280fa00f440bfcb787665b336890d91bf921a2b7697c45612f60d821b8fb72e7

Sharing

Copy URL Twitter E-mail

General

Target

280fa00f440bfcb787665b336890d91bf921a2b7697c45612f60d821b8fb72e7
Size

766KB
MD5

4e947cb8d9a5473a9805977697399417
SHA1

c6ce6cc750a7197458fc12072f4c8900ddd97805
SHA256

280fa00f440bfcb787665b336890d91bf921a2b7697c45612f60d821b8fb72e7
SHA512

1b5a5d2ccb1d6eac866116f98268c1253d04520b7216b8b46fdb301a72f8d1213d3d3e5c7e4bf08a27220ceeee82d5cd776322b3a4547fd66e57f9bb664b4b6c
SSDEEP

12288:VJIAJDORgzzEzkguyS0m53OM109Ik2w7JYnvKFhQ8vdlB96VITs9b7rbVlj:VJIAcS0m5J09Ik2uJYnvaTsCT4b7r

Score

N/A

Malware Config

Signatures

Files

280fa00f440bfcb787665b336890d91bf921a2b7697c45612f60d821b8fb72e7
.exe windows x86

1b419325ffb0cd14d5fd20cb9c8ee132

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
TerminateProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
ReadFile
GetFileInformationByHandle
WriteFile
CreateThread
CreateMutexW
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
GetSystemInfo
GlobalUnlock
GlobalLock
GlobalAlloc
GetProcessId
LoadLibraryA
GetSystemDirectoryA
GetTimeZoneInformation
WritePrivateProfileStringW
SystemTimeToFileTime
CreateProcessW
GetPrivateProfileStringW
GlobalFree
FormatMessageW
CreateDirectoryW
OpenFileMappingW
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
Sleep
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
lstrcpynW
GetVersionExW
GetCommandLineW
GetModuleFileNameW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
lstrcmpW
CompareStringW
MulDiv
lstrcmpiW
GetModuleHandleW
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
GetLastError
RaiseException
CopyFileW
GetFileAttributesW
MultiByteToWideChar
SystemTimeToTzSpecificLocalTime
OpenProcess
ReadProcessMemory
LoadLibraryW
GetProcAddress
FreeLibrary
GetProcessTimes
FileTimeToSystemTime
GetSystemTime
CreateFileW
GetFileSizeEx
CloseHandle
lstrlenA
OutputDebugStringW
DebugBreak
FindFirstFileW
GetFullPathNameW
SetLastError
FindClose
FindNextFileW
lstrcpyW
CreateEventW
WideCharToMultiByte
InterlockedIncrement
ResetEvent
lstrlenW
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
SetEvent

user32

DrawIcon
LoadStringW
wvsprintfW
CharNextW
GetGuiResources
DestroyIcon
SetWindowLongW
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
DefWindowProcW
GetWindowLongW
SetWindowPos
GetWindowRect
SendMessageW
InvalidateRect
ShowWindow
IsWindowVisible
RedrawWindow
GetDlgItem
MapWindowPoints
SetRectEmpty
DestroyWindow
CreateWindowExW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
GetClientRect
ScreenToClient
UpdateWindow
IsWindowEnabled
SetCapture
SetFocus
GetParent
GetDlgCtrlID
IsWindow
CallWindowProcW
PtInRect
DrawTextW
FillRect
DrawFocusRect
SetCursor
EnumWindows
GetWindowThreadProcessId
GetCursorInfo
EnumDisplayMonitors
IntersectRect
GetSystemMetrics
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
AnimateWindow
SetTimer
DrawTextExA
CharUpperW
SetScrollInfo
GetScrollInfo
KillTimer
SetProcessDefaultLayout
PostMessageW
DialogBoxParamW
PostQuitMessage
LoadIconW
CopyRect
AdjustWindowRectEx
IsDialogMessageW
MessageBoxW
EnableWindow
MoveWindow
GetMenu
GetIconInfo
DrawTextExW
UnregisterClassA
GetActiveWindow
GetSubMenu
TrackPopupMenu
LoadMenuW
GetWindow
MonitorFromWindow
MonitorFromPoint
GetMonitorInfoW
DestroyMenu
SetMenuItemInfoW
CheckMenuRadioItem
EnableMenuItem
DeleteMenu
EndDialog
LoadImageW
GetDesktopWindow
GetSysColorBrush
GetKeyState
CreateDialogParamW
GetClassNameW
LoadCursorW
GetSysColor
GetFocus
OffsetRect
GetCapture
ReleaseCapture
ReleaseDC
GetDC
EndPaint
BeginPaint
GetCursorPos

