40aa4ced4c49791e049c005bb3e938b591ecffba56895e5bb2bd6745cb57cc20

Sharing

Copy URL Twitter E-mail

General

Target

40aa4ced4c49791e049c005bb3e938b591ecffba56895e5bb2bd6745cb57cc20
Size

136KB
MD5

6f2de7c5aa1a42df8a943a890be21a49
SHA1

4679c59264c1592e61f510358409700e7481b531
SHA256

40aa4ced4c49791e049c005bb3e938b591ecffba56895e5bb2bd6745cb57cc20
SHA512

bb99b7948f57304ec2f12e07fe587d06aa0845a9d0e48cb2a7d24c28d6ff3cc804c92f0ac6111946871ec2992d82bf74fa4054a3dddc9409dedde8bbf20e0db5
SSDEEP

3072:uFfRTtgeet3+goNO39gqymix+En7y8KQ84S+Bfn3:IT6tOFNO2CiI67yNQ6+Bfn3

Score

N/A

Malware Config

Signatures

Files

40aa4ced4c49791e049c005bb3e938b591ecffba56895e5bb2bd6745cb57cc20
.exe windows x86

c664e839881eb9a6b5b5e3d9e594a58e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
CreateProcessA
CreatePipe
PeekNamedPipe
GetTickCount
GetSystemInfo
ReleaseMutex
OpenEventA
SetErrorMode
GetModuleFileNameA
CreateMutexA
lstrcmpiA
GetStartupInfoA
MultiByteToWideChar
OpenProcess
DeviceIoControl
ExitProcess
GetVersionExA
GetSystemDirectoryA
lstrcatA
WriteFile
ReadFile
GlobalFree
RemoveDirectoryA
LocalAlloc
FindFirstFileA
LocalReAlloc
FindNextFileA
LocalFree
FindClose
GetDriveTypeA
lstrlenA
CreateEventA
CreateDirectoryA
GetLastError
CancelIo
InterlockedExchange
FreeLibrary
GetModuleHandleA
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
Sleep
LoadLibraryA
GetProcAddress
CreateThread
ResumeThread
SetEvent
WaitForSingleObject
TerminateThread
OutputDebugStringA
WinExec
GetFileSize
Process32First
CloseHandle
GetComputerNameA

user32

SetCursorPos
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetClipboardData
GetSystemMetrics
WindowFromPoint
GetDC
GetDesktopWindow
ReleaseDC
GetCursorInfo
GetCursorPos
SetProcessWindowStation
SetCapture
MapVirtualKeyA
IsWindow
SendMessageA
DispatchMessageA
SystemParametersInfoA
DestroyCursor
LoadCursorA
EnumWindows
GetWindowTextA
MessageBoxA
ExitWindowsEx
wsprintfA
GetMessageA
TranslateMessage
SetRect
CloseWindow
CreateWindowExA
PostMessageA
OpenDesktopA
GetThreadDesktop
GetUserObjectInformationA
OpenInputDesktop
CloseDesktop
IsWindowVisible
GetWindowThreadProcessId
GetProcessWindowStation

gdi32

BitBlt
DeleteDC
DeleteObject
CreateDIBSection
SelectObject
CreateCompatibleBitmap

advapi32

RegQueryValueA
RegOpenKeyExA
ControlService
QueryServiceStatus
OpenServiceA
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
CloseEventLog
ClearEventLogA
OpenEventLogA
RegCreateKeyExA
OpenProcessToken
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryInfoKeyA
CloseServiceHandle
EnumServicesStatusA
QueryServiceConfigA
UnlockServiceDatabase
ChangeServiceConfigA
LockServiceDatabase
StartServiceA
RegCloseKey

shell32

SHGetFileInfoA

msvcrt

_controlfp
_strnset
_strupr
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
??1type_info@@UAE@XZ
calloc
_beginthreadex
exit
sprintf
wcscpy
_errno
strncmp
_snprintf
atoi
strncpy
_except_handler3
malloc
free
??2@YAPAXI@Z
??3@YAXPAX@Z
putchar
__CxxFrameHandler
memmove
ceil
_ftol
puts
_CxxThrowException

winmm

waveInClose
waveInUnprepareHeader
waveInReset
waveOutClose
waveOutWrite
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveOutUnprepareHeader
waveInStop
waveInOpen
waveInGetNumDevs
waveOutPrepareHeader
waveOutOpen
waveOutGetNumDevs
waveOutReset

ws2_32

gethostbyname
htons
closesocket
WSAStartup
ioctlsocket
ntohs
select
send
WSASocketA
setsockopt
sendto
gethostname
recvfrom
inet_ntoa
WSACleanup
getpeername
getsockname
bind
inet_addr
recv
__WSAFDIsSet
connect
socket

msvcp60

?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

netapi32

NetUserAdd
NetLocalGroupAddMembers

wininet

InternetGetConnectedState
InternetReadFile

msvfw32

ICSendMessage
ICSeqCompressFrameEnd
ICCompressorFree
ICClose
ICSeqCompressFrame
ICSeqCompressFrameStart
ICOpen

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c664e839881eb9a6b5b5e3d9e594a58e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msvcrt

winmm

ws2_32

msvcp60

netapi32

wininet

msvfw32

Sections

.text Size: 92KB - Virtual size: 91KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 92KB - Virtual size: 91KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 12KB - Virtual size: 12KB