6d36ba960f30191b132e1e42a7ff142d4afcf980987bdb1f25a5205fba5c49f1

Sharing

Copy URL Twitter E-mail

General

Target

6d36ba960f30191b132e1e42a7ff142d4afcf980987bdb1f25a5205fba5c49f1
Size

262KB
MD5

ff13f3ffb9afc3859d26e4d1eeb4ed65
SHA1

226b66a681e5489df38209ab08c5a313c0233d7b
SHA256

6d36ba960f30191b132e1e42a7ff142d4afcf980987bdb1f25a5205fba5c49f1
SHA512

b9304c6f5c02942bdd0e5b77aa196b37138d7f2e2f8376bcc5dd354df76687c576fd488e0236670cf159db9817fdafbed8441b866ff1b308dc111ef57c1f846a
SSDEEP

6144:DZO1p2cj6ldHPZxXhDkEcjFjL4BflU6hSSiuD4QN+L:sf2jnvZ3ovjJeG6hSSiuM

Score

N/A

Malware Config

Signatures

Files

6d36ba960f30191b132e1e42a7ff142d4afcf980987bdb1f25a5205fba5c49f1
.exe windows x86

7dc38b84274b8de136a79872afd17192

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidToStringA
NdrUserMarshalMarshall
RpcErrorSaveErrorInfo
RpcErrorResetEnumeration
RpcServerUseProtseqEpA
RpcSsFree
I_RpcBindingInqLocalClientPID
I_RpcReceive
RpcObjectInqType

secur32

RevertSecurityContext
EncryptMessage
InitSecurityInterfaceA
SetContextAttributesW
ApplyControlToken
CompleteAuthToken
GetUserNameExA
LsaDeregisterLogonProcess
LsaGetLogonSessionData

oleaut32

CreateErrorInfo
LoadRegTypeLi
VarR8FromDate
VarUI8FromDate
VarUI2FromR8
VarFormatCurrency
GetActiveObject
VarI8FromI2
LPSAFEARRAY_UserMarshal

rasapi32

RasSetEapUserDataW
RasSetEapUserDataA
RasGetConnectStatusW
RasGetAutodialAddressW
RasSetAutodialAddressA
RasValidateEntryNameW
RasGetAutodialAddressA
RasGetCountryInfoA
RasGetSubEntryHandleA

ole32

CLSIDFromProgIDEx
ReadClassStg
CoGetStandardMarshal
CoGetClassObject
CoGetTreatAsClass
OleSetContainedObject
CoGetCancelObject
OleSave

shell32

ExtractIconW
ord162
ord89
ord22
SHParseDisplayName
SHCreateShellItem
ExtractAssociatedIconW
SHInvokePrinterCommandW
ord85
Shell_NotifyIconA

imm32

ImmGetRegisterWordStyleW
ImmSetOpenStatus
ImmGetCompositionFontA
ImmGetCompositionStringA
ImmRegisterWordA
ImmSetCompositionFontA
ImmGetConversionStatus
ImmSetCompositionFontW
ImmGetStatusWindowPos
ImmConfigureIMEW

glu32

gluQuadricNormals
gluDeleteQuadric
gluTessVertex
gluSphere
gluTessBeginPolygon
gluBeginPolygon
gluBeginTrim
gluQuadricCallback
gluCylinder

opengl32

glVertex2dv
glIndexiv
glColorMask
glMap1f
glIndexPointer
glColorMaterial
glGetMapdv
glVertex3i
glVertex4d
glGetTexLevelParameterfv

msvcrt

isxdigit
strtoul
wcschr
wcstoul
_exit
islower
toupper
_mbctoupper
isspace
swscanf
sprintf

wininet

InternetCloseHandle
FtpFindFirstFileA
HttpQueryInfoA
InternetOpenW
HttpOpenRequestW
HttpOpenRequestA
FtpOpenFileA

shlwapi

PathRelativePathToA
PathMakePrettyW
PathRelativePathToW
PathAddExtensionA
PathRenameExtensionA
PathFindExtensionW
ord155
PathIsUNCServerW
ord9
PathRemoveBlanksA
ord29
PathBuildRootA

comctl32

ImageList_SetIconSize
PropertySheetW
ImageList_GetIconSize
ImageList_ReplaceIcon
CreateToolbarEx
ord6
CreateStatusWindowW
ImageList_LoadImageA

kernel32

GetFileSize
CreateThread
GetDriveTypeW
GetCPInfo
CreateProcessA
GetCurrentProcessId
GetFullPathNameW
lstrlenA
CopyFileA
OpenFileMappingW
FormatMessageA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetComputerNameExW

gdi32

GetStockObject
BeginPath
CreatePatternBrush
ExtFloodFill
GetEnhMetaFileBits
GetTextExtentExPointW
PtInRegion
EndPage
SetWindowExtEx
GetBkMode
CreateFontIndirectW
GetEnhMetaFileHeader
EnumFontFamiliesExA

comdlg32

GetSaveFileNameW
FindTextA
GetFileTitleW
PrintDlgA
GetOpenFileNameW
CommDlgExtendedError
ChooseColorW
PrintDlgExW

advapi32

CryptHashData
OpenTraceA
RegSaveKeyExA
RegReplaceKeyW
InitializeSecurityDescriptor
CryptSetProviderExA
CredReadW
ObjectPrivilegeAuditAlarmA

Exports

Exports

?PeltPraylunacudax@@YGXACI@Z
AddspixyopenveerGaby
CastLuvsJambLosscosslibsbud
FinoSinhjeesKobsCorkcrabtuxad
HurlKufijaggWindScarPreyGliaPupsBestkefskuduSandbuzzveene
KafslustRaisRankNitePeriLilokaasSewnNeatRanimi
MaraJupeGoshtramPaysturdGeneBrrrBoshno
TradjubaDebsNite

Sections

.text
Size: - Virtual size: 512B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7dc38b84274b8de136a79872afd17192

Headers

DLL Characteristics

File Characteristics

Imports

rpcrt4

secur32

oleaut32

rasapi32

ole32

shell32

imm32

glu32

opengl32

msvcrt

wininet

shlwapi

comctl32

kernel32

gdi32

comdlg32

advapi32

Exports

Exports

Sections

.text Size: - Virtual size: 512B

.rdata Size: 248KB - Virtual size: 248KB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: - Virtual size: 512B

.rdata
Size: 248KB - Virtual size: 248KB

.reloc
Size: 12KB - Virtual size: 12KB