1633b947490aca089f17c5e23a3e40b2056c085fbd1e51ce6ed61b90368d04dd

Sharing

Copy URL Twitter E-mail

General

Target

1633b947490aca089f17c5e23a3e40b2056c085fbd1e51ce6ed61b90368d04dd
Size

259KB
MD5

e124c14a7a11322e841a9a79d2f4cb5e
SHA1

db0c815c8d304e3ba05b0b764130f41a78135f74
SHA256

1633b947490aca089f17c5e23a3e40b2056c085fbd1e51ce6ed61b90368d04dd
SHA512

7b733d93f9d6ed439857001654c355be16af9b0acea36a0b9b1f4c4f036f66c1d2aef9afb37d583eceaa42e8f0d0aa697e03b76a1e144825c22ff4d2ea5c626a
SSDEEP

6144:Xy3ZeUo4i5rqUrX8dbSA0Vw+7WowOLAjBjhXMVAvbxQGeb2:Xob3KWUQZz0m+KojL8duAvbsb2

Score

N/A

Malware Config

Signatures

Files

1633b947490aca089f17c5e23a3e40b2056c085fbd1e51ce6ed61b90368d04dd
.exe windows x86

1b2e5b9fdddd7a150f3069a300832c1f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

RpcServerUseAllProtseqsEx
NdrConformantVaryingArrayBufferSize
RpcErrorClearInformation
NdrInterfacePointerMemorySize
NdrDcomAsyncClientCall
I_RpcNsBindingSetEntryNameA
NdrXmitOrRepAsMarshall
RpcMgmtEnableIdleCleanup
NdrConformantArrayMarshall

secur32

EncryptMessage
ExportSecurityContext
InitializeSecurityContextW
AddCredentialsA
QuerySecurityPackageInfoW
MakeSignature
QueryContextAttributesW

oleaut32

VarDateFromBool
VarI4FromDisp
VarFormatNumber
VarR8FromDec
SafeArrayRedim
VarUI4FromI4
VarUI2FromI1
LPSAFEARRAY_Unmarshal
VarUI1FromCy
VarI4FromI8
VarUI8FromDate
VARIANT_UserUnmarshal
VarI1FromI2

rasapi32

RasSetEntryPropertiesW
RasGetCredentialsW
RasGetEapUserDataW
RasGetAutodialAddressA
RasSetAutodialEnableW
RasDeleteSubEntryW
RasDeleteEntryW
RasEnumDevicesA
RasGetProjectionInfoA
RasGetSubEntryHandleA
RasSetEapUserDataA

ole32

CoFreeAllLibraries
ProgIDFromCLSID
CoQueryAuthenticationServices
GetConvertStg
CLSIDFromString
CoInvalidateRemoteMachineBindings
ReadClassStm
CoGetInstanceFromIStorage
CoUnmarshalInterface
CoGetObjectContext
OleCreateDefaultHandler
CLSIDFromProgID

shell32

ord195
SHIsFileAvailableOffline
ExtractIconExW
CommandLineToArgvW
ord90
ord4
ord80
SHFileOperationW
SHFormatDrive

imm32

ImmEnumRegisterWordW
ImmGetDefaultIMEWnd
ImmSetStatusWindowPos
ImmGetCandidateListW
ImmRegisterWordW
ImmCreateContext
ImmGetRegisterWordStyleA
ImmSimulateHotKey
ImmUnregisterWordW
ImmConfigureIMEW
ImmGetContext
ImmAssociateContextEx

glu32

gluBuild1DMipmaps
gluTessBeginPolygon
gluLoadSamplingMatrices
gluTessCallback
gluGetNurbsProperty
gluGetString
gluNurbsCurve
gluCylinder
gluTessProperty
gluQuadricOrientation
gluOrtho2D

opengl32

glTexCoord1dv
glColor4bv
glMapGrid2d
glColor3ub
wglCopyContext
glLoadIdentity
glTexCoordPointer
glVertexPointer
glVertex4s
glLineWidth
glIndexd

msvcrt

wcstoul
_time64
isxdigit
iswspace
toupper
iswxdigit
_mbctoupper
swscanf
exit
isspace

wininet

HttpOpenRequestW
InternetSetOptionW
HttpSendRequestA
InternetFindNextFileA
HttpOpenRequestA
GetUrlCacheEntryInfoW
HttpSendRequestW
InternetSetOptionA
InternetCrackUrlA
InternetFindNextFileW

shlwapi

ChrCmpIW
PathIsContentTypeA
ChrCmpIA
IsCharSpaceA
PathRemoveExtensionW
PathFindExtensionA
PathParseIconLocationA
PathRemoveBlanksA
PathAddBackslashA
PathMakePrettyW
ord157
PathIsUNCServerShareW
PathRenameExtensionA

comctl32

ord6
PropertySheetA
CreatePropertySheetPageA
ImageList_LoadImageW
ImageList_SetIconSize
ImageList_Read
PropertySheetW
ImageList_Draw
CreateStatusWindowW
ImageList_Remove
ImageList_Write
DestroyPropertySheetPage

kernel32

UnmapViewOfFile
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
CancelWaitableTimer
GetConsoleAliasesLengthA
WritePrivateProfileSectionW
GetLastError
GetModuleHandleA
GetUserDefaultUILanguage
GetCommandLineW
GlobalUnlock
GetTickCount
GetPrivateProfileSectionW

gdi32

GetTextFaceW
ExtFloodFill
CreateHatchBrush
ScaleWindowExtEx
GetLayout
GetViewportOrgEx
GetTextMetricsW
SetRectRgn
ExtTextOutW
CombineRgn
StretchDIBits
GetPixel
GetStockObject
CreateEnhMetaFileA

comdlg32

FindTextA
GetOpenFileNameA
GetSaveFileNameA
ChooseColorW
GetFileTitleW
FindTextW
PrintDlgW
PrintDlgA
GetOpenFileNameW
ChooseFontA

advapi32

LookupSecurityDescriptorPartsA
AccessCheckByTypeResultList
EnumDependentServicesW
SetThreadToken
CreateRestrictedToken
CryptSetProviderA
LogonUserA
AccessCheck
CredDeleteA

Exports

Exports

AtopHideReelUveamittgramDribheloGlopef
BoysBuhrManaTitsRubetaxatat
FarlMittMoshFealSlum
GnatAnasSlawbatsBolaGinkAgerHogsHinsYapsrainup
GrownounCeltBaaldayaa
ImmyRubeRumpTeasapeae
KakiFurlFordWarmJoukgeesweenlocoBitsfun
MoorMageokayHastcoedropeTrodHogs

Sections

.text
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1b2e5b9fdddd7a150f3069a300832c1f

Headers

DLL Characteristics

File Characteristics

Imports

rpcrt4

secur32

oleaut32

rasapi32

ole32

shell32

imm32

glu32

opengl32

msvcrt

wininet

shlwapi

comctl32

kernel32

gdi32

comdlg32

advapi32

Exports

Exports

Sections

.text Size: - Virtual size: 4KB

.rdata Size: 246KB - Virtual size: 245KB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: - Virtual size: 4KB

.rdata
Size: 246KB - Virtual size: 245KB

.reloc
Size: 12KB - Virtual size: 12KB