f3dbcbf0995495497f8f4d58ba689df2fa1a167a273f4cf2dc0fa39758a8a341

Sharing

Copy URL Twitter E-mail

General

Target

f3dbcbf0995495497f8f4d58ba689df2fa1a167a273f4cf2dc0fa39758a8a341
Size

229KB
MD5

1107f3c3bc4468e3174db8db49338200
SHA1

2f725e3b2594961d4d4754c44fa7a016e5ac7279
SHA256

f3dbcbf0995495497f8f4d58ba689df2fa1a167a273f4cf2dc0fa39758a8a341
SHA512

c19de78309825b2cbde260212fa5dfbe47ab28b5e95b7830c2aa9ce2fa991b448ed6ea2a2ef9e36bf927b75ad21b85cab6aa6c22703a31b2f60cac17bd828b98
SSDEEP

6144:107Sq1DqZZWFWpLAFAk/PumrHnOjgQGeckedH9mF:2ZG8QpTgnO4ecDN8F

Score

N/A

Malware Config

Signatures

Files

f3dbcbf0995495497f8f4d58ba689df2fa1a167a273f4cf2dc0fa39758a8a341
.exe windows x86

225a3ee965f689989ec9c2538729a3f1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHBindToParent
ord100
ord11
ord155
ord180
SHGetSpecialFolderLocation
ord685
ord80
ord16
ord192
ord85

imm32

ImmGetCandidateListCountW
ImmGetCandidateListCountA
ImmCreateContext
ImmSetCompositionStringA
ImmSetStatusWindowPos
ImmGetCompositionFontW
ImmGetCompositionStringW

glu32

gluTessEndPolygon
gluNurbsProperty
gluBeginPolygon
gluPwlCurve

opengl32

glTexCoord4fv
glRasterPos4s
glPushName
wglShareLists
glPixelMapusv
glFinish
glVertex3fv
wglGetLayerPaletteEntries
glGenTextures
glVertex3iv

msvcrt

sscanf
islower
_time64
isxdigit
strtoul
toupper
_mbctoupper
isspace
wcstoul

shlwapi

PathMakeSystemFolderW
PathRemoveBlanksW
ChrCmpIW
IsCharSpaceA
PathMakePrettyA
PathMatchSpecA
ord29
PathRemoveFileSpecW
PathAddExtensionW
ord14

kernel32

GetEnvironmentStringsW
GetTickCount
FindNextFileW
GetFullPathNameW
GetExitCodeProcess
EnumSystemCodePagesA
GetUserDefaultUILanguage
SuspendThread
HeapSize
DeleteCriticalSection
TerminateThread
lstrlenW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateMutexW

user32

SetCursorPos
IsCharUpperA
GetWindowTextLengthW
IsIconic
IsCharAlphaA
GetScrollRange
LockWindowUpdate
CheckMenuRadioItem
SendDlgItemMessageW
FindWindowA
GetDialogBaseUnits

gdi32

LineTo
CreateHatchBrush
CreatePenIndirect
CreatePatternBrush
GetStockObject
CreateDIBitmap

advapi32

CloseEncryptedFileRaw
ObjectPrivilegeAuditAlarmW
GetSidIdentifierAuthority
RegisterServiceCtrlHandlerExW
SetPrivateObjectSecurityEx
ImpersonateSelf
LookupAccountSidW
SaferiIsExecutableFileType
AdjustTokenPrivileges

Exports

Exports

?KafsTogatingHabuBlur@@YGGPCUtagBITMAP@@ACU_GUID@@PCUtagWNDCLASSW@@_W@Z
ArseFoxySawnFeebtuftJaneFluerotlHeckaeonMokeMellSarkluvno
Boobmach
LiefarfsJimpMugsUntoIreddyedKeetBurySaleBestAltoFurlCionay
RegsVacsMityDuceNosemercscadExitcow
SortAridTsksTripShewxystFeetant
TossIdolScryWhamchawAvesYuanPostrap
WeerPuriRollRaleeaveorradahlbibsRialtavsVelakey

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.i_m_p
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_MEM_READ

.e_x_p
Size: 1024B - Virtual size: 660B

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

225a3ee965f689989ec9c2538729a3f1

Headers

DLL Characteristics

File Characteristics

Imports

shell32

imm32

glu32

opengl32

msvcrt

shlwapi

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 88KB - Virtual size: 88KB

.rdata Size: 85KB - Virtual size: 84KB

.i_m_p Size: 53KB - Virtual size: 53KB

.e_x_p Size: 1024B - Virtual size: 660B

.text
Size: 88KB - Virtual size: 88KB

.rdata
Size: 85KB - Virtual size: 84KB

.i_m_p
Size: 53KB - Virtual size: 53KB

.e_x_p
Size: 1024B - Virtual size: 660B