWindow
GetCursorPos
PtInRect
LoadMenuA
GetSubMenu
ScreenToClient
EnableMenuItem
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SetForegroundWindow
LoadIconA
GetWindowRect
SendMessageA
RedrawWindow
InvalidateRect
EnumWindows

gdi32

DeleteDC
AngleArc
Polyline
ChoosePixelFormat
DescribePixelFormat
SetPixelFormat
SwapBuffers
CreateCompatibleDC
SelectObject
DPtoLP
CreateBitmap
CreateCompatibleBitmap
GetMapMode
SetMapMode
BitBlt
SetBkColor
DeleteObject
CreateFontIndirectA
ExtTextOutA
GetObjectA
GetDeviceCaps
GetCurrentPositionEx

advapi32

RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegDeleteKeyA
RegQueryValueExA

shell32

DragFinish
SHGetFileInfoA
SHBrowseForFolderA
SHGetPathFromIDListA
DragQueryFileA

comctl32

ord8

msvcirt

?get@istream@@IAEAAV1@PADHH@Z
?cerr@@3Vostream_withassign@@A
??6ostream@@QAEAAV0@H@Z
??6ostream@@QAEAAV0@I@Z
?cin@@3Vistream_withassign@@A
?flush@ostream@@QAEAAV1@XZ
?unlock@ios@@QAAXXZ
_mtlock
_mtunlock
??1ifstream@@UAE@XZ
??0ifstream@@QAE@PBDHH@Z
?open@ifstream@@QAEXPBDHH@Z
??1ios@@UAE@XZ
?openprot@filebuf@@2HB
??6ostream@@QAEAAV0@PBD@Z
?endl@@YAAAVostream@@AAV1@@Z
?close@ifstream@@QAEXXZ
?close@ofstream@@QAEXXZ
?cout@@3Vostream_withassign@@A

wsock32

gethostname
socket
WSAStartup
recv
__WSAFDIsSet
select
gethostbyname
gethostbyaddr
htons
connect
send
ioctlsocket

Sections

.text
Size: 892KB - Virtual size: 891KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 44KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 288KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ee6ebc7b03e59a5d9ba1e48e16f30afd

Headers

File Characteristics

Imports

opengl32

glu32

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

shell32

comctl32

msvcirt

wsock32

Sections

.text Size: 892KB - Virtual size: 891KB

.rdata Size: 112KB - Virtual size: 111KB

.data Size: 44KB - Virtual size: 53KB

.rsrc Size: 288KB - Virtual size: 288KB

.text
Size: 892KB - Virtual size: 891KB

.rdata
Size: 112KB - Virtual size: 111KB

.data
Size: 44KB - Virtual size: 53KB

.rsrc
Size: 288KB - Virtual size: 288KB