e314cd8716bf7b77bdf22b1f04830fa4138482723b50f8fc526e804c0c60a255

Sharing

Copy URL Twitter E-mail

General

Target

e314cd8716bf7b77bdf22b1f04830fa4138482723b50f8fc526e804c0c60a255
Size

262KB
MD5

0810b95382618b039bbbc0e4bef55bc1
SHA1

692b284b35884508aeb2a3599cda61bfca925f02
SHA256

e314cd8716bf7b77bdf22b1f04830fa4138482723b50f8fc526e804c0c60a255
SHA512

9d356f23ee2e22666e88455f2905c7b54c91c543aba09d7baa7078697051b2f085a8be4deb8199486bb3881372e0a4a3629078df5146808ddfcb9a50f5343e14
SSDEEP

6144:DZS1p2cj6ldHPZxXhDkEcjz6jL4Bflm6hSSiuDfWF+L:of2jnvZ3ovjyeE6hSSiu5

Score

N/A

Malware Config

Signatures

Files

e314cd8716bf7b77bdf22b1f04830fa4138482723b50f8fc526e804c0c60a255
.exe windows x86

7dc38b84274b8de136a79872afd17192

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidToStringA
NdrUserMarshalMarshall
RpcErrorSaveErrorInfo
RpcErrorResetEnumeration
RpcServerUseProtseqEpA
RpcSsFree
I_RpcBindingInqLocalClientPID
I_RpcReceive
RpcObjectInqType

secur32

RevertSecurityContext
EncryptMessage
InitSecurityInterfaceA
SetContextAttributesW
ApplyControlToken
CompleteAuthToken
GetUserNameExA
LsaDeregisterLogonProcess
LsaGetLogonSessionData

oleaut32

CreateErrorInfo
LoadRegTypeLi
VarR8FromDate
VarUI8FromDate
VarUI2FromR8
VarFormatCurrency
GetActiveObject
VarI8FromI2
LPSAFEARRAY_UserMarshal

rasapi32

RasSetEapUserDataW
RasSetEapUserDataA
RasGetConnectStatusW
RasGetAutodialAddressW
RasSetAutodialAddressA
RasValidateEntryNameW
RasGetAutodialAddressA
RasGetCountryInfoA
RasGetSubEntryHandleA

ole32

CLSIDFromProgIDEx
ReadClassStg
CoGetStandardMarshal
CoGetClassObject
CoGetTreatAsClass
OleSetContainedObject
CoGetCancelObject
OleSave

shell32

ExtractIconW
ord162
ord89
ord22
SHParseDisplayName
SHCreateShellItem
ExtractAssociatedIconW
SHInvokePrinterCommandW
ord85
Shell_NotifyIconA

imm32

ImmGetRegisterWordStyleW
ImmSetOpenStatus
ImmGetCompositionFontA
ImmGetCompositionStringA
ImmRegisterWordA
ImmSetCompositionFontA
ImmGetConversionStatus
ImmSetCompositionFontW
ImmGetStatusWindowPos
ImmConfigureIMEW

glu32

gluQuadricNormals
gluDeleteQuadric
gluTessVertex
gluSphere
gluTessBeginPolygon
gluBeginPolygon
gluBeginTrim
gluQuadricCallback
gluCylinder

opengl32

glVertex2dv
glIndexiv
glColorMask
glMap1f
glIndexPointer
glColorMaterial
glGetMapdv
glVertex3i
glVertex4d
glGetTexLevelParameterfv

msvcrt

isxdigit
strtoul
wcschr
wcstoul
_exit
islower
toupper
_mbctoupper
isspace
swscanf
sprintf

wininet

InternetCloseHandle
FtpFindFirstFileA
HttpQueryInfoA
InternetOpenW
HttpOpenRequestW
HttpOpenRequestA
FtpOpenFileA

shlwapi

PathRelativePathToA
PathMakePrettyW
PathRelativePathToW
PathAddExtensionA
PathRenameExtensionA
PathFindExtensionW
ord155
PathIsUNCServerW
ord9
PathRemoveBlanksA
ord29
PathBuildRootA

comctl32

ImageList_SetIconSize
PropertySheetW
ImageList_GetIconSize
ImageList_ReplaceIcon
CreateToolbarEx
ord6
CreateStatusWindowW
ImageList_LoadImageA

kernel32

GetFileSize
CreateThread
GetDriveTypeW
GetCPInfo
CreateProcessA
GetCurrentProcessId
GetFullPathNameW
lstrlenA
CopyFileA
OpenFileMappingW
FormatMessageA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetComputerNameExW

gdi32

GetStockObject
BeginPath
CreatePatternBrush
ExtFloodFill
GetEnhMetaFileBits
GetTextExtentExPointW
PtInRegion
EndPage
SetWindowExtEx
GetBkMode
CreateFontIndirectW
GetEnhMetaFileHeader
EnumFontFamiliesExA

comdlg32

GetSaveFileNameW
FindTextA
GetFileTitleW
PrintDlgA
GetOpenFileNameW
CommDlgExtendedError
ChooseColorW
PrintDlgExW

advapi32

CryptHashData
OpenTraceA
RegSaveKeyExA
RegReplaceKeyW
InitializeSecurityDescriptor
CryptSetProviderExA
CredReadW
ObjectPrivilegeAuditAlarmA

Exports

Exports

?PeltPraylunacudax@@YGXACI@Z
AddspixyopenveerGaby
CastLuvsJambLosscosslibsbud
FinoSinhjeesKobsCorkcrabtuxad
HurlKufijaggWindScarPreyGliaPupsBestkefskuduSandbuzzveene
KafslustRaisRankNitePeriLilokaasSewnNeatRanimi
MaraJupeGoshtramPaysturdGeneBrrrBoshno
TradjubaDebsNite

Sections

.text
Size: - Virtual size: 512B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7dc38b84274b8de136a79872afd17192

Headers

DLL Characteristics

File Characteristics

Imports

rpcrt4

secur32

oleaut32

rasapi32

ole32

shell32

imm32

glu32

opengl32

msvcrt

wininet

shlwapi

comctl32

kernel32

gdi32

comdlg32

advapi32

Exports

Exports

Sections

.text Size: - Virtual size: 512B

.rdata Size: 248KB - Virtual size: 248KB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: - Virtual size: 512B

.rdata
Size: 248KB - Virtual size: 248KB

.reloc
Size: 12KB - Virtual size: 12KB