82034d619ce3c7588e9ebe998b061f6d75d53ac14fe96a6a5122212a29ab1f82

Sharing

Copy URL Twitter E-mail

General

Target

82034d619ce3c7588e9ebe998b061f6d75d53ac14fe96a6a5122212a29ab1f82
Size

148KB
MD5

9eea78a0c2d76f128bb53c8bfbbc4ba9
SHA1

fbcb3915f3ff0c90d59f9067bf4e97dcb6a94df1
SHA256

82034d619ce3c7588e9ebe998b061f6d75d53ac14fe96a6a5122212a29ab1f82
SHA512

7645c5dad02b788fe2aa72827ceb60109b6f48b00c6f76c6641c5b943b3530d4c80ef6279916d03b11e3c8972aa880b425f80ac5709a0fe9d04f214c69cf0839
SSDEEP

3072:H5tA4heUmNvoixsZ6L4P64G3PyISgHg3RwWvQeOD:deUJiiZ8kAKB2owFeO

Score

N/A

Malware Config

Signatures

Files

82034d619ce3c7588e9ebe998b061f6d75d53ac14fe96a6a5122212a29ab1f82
.exe windows x86

476b6282574da7cf4dfc341bcaa016f0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
ExitProcess
DeleteCriticalSection
IsDebuggerPresent
TlsGetValue
IsProcessorFeaturePresent
LocalFree
FlushInstructionCache
lstrlenW
GetWindowsDirectoryW
GetVersionExW
InitializeCriticalSectionAndSpinCount
HeapAlloc
GetModuleHandleW
UnhandledExceptionFilter
GetPrivateProfileIntW
GetFileSize
GetOEMCP
RtlUnwind
CreateFileW
GetEnvironmentStringsW
HeapFree
EnumSystemLocalesA
GlobalAlloc
LCMapStringA
GetModuleHandleA
GetFileType
lstrcmpiW
GetDateFormatA
GetPrivateProfileStringW
SizeofResource
FindNextChangeNotification
SetUnhandledExceptionFilter
GetCurrentThreadId
GetCurrentProcessId
lstrcpynA
MultiByteToWideChar
FindResourceW
IsValidLocale
GetStdHandle
HeapReAlloc
LoadLibraryW
CompareStringA
GetConsoleCP
CreateThread
QueryPerformanceCounter
TerminateProcess
GetFileAttributesW
TlsSetValue
GlobalSize
InterlockedIncrement
WritePrivateProfileStringW
GetModuleFileNameW
GetTempPathW
lstrcmpW
GetACP
IsValidCodePage
WideCharToMultiByte
GetStringTypeA
VirtualQuery
LeaveCriticalSection
ExpandEnvironmentStringsA
RaiseException
ExpandEnvironmentStringsW
ResetEvent
GetConsoleMode
InterlockedExchange
GetFileAttributesExW
GetCurrentProcess
OpenEventW
lstrcpyW
SystemTimeToTzSpecificLocalTime
LCMapStringW
VirtualFree
GetModuleFileNameA
GetComputerNameW
GetStartupInfoW
FreeEnvironmentStringsW
lstrcatW
InterlockedCompareExchange
TlsFree
WriteConsoleW
AddAtomA
GetVersion
lstrlenA
GetCurrentThread
SetLastError
GetLastError
SetHandleCount
GetStartupInfoA
ReadFile
FindFirstChangeNotificationW
OutputDebugStringW
SetStdHandle
SetConsoleCtrlHandler
LoadLibraryExW
HeapCreate
CreateFileA
lstrcpynW
GetTempFileNameW
InterlockedDecrement
LoadLibraryA
GetTimeFormatA
GlobalLock
CloseHandle
GetSystemDefaultLangID
FreeLibrary
LocalAlloc
CopyFileW
CompareStringW
TlsAlloc
EnterCriticalSection
MulDiv
DebugBreak
GetDateFormatW
HeapDestroy
WritePrivateProfileSectionW
GetProcAddress
GlobalUnlock
GetUserDefaultLCID
GetStringTypeW
WinExec
GetConsoleOutputCP
GetCommandLineW
LockResource
FormatMessageW
WaitForMultipleObjects
HeapSize
VirtualAlloc
FileTimeToSystemTime
WaitForSingleObject
WriteConsoleA
VerLanguageNameW
GetCPInfo
InitializeCriticalSection
LoadResource
GetSystemDirectoryW

