02f28ef2bcee6089e819a09e0458d61044f65df25d8790f02183c8f57c6a1563

Sharing

Copy URL Twitter E-mail

General

Target

02f28ef2bcee6089e819a09e0458d61044f65df25d8790f02183c8f57c6a1563
Size

284KB
MD5

0b0c6e4cdd5840b0c62dcb69d44f9cbd
SHA1

e4336ce11736d01ea35c018830ef2cf4380f3bac
SHA256

02f28ef2bcee6089e819a09e0458d61044f65df25d8790f02183c8f57c6a1563
SHA512

04dab3b899c179ff8733e025d301f665c8c0ef8ff2baf51acc98c32c550b28cbe3b92a875c2cf1e6b1e139b5a601a8afc4a13710211d31f7b48fa6010265a45b
SSDEEP

3072:/1W7qTZz9oVW9aypo6bG/4S6S70HQPid8Dss/DVASsVAFXTR9GShxdGo7NpbkwnB:NbTOKayZb3SsrXsYEjRXGobb6GHv

Score

N/A

Malware Config

Signatures

Files

02f28ef2bcee6089e819a09e0458d61044f65df25d8790f02183c8f57c6a1563
.exe windows x86

c29ca08dc9b347d9e206eaf3c01ea0f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

glu32

gluGetString
gluGetNurbsProperty
gluUnProject
gluPickMatrix
gluTessEndPolygon
gluBuild2DMipmaps
gluTessEndContour
gluDeleteNurbsRenderer
gluProject
gluPerspective

oledlg

ord6
ord1
ord10
ord3
ord5

comctl32

CreatePropertySheetPageA
UninitializeFlatSB
ord5

urlmon

MkParseDisplayNameEx
RegisterMediaTypeClass
CreateURLMoniker
FindMediaTypeClass
FindMediaType
RevokeFormatEnumerator
RevokeBindStatusCallback
GetClassFileOrMime
GetClassURL

shlwapi

StrChrA
StrRChrIW
StrRStrIW
StrStrA
StrRChrW
PathCompactPathW
PathIsContentTypeW
PathRemoveFileSpecA
PathIsUNCServerShareW
PathRemoveArgsW
PathParseIconLocationA
PathIsSystemFolderA
SHRegOpenUSKeyW
PathIsRootW
SHRegGetBoolUSValueW
PathIsUNCA
StrCmpNIA
PathIsRelativeA

kernel32

HeapSize
GetStringTypeW
HeapAlloc
HeapReAlloc
LCMapStringW
MultiByteToWideChar
RtlUnwind
HeapFree
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
InterlockedDecrement
GetLastError
GetCurrentThreadId
SetLastError
SetLocaleInfoA
LocalReAlloc
InitializeCriticalSection
CreateEventA
GetModuleHandleA
GetProcAddress
Sleep
VirtualAllocEx
ExitProcess
IsProcessorFeaturePresent
InterlockedIncrement
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree

rpcrt4

RpcServerUseProtseqExW

Sections

.ybvteer
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.urghz
Size: 234KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c29ca08dc9b347d9e206eaf3c01ea0f4

Headers

DLL Characteristics

File Characteristics

Imports

glu32

oledlg

comctl32

urlmon

shlwapi

kernel32

rpcrt4

Sections

.ybvteer Size: 26KB - Virtual size: 26KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 8KB - Virtual size: 25KB

.urghz Size: 234KB - Virtual size: 234KB

.ybvteer
Size: 26KB - Virtual size: 26KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 8KB - Virtual size: 25KB

.urghz
Size: 234KB - Virtual size: 234KB