9c09473614b40463f5938e5c8b4ad00061e2f7b7341bac6bf6b2eceae58f13ae

Sharing

Copy URL Twitter E-mail

General

Target

9c09473614b40463f5938e5c8b4ad00061e2f7b7341bac6bf6b2eceae58f13ae
Size

229KB
MD5

e7763f484e61cb6ec1676534f529c3a2
SHA1

efb98b030c1f540968e706cbda3787aa6c75f603
SHA256

9c09473614b40463f5938e5c8b4ad00061e2f7b7341bac6bf6b2eceae58f13ae
SHA512

6403132f16bc4daa2c9531fddefb4ed607ce99d659f4c3c7610c40ca23acd28580725041f87555a56376df8ad53fcef60020f29a7ac4ac154dc8aab99c667461
SSDEEP

6144:G87pe3Y8kZfvy7LcUtFDkCdOn0++GjaO7beKOvL:4opJK7BYFn0ZO7l0L

Score

N/A

Malware Config

Signatures

Files

9c09473614b40463f5938e5c8b4ad00061e2f7b7341bac6bf6b2eceae58f13ae
.exe windows x86

225a3ee965f689989ec9c2538729a3f1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHBindToParent
ord100
ord11
ord155
ord180
SHGetSpecialFolderLocation
ord685
ord80
ord16
ord192
ord85

imm32

ImmGetCandidateListCountW
ImmGetCandidateListCountA
ImmCreateContext
ImmSetCompositionStringA
ImmSetStatusWindowPos
ImmGetCompositionFontW
ImmGetCompositionStringW

glu32

gluTessEndPolygon
gluNurbsProperty
gluBeginPolygon
gluPwlCurve

opengl32

glTexCoord4fv
glRasterPos4s
glPushName
wglShareLists
glPixelMapusv
glFinish
glVertex3fv
wglGetLayerPaletteEntries
glGenTextures
glVertex3iv

msvcrt

sscanf
islower
_time64
isxdigit
strtoul
toupper
_mbctoupper
isspace
wcstoul

shlwapi

PathMakeSystemFolderW
PathRemoveBlanksW
ChrCmpIW
IsCharSpaceA
PathMakePrettyA
PathMatchSpecA
ord29
PathRemoveFileSpecW
PathAddExtensionW
ord14

kernel32

GetEnvironmentStringsW
GetTickCount
FindNextFileW
GetFullPathNameW
GetExitCodeProcess
EnumSystemCodePagesA
GetUserDefaultUILanguage
SuspendThread
HeapSize
DeleteCriticalSection
TerminateThread
lstrlenW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateMutexW

user32

SetCursorPos
IsCharUpperA
GetWindowTextLengthW
IsIconic
IsCharAlphaA
GetScrollRange
LockWindowUpdate
CheckMenuRadioItem
SendDlgItemMessageW
FindWindowA
GetDialogBaseUnits

gdi32

LineTo
CreateHatchBrush
CreatePenIndirect
CreatePatternBrush
GetStockObject
CreateDIBitmap

advapi32

CloseEncryptedFileRaw
ObjectPrivilegeAuditAlarmW
GetSidIdentifierAuthority
RegisterServiceCtrlHandlerExW
SetPrivateObjectSecurityEx
ImpersonateSelf
LookupAccountSidW
SaferiIsExecutableFileType
AdjustTokenPrivileges

Exports

Exports

?KafsTogatingHabuBlur@@YGGPCUtagBITMAP@@ACU_GUID@@PCUtagWNDCLASSW@@_W@Z
ArseFoxySawnFeebtuftJaneFluerotlHeckaeonMokeMellSarkluvno
Boobmach
LiefarfsJimpMugsUntoIreddyedKeetBurySaleBestAltoFurlCionay
RegsVacsMityDuceNosemercscadExitcow
SortAridTsksTripShewxystFeetant
TossIdolScryWhamchawAvesYuanPostrap
WeerPuriRollRaleeaveorradahlbibsRialtavsVelakey

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.i_m_p
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_MEM_READ

.e_x_p
Size: 1024B - Virtual size: 660B

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

225a3ee965f689989ec9c2538729a3f1

Headers

DLL Characteristics

File Characteristics

Imports

shell32

imm32

glu32

opengl32

msvcrt

shlwapi

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 88KB - Virtual size: 88KB

.rdata Size: 85KB - Virtual size: 84KB

.i_m_p Size: 53KB - Virtual size: 53KB

.e_x_p Size: 1024B - Virtual size: 660B

.text
Size: 88KB - Virtual size: 88KB

.rdata
Size: 85KB - Virtual size: 84KB

.i_m_p
Size: 53KB - Virtual size: 53KB

.e_x_p
Size: 1024B - Virtual size: 660B