852f2499821e3cc0607106b9c38a518f11e7661c6228795b626f14018905cd07

Sharing

Copy URL Twitter E-mail

General

Target

852f2499821e3cc0607106b9c38a518f11e7661c6228795b626f14018905cd07
Size

385KB
MD5

36ff00e3f42193cff24eb5be0875f30c
SHA1

b04d26f7128ec3c8dd322a77421aaa57f9a4a43a
SHA256

852f2499821e3cc0607106b9c38a518f11e7661c6228795b626f14018905cd07
SHA512

77d869ad3ef1da1845d3b5fb07db9aea21938d78887912c3ad5303c2d9f5eb22a871d4ec093552038ecdc312d5fbb25a50e6170044ed3de6fae2780657a6c699
SSDEEP

6144:7h1zv8OvYcgrDCiWzD10emjaj8l8od4UQu1LK14kCIy:7h1zv5YcgreiWzD109jajU8odKu1/Iy

Score

N/A

Malware Config

Signatures

Files

852f2499821e3cc0607106b9c38a518f11e7661c6228795b626f14018905cd07
.exe windows x86

4cd3aff284b6ce326fb6d28fae8084c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

iswupper
toupper
isxdigit
isdigit
isalnum
_onexit
??3@YAXPAX@Z
swprintf
_ui64tow
_i64tow
strspn
strcspn
isalpha
__dllonexit
_adjust_fdiv
_initterm
_vsnwprintf
_wcsicmp
_strlwr
_strupr
wcscmp
wcschr
memchr
towlower
wcsncmp
memmove
vswprintf
wcsrchr
calloc
strncpy
strtoul
strchr
sprintf
_except_handler3
_snprintf
_beginthreadex
qsort
srand
wcstok
wcstoul
wcsstr
_ltow
wcstol
iswcntrl
wcspbrk
_wcsdup
_vsnprintf
_ultoa
__CxxFrameHandler
_ultow
rand
wcsncpy
swscanf
_snwprintf
_ltoa
_ftol
strpbrk
_strnicmp
sscanf
strncmp
isspace
tolower
strstr
_wtoi
_atoi64
iswspace
_wtol
wcsftime
gmtime
time
_stricmp
iswxdigit
atoi
iswalpha
iswdigit
_wcsnicmp
towupper
wcslen
_purecall
??2@YAPAXI@Z
realloc
free
malloc
strrchr

tapi32

lineNegotiateAPIVersion
lineGetDevCaps
lineOpen
lineInitialize
lineGetID
lineShutdown
lineClose

ws2_32

WSAEnumNetworkEvents
WSAEventSelect

crypt32

CryptProtectData
CryptUnprotectData

kernel32

CreateEventA
CreateEventW
CreateFileA
CreateFileW
CreateSemaphoreA
DeleteFileA
DeleteFileW
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
FindResourceA
FindResourceW
LocalFree
LocalAlloc
FormatMessageA
FormatMessageW
GetFileAttributesA
GetFileAttributesW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
lstrcpynW
GetTempFileNameA
GetTempFileNameW
GetTempPathA
GetTempPathW
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
lstrcatW
lstrcmpiA
lstrcmpiW
lstrcpyW
IsBadWritePtr
GetVersionExW
GetLocaleInfoA
GlobalFree
GlobalUnlock
GlobalAlloc
GlobalLock
GetWindowsDirectoryW
GetShortPathNameA
GetShortPathNameW
GetComputerNameA
GetComputerNameW
GetSystemDirectoryA
OpenMutexA
OpenMutexW
SearchPathA
SearchPathW
FreeLibraryAndExitThread
SetThreadPriority
GetCurrentThread
GetSystemInfo
InterlockedCompareExchange
WaitForSingleObjectEx
HeapSize
ReleaseSemaphore
Sleep
VirtualFree
VirtualAlloc
TlsFree
TlsGetValue
TlsAlloc
TlsSetValue
SetThreadAffinityMask
GetExitCodeThread
GetSystemDefaultLCID
SetFilePointer
SetEndOfFile
GetLocalTime
ReadFile
GetFileSize
GetStdHandle
SystemTimeToFileTime
GetExitCodeProcess
OpenProcess
GetThreadLocale
FileTimeToSystemTime
QueryPerformanceFrequency
DeviceIoControl
GetCommConfig
GetVersion
CreateDirectoryW
CreateDirectoryA
CopyFileW
CopyFileA
SetLastError
GetModuleHandleA
GetWindowsDirectoryA
lstrlenW
GetVersionExA
WideCharToMultiByte
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
LockResource
WriteFile
FreeResource
HeapAlloc
GetProcessHeap
HeapFree
SetEvent
GetCurrentThreadId
InterlockedExchange
WaitForSingleObject
ResetEvent
CloseHandle
GetLastError
LoadResource
SizeofResource
lstrlenA
DisableThreadLibraryCalls
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
FreeLibrary
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
CompareFileTime
WaitForMultipleObjects
CreateIoCompletionPort
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateThread
LoadLibraryW
GetSystemTime

user32

RegisterWindowMessageA
SetWindowLongA
wvsprintfW
CharNextW
PostQuitMessage
DestroyWindow
GetMessageA
DispatchMessageA
DefWindowProcA
CreateWindowExA
RegisterClassA
PostMessageA
GetWindowLongA

advapi32

RegCloseKey
RegCreateKeyExA
RegCreateKeyExW
RegEnumKeyA
RegEnumKeyW
IsTextUnicode
DeregisterEventSource
RegEnumKeyExW
RegEnumKeyExA
RegQueryValueExW
RegQueryValueExA
RegSetValueExW
RegSetValueExA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyExA
RegDeleteValueW
RegDeleteValueA
RegDeleteKeyW
RegDeleteKeyA
RegEnumValueW
RegEnumValueA

ole32

CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
StringFromGUID2
CLSIDFromString
CoCreateGuid
CreateStreamOnHGlobal
CoInitializeEx
CoUninitialize

wininet

InternetTimeToSystemTimeW
InternetTimeToSystemTimeA
InternetGetCookieW
InternetGetCookieA
InternetSetCookieW
InternetSetCookieA

shell32

SHGetSpecialFolderPathA

version

GetFileVersionInfoW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
VerQueryValueA
VerQueryValueW
GetFileVersionInfoA

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 283KB - Virtual size: 709KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4cd3aff284b6ce326fb6d28fae8084c8

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

tapi32

ws2_32

crypt32

kernel32

user32

advapi32

ole32

wininet

shell32

version

Sections

.text Size: 52KB - Virtual size: 49KB

.data Size: 283KB - Virtual size: 709KB

.rsrc Size: 34KB - Virtual size: 34KB

.reloc Size: 14KB - Virtual size: 14KB

.text
Size: 52KB - Virtual size: 49KB

.data
Size: 283KB - Virtual size: 709KB

.rsrc
Size: 34KB - Virtual size: 34KB

.reloc
Size: 14KB - Virtual size: 14KB