b0646ad391beebbb0da090c7ca7e69d9354121f47d161ee4bec5ad980811b4ed

Sharing

Copy URL

Twitter E-mail

General

Target

b0646ad391beebbb0da090c7ca7e69d9354121f47d161ee4bec5ad980811b4ed
Size

232KB
MD5

c7bdcd44bc6871d3d2508bd88bcf26eb
SHA1

18b0878beae90b7c7cd6c63cbbb3697e03c4fb2d
SHA256

b0646ad391beebbb0da090c7ca7e69d9354121f47d161ee4bec5ad980811b4ed
SHA512

ee6a87def1c602a1e200b9c214552bf0f8a09303a28334a84becec0fa3c521018305dc687987e6ea27120f590a7d79220acf03347c82073531bfddd91343916a
SSDEEP

6144:p2epShCaRz3TeSxia3k7cP6BLlnzjFVvNX+o:Bp9aRzma3ky6LjFRBf

Score

N/A

Malware Config

Signatures

Files

b0646ad391beebbb0da090c7ca7e69d9354121f47d161ee4bec5ad980811b4ed
.exe windows x86

b4abbfc80d27bb9d903f82c4a9141cd4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

hpqmfc09

??0CCUEWinApp@@QAE@XZ
?ExitInstance@CCUEWinApp@@UAEHXZ
??1CCUEWinApp@@UAE@XZ
?messageMap@CCUEWinApp@@1UAFX_MSGMAP@@B

kernel32

Sleep
GetCurrentThreadId
CloseHandle
GetLastError
CreateMutexA
LocalFree
LocalAlloc
lstrcpyA
CreateFileA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetModuleFileNameA
WideCharToMultiByte
GetCurrentProcessId
LoadLibraryA
SetErrorMode
lstrlenW
GetStartupInfoA
lstrlenA
GetModuleHandleA
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
lstrcmpiA
InitializeCriticalSection
DeleteCriticalSection

user32

wsprintfA
GetWindowLongA
DefWindowProcA

ole32

MkParseDisplayName
CoGetInstanceFromFile
CreateFileMoniker
CreateBindCtx
StringFromGUID2
GetRunningObjectTable
CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SysAllocStringByteLen
CreateErrorInfo
SysAllocStringLen
SysAllocString
SysStringLen
SetErrorInfo
SysFreeString

msvcrt

_setmbcp
toupper
__set_app_type
__p__fmode
__CxxFrameHandler
??3@YAXPAX@Z
_except_handler3
??2@YAPAXI@Z
atoi
_getcwd
_chdir
_chdrive
_controlfp
__p__commode
_onexit
__dllonexit
_acmdln
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv

mfc42

ord858
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord535
ord1601
ord1168
ord5714
ord5289
ord5307
ord4698
ord4079
ord3663
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5214
ord1199
ord1205
ord3259
ord4465
ord2982
ord5731
ord2512
ord2554
ord4486
ord3147
ord5302
ord1576
ord860
ord4673
ord540
ord6375
ord617
ord800
ord296
ord2614

msvcp60

??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ

Exports

Exports

?COMWndProc@@YGJPAUHWND__@@IIJ@Z

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 192KB - Virtual size: 496KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b4abbfc80d27bb9d903f82c4a9141cd4

Headers

File Characteristics

Imports

hpqmfc09

kernel32

user32

ole32

oleaut32

msvcrt

mfc42

msvcp60

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 14KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 2KB

.vmp0 Size: 192KB - Virtual size: 496KB

.text
Size: 16KB - Virtual size: 14KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 2KB

.vmp0
Size: 192KB - Virtual size: 496KB