a188ab6a9eb4d5442a1013fb97f6c2da23a18261b9ad83ca55e860e8f68a88cb

Sharing

Copy URL Twitter E-mail

General

Target

a188ab6a9eb4d5442a1013fb97f6c2da23a18261b9ad83ca55e860e8f68a88cb
Size

262KB
MD5

2c323edeeb16b8e5f13fa93fafea1b7c
SHA1

96d8d9ebf6960a054a15b196812266706ef94634
SHA256

a188ab6a9eb4d5442a1013fb97f6c2da23a18261b9ad83ca55e860e8f68a88cb
SHA512

5177c83171842e2242718704ac79e4ca5b61c1856957c8e948a11afca5559bacbe373357c6a2201343a85e51a5e58f201f380085870e0c50579ebb7aabc7c2c3
SSDEEP

6144:LgOpMCdvldHPZmZoHmBkEiDZjLhqWvFGeXHRQ+L:k8MCnvZdGWEiZhFlXHp

Score

N/A

Malware Config

Signatures

Files

a188ab6a9eb4d5442a1013fb97f6c2da23a18261b9ad83ca55e860e8f68a88cb
.exe windows x86

7dc38b84274b8de136a79872afd17192

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidToStringA
NdrUserMarshalMarshall
RpcErrorSaveErrorInfo
RpcErrorResetEnumeration
RpcServerUseProtseqEpA
RpcSsFree
I_RpcBindingInqLocalClientPID
I_RpcReceive
RpcObjectInqType

secur32

RevertSecurityContext
EncryptMessage
InitSecurityInterfaceA
SetContextAttributesW
ApplyControlToken
CompleteAuthToken
GetUserNameExA
LsaDeregisterLogonProcess
LsaGetLogonSessionData

oleaut32

CreateErrorInfo
LoadRegTypeLi
VarR8FromDate
VarUI8FromDate
VarUI2FromR8
VarFormatCurrency
GetActiveObject
VarI8FromI2
LPSAFEARRAY_UserMarshal

rasapi32

RasSetEapUserDataW
RasSetEapUserDataA
RasGetConnectStatusW
RasGetAutodialAddressW
RasSetAutodialAddressA
RasValidateEntryNameW
RasGetAutodialAddressA
RasGetCountryInfoA
RasGetSubEntryHandleA

ole32

CLSIDFromProgIDEx
ReadClassStg
CoGetStandardMarshal
CoGetClassObject
CoGetTreatAsClass
OleSetContainedObject
CoGetCancelObject
OleSave

shell32

ExtractIconW
ord162
ord89
ord22
SHParseDisplayName
SHCreateShellItem
ExtractAssociatedIconW
SHInvokePrinterCommandW
ord85
Shell_NotifyIconA

imm32

ImmGetRegisterWordStyleW
ImmSetOpenStatus
ImmGetCompositionFontA
ImmGetCompositionStringA
ImmRegisterWordA
ImmSetCompositionFontA
ImmGetConversionStatus
ImmSetCompositionFontW
ImmGetStatusWindowPos
ImmConfigureIMEW

glu32

gluQuadricNormals
gluDeleteQuadric
gluTessVertex
gluSphere
gluTessBeginPolygon
gluBeginPolygon
gluBeginTrim
gluQuadricCallback
gluCylinder

opengl32

glVertex2dv
glIndexiv
glColorMask
glMap1f
glIndexPointer
glColorMaterial
glGetMapdv
glVertex3i
glVertex4d
glGetTexLevelParameterfv

msvcrt

isxdigit
strtoul
wcschr
wcstoul
_exit
islower
toupper
_mbctoupper
isspace
swscanf
sprintf

wininet

InternetCloseHandle
FtpFindFirstFileA
HttpQueryInfoA
InternetOpenW
HttpOpenRequestW
HttpOpenRequestA
FtpOpenFileA

shlwapi

PathRelativePathToA
PathMakePrettyW
PathRelativePathToW
PathAddExtensionA
PathRenameExtensionA
PathFindExtensionW
ord155
PathIsUNCServerW
ord9
PathRemoveBlanksA
ord29
PathBuildRootA

comctl32

ImageList_SetIconSize
PropertySheetW
ImageList_GetIconSize
ImageList_ReplaceIcon
CreateToolbarEx
ord6
CreateStatusWindowW
ImageList_LoadImageA

kernel32

GetFileSize
CreateThread
GetDriveTypeW
GetCPInfo
CreateProcessA
GetCurrentProcessId
GetFullPathNameW
lstrlenA
CopyFileA
OpenFileMappingW
FormatMessageA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetComputerNameExW

gdi32

GetStockObject
BeginPath
CreatePatternBrush
ExtFloodFill
GetEnhMetaFileBits
GetTextExtentExPointW
PtInRegion
EndPage
SetWindowExtEx
GetBkMode
CreateFontIndirectW
GetEnhMetaFileHeader
EnumFontFamiliesExA

comdlg32

GetSaveFileNameW
FindTextA
GetFileTitleW
PrintDlgA
GetOpenFileNameW
CommDlgExtendedError
ChooseColorW
PrintDlgExW

advapi32

CryptHashData
OpenTraceA
RegSaveKeyExA
RegReplaceKeyW
InitializeSecurityDescriptor
CryptSetProviderExA
CredReadW
ObjectPrivilegeAuditAlarmA

Exports

Exports

?PeltPraylunacudax@@YGXACI@Z
AddspixyopenveerGaby
CastLuvsJambLosscosslibsbud
FinoSinhjeesKobsCorkcrabtuxad
HurlKufijaggWindScarPreyGliaPupsBestkefskuduSandbuzzveene
KafslustRaisRankNitePeriLilokaasSewnNeatRanimi
MaraJupeGoshtramPaysturdGeneBrrrBoshno
TradjubaDebsNite

Sections

.text
Size: - Virtual size: 512B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7dc38b84274b8de136a79872afd17192

Headers

DLL Characteristics

File Characteristics

Imports

rpcrt4

secur32

oleaut32

rasapi32

ole32

shell32

imm32

glu32

opengl32

msvcrt

wininet

shlwapi

comctl32

kernel32

gdi32

comdlg32

advapi32

Exports

Exports

Sections

.text Size: - Virtual size: 512B

.rdata Size: 248KB - Virtual size: 248KB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: - Virtual size: 512B

.rdata
Size: 248KB - Virtual size: 248KB

.reloc
Size: 12KB - Virtual size: 12KB