6ca9df54dcf4f136c4b90b43d6e62765e8417f3c2088ad631f3af94df57cafda

Sharing

Copy URL Twitter E-mail

General

Target

6ca9df54dcf4f136c4b90b43d6e62765e8417f3c2088ad631f3af94df57cafda
Size

160KB
MD5

b85749432330ec4f352cb6cfd9165f33
SHA1

26d392459966982393d50ca2e252fb368feb72b9
SHA256

6ca9df54dcf4f136c4b90b43d6e62765e8417f3c2088ad631f3af94df57cafda
SHA512

fefa3da284abe75d271a698d96d9aa9f14233f2b8a704ba96b3d77003eca64648904ddf0c39506b178c831eabf291581b24aa81e070f9898e21ab229f15c780f
SSDEEP

3072:kBnplxTLu8Nh7V8aqWFA5FoX6X/EtsPtAhUU0swNU4XvjWqu:MRK8NhZftKXrL1NU4Lfu

Score

N/A

Malware Config

Signatures

Files

6ca9df54dcf4f136c4b90b43d6e62765e8417f3c2088ad631f3af94df57cafda
.exe windows x86

ac80e3e4514c060042fa2510e0051e73

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
HeapAlloc
HeapCreate
HeapDestroy
GetProcessHeap
HeapReAlloc
HeapSize
HeapFree
GetTempPathW
CreateFileW
ReadFile
WriteFile
GetFileSize
CloseHandle
UnmapViewOfFile
MapViewOfFile
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CreateEventA
SetEvent
ResetEvent
SetFilePointer
TerminateProcess
IsBadReadPtr
FreeEnvironmentStringsW
GetVersionExW
LoadLibraryW
LoadLibraryExA
VirtualAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetDateFormatA
GetVersion
GetDriveTypeA
GetTimeZoneInformation
CreateEventW
GetModuleFileNameW
UnhandledExceptionFilter
CreateThread
GetCurrentThreadId
ResumeThread
ExitThread
TerminateThread
GetStringTypeW
RaiseException
GetCurrentProcess
CreateFileA
SetEndOfFile
GetCurrentThread
SetThreadPriority
GetDiskFreeSpaceA
lstrcmpiW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCommandLineA
InterlockedExchange
GlobalHandle
GetExitCodeThread
SystemTimeToFileTime
CompareFileTime
CreateMutexA
ReleaseMutex
GetFullPathNameA
FindResourceA
LoadResource
SizeofResource
LockResource
FreeResource
Sleep
LoadLibraryExW
GetOEMCP
SetHandleCount
FindFirstFileW
FindNextFileW
FindClose
FileTimeToLocalFileTime
GetExitCodeProcess
GetLocaleInfoA
GetUserDefaultLCID
MultiByteToWideChar
LCMapStringW
lstrcatA
SetErrorMode
FlushFileBuffers
GetEnvironmentStrings
InterlockedIncrement
GetCPInfo
GetStringTypeExA
GetSystemDirectoryA
CompareStringA
OpenMutexA
FindFirstFileA
FindNextFileA
FileTimeToDosDateTime
GetStdHandle
GlobalUnlock
GetSystemTimeAsFileTime
lstrlenA
FindResourceW
GetLocalTime
GlobalReAlloc
GetVersionExA
GetStartupInfoW
GetCurrentProcessId
CopyFileA
GetModuleFileNameA
lstrcmpA
MulDiv
SetFileTime

