a70cdab216941e472096dffa6f12a5bf775fc984d30abe2fa6b4422a40771878

Sharing

Copy URL

Twitter E-mail

General

Target

a70cdab216941e472096dffa6f12a5bf775fc984d30abe2fa6b4422a40771878
Size

192KB
MD5

e170f534f87fc96eee15b24d2d490419
SHA1

b2da639cb38fc23cb22ed9d18480c5289a50af8a
SHA256

a70cdab216941e472096dffa6f12a5bf775fc984d30abe2fa6b4422a40771878
SHA512

227300c124b32b9960fe54545b44ef258547d7ddae43b9029e4e962a2a4ced6682ab216e6648c8c929c93a6dc8ce4f59f77884e7992caf11d65aeea6076147aa
SSDEEP

3072:toLuWlLDjieufDNAz60DRFhDpvQ6u7+K262W0cv2eCIMqnBQGOC8j:toLuWlVuLNEF9pbYtcW0cv2cMqn1A

Score

N/A

Malware Config

Signatures

Files

a70cdab216941e472096dffa6f12a5bf775fc984d30abe2fa6b4422a40771878
.exe windows x86

0bd8e376944fd3a4d27c1b031c5aeae2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
calloc
_beginthreadex
realloc
strncat
exit
wcscpy
_errno
strncmp
printf
time
srand
atoi
rand
strncpy
strcat
strrchr
_except_handler3
free
strcmp
strcpy
malloc
strchr
memcmp
strstr
strlen
_ftol
ceil
memmove
memcpy
??3@YAXPAX@Z
_CxxThrowException
__CxxFrameHandler
??2@YAPAXI@Z
_strcmpi
_strnicmp
_strrev
memset

msvcp60

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ

mfc42

ord2764
ord4129
ord6648
ord537
ord926
ord924
ord922
ord535
ord858
ord6663
ord860
ord4278
ord939
ord6877
ord540
ord2818
ord800

kernel32

FindNextFileA
GetStartupInfoA
GetModuleHandleA
GetCurrentThreadId
CreateToolhelp32Snapshot
Process32First
lstrcmpiA
GetTempPathA
CopyFileA
CreateMutexA
ExitProcess
SetErrorMode
OpenEventA
ReleaseMutex
GetShortPathNameA
GetEnvironmentVariableA
SetPriorityClass
GetCurrentThread
SetThreadPriority
GetSystemInfo
GlobalMemoryStatus
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetProcessHeap
HeapAlloc
HeapFree
GetModuleFileNameA
OutputDebugStringA
InterlockedExchange
MultiByteToWideChar
GetTickCount
ExitThread
OpenProcess
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
GetCurrentProcess
GetVersionExA
WinExec
SetLastError
MoveFileA
WriteFile
SetFilePointer
ReadFile
CreateFileA
GetFileSize
RemoveDirectoryA
LocalAlloc
FindFirstFileA
LocalReAlloc
RaiseException
LocalFree
FindClose
GetLogicalDriveStringsA
GetDiskFreeSpaceExA
GetDriveTypeA
CreateProcessA
GetFileAttributesA
CreateDirectoryA
GetLastError
DeleteFileA
GetPrivateProfileStringA
lstrcmpA
WideCharToMultiByte
FreeLibrary
GetWindowsDirectoryA
lstrcatA
GetPrivateProfileSectionNamesA
GetProcAddress
LoadLibraryA
CloseHandle
TerminateThread
SetEvent
ResumeThread
CreateThread
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
lstrcpyA
Sleep
lstrlenA

user32

CharNextA
MessageBoxA
ExitWindowsEx
LoadCursorA
DestroyCursor
BlockInput
SendMessageA
SystemParametersInfoA
MapVirtualKeyA
SetCapture
WindowFromPoint
SetCursorPos
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetClipboardData
GetSystemMetrics
SetRect
GetDC
GetDesktopWindow
ReleaseDC
GetCursorPos
GetCursorInfo
SetProcessWindowStation
OpenWindowStationA
GetProcessWindowStation
GetWindowThreadProcessId
IsWindowVisible
GetWindowTextA
EnumWindows
CloseDesktop
SetThreadDesktop
OpenInputDesktop
GetUserObjectInformationA
GetThreadDesktop
OpenDesktopA
PostMessageA
CreateWindowExA
CloseWindow
IsWindow
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0bd8e376944fd3a4d27c1b031c5aeae2

Headers

File Characteristics

Imports

msvcrt

msvcp60

mfc42

kernel32

user32

Sections

.text Size: 134KB - Virtual size: 133KB

.data Size: 39KB - Virtual size: 38KB

.rsrc Size: 18KB - Virtual size: 17KB

.text
Size: 134KB - Virtual size: 133KB

.data
Size: 39KB - Virtual size: 38KB

.rsrc
Size: 18KB - Virtual size: 17KB