4b1e3bd52d739d5506b363ca490281f251e2c407c28d81772de8a2ddf0a8c5bd

Sharing

Copy URL Twitter E-mail

General

Target

4b1e3bd52d739d5506b363ca490281f251e2c407c28d81772de8a2ddf0a8c5bd
Size

270KB
MD5

33dbfd12c3ee86c8903a0e8e3d28ff5d
SHA1

70b7b4ec907144f0e7d8d4b3fb810fe3773781e4
SHA256

4b1e3bd52d739d5506b363ca490281f251e2c407c28d81772de8a2ddf0a8c5bd
SHA512

16c917cd349abd387cdcbd73a20713ea83a9929ae9a23531f81f6c7f4418a466f88608cf0c0cc2d6fe8ad22b3f7281102231ed2f6bcad4328eed61b63cb7e658
SSDEEP

6144:F3PkKwiJaKY9wmgKkV9Ntao8ET092oZVQMn9iR12zkmpRQzy:F3eiJanKKY9Wog2az8R1ktpY

Score

N/A

Malware Config

Signatures

Files

4b1e3bd52d739d5506b363ca490281f251e2c407c28d81772de8a2ddf0a8c5bd
.exe windows x86

737584a24d517e1dd61ed6a493bffb12

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

NdrConformantVaryingStructFree
NdrGetUserMarshalInfo
RpcSmEnableAllocate

secur32

LsaRegisterLogonProcess
QueryCredentialsAttributesA
RevertSecurityContext
LsaGetLogonSessionData

oleaut32

VarR4FromUI2
VarDateFromCy
SafeArrayRedim
VarI1FromStr

rasapi32

RasDialA
RasGetAutodialAddressW
RasEnumEntriesA
RasEnumAutodialAddressesW

ole32

CoIsHandlerConnected
OleConvertIStorageToOLESTREAM
CoQueryAuthenticationServices
GetRunningObjectTable

shell32

ShellExecuteA
ord64
ord49
DragQueryFileW

imm32

ImmIsUIMessageA
ImmSetCompositionStringA
ImmSimulateHotKey
ImmSetCompositionStringW

glu32

gluGetTessProperty
gluProject
gluScaleImage
gluTessEndPolygon

opengl32

glTexCoord1f
glColor4iv
glShadeModel
glRasterPos3fv

msvcrt

isspace
sprintf
isxdigit
islower
toupper

wininet

InternetCloseHandle
FtpFindFirstFileW
CommitUrlCacheEntryA
CommitUrlCacheEntryW

shlwapi

PathIsUNCW
ChrCmpIA
ChrCmpIW
PathFindExtensionW
PathIsNetworkPathW
PathParseIconLocationW

comctl32

CreateStatusWindowW
ImageList_Create
PropertySheetW
ImageList_Destroy

kernel32

EnumResourceNamesW
GetDriveTypeW
SetProcessWorkingSetSize
GlobalHandle
FindResourceExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

user32

ReleaseDC
GetDC

gdi32

GetBitmapBits
GetPixel
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
TranslateCharsetInfo
StretchBlt
CombineRgn
SetTextAlign
DeleteObject
DeleteDC
SetPixel

comdlg32

GetSaveFileNameA
PrintDlgW
PrintDlgExA
GetOpenFileNameA

advapi32

QueryServiceStatus
GetAuditedPermissionsFromAclA
CredGetTargetInfoA
MapGenericMask

Exports

Exports

CakeSpaeTethchowboyoPool
DielSuksblamSlueMullHookwarpup
HeirburlBurntaskHathjiltRutsswayrun
JiaoAbyeArchPeonGibsBumfBermkeckdagsAlmeZymeApexBedsPoosthedo
LurehoarcompBoatHawkhale
MeshChadNavybopsut
PeelPeepKyesblurRuddLunyduckRinsHeapPrigRisk
PiesShahFatsdarnPoxysumoShodSnipDeliroueTyppDirldimit

Sections

.pdata
Size: - Virtual size: 512B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pdata
Size: - Virtual size: 512B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 250KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

737584a24d517e1dd61ed6a493bffb12

Headers

DLL Characteristics

File Characteristics

Imports

rpcrt4

secur32

oleaut32

rasapi32

ole32

shell32

imm32

glu32

opengl32

msvcrt

wininet

shlwapi

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

Exports

Exports

Sections

.pdata Size: - Virtual size: 512B

.pdata Size: - Virtual size: 512B

.rdata Size: 250KB - Virtual size: 250KB

.reloc Size: 18KB - Virtual size: 18KB

.pdata
Size: - Virtual size: 512B

.pdata
Size: - Virtual size: 512B

.rdata
Size: 250KB - Virtual size: 250KB

.reloc
Size: 18KB - Virtual size: 18KB