4851eee88f4450cfb489e39aba87293632234d8cb2f221e98d96f476712056ae

Sharing

Copy URL

Twitter E-mail

General

Target

4851eee88f4450cfb489e39aba87293632234d8cb2f221e98d96f476712056ae
Size

138KB
MD5

0e92b3883a8ba68dd573d48d8404b042
SHA1

f9253bafd2cebd39b97858a06204d99ab807b2ef
SHA256

4851eee88f4450cfb489e39aba87293632234d8cb2f221e98d96f476712056ae
SHA512

f800a70bae715c36a4353c084c0e808154208518606fe69585610ebbbd8a1e710d13be4e41c4e2a3d37a48bb6c1ec5679cc80cb6347a5bd1a35bd6bcaac0232c
SSDEEP

3072:jYBIvB4A4caL6x8DIPCDGFquJYi9ay+WL5g04Uwp:jd5mcXPCD1jikm5g

Score

N/A

Malware Config

Signatures

Files

4851eee88f4450cfb489e39aba87293632234d8cb2f221e98d96f476712056ae
.exe windows x86

6a0fd15be670ec33154975c0e12e7989

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryA
GlobalFree
GetLocaleInfoA
GetComputerNameA
InterlockedDecrement
Sleep
LoadLibraryA
UnmapViewOfFile
GetSystemTime
FormatMessageA
GetVersionExA
lstrcpyA
InitializeCriticalSection
DeleteCriticalSection
GetTickCount
CreateMutexA
GetFileAttributesA
EnterCriticalSection
GetTempPathA
lstrlenA
ExitProcess
HeapAlloc
HeapCreate
MulDiv
SetLastError
VirtualProtectEx
LoadResource
GetDiskFreeSpaceA
WaitForSingleObject
InterlockedIncrement
FindResourceA
GetSystemInfo
SetFileAttributesA
GetThreadPriority
GlobalAlloc
GetFileSize
GetModuleHandleA
GetProcAddress
LocalAlloc
FreeLibrary
WritePrivateProfileStringA
GetVersion
MapViewOfFile
CreateProcessA
GetModuleFileNameA
lstrcatA
GetCurrentThreadId
GetPrivateProfileStringA
CreateFileMappingA
IsBadReadPtr
LocalFree
ReadFile
MultiByteToWideChar
GetFileTime
LockResource
GetCurrentThread
SystemTimeToFileTime
ResumeThread
WideCharToMultiByte
GetVolumeInformationA
FileTimeToSystemTime
GlobalUnlock
MoveFileA
GlobalMemoryStatus
InterlockedExchange
SetFileTime
SetFilePointer
CreateFileA
SetThreadPriority
GetStartupInfoA
lstrlenW
GetLastError
CloseHandle
lstrcmpA
GetDriveTypeA
WriteFile
GlobalLock
SetEndOfFile
HeapDestroy

user32

SetCursor
GetParent
EnableMenuItem
SetWindowLongA
GetNextDlgTabItem
InsertMenuA
ShowCaret
RedrawWindow
ReleaseDC
GetMessagePos
KillTimer
ClientToScreen
GetMenu
ReleaseCapture
GetMenuItemInfoA
AdjustWindowRectEx
DispatchMessageA
GetWindow
InflateRect
DrawIconEx
DestroyMenu
SetWindowsHookExA
SetCaretPos
LockWindowUpdate
HideCaret
IsIconic
CreatePopupMenu
SetWindowPos
RegisterWindowMessageA
UnhookWindowsHookEx
SendMessageA
GetDC
MapWindowPoints
SetParent
LoadCursorA
DrawFrameControl
GetCursorPos
EndDeferWindowPos
CreateWindowExA
DeferWindowPos
IsRectEmpty
FillRect
LoadMenuA
GetCapture
GetMenuDefaultItem
PtInRect
SetLastErrorEx
AppendMenuA
EnableWindow
BeginDeferWindowPos
WaitMessage
ModifyMenuA
GetTopWindow
GetDesktopWindow
DeleteMenu
SetCapture
GetDlgCtrlID
CallNextHookEx
InvalidateRect
SetTimer
FlashWindow
OffsetRect
RegisterClipboardFormatA
GetWindowLongA
wvsprintfA
MessageBoxA
WindowFromPoint
IsWindowVisible
LoadImageA
UpdateWindow
GetMenuItemCount
GetMenuStringA
GetMenuItemID
PeekMessageA
SystemParametersInfoA
IsZoomed
IntersectRect
GetClientRect
ScreenToClient
DestroyCaret
EqualRect
SetMenuDefaultItem
SetMenuItemInfoA
GetMessageA
SetRect
GetWindowRect
IsWindow
GetSystemMetrics
PostThreadMessageA
GetSysColor
CreateCaret
TrackPopupMenu
CheckMenuItem
GetSubMenu
GetDCEx
LoadBitmapA
PostMessageA
GetClassLongA
RemoveMenu
GetActiveWindow
MapDialogRect
DrawEdge
UnionRect
SetForegroundWindow
GetSystemMenu
IsMenu
SetRectEmpty
CopyRect
GetMenuState
SetWindowContextHelpId
DrawTextA
BringWindowToTop
PostQuitMessage
GetKeyState

