c66b7673f2720cf482adebb0a31e0cfddf14f5c1e47c67a06a064511c2a1f492

Sharing

Copy URL Twitter E-mail

General

Target

c66b7673f2720cf482adebb0a31e0cfddf14f5c1e47c67a06a064511c2a1f492
Size

1.1MB
MD5

0e4c2f276da5f6c0c471f47744216408
SHA1

76c895b1e8e1e80cc18f436f7fa72377e70b4e62
SHA256

c66b7673f2720cf482adebb0a31e0cfddf14f5c1e47c67a06a064511c2a1f492
SHA512

470fc35cb937eccf4b98f8b324c604bb2c57fe59abb4e3443f8fa3bd3045c9fbaada55a97bf03f1464c3a6059bbffeac22325324b3307cc862dc9f9826902e16
SSDEEP

24576:lixdFM2AsQ9FA/jRIBdMSAa0Gf46yiTC/3TzWSoo:t2AsQzXACtCfvqo

Score

N/A

Malware Config

Signatures

Files

c66b7673f2720cf482adebb0a31e0cfddf14f5c1e47c67a06a064511c2a1f492
.exe windows x86

0a2d96bb7241807220f8eb62f276b869

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

storm

ord114
ord426
ord313
ord260
ord453
ord256
ord451
ord137
ord140
ord139
ord106
ord119
ord109
ord130
ord115
ord138
ord101
ord117
ord120
ord123
ord102
ord122
ord121
ord128
ord501
ord127
ord462
ord491
ord134
ord261
ord257
ord264
ord275
ord571
ord255
ord258
ord423
ord272
ord266
ord252
ord502
ord508
ord118
ord133
ord103
ord116
ord321
ord105
ord112
ord107
ord457
ord454
ord458
ord386
ord389
ord393
ord390
ord385
ord383
ord314
ord216
ord425
ord206
ord211
ord422
ord431
ord221
ord434
ord445
ord125
ord113
ord222
ord357
ord346
ord208
ord572
ord269
ord265
ord276
ord253
ord267
ord268
ord463
ord274
ord342
ord442
ord465
ord509
ord503
ord279
ord421
ord424
ord428
ord506
ord494
ord323
ord350
ord325
ord437
ord356
ord401
ord403
ord440
ord436
ord443
ord438
ord432
ord354
ord332
ord468
ord351
ord523
ord524
ord529
ord525
ord452
ord334
ord331

shell32

FindExecutableA
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA

kernel32

SetFileAttributesA
FileTimeToLocalFileTime
CreateProcessA
CreateDirectoryA
DeleteCriticalSection
LeaveCriticalSection
GetComputerNameA
GetSystemTime
GetLocalTime
InterlockedDecrement
InterlockedIncrement
CreateThread
TlsSetValue
ExitThread
SetConsoleCtrlHandler
GetStartupInfoA
GetVersion
ExitProcess
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
TlsAlloc
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
HeapFree
UnhandledExceptionFilter
RtlUnwind
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetEnvironmentVariableA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
VirtualAlloc
SetStdHandle
GetFileSize
FreeLibrary
FlushFileBuffers
CreateFileA
SetFilePointer
SetEndOfFile
ReadFile
GetLocaleInfoW
CompareStringA
CompareStringW
LoadLibraryA
GetProcAddress
GetCurrentThreadId
CompareFileTime
ResetEvent
SetEvent
FindResourceA
SizeofResource
LoadResource
GetSystemInfo
GetDiskFreeSpaceA
GlobalMemoryStatus
GetTimeZoneInformation
GetModuleFileNameA
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTickCount
Sleep
IsBadReadPtr
GetModuleHandleA
VirtualQuery
lstrcpynA
IsBadWritePtr
FormatMessageA
SetUnhandledExceptionFilter
InitializeCriticalSection
FileTimeToSystemTime
GetDateFormatA
EnterCriticalSection
GetLastError
CloseHandle
WaitForMultipleObjects
MulDiv
GetTimeFormatA
GetLogicalDriveStringsA
GetCommandLineA
RaiseException
LockResource
GetFileAttributesA
WaitForSingleObject
CreateEventA
GetDriveTypeA

user32

GetClientRect
LoadIconA
RegisterClassA
GetSystemMetrics
CreateWindowExA
GetLastActivePopup
GetTopWindow
EndDialog
SetWindowPos
SetDlgItemTextA
DialogBoxParamA
SetTimer
KillTimer
WaitForInputIdle
GetWindowThreadProcessId
EnumWindows
SetForegroundWindow
SetActiveWindow
SetWindowTextA
MessageBoxA
SetWindowLongA
ScreenToClient
GetSysColor
DrawTextA
UpdateWindow
EnableWindow
ShowWindow
SendDlgItemMessageA
GetWindowLongA
GetDlgItem
GetWindowRect
OffsetRect
InvalidateRect
GetFocus
GetParent
SendMessageA
GetDC
ReleaseDC
GetActiveWindow
SetRect
GetDesktopWindow
GetForegroundWindow
GetClassNameA
GetWindow
GetMessageA
PeekMessageA
DispatchMessageA
TranslateMessage
DefWindowProcA
EndPaint
LoadCursorA
SetCursor
GetCursorPos
FindWindowA
SetFocus
GetKeyState
PostMessageA
SetCapture
ReleaseCapture
DestroyAcceleratorTable
PtInRect
TranslateAcceleratorA
ShowCursor
SetCursorPos
BeginPaint
LoadStringA
IsIconic
LoadAcceleratorsA
ClipCursor

gdi32

SetTextColor
GetDeviceCaps
CreateFontA
MoveToEx
TextOutA
SetTextAlign
SetBkColor
GetPaletteEntries
GetTextExtentExPointA
ExtTextOutA
GetTextMetricsA
DeleteObject
GetObjectA
CreateFontIndirectA
CreateCompatibleDC
SelectObject
GetTextExtentPoint32A
DeleteDC
GetStockObject

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

advapi32

RegOpenKeyExA
RegDeleteValueA
GetUserNameA

Sections

.text
Size: 943KB - Virtual size: 943KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0a2d96bb7241807220f8eb62f276b869

Headers

File Characteristics

Imports

storm

shell32

kernel32

user32

gdi32

version

advapi32

Sections

.text Size: 943KB - Virtual size: 943KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 90KB - Virtual size: 1.8MB

.rsrc Size: 43KB - Virtual size: 42KB

.text
Size: 943KB - Virtual size: 943KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 90KB - Virtual size: 1.8MB

.rsrc
Size: 43KB - Virtual size: 42KB