ca442eff9f3253c902b725494369e38f1faaa7219998d781aa31871bc65aef3a

Sharing

Copy URL Twitter E-mail

General

Target

ca442eff9f3253c902b725494369e38f1faaa7219998d781aa31871bc65aef3a
Size

43KB
MD5

f47c33448a1fa01e72fbb1e182d1d291
SHA1

189232e68b598209c04993d2d2f7d3c60dd858c0
SHA256

ca442eff9f3253c902b725494369e38f1faaa7219998d781aa31871bc65aef3a
SHA512

18ccfc3f14b12756a05c2a11958cfa86675c01e63fb1f0c087f1768fc11edb0d902067880a9e2db7a645f111b50f8d7161fd5039c79e2c23e397338c686d73e1
SSDEEP

768:sjP0gQ4vOdNchwu+H0v4opLJ3Q37ePcH+QjXkLkD4uPyQ6YLoESA:6P0gp2vOw90vvUeo+AkLkhPHOESA

Score

N/A

Malware Config

Signatures

Files

ca442eff9f3253c902b725494369e38f1faaa7219998d781aa31871bc65aef3a
.exe windows x86

77a40cd5667751a70e8471db29480ecc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryExW
SetEnvironmentVariableA
GetPrivateProfileSectionNamesA
GetCalendarInfoA
InitializeCriticalSection
OutputDebugStringA
LZDone
ExitProcess
IsDebuggerPresent
EnumSystemGeoID
GetTimeFormatA
GetDiskFreeSpaceA
LoadLibraryA
IsValidLocale
GetSystemTimeAsFileTime
GetStdHandle
GetProfileIntW
SetLastError
VirtualAlloc
GetEnvironmentStringsW
FindFirstVolumeMountPointW
GetSystemDirectoryW
LZCloseFile
AddConsoleAliasW
Heap32ListNext

shlwapi

PathRemoveBackslashW
StrFromTimeIntervalA
StrStrIA
PathIsNetworkPathW
StrToIntA
PathFindOnPathA
UrlEscapeW
ColorAdjustLuma
AssocCreate
UrlCanonicalizeA
StrDupA
PathIsContentTypeA
PathSetDlgItemPathA
PathStripToRootW
PathFindNextComponentW
IntlStrEqWorkerW
SHGetValueA

advapi32

TraceEvent
LsaQueryTrustedDomainInfoByName
ObjectPrivilegeAuditAlarmW
SystemFunction040
FreeSid
GetServiceKeyNameA
GetServiceKeyNameW
WmiNotificationRegistrationA
RegSaveKeyExA
AddAccessAllowedAceEx
SaferSetLevelInformation
RegEnumKeyExW
CloseCodeAuthzLevel
SetUserFileEncryptionKey
ConvertStringSDToSDRootDomainW
InstallApplication
SystemFunction024
LsaClose
AccessCheckAndAuditAlarmA
GetOldestEventLogRecord
SetEntriesInAclW
GetSecurityDescriptorLength

msvcrt

_adj_fdivr_m64
wcscmp
__CxxLongjmpUnwind
_rmdir
fgetc
_dup
_environ
??0__non_rtti_object@@QAE@PBD@Z
_mbscoll
??0bad_cast@@AAE@PBQBD@Z
??_7exception@@6B@
_abnormal_termination
_vscwprintf
__p__acmdln
?_query_new_mode@@YAHXZ
atan2
mblen
strtod
_safe_fprem1
_wsearchenv
_ui64tow
_mbclen
sin
__p__iob
_spawnle

mfcsubs

?LookupKey@CMapStringToPtr@@QBEHPBGAAPBG@Z
??O@YG_NPBGABVCString@@@Z
?IsEmpty@CMapStringToPtr@@QBEHXZ
??N@YG_NABVCString@@0@Z
??H@YG?AVCString@@ABV0@0@Z
??ACStringArray@@QBE?AVCString@@H@Z
?Find@CString@@QBEHPBG@Z
?SafeStrlen@CString@@KGHPBG@Z
??0CString@@QAE@XZ
??0CString@@QAE@PBGH@Z
?Empty@CString@@QAEXXZ
?GetAt@CStringArray@@QBE?AVCString@@H@Z
??4CString@@QAEABV0@PBG@Z
??P@YG_NABVCString@@0@Z
?InsertAt@CStringArray@@QAEXHPBGH@Z
?MakeUpper@CString@@QAEXXZ
?GetData@CStringArray@@QBEPBVCString@@XZ
?AfxLoadString@@YGHIPAGI@Z
??0CString@@QAE@PBD@Z

user32

MessageBoxW
EndDialog

shell32

SHGetMalloc

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

77a40cd5667751a70e8471db29480ecc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shlwapi

advapi32

msvcrt

mfcsubs

user32

shell32

Sections

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB