61c6ff64c2f104aac62ee22142758296151a274443b7a9d0621bbcc272d91ef1

Sharing

Copy URL Twitter E-mail

General

Target

61c6ff64c2f104aac62ee22142758296151a274443b7a9d0621bbcc272d91ef1
Size

329KB
MD5

40fcacdbef43c9c7da64a04ee327f203
SHA1

523db975beeecb2b8ab7d3b39bf0aab3a284e5bd
SHA256

61c6ff64c2f104aac62ee22142758296151a274443b7a9d0621bbcc272d91ef1
SHA512

715ceff01c367d5f4459d47629ff5006a64e27eddfd317f7b693610db84d5832df88ec733c9795ed0d21c4f84b8d78287ca6b3ba6f6a71f356847e57eef60f01
SSDEEP

6144:kd0ROdAms95LZabZEetpULoOAlk0d7gxtpE05kAB9:kiKAms/LyZZtpULoOuw

Score

N/A

Malware Config

Signatures

Files

61c6ff64c2f104aac62ee22142758296151a274443b7a9d0621bbcc272d91ef1
.exe windows x86

e9ce3bb75b6217ede37460848d858e18

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UnregisterClassA
CharLowerBuffW

userenv

UnloadUserProfile

kernel32

SetFileTime
RaiseException
DeviceIoControl
LockResource
CreateThread
HeapReAlloc
IsDebuggerPresent
OutputDebugStringW
LeaveCriticalSection
SetUnhandledExceptionFilter
FindResourceW
SetWaitableTimer
CancelWaitableTimer
GetSystemTimeAsFileTime
LocalFree
HeapSize
IsValidLocale
SetFilePointer
SizeofResource
SetLastError
CloseHandle
WaitForMultipleObjects
FindClose
GetFileInformationByHandle
lstrlenA
GetComputerNameExW
GetSystemTime
WideCharToMultiByte
FileTimeToSystemTime
CreateEventW
GetCurrentThreadId
FindFirstFileW
HeapDestroy
GetThreadLocale
DeleteCriticalSection
CreateWaitableTimerW
ResumeThread
FindNextFileW
GetProcessHeap
HeapFree
HeapAlloc
FlushFileBuffers
lstrlenW
CreateDirectoryW
SetEndOfFile
SystemTimeToFileTime
LoadResource
DeleteFileW
GetACP
EnterCriticalSection
SetThreadLocale
WriteFile
CreateFileW
FormatMessageW
UnhandledExceptionFilter
TerminateThread
MoveFileW
GetUserDefaultLCID
WaitForSingleObject
FindResourceExW
GetFullPathNameW
VirtualAllocEx

oleaut32

SafeArrayDestroy
SafeArrayGetUBound
SafeArrayGetDim
SafeArrayUnlock
VariantChangeTypeEx
SysAllocStringByteLen
VariantInit
SysStringByteLen
VarBstrFromDec
VariantCopy
SafeArrayLock
LoadTypeLi
VariantTimeToSystemTime
VariantCopyInd
SafeArrayGetLBound
SafeArrayCreate
SysStringLen
VarBstrFromBool
VarBstrFromDate
VarCmp
SafeArrayCopy
SysAllocString
LoadRegTypeLi
VariantClear
SysFreeString
SafeArrayPutElement
SysAllocStringLen
VariantChangeType
SystemTimeToVariantTime
SafeArrayRedim
VarUdateFromDate
VarBstrFromCy
VarBstrCmp
SafeArrayGetVartype
VarBstrCat

shlwapi

PathAppendW
PathRemoveExtensionW
PathRemoveFileSpecW
PathFindFileNameW
PathFindExtensionW

ole32

CoImpersonateClient
CoQueryProxyBlanket
CoUninitialize
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
CoInitializeEx
CLSIDFromProgID
CoGetInterfaceAndReleaseStream
CoSetProxyBlanket
CoRevertToSelf

advapi32

GetTokenInformation
OpenProcessToken
DeregisterEventSource
GetLengthSid
CopySid
RegQueryValueExW
EqualSid
RegOpenKeyExW
RegCloseKey
ReportEventW
RegisterEventSourceW
IsValidSid
ConvertStringSidToSidW
LookupAccountSidW
OpenThreadToken

ws2_32

shutdown
recv
WSACleanup
socket
gethostname
closesocket
inet_addr
connect
send
gethostbyaddr
gethostbyname
htons
WSAStartup

cmutil

CmAtolA
CmLoadImageW
CmLoadIconA
IsFarEastNonOSR2Win95
IsLogonAsSystem

htui

HTUI_ColorAdjustmentA
HTUI_DeviceColorAdjustmentW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 296KB - Virtual size: 549KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9ce3bb75b6217ede37460848d858e18

Headers

File Characteristics

Imports

user32

userenv

kernel32

oleaut32

shlwapi

ole32

advapi32

ws2_32

cmutil

htui

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 296KB - Virtual size: 549KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 296KB - Virtual size: 549KB

.rsrc
Size: 512B - Virtual size: 4KB