d658cf70b846dec1d64137ff4d7b4583cd7818fac6e425e6752d4f07e2fe975e

Sharing

Copy URL Twitter E-mail

General

Target

d658cf70b846dec1d64137ff4d7b4583cd7818fac6e425e6752d4f07e2fe975e
Size

165KB
MD5

109487bfc6094af41b039a7554af0fb0
SHA1

967830cd92cafd5b6e6c1bc096adce98ae928172
SHA256

d658cf70b846dec1d64137ff4d7b4583cd7818fac6e425e6752d4f07e2fe975e
SHA512

980fa79ea694d6b3be7050b86c8b49f178c617942a617ed904c901a5d454b9bbad23524e12b427d58c9f05179c3f29c150cfc2776034496d66a6a60bf566536d
SSDEEP

3072:rulhpow8OyxPF/pstBaDqwONnct43bBl3N2UktI12aJIEsijP8i2mMfbIN+DXHhM:rul/J8OyPF/p/uwONct43D92UZ2aJIP8

Score

N/A

Malware Config

Signatures

Files

d658cf70b846dec1d64137ff4d7b4583cd7818fac6e425e6752d4f07e2fe975e
.exe windows x86

7298d33de3b54edd1b71843accd54a85

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc90u

ord6699
ord4490
ord5979
ord2479
ord5939
ord2081
ord935
ord813
ord811
ord600
ord9965
ord280
ord296
ord5851
ord2694
ord2676
ord7766
ord12617
ord12165
ord13136
ord10304
ord10457
ord9972
ord13194
ord12404
ord5663
ord5680
ord4347
ord5674
ord3217
ord2087
ord404
ord5535
ord5770
ord663
ord266
ord400
ord6693
ord5943
ord4213
ord5830
ord6741
ord5548
ord1048
ord4179
ord6035
ord2206
ord2251
ord4747
ord6803
ord4173
ord6801
ord4967
ord4211
ord6018
ord4996
ord5676
ord4423
ord4043
ord4448
ord406
ord665
ord2490
ord265
ord4681
ord4905
ord4348
ord2891
ord4071
ord4081
ord4080
ord2764
ord2893
ord2774
ord4519
ord6013
ord3115
ord2966
ord4728
ord4405
ord3112
ord2983
ord1607
ord285
ord3220
ord1599
ord9272
ord7138
ord7332
ord2953
ord8452
ord2771
ord2537
ord3534
ord2955
ord1272
ord1137
ord286
ord801

msvcr90

memset
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
fclose
fprintf
fopen
__CxxFrameHandler3

kernel32

LoadLibraryW
FreeLibrary
MapViewOfFile
GetTickCount
Sleep
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetCommandLineW
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
CloseHandle
CreateToolhelp32Snapshot
Process32NextW
CreateFileMappingW
Process32FirstW
GetProcAddress
GetLastError
GetModuleFileNameW

user32

MessageBoxW

advapi32

RegOpenKeyExW
RegQueryValueExW

shell32

ShellExecuteW

comctl32

InitCommonControlsEx

kkbase

??1CIniFile@@UAE@XZ
??0CIniFile@@QAE@XZ
?AnsiToUnicode@KK_Base@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PBD@Z
?UnicodeToAnsi@KK_Base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PB_W@Z
?SetPath@CIniFile@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetStringKeyValue@CIniFile@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@00@Z
?Utf8ToUnicode@KK_Base@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PBD@Z

msvcp90

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7298d33de3b54edd1b71843accd54a85

Headers

DLL Characteristics

File Characteristics

Imports

mfc90u

msvcr90

kernel32

user32

advapi32

shell32

comctl32

kkbase

msvcp90

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 69KB - Virtual size: 69KB

.reloc Size: 70KB - Virtual size: 72KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 69KB - Virtual size: 69KB

.reloc
Size: 70KB - Virtual size: 72KB