77e3954e7f639108152e095b8cbd733b36505c84d0775b3fbdd751caf46b7b35

Sharing

Copy URL Twitter E-mail

General

Target

77e3954e7f639108152e095b8cbd733b36505c84d0775b3fbdd751caf46b7b35
Size

256KB
MD5

58ba6c7b9edf875840bfb6115ce86851
SHA1

1706ba0f9ab48a2755f6ccce54858b0ae04e78f6
SHA256

77e3954e7f639108152e095b8cbd733b36505c84d0775b3fbdd751caf46b7b35
SHA512

f7522100b75b14fb626cc23c5c777b3fd4b3c1183bf0fa6a50d6ddf8d32d9b2d0b3fb07e73c042d83354bdd18a111a806114279895d0339d59b349ffc8fff791
SSDEEP

6144:ysCzZSdW3DtqciZ7jw7KgWRr7pVYG4LaMzbpJJB37ZuS4oQjdU:ysGoWztqh7jtZVKWi/mJ

Score

N/A

Malware Config

Signatures

Files

77e3954e7f639108152e095b8cbd733b36505c84d0775b3fbdd751caf46b7b35
.exe windows x86

9c71ac542d66540a38fce479af62f856

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

NdrCorrelationPass
NDRSContextUnmarshall
I_RpcRequestMutex
NdrSimpleStructFree
RpcRevertToSelf
NdrConformantArrayFree
NdrNonEncapsulatedUnionMarshall
RpcServerUseProtseqW
NdrConformantVaryingArrayBufferSize
RpcSmSetClientAllocFree

secur32

TranslateNameW
AcquireCredentialsHandleW
EncryptMessage
DeleteSecurityContext
SetContextAttributesA
ImportSecurityContextA
MakeSignature
LsaRegisterLogonProcess
InitSecurityInterfaceA

oleaut32

VarCyFromR4
VarI2FromBool
VarUI4FromDate
VarBoolFromUI8
VarI8FromDate
VarI8FromUI2
VarBoolFromUI2
VarCyFromUI2
VarUI1FromUI2
SysReAllocStringLen

rasapi32

RasGetCredentialsA
RasSetSubEntryPropertiesA
RasEnumConnectionsW
RasDeleteEntryA
RasGetEapUserDataW
RasGetEapUserIdentityA
RasGetProjectionInfoW
RasEnumAutodialAddressesA
RasGetCountryInfoW

ole32

OleLockRunning
StgIsStorageILockBytes
OleCreateMenuDescriptor
CoUninitialize
CoInitialize
OleCreateEmbeddingHelper
CoInstall
StgCreateDocfileOnILockBytes
WriteClassStg

shell32

ord688
ord524
Shell_NotifyIconW
ord191
SHParseDisplayName
DragQueryFileA
ShellExecuteExA
ord137

imm32

ImmGetCandidateListCountA
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmRequestMessageW
ImmRegisterWordA
ImmGetDescriptionW
ImmSetOpenStatus
ImmSetCompositionStringA
ImmEscapeW
ImmGetCompositionStringA

glu32

gluTessCallback
gluErrorString
gluTessNormal
gluTessVertex
gluTessProperty
gluNurbsCallback
gluScaleImage
gluNextContour
gluCylinder
gluTessBeginPolygon

opengl32

glIndexfv
glTexImage2D
glCopyTexImage1D
glLightModeliv
glVertex4iv
glVertex4f
wglGetCurrentContext
glClearColor
glClear
glVertex3d

msvcrt

toupper
exit
_time64
sscanf
isxdigit
_mbctoupper
isspace
sprintf

wininet

CommitUrlCacheEntryA
FtpOpenFileA
HttpQueryInfoW
HttpSendRequestW
FtpFindFirstFileA
HttpOpenRequestA
InternetOpenA
HttpSendRequestA

shlwapi

ChrCmpIA
PathIsDirectoryA
PathIsRootW
PathFindExtensionW
ord158
PathAddBackslashA
ord155
PathBuildRootW
PathIsLFNFileSpecA
PathIsURLA
ChrCmpIW
PathIsRelativeA

comctl32

ImageList_Destroy
ImageList_SetIconSize
CreatePropertySheetPageW
DestroyPropertySheetPage
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_Remove
ImageList_Draw

kernel32

GetConsoleTitleA
GetCurrentProcess
UnhandledExceptionFilter
GetConsoleMode
GetDriveTypeW
VirtualQuery
GetSystemInfo
CreateIoCompletionPort
GetCurrentThreadId
GetDiskFreeSpaceExW
GetTempPathA
GetLogicalDriveStringsW
TerminateProcess
GetUserDefaultLCID
SetUnhandledExceptionFilter
GetModuleHandleA

gdi32

GetPixel
GetStockObject
GetRgnBox
CreateDCA
RealizePalette
GetNearestPaletteIndex

comdlg32

PrintDlgExW
PrintDlgA
PrintDlgW
ChooseFontA
FindTextW
PrintDlgExA
ChooseColorW
ChooseColorA
GetOpenFileNameW
FindTextA

advapi32

SetKernelObjectSecurity
ObjectPrivilegeAuditAlarmA
CryptEnumProviderTypesA
CryptGetHashParam
RegisterTraceGuidsW
ControlService
SetFileSecurityA
SetFileSecurityW
ImpersonateSelf
DestroyPrivateObjectSecurity

Exports

Exports

?LilyLootSyphnevefoamWore@@YGEPCMUtagLOGBRUSH@@UMallviolZekswe@@ACMEPCJ@Z
BotssewnIdleKhetDautreppNeneCakyohmsslimJaupfoxyboffKerbKnowmaw
DangBedsPixyYurtWairwapas
EasyalpsoathWastTeamWhoaWandmootprayBrawCohoAverUlanfeu
EticDaffcardBatsRheaBeduHairOradWoosmacewoldZoomPimapan
Pearalpem
PestDoerRugsgleeRillHutsfileThusPinkKhetdoteSicevangPecsgos
ToonpikaHartjossbodsaxleProwhuedKoanYangTeasMowsoximnardbutki

Sections

.iat
Size: - Virtual size: 512B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 233KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 512B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9c71ac542d66540a38fce479af62f856

Headers

DLL Characteristics

File Characteristics

Imports

rpcrt4

secur32

oleaut32

rasapi32

ole32

shell32

imm32

glu32

opengl32

msvcrt

wininet

shlwapi

comctl32

kernel32

gdi32

comdlg32

advapi32

Exports

Exports

Sections

.iat Size: - Virtual size: 512B

.rdata Size: 233KB - Virtual size: 233KB

.rsrc Size: - Virtual size: 512B

.reloc Size: 22KB - Virtual size: 21KB

.iat
Size: - Virtual size: 512B

.rdata
Size: 233KB - Virtual size: 233KB

.rsrc
Size: - Virtual size: 512B

.reloc
Size: 22KB - Virtual size: 21KB