2182b015fbb0623ac28b99cc197b03aed69556f680afcd918a67a34dc046ecc5

Sharing

Copy URL

Twitter E-mail

General

Target

2182b015fbb0623ac28b99cc197b03aed69556f680afcd918a67a34dc046ecc5
Size

136KB
MD5

f2e9265898a785f59b2ed0d07e1ae692
SHA1

0ee4f61e59f2659019ee19fae2ab63a6de5ac33b
SHA256

2182b015fbb0623ac28b99cc197b03aed69556f680afcd918a67a34dc046ecc5
SHA512

4269c8dddcae6840c10b55505c2676f5adf758cf99520926dee535c14e815bc8ece1addfba4144c680a7536e22398573ca9dd07df38daebd0ee4800ba136a781
SSDEEP

3072:uFfRTtgeet3+goNO39gqymix+En7y8KQ84S+Bfn3:IT6tOFNO2CiI67yNQ6+Bfn3

Score

N/A

Malware Config

Signatures

Files

2182b015fbb0623ac28b99cc197b03aed69556f680afcd918a67a34dc046ecc5
.exe windows x86

c664e839881eb9a6b5b5e3d9e594a58e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
CreateProcessA
CreatePipe
PeekNamedPipe
GetTickCount
GetSystemInfo
ReleaseMutex
OpenEventA
SetErrorMode
GetModuleFileNameA
CreateMutexA
lstrcmpiA
GetStartupInfoA
MultiByteToWideChar
OpenProcess
DeviceIoControl
ExitProcess
GetVersionExA
GetSystemDirectoryA
lstrcatA
WriteFile
ReadFile
GlobalFree
RemoveDirectoryA
LocalAlloc
FindFirstFileA
LocalReAlloc
FindNextFileA
LocalFree
FindClose
GetDriveTypeA
lstrlenA
CreateEventA
CreateDirectoryA
GetLastError
CancelIo
InterlockedExchange
FreeLibrary
GetModuleHandleA
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
Sleep
LoadLibraryA
GetProcAddress
CreateThread
ResumeThread
SetEvent
WaitForSingleObject
TerminateThread
OutputDebugStringA
WinExec
GetFileSize
Process32First
CloseHandle
GetComputerNameA

user32

SetCursorPos
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetClipboardData
GetSystemMetrics
WindowFromPoint
GetDC
GetDesktopWindow
ReleaseDC
GetCursorInfo
GetCursorPos
SetProcessWindowStation
SetCapture
MapVirtualKeyA
IsWindow
SendMessageA
DispatchMessageA
SystemParametersInfoA
DestroyCursor
LoadCursorA
EnumWindows
GetWindowTextA
MessageBoxA
ExitWindowsEx
wsprintfA
GetMessageA
TranslateMessage
SetRect
CloseWindow
CreateWindowExA
PostMessageA
OpenDesktopA
GetThreadDesktop
GetUserObjectInformationA
OpenInputDesktop
CloseDesktop
IsWindowVisible
GetWindowThreadProcessId
GetProcessWindowStation

gdi32

BitBlt
DeleteDC
DeleteObject
CreateDIBSection
SelectObject
CreateCompatibleBitmap

advapi32

RegQueryValueA
RegOpenKeyExA
ControlService
QueryServiceStatus
OpenServiceA
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
CloseEventLog
ClearEventLogA
OpenEventLogA
RegCreateKeyExA
OpenProcessToken
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryInfoKeyA
CloseServiceHandle
EnumServicesStatusA
QueryServiceConfigA
UnlockServiceDatabase
ChangeServiceConfigA
LockServiceDatabase
StartServiceA
RegCloseKey

shell32

SHGetFileInfoA

msvcrt

_controlfp
_strnset
_strupr
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
??1type_info@@UAE@XZ
calloc
_beginthreadex
exit
sprintf
wcscpy
_errno
strncmp
_snprintf
atoi
strncpy
_except_handler3
malloc
free
??2@YAPAXI@Z
??3@YAXPAX@Z
putchar
__CxxFrameHandler
memmove
ceil
_ftol
puts
_CxxThrowException

winmm

waveInClose
waveInUnprepareHeader
waveInReset
waveOutClose
waveOutWrite
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveOutUnprepareHeader
waveInStop
waveInOpen
waveInGetNumDevs
waveOutPrepareHeader
waveOutOpen
waveOutGetNumDevs
waveOutReset

ws2_32

gethostbyname
htons
closesocket
WSAStartup
ioctlsocket
ntohs
select
send
WSASocketA
setsockopt
sendto
gethostname
recvfrom
inet_ntoa
WSACleanup
getpeername
getsockname
bind
inet_addr
recv
__WSAFDIsSet
connect
socket

msvcp60

?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

netapi32

NetUserAdd
NetLocalGroupAddMembers

wininet

InternetGetConnectedState
InternetReadFile

msvfw32

ICSendMessage
ICSeqCompressFrameEnd
ICCompressorFree
ICClose
ICSeqCompressFrame
ICSeqCompressFrameStart
ICOpen

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c664e839881eb9a6b5b5e3d9e594a58e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msvcrt

winmm

ws2_32

msvcp60

netapi32

wininet

msvfw32

Sections

.text Size: 92KB - Virtual size: 91KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 92KB - Virtual size: 91KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 12KB - Virtual size: 12KB