user32

IsClipboardFormatAvailable
SetDlgItemTextW
GetClassInfoW
SetWindowsHookExW
MessageBoxW
GetMessageW
EnableWindow
RegisterClassW
RegisterWindowMessageW
PeekMessageW
LoadAcceleratorsW
IsWindowVisible
GetActiveWindow
DialogBoxParamW
FillRect
GetSubMenu
SetCapture
FrameRect
ReleaseCapture
UpdateWindow
LoadImageW
CreatePopupMenu
DrawEdge
GetWindowRect
LockWindowUpdate
GetDC
CallNextHookEx
LoadBitmapW
CharLowerW
DrawFrameControl
IsMenu
GetFocus
SetWindowTextW
IsChild
LoadIconW
RegisterClassExW
MapWindowPoints
PostQuitMessage
GetWindowTextLengthW
DefMDIChildProcW
MoveWindow
SetDlgItemInt
CallWindowProcW
KillTimer
DestroyWindow
CopyRect
wvsprintfW
GetSystemMenu
GetParent
RegisterClipboardFormatW
RemoveMenu
BeginDeferWindowPos
TrackPopupMenu
EndPaint
EqualRect
GetMenuStringW
UnregisterClassW
OffsetRect
GetCursorPos
InflateRect
AppendMenuW
GetMenu
SendMessageW
LoadMenuW
SetMenuItemInfoW
PtInRect
DestroyCaret
SetForegroundWindow
MonitorFromWindow
DragDetect
GetKeyState
OpenClipboard
LoadStringW
SetScrollPos
GetMenuDefaultItem
InvalidateRect
GetWindowLongW
CharNextW
EmptyClipboard
LoadStringA
SetMenuDefaultItem
TrackPopupMenuEx
GetDlgCtrlID
SetFocus
ShowScrollBar
SetParent
LoadCursorW
GetDlgItemTextW
GetWindowLongA
GetSystemMetrics
BeginPaint
GetWindowPlacement
GetClassNameW
GetMessagePos
EndDialog
InsertMenuW
ScrollWindowEx
PostMessageW
SetCaretPos
GetCapture
GetMonitorInfoW
GetClassLongW
CloseClipboard
FindWindowW
SystemParametersInfoW
GetSysColorBrush
DestroyMenu
GetWindowTextW
SetClipboardData
DefWindowProcW
EnableMenuItem
SetWindowPos
DrawFocusRect
WindowFromPoint
TranslateMessage
DispatchMessageW
BringWindowToTop
ClientToScreen
UnregisterClassA
DefFrameProcW
SetMenu
GetMenuItemInfoW
IsWindowEnabled
GetDoubleClickTime
CreateCaret
TranslateMDISysAccel
GetWindowThreadProcessId
GetMenuItemID
ScreenToClient
SetCursor
SetScrollInfo
GetDlgItemInt
TranslateAcceleratorW
SetRectEmpty
MessageBeep
RedrawWindow
UnhookWindowsHookEx
EndDeferWindowPos
GetWindowDC
GetScrollInfo
GetWindow
IntersectRect
ReleaseDC
SetTimer
DrawMenuBar
ModifyMenuW
CreateWindowExW
GetDesktopWindow
GetClientRect
DeferWindowPos

gdi32

CreateDIBSection
SetViewportOrgEx
ExtTextOutW
Polyline
GetObjectW
CreateFontIndirectW
MoveToEx
GetTextExtentPointW
GetDeviceCaps
DeleteObject
GetClipRgn
SaveDC
CreateCompatibleBitmap
Rectangle
CreatePatternBrush
Polygon
SetBkColor
SelectPalette
CreatePalette
LineTo
CreateCompatibleDC
IntersectClipRect
RealizePalette
TextOutW
RestoreDC
SetWindowOrgEx
BitBlt
CreateRectRgn
SelectObject
SelectClipRgn
SetBkMode
PatBlt
CreateBitmap
GetViewportOrgEx
GetTextExtentPoint32W
GetStockObject
CreateFontW
SetPolyFillMode
DPtoLP
CreateSolidBrush
SetTextColor
SetBrushOrgEx
LPtoDP
GetClipBox
CreatePen
GetTextMetricsW
DeleteDC

comdlg32

ChooseFontW
GetSaveFileNameW
ChooseColorW
GetOpenFileNameW

oleaut32

SystemTimeToVariantTime
SysFreeString
VarR8FromStr
VarUI4FromStr
VarDecFromStr
VarDecCmp
VarI4FromStr

wsock32

getsockname
WSAAsyncSelect
ioctlsocket
WSASetLastError
recv
listen
accept
send
gethostbyname
WSAGetLastError
htons
connect
bind
shutdown
getpeername
socket
inet_addr
ntohs
closesocket

msvcrt

localtime
strchr
fclose
sprintf
rand
_onexit
exit
fwrite
atoi
_i64toa
_acmdln
strncmp
__dllonexit
atol
_setmbcp
_strnicmp
__getmainargs
_initterm
_XcptFilter
_ftol
_controlfp
wcslen
_exit
__p__fmode
memmove
fopen
__setusermatherr
_stricmp
__set_app_type
__CxxFrameHandler
__p__commode
_adjust_fdiv
_except_handler3
_purecall
time

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 351KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

476b6282574da7cf4dfc341bcaa016f0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

oleaut32

wsock32

msvcrt

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 72KB - Virtual size: 351KB

.data1 Size: 4KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 72KB - Virtual size: 351KB

.data1
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 2KB