3c93b9e8ada478bf86b1621fd02ffc342dd4279393d39ed0dd2a30eaf30571a5

Sharing

Copy URL

Twitter E-mail

General

Target

3c93b9e8ada478bf86b1621fd02ffc342dd4279393d39ed0dd2a30eaf30571a5
Size

650KB
MD5

5457a200a64344b7c32451d8fa33b630
SHA1

ce827b9b0fb8b851b483721b03fa3db690ffc8f0
SHA256

3c93b9e8ada478bf86b1621fd02ffc342dd4279393d39ed0dd2a30eaf30571a5
SHA512

a8377583864b96830713ab490af83869f0c237672876efac0366c3a28f3170c6891f5bf629bfd4bedda4d3d52fdc557a29f12ecd0aa1b03c1579a39a7d34e05a
SSDEEP

12288:dk0WsAzduTzC9PeeHY1cA/sosErDYwBB:9WBh2m9PRHKcA/1f/YI

Score

N/A

Malware Config

Signatures

Files

3c93b9e8ada478bf86b1621fd02ffc342dd4279393d39ed0dd2a30eaf30571a5
.exe windows x86

2869678fcc1755969994fa450400ba7e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr90

_controlfp_s
_invoke_watson
_crt_debugger_hook
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
_except_handler4_common
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_setmbcp
_ismbblead
abort
_expand
_msize
_mbschr
_CxxThrowException
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
isdigit
isspace
_strdup
_splitpath_s
_makepath_s
malloc
free
_wcsicmp
_stricmp
strncpy_s
memmove
wcschr
_vsnprintf
memcpy
__CxxFrameHandler3
wcsncpy_s
??3@YAXPAX@Z
??_U@YAPAXI@Z
??_V@YAXPAX@Z
memset
_vsnwprintf
?_type_info_dtor_internal_method@type_info@@QAEXXZ

shell32

SHGetFolderPathA

ole32

OleLoad
GetClassFile
OleCreateLinkToFile
OleSetContainedObject
StgOpenStorageOnILockBytes
StgIsStorageILockBytes
CoBuildVersion
CoRegisterClassObject
CoRevokeClassObject
OleSave
ReadClassStg

kernel32

LoadLibraryExW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetModuleHandleW
GetFileAttributesW
GetVersion
lstrlenA
GetProcessHeap
LoadLibraryW
GetLastError
SetLastError
GetModuleFileNameW
OutputDebugStringA
LoadLibraryA
FreeLibrary
GetSystemDefaultLCID
WriteFile
WideCharToMultiByte
GetCurrentProcessId
CloseHandle
MultiByteToWideChar
GetACP
SystemTimeToFileTime
FileTimeToSystemTime
GetTickCount
IsDBCSLeadByte
lstrlenW
RaiseException
GetSystemTime
GetTimeFormatW
GetDateFormatW
FileTimeToLocalFileTime
lstrcmpiA
GetFileAttributesA
GetFileTime
DeleteFileA
GetTempPathA
ReadFile
SetCurrentDirectoryA
GetCurrentDirectoryA
CompareFileTime
WaitForSingleObject
IsBadReadPtr
GetProfileStringA
GetCurrentThreadId
FreeResource
LockResource
LoadResource
FindResourceW
GlobalAddAtomA
GetCurrentThread
TlsSetValue
SizeofResource
TlsGetValue
LocalAlloc
LocalFree
FindResourceA
TlsAlloc
lstrcmpA
lstrcmpW
VirtualProtect
QueryPerformanceCounter
GetSystemTimeAsFileTime
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetVersionExA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

user32

GetMessageTime
CallWindowProcA
DefWindowProcA
IsWindowUnicode
GetWindowLongA
IsDialogMessageA
IsDialogMessageW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetWindowLongW
SetWindowLongW
GetMenu
IsWindowEnabled
GetLastActivePopup
GetForegroundWindow
RegisterClassA
CreateWindowExW
GetDlgCtrlID
GetTopWindow
AdjustWindowRectEx
GetClassInfoA
GetClassInfoW
RemovePropA
GetPropA
SetPropA
SetWindowsHookExA
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuA
GetNextDlgTabItem
GetCursorPos
ValidateRect
GetKeyState
DispatchMessageA
TranslateMessage
GetMessageA
MessageBoxA
TranslateAcceleratorA
GetDesktopWindow
BringWindowToTop
IsWindowVisible
LoadAcceleratorsA
DestroyMenu
LoadMenuA
WinHelpA
SetMenu
EndDialog
TabbedTextOutA
DrawTextA
GrayStringA
DrawTextW
GetMessagePos
ModifyMenuW
TabbedTextOutW
GetClassNameA
UnregisterClassA
UnregisterClassW
BeginDeferWindowPos
EndDeferWindowPos
DeferWindowPos
GetAsyncKeyState
SendDlgItemMessageA
DrawFocusRect
DrawIcon
CharPrevA
DestroyWindow
IsCharAlphaNumericA
CharNextA
MapDialogRect
MessageBoxW
GetSysColor
ShowWindow
LoadMenuW
GetSystemMetrics
PeekMessageA
CreateWindowExA
MessageBeep
IsWindow
SetCursor
SetForegroundWindow
GetFocus
IsIconic
ScreenToClient
SetFocus
EnableWindow
RedrawWindow
GetClientRect
MoveWindow
PostMessageA
SetRectEmpty
LoadIconA
LoadCursorA
RegisterClassW
DefWindowProcW
PostQuitMessage
LoadStringW
LoadStringA
GetDlgItem
GetWindowTextLengthA
GetWindowTextW
GetWindowTextA
SetWindowTextA
SetWindowTextW
DialogBoxIndirectParamW
GetWindow
SendMessageA
GetDC
ReleaseDC
SetWindowLongA
GetWindowThreadProcessId
GetParent
MonitorFromWindow
GetMonitorInfoA
SystemParametersInfoA
GetWindowRect
OffsetRect
SetWindowPos
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
CreateDialogIndirectParamW

gdi32

SetTextColor
SetMapMode
GetClipBox
PtVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SetBkColor
RestoreDC
SaveDC
DeleteDC
PatBlt
GetTextMetricsA
CreateFontIndirectA
GetObjectA
GetStockObject
GetObjectW
GetDeviceCaps
CreateFontIndirectW
RectVisible
DeleteObject
GetTextExtentPointW
ExtTextOutW
TextOutW

Exports

Exports

_GetAllocCounters@0

Sections

.text
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vmp0
Size: 508KB - Virtual size: 1.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2869678fcc1755969994fa450400ba7e

Headers

DLL Characteristics

File Characteristics

Imports

msvcr90

shell32

ole32

kernel32

advapi32

user32

gdi32

Exports

Exports

Sections

.text Size: 113KB - Virtual size: 112KB

.data Size: 18KB - Virtual size: 19KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 7KB - Virtual size: 7KB

.vmp0 Size: 508KB - Virtual size: 1.6MB

.text
Size: 113KB - Virtual size: 112KB

.data
Size: 18KB - Virtual size: 19KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 7KB - Virtual size: 7KB

.vmp0
Size: 508KB - Virtual size: 1.6MB