2da70ec19ccc974521025ffc8f32a1983b6517d1151ef4943c69d062954d3d3c

Sharing

Copy URL Twitter E-mail

General

Target

2da70ec19ccc974521025ffc8f32a1983b6517d1151ef4943c69d062954d3d3c
Size

506KB
MD5

1021c89494503fdec076272280957248
SHA1

3aad175ba9003458dd33846c024a09ae989e0686
SHA256

2da70ec19ccc974521025ffc8f32a1983b6517d1151ef4943c69d062954d3d3c
SHA512

64cbee371c3729418d6055bd7f67accd42d2c240ffe1bb1f8302056ef7c67d07f07401798862b13df459c3f71864c056929033b6d9eecce3668ed2edc907ce5e
SSDEEP

12288:cxvqLRvMeJeAYgZ0N8+VI9Hx9tRYhHAwpXeE:cxfeJezgk8+VCEhHAwp

Score

N/A

Malware Config

Signatures

Files

2da70ec19ccc974521025ffc8f32a1983b6517d1151ef4943c69d062954d3d3c
.exe windows x86

88caa1c042cdba17e391de4784d662fa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
GetModuleFileNameA
IsProcessorFeaturePresent
GetFileType
GetStdHandle
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetCPInfo
MultiByteToWideChar
LCMapStringW
WideCharToMultiByte
HeapFree
RtlUnwind
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
ReadFile
SetFilePointer
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
GetLocaleInfoW
QueryPerformanceCounter
HeapSize
GetCurrentProcessId
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeW
GetLocaleInfoA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
SetStdHandle
CreateFileA
CreateFileW
UnregisterWaitEx
CloseHandle
GetDateFormatW
RegisterWaitForSingleObject
LoadLibraryA
GetLocalTime
GetProcessHeaps
GetProcAddress
GetLastError
ReleaseActCtx
CreateDirectoryA
DeactivateActCtx
CreateActCtxA
GetStartupInfoW
HeapSetInformation
GetCommandLineA
ExitProcess
GetModuleHandleW
GetSystemTimeAsFileTime
GetModuleFileNameW
IsBadReadPtr
HeapValidate
IsDebuggerPresent
GetTimeFormatW
HeapCreate
GetTickCount
HeapQueryInformation
CreateEventA
ActivateActCtx
GetProcessHeap
HeapAlloc
FreeLibrary
lstrlenA
GetNativeSystemInfo
lstrcmpA
RaiseException
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
InitializeCriticalSection
SetEndOfFile

user32

GetScrollPos
MoveWindow
GetDlgItemTextA
DestroyMenu
SendMessageW
LoadImageA
IsRectEmpty
SetDlgItemTextA
SetWindowTextA
GetSystemMetrics
IsWindow
EndPaint
DestroyWindow
SetWindowRgn
SetTimer
GetWindowRect
IsMenu
PostQuitMessage
SendDlgItemMessageA
TrackPopupMenu
GetMenuItemID
KillTimer
GetSubMenu
LoadStringA
LoadBitmapA
LoadIconA
MessageBeep
GetClientRect
SetFocus
GetWindowTextLengthA
SendMessageA
BeginPaint
SetScrollRange
GetMonitorInfoA
GetDC
GetWindowTextA
TrackPopupMenuEx
SetRect
SetWindowLongA
MessageBoxA
InvalidateRect
GetWindowLongA
CreateWindowExA
SetScrollPos
GetDCEx
ReleaseDC
DefWindowProcA
TabbedTextOutA
SetWindowPos
SetLayeredWindowAttributes
CreatePopupMenu
AppendMenuA

gdi32

BeginPath
MoveToEx
SetWindowOrgEx
EndPage
FrameRgn
SetViewportOrgEx
LineTo
SetWindowExtEx
StartPage
SetTextColor
DeleteDC
GetDeviceCaps
StretchBlt
CreateFontIndirectA
SetPixel
CreateDCW
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
SetMapMode
CreateCompatibleBitmap
Rectangle
StartDocA
Ellipse
EndPath
CreateFontW
CreateRoundRectRgn
CreateRectRgn
GetTextExtentPointA
CreatePatternBrush
Polyline
FillPath
CreatePen
SetViewportExtEx
GetTextMetricsA
RectVisible
CreateEllipticRgnIndirect
GetFontData
GetObjectA
EndDoc
PathToRegion
CreateSolidBrush
TextOutA
BitBlt

comdlg32

GetOpenFileNameA
GetSaveFileNameA
ChooseFontA
ReplaceTextA

ole32

CoInitialize
CoCreateInstance

wininet

FindNextUrlCacheEntryA
FindCloseUrlCache
FindFirstUrlCacheEntryA
DeleteUrlCacheEntry

avicap32

capCreateCaptureWindowA

iphlpapi

NotifyAddrChange

comctl32

ImageList_Create
ImageList_ReplaceIcon
CreateToolbarEx
ord17
ImageList_Destroy
ImageList_Draw
ImageList_LoadImageA
ImageList_GetBkColor

rpcrt4

RpcAsyncGetCallStatus
RpcAsyncInitializeHandle

usp10

ScriptStringOut
ScriptStringFree
ScriptStringAnalyse

Sections

.text
Size: 372KB - Virtual size: 371KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

88caa1c042cdba17e391de4784d662fa

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

ole32

wininet

avicap32

iphlpapi

comctl32

rpcrt4

usp10

Sections

.text Size: 372KB - Virtual size: 371KB

.rdata Size: 72KB - Virtual size: 72KB

.data Size: 15KB - Virtual size: 23KB

.rsrc Size: 26KB - Virtual size: 25KB

.reloc Size: 19KB - Virtual size: 18KB

.text
Size: 372KB - Virtual size: 371KB

.rdata
Size: 72KB - Virtual size: 72KB

.data
Size: 15KB - Virtual size: 23KB

.rsrc
Size: 26KB - Virtual size: 25KB

.reloc
Size: 19KB - Virtual size: 18KB