msvcrt

calloc
_acmdln
log
__mb_cur_max
fsetpos
_unlink
_assert
time
fputs
wcsncmp
_dup2
strerror
fgetc
cos
_wcsupr
_lseeki64
sqrt
_controlfp
fprintf
_errno
towlower
_mbsrchr
atof
wcstol
localeconv
__p__environ
_CIsqrt
__pioinfo
__initenv
_get_osfhandle
_isatty
_stat
_lock
_amsg_exit
_wtoi
_itow
memcpy
strstr
wcscmp
_CIpow
wcsrchr
sin
strncat
tolower
__CxxFrameHandler
strncmp
strtoul
__set_app_type
rewind
_itoa
_osver
fread
bsearch
_wtol
_strlwr
__getmainargs
strcspn
strrchr
_c_exit
fgets
perror
_vsnprintf
_fdopen
_ultoa
_snprintf
realloc
pow
fwrite
fgetpos
_vsnwprintf
swprintf
fclose
ctime
atoi
_mbsicmp
fopen
fputc
toupper
_strdup
isxdigit
isleadbyte
printf
putchar
setlocale
_ismbblead
_stricmp
rand
atol
isspace
memmove
__p__fmode
_fullpath
_ftol
_adjust_fdiv
strncpy
_purecall
wcsncpy
towupper
_close
_strcmpi
strlen
_write
iswctype
clock
_cexit
__setusermatherr
ftell
strcpy
_putenv
_initterm
__p___initenv
wcscspn
atexit
_XcptFilter
rename
fseek
wctomb
_isctype
_unlock
_fileno
sprintf
_open_osfhandle
_setjmp
_onexit
wcsstr
iswdigit
_setmode
_flsbuf
signal
free
__dllonexit
getenv
gmtime
_exit
iswspace
_utime
__badioinfo
wcstombs
clearerr
strtok
swscanf
_except_handler3
srand
memchr
_filelengthi64
remove
isdigit
_pctype
_beginthreadex
strchr
qsort
memset
_mkdir
_mktemp
wcschr
_mbscmp
_read
_dup
_getcwd
sscanf
memcmp
_setjmp3
strpbrk
longjmp
localtime
malloc
vsprintf
_kbhit
fflush
wcstoul
_lseek
ceil
strcat
__p__commode
_strnicmp
_snwprintf
_fstat
_iob
strtol
_wcslwr
exit
floor
_wcsnicmp
_open
strspn
abort
wcscat
_pipe
puts
ungetc
_wcsicmp
_filbuf
_chmod
_getch

user32

SetTimer
IsChild
SetWindowPos
GetCapture
wsprintfA
GetClassNameA
FindWindowA
GetMenuItemCount
PostMessageA
PeekMessageA
SetScrollRange
SetScrollPos
GetDCEx
EnableWindow
ClientToScreen
GetDesktopWindow
CallNextHookEx
RemovePropA
DestroyWindow
IsWindowVisible
CheckMenuItem
GetSubMenu
CallWindowProcA
WindowFromPoint
DrawIconEx
EndDialog
SetPropA
DispatchMessageA
GetSysColor
GetSystemMetrics
OemToCharA
GetWindowPlacement
IsIconic
RedrawWindow
GetClientRect
MessageBeep
RegisterClassA
UpdateWindow
CreateWindowExA
LoadCursorA
CloseClipboard
LoadIconA
IsWindowEnabled
MessageBoxA
GetTopWindow
BeginPaint
PtInRect
IntersectRect
GetLastActivePopup
GetWindowDC
GetDlgItem
EnumWindows
AdjustWindowRectEx
SetWindowsHookExA
ShowOwnedPopups
OffsetRect
FillRect
RemoveMenu
ShowCursor
RegisterWindowMessageA
GetKeyboardType
IsZoomed
TranslateMessage
EqualRect
GetIconInfo
UnhookWindowsHookEx
GetParent
GetWindowRect
EmptyClipboard
ReleaseDC
SetWindowLongA
PostQuitMessage
LoadStringA
DrawMenuBar
DrawFrameControl
SystemParametersInfoA
GetMenuItemID
FrameRect
DestroyCursor
GetMenuState
GetPropA
GetWindowLongA
GetClassInfoA
SetFocus
GetMenu
UnregisterClassA
LoadBitmapA
InsertMenuItemA
SetCursor
CreateMenu
GetWindowTextA
CreatePopupMenu
SetClipboardData
GetMenuStringA
InsertMenuA
GetScrollInfo
GetDC
MapWindowPoints
DrawTextA
GetKeyState
DrawEdge
GetScrollPos
GetWindow
SendMessageA
InvalidateRect
EnableMenuItem
TrackPopupMenu
GetMessageA
GetScrollRange
IsDialogMessageA
DialogBoxParamA
ScreenToClient
GetFocus
GetSysColorBrush
SetClassLongA
CharNextA
KillTimer
SetCapture
RegisterClipboardFormatA
SendDlgItemMessageA
ShowWindow
InflateRect
DefWindowProcA
SetRect
CharLowerA
SetActiveWindow
ScrollWindow
IsWindow
GetCursorPos
GetMessagePos
DestroyIcon
EnumThreadWindows
EndPaint
GetWindowThreadProcessId
GetForegroundWindow
SetWindowPlacement
DrawIcon
OpenClipboard
GetActiveWindow
SetScrollInfo

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac80e3e4514c060042fa2510e0051e73

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 55KB - Virtual size: 54KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 79KB - Virtual size: 78KB

.rsrc Size: 1KB - Virtual size: 4KB

.text
Size: 55KB - Virtual size: 54KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 79KB - Virtual size: 78KB

.rsrc
Size: 1KB - Virtual size: 4KB