d6e684557c702dd47705f125f194a1453b8c1539b1ed87fa860bd73a472b24f7

Sharing

Copy URL

Twitter E-mail

General

Target

d6e684557c702dd47705f125f194a1453b8c1539b1ed87fa860bd73a472b24f7
Size

134KB
MD5

f555cf6233d2fb11cbdf94da379f55ef
SHA1

af45ed4cbfaaedeceae74bec7e1874569cdcd66e
SHA256

d6e684557c702dd47705f125f194a1453b8c1539b1ed87fa860bd73a472b24f7
SHA512

02bce59a4bd6cf7170f1af24d719b4bccc45a4a6e73ea6a963b65efa90c244fb8e07e251cd258be1cea0dbd8fa951275e8b4bc94d01d484ea78d65af91149328
SSDEEP

3072:5taiMEULOqvaRRZzFPk2I111KYTI1Uk16M:na5rOqva1HMzTy11

Score

N/A

Malware Config

Signatures

Files

d6e684557c702dd47705f125f194a1453b8c1539b1ed87fa860bd73a472b24f7
.exe windows x86

1735203f3ae9c8a8bf317585aa734c05

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
LockResource
SizeofResource
FindResourceW
FindResourceExW
lstrlenA
CloseHandle
GetModuleFileNameW
lstrcmpiW
CreateFileW
GetFileSize
ReadFile
Sleep
GetLogicalDriveStringsW
GetDriveTypeW
lstrcpyW
lstrcpynW
lstrcatW
GetComputerNameW
FindFirstFileW
GetFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetLocalTime
GetLastError
FindClose
WriteFile
lstrcmpW
InterlockedCompareExchange
GetStartupInfoW
TerminateProcess
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
lstrlenW
WideCharToMultiByte
FindNextFileW
MultiByteToWideChar
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
InterlockedExchange

user32

LoadCursorW
RegisterClassExW
CreateWindowExW
LoadStringW
LoadIconW
EndDialog
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcW
DestroyWindow
DialogBoxParamW
UpdateWindow
ShowWindow

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExA

shell32

SHGetDriveMedia
SHGetFolderPathW

msvcr90

wcsrchr
rand
fopen
fclose
remove
mbstowcs
_stricmp
strstr
_wremove
sprintf
fprintf
_recalloc
calloc
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_vsnwprintf
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
strcpy_s
malloc
_invalid_parameter_noinfo
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
free
??3@YAXPAX@Z
memmove_s
memcpy_s
??1exception@std@@UAE@XZ
_amsg_exit
memset
memcpy
__CxxFrameHandler3
??0exception@std@@QAE@XZ
_CxxThrowException

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

ws2_32

WSAStartup
gethostname
getaddrinfo
WSACleanup
recv
shutdown
send
closesocket
connect
socket

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1735203f3ae9c8a8bf317585aa734c05

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

msvcr90

msvcp90

ws2_32

Sections

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 3KB - Virtual size: 15KB

.rsrc Size: 84KB - Virtual size: 84KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 3KB - Virtual size: 15KB

.rsrc
Size: 84KB - Virtual size: 84KB

.reloc
Size: 4KB - Virtual size: 4KB