gdi32

BitBlt
SelectClipRgn
CreateRectRgn
TextOutW
GetDIBColorTable
GetDIBits
CreateDCW
SetLayout
SelectPalette
RealizePalette
SetStretchBltMode
CreatePalette
CreateHalftonePalette
CreateSolidBrush
Polygon
CreatePen
CreateCompatibleBitmap
CreateCompatibleDC
GetStockObject
CreateFontIndirectW
DeleteDC
StretchBlt
SetViewportOrgEx
SetDIBits
SetTextColor
SetBkMode
GetObjectW
SelectObject
CreateFontW
DeleteObject

shell32

SHFileOperationW
CommandLineToArgvW
ShellExecuteW
ExtractIconW
SHGetFileInfoW
Shell_NotifyIconW

ole32

CoInitialize
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

VarDecCmp
VarDecFromStr
VarR8FromStr
VarI4FromStr
VarDateFromStr
VarUI4FromStr

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegEnumKeyExW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegEnumValueW
RegQueryValueExW
RegDeleteKeyW
RegQueryInfoKeyW
RegSetValueExW

ws2_32

getservbyport
gethostbyaddr
WSASetLastError
WSACleanup
WSAStartup
recv
send
closesocket
connect
socket
htons
getservbyname
htonl
inet_ntoa
gethostbyname
WSAGetLastError
inet_addr
ntohs

dnsapi

DnsFree
DnsQuery_W

wininet

InternetOpenW
InternetConnectW
InternetSetOptionW
InternetQueryOptionW
HttpSendRequestExW
HttpEndRequestW
HttpQueryInfoW
InternetReadFile
InternetCloseHandle
InternetWriteFile
HttpOpenRequestW

psapi

GetProcessMemoryInfo

comctl32

InitCommonControlsEx
_TrackMouseEvent
ImageList_Create
ImageList_ReplaceIcon
ImageList_Remove

msvcp90

??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z

msvcr90

calloc
strcpy_s
strchr
__CxxLongjmpUnwind
atoi
wcsncmp
_wtol
_setjmp3
rewind
wcstok_s
fwrite
fwprintf
sprintf_s
_wstat64i32
feof
fread
wcscpy_s
_wcsicmp
wcsncpy_s
memcpy_s
malloc
_wfopen
_ftelli64
fseek
_fseeki64
ferror
exit
__iob_func
sprintf
fflush
sscanf
getenv
strncpy
tmpfile
abort
_CIpow
longjmp
strtod
fputc
_vsnprintf_s
isspace
tolower
isalpha
strncmp
_except_handler4_common
_unlock
__dllonexit
strncpy_s
_lock
_controlfp_s
_invoke_watson
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
strtoul
strcat_s
_localtime64_s
wcsstr
_recalloc
free
_purecall
_wtoi
iswspace
iswdigit
wcsrchr
_time64
isdigit
strftime
_gmtime64_s
_wdupenv_s
swprintf_s
rand
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
wcschr
memmove
memset
isalnum
_wfopen_s
fprintf
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
__CxxFrameHandler3
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
??_V@YAXPAX@Z
memcpy
memmove_s
_CxxThrowException
_invalid_parameter_noinfo
fclose
__p__commode
__p__fmode
__set_app_type
??3@YAXPAX@Z
srand
_encode_pointer
ftell

Sections

.text
Size: 555KB - Virtual size: 555KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1b419325ffb0cd14d5fd20cb9c8ee132

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

comdlg32

advapi32

ws2_32

dnsapi

wininet

psapi

comctl32

msvcp90

msvcr90

Sections

.text Size: 555KB - Virtual size: 555KB

.rdata Size: 92KB - Virtual size: 92KB

.data Size: 5KB - Virtual size: 5KB

.rsrc Size: 29KB - Virtual size: 28KB

.reloc Size: 26KB - Virtual size: 26KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 555KB - Virtual size: 555KB

.rdata
Size: 92KB - Virtual size: 92KB

.data
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 29KB - Virtual size: 28KB

.reloc
Size: 26KB - Virtual size: 26KB

.rmnet
Size: 56KB - Virtual size: 60KB