9be12b7e2f613bd1c879002016d778f36d842207c21d0818936d1fbe2ba78e96

Sharing

Copy URL Twitter E-mail

General

Target

9be12b7e2f613bd1c879002016d778f36d842207c21d0818936d1fbe2ba78e96
Size

184KB
MD5

ea64a0933456a89949e0e3fd05175c6a
SHA1

0eba6a8cb0d5dd22c0b92916ef119db30e90e7b3
SHA256

9be12b7e2f613bd1c879002016d778f36d842207c21d0818936d1fbe2ba78e96
SHA512

d5047108c0c017a913c3faff058b7b8f54ed2718a9bcca5c7535a5f0c4d6b76ce8f3d827b8f586ca5129bceaf45300502418e35a35f5c695ab0e32576a1eb457
SSDEEP

3072:0e5nGiF89bFNlRWmSm/95fidEQy+DP4Xsk1NHyk7X:wiK9pRWmp/9Cy+DAXf1xyG

Score

N/A

Malware Config

Signatures

Files

9be12b7e2f613bd1c879002016d778f36d842207c21d0818936d1fbe2ba78e96
.exe windows x86

9b24ec0420fa4c3bda934898a87dfe92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord1601
ord861
ord1175
ord2764
ord535
ord2582
ord4402
ord3370
ord3640
ord693
ord341
ord654
ord4243
ord3626
ord3663
ord384
ord1641
ord2414
ord2379
ord3910
ord2864
ord6905
ord4284
ord3301
ord6888
ord6675
ord3721
ord795
ord4275
ord5875
ord6199
ord3874
ord858
ord6197
ord2859
ord3619
ord2086
ord941
ord537
ord939
ord1908
ord1690
ord2528
ord5288
ord2054
ord4431
ord771
ord1008
ord496
ord4259
ord4439
ord1200
ord4715
ord2818
ord1907
ord5161
ord5162
ord5261
ord4905
ord4742
ord4948
ord4358
ord4377
ord4854
ord5287
ord4835
ord2915
ord823
ord6648
ord1727
ord6215
ord1768
ord6380
ord489
ord2358
ord4258
ord4976
ord665
ord1979
ord5442
ord3318
ord5186
ord924
ord354
ord1168
ord5849
ord2881
ord4204
ord2642
ord2817
ord686
ord2301
ord6907
ord6007
ord3998
ord6055
ord2862
ord2098
ord3698
ord765
ord6385
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord2621
ord1134
ord2725
ord755
ord470
ord6453
ord2648
ord4441
ord4837
ord3798
ord5280
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1775
ord4078
ord6052
ord2514
ord4998
ord4853
ord4376
ord5265
ord3719
ord4424
ord6334
ord4160
ord4224
ord3092
ord2370
ord2289
ord540
ord860
ord800
ord4710
ord4234
ord2302
ord2360
ord2290
ord825
ord324
ord567
ord641
ord793
ord3597
ord4425
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord6376
ord3610
ord656
ord5065
ord3402
ord5290
ord1776
ord3749
ord768
ord2055
ord2860
ord5160
ord3996
ord1576

msvcrt

_controlfp
_except_handler3
_onexit
_setmbcp
__CxxFrameHandler
_mbscmp
_makepath
_splitpath
_memicmp
exit
__dllonexit
__set_app_type
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode

kernel32

GetStartupInfoA
SetFilePointer
ReadFile
CreateEventA
WinExec
ExitProcess
GetDriveTypeA
CreateDirectoryA
RemoveDirectoryA
lstrlenA
lstrcpyA
MultiByteToWideChar
GetCurrentThreadId
GetCurrentProcessId
GetFileAttributesA
SetFileAttributesA
CopyFileA
GetSystemDirectoryA
GetModuleFileNameA
GetFullPathNameA
FindFirstFileA
FindClose
GetLastError
GlobalAlloc
GlobalFree
GetCurrentProcess
GetVersionExA
GetProcAddress
WriteFile
DeleteFileA
IsBadWritePtr
IsBadReadPtr
DeviceIoControl
LoadLibraryA
CreateFileA
GetVersion
CloseHandle
FreeLibrary
GetModuleHandleA

user32

RegisterWindowMessageA
ExitWindowsEx
SendMessageA
GetClientRect
SetWindowLongA
CallWindowProcA
GetWindowLongA
MessageBoxA
GetSystemMetrics
IsIconic
GetDC
ReleaseDC
InvalidateRect
IsWindow
ScreenToClient
GetWindowRect
DrawIcon
SetCursor
SystemParametersInfoA
ReleaseCapture
KillTimer
SetTimer
UpdateWindow
ClientToScreen
GetDesktopWindow
PostMessageA
GetParent
EnableWindow
WindowFromPoint

gdi32

GetStockObject
CreateFontIndirectA

advapi32

RegCreateKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyA

shell32

SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA

comctl32

ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_EndDrag
ImageList_DragShowNolock

ole32

CoCreateInstance
CoUninitialize
CLSIDFromProgID
CoGetClassObject
CoInitialize

oleaut32

SysFreeString
VariantInit
SysAllocStringLen

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 64KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9b24ec0420fa4c3bda934898a87dfe92

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

shell32

comctl32

ole32

oleaut32

Sections

.text Size: 60KB - Virtual size: 60KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 64KB - Virtual size: 150KB

.rsrc Size: 40KB - Virtual size: 40KB

.text
Size: 60KB - Virtual size: 60KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 64KB - Virtual size: 150KB

.rsrc
Size: 40KB - Virtual size: 40KB