gdi32

GetBitmapBits
Rectangle
GetObjectA
BitBlt
CreateSolidBrush
DeleteDC
GetTextExtentPoint32A
PatBlt
Polygon
GetStockObject
ExtTextOutA
RectInRegion
CreateRectRgnIndirect
SelectObject
TextOutA
GetTextExtentPointA
StretchDIBits
SetTextColor
SetBitmapBits
CreateDIBitmap
CreatePatternBrush
CreateCompatibleBitmap
CreateRectRgn
StretchBlt
SetDIBits
GetDeviceCaps
GetDIBits
CreateFontIndirectA
CreateBitmap
GetCurrentObject
CombineRgn
CreateCompatibleDC
CreateDCA
GetTextMetricsA
DeleteObject

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHFileOperationA
SHBrowseForFolderA
SHGetMalloc
ShellExecuteA

ole32

CLSIDFromString
StringFromGUID2
StringFromCLSID
CoTaskMemFree
CoCreateGuid
CoGetClassObject

oleaut32

SysFreeString
SysAllocStringLen
VariantClear

comctl32

ord8
ImageList_DragLeave
ImageList_GetImageCount
ImageList_BeginDrag
ImageList_DragEnter
ImageList_SetBkColor
ImageList_EndDrag
ImageList_AddMasked

winmm

waveOutPause
mciSendCommandA
mciSendStringA
mciGetErrorStringA
PlaySoundA

wininet

InternetAutodialHangup
InternetGetConnectedState
InternetDial

wsock32

getsockname
accept
getpeername
WSAAsyncSelect
listen
ioctlsocket
htons
gethostbyname
connect
shutdown
closesocket
inet_addr
recv
socket
WSASetLastError
bind
WSAGetLastError
ntohs
send

avifil32

AVIStreamRelease
AVIStreamOpenFromFileA
AVIStreamGetFrame
AVIFileExit
AVIStreamGetFrameClose
AVIStreamGetFrameOpen
AVIFileInit

msvcrt

isalpha
_exit
_ftol
malloc
_setmbcp
_strdup
__CxxFrameHandler
strncat
__setusermatherr
__p__commode
__RTDynamicCast
_itoa
gmtime
isalnum
_except_handler3
_endthread
_close
_mbctoupper
fclose
_onexit
_CIpow
floor
_chdrive
memmove
_XcptFilter
_mbschr
??8type_info@@QBEHABV0@@Z
atol
_initterm
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__set_app_type
ctime
free
fseek
localtime
__p__fmode
strncpy
_mbsinc
fprintf
exit
vsprintf
_chdir
longjmp
_mbscmp
_acmdln
atoi
wcscpy
__dllonexit
isdigit
_ftime
_CxxThrowException
clock
_purecall
_open
atof
rand
fgets
fopen
_CIacos
wcslen
_lseek
sprintf
qsort
_fstat
time
_adjust_fdiv
__getmainargs
_setjmp3

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a0fd15be670ec33154975c0e12e7989

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

comctl32

winmm

wininet

wsock32

avifil32

msvcrt

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 72KB - Virtual size: 119KB

.rsrc Size: 14KB - Virtual size: 14KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 72KB - Virtual size: 119KB

.rsrc
Size: 14KB - Virtual size: 14KB

.reloc
Size: 2KB - Virtual size: 1KB