85ca947e3ccf4d7c06762f1eceea239545cb5b47601cbaf94f7938d8cf08a608

Sharing

Copy URL Twitter E-mail

General

Target

85ca947e3ccf4d7c06762f1eceea239545cb5b47601cbaf94f7938d8cf08a608
Size

260KB
MD5

8683c7fc190e45176a3c0984c451cdad
SHA1

a6e2d948cbc830bdb1ff11737f0986325909c283
SHA256

85ca947e3ccf4d7c06762f1eceea239545cb5b47601cbaf94f7938d8cf08a608
SHA512

99075dbf9fb96029dcbfa6cdb153c7618c3c908638798e82e3323f69886d1a4147d17642ff6cd03e51a26e49938ee0059c8c61c6d7410ac64f58879c82847e48
SSDEEP

6144:DDRK06RCIRVWMgViLNiqDJiB1iO3nwCI+5QRdm:/8IIRVWMgViLMbfiOAar

Score

N/A

Malware Config

Signatures

Files

85ca947e3ccf4d7c06762f1eceea239545cb5b47601cbaf94f7938d8cf08a608
.exe windows x86

73803b1ad5317ca2abe078dd021e0e08

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord6334
ord4224
ord5953
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord6055
ord1776
ord5290
ord3402
ord4424
ord3721
ord795
ord616
ord567
ord2370
ord2302
ord926
ord3452
ord2515
ord355
ord2642
ord1105
ord3698
ord765
ord2297
ord2301
ord6215
ord3177
ord1997
ord6407
ord798
ord5194
ord533
ord2915
ord5572
ord5465
ord2587
ord4406
ord3729
ord3693
ord804
ord4267
ord4284
ord3571
ord755
ord640
ord2405
ord6119
ord2753
ord6172
ord5875
ord5785
ord1640
ord323
ord470
ord2380
ord4133
ord4297
ord5788
ord2754
ord2860
ord3089
ord823
ord6197
ord6379
ord6605
ord5440
ord6383
ord5450
ord6394
ord5981
ord389
ord2393
ord539
ord5808
ord1075
ord5205
ord6426
ord1228
ord809
ord2614
ord3798
ord4275
ord2864
ord1088
ord2122
ord3797
ord6358
ord2859
ord6880
ord1200
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord3874
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord1168
ord2621
ord1134
ord2725
ord1146
ord2086
ord668
ord356
ord922
ord3573
ord2582
ord4402
ord3370
ord3640
ord693
ord2243
ord2452
ord3996
ord3998
ord6907
ord4476
ord2450
ord6170
ord5789
ord6194
ord6021
ord2246
ord5792
ord482
ord940
ord3301
ord6392
ord1138
ord3317
ord3706
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord6189
ord5873
ord5794
ord5678
ord5736
ord5579
ord5571
ord6061
ord5864
ord3596
ord5787
ord5781
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1775
ord4078
ord6052
ord2514
ord4710
ord4998
ord4853
ord4376
ord5265
ord361
ord2516
ord3019
ord641
ord2764
ord4129
ord858
ord4277
ord540
ord2818
ord941
ord939
ord537
ord535
ord3663
ord2414
ord3626
ord2763
ord4278
ord2379
ord3092
ord6199
ord860
ord5280
ord4234
ord2363
ord2362
ord324
ord3597
ord4425
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord5731
ord4837
ord800
ord825
ord1641
ord556
ord3619
ord1576

msvcrt

_setmbcp
__CxxFrameHandler
atoi
atol
sscanf
_ftol
memmove
tolower
rand
strstr
_mbsstr
wcslen
strtoul
strtok
_mbscmp
_mbsnbcpy
??1type_info@@UAE@XZ
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode

kernel32

GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
WaitForSingleObject
GetOverlappedResult
CreateEventA
WideCharToMultiByte
GetExitCodeThread
WritePrivateProfileStringA
GetModuleHandleA
GetModuleFileNameA
GetPrivateProfileIntA
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
MultiByteToWideChar
GetLocalTime
GetVersion
WriteFile
GetCommModemStatus
ReadFile
CreateFileA
SetupComm
SetCommTimeouts
GetCommState
CloseHandle
SetCommState
SetCommMask
PurgeComm
GetLastError
FormatMessageA
LocalFree
Sleep
GetTickCount
GetStartupInfoA

user32

TabbedTextOutA
SetWindowRgn
PostMessageA
ShowScrollBar
wsprintfA
IsIconic
GetSystemMetrics
DrawIcon
LoadIconA
LoadCursorA
CopyIcon
GetWindowRect
CopyRect
DrawTextA
GrayStringA
GetClientRect
GetParent
GetDC
ReleaseDC
InflateRect
SendMessageA
EnableWindow
IsWindow
SetWindowLongA
SetCursor
ReleaseCapture
RedrawWindow
SetCapture
MessageBeep
GetSysColor
MessageBoxA
GetCursorPos
PtInRect
InvalidateRect
KillTimer
SetTimer
OffsetRect

gdi32

DeleteObject
SelectObject
GetStockObject
GetTextExtentPoint32A
CreateSolidBrush
DeleteDC
EndDoc
EndPage
DPtoLP
GetDeviceCaps
StartPage
CreateCompatibleBitmap
CombineRgn
CreateRectRgn
GetBkColor
GetMapMode
LPtoDP
Rectangle
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateCompatibleDC
BitBlt
CreatePen
SetTextColor
StartDocA
CreateFontIndirectA
GetObjectA

winspool.drv

GetPrinterA
ClosePrinter
EnumPrintersA
OpenPrinterA

advapi32

RegOpenKeyExA
RegQueryValueA
RegCloseKey

shell32

ShellExecuteA

comctl32

_TrackMouseEvent

msvcp60

?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Xlen@std@@YAXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

skinmagic

ord11
ord2
ord3
ord1
ord9

Sections

.text
Size: 164KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

73803b1ad5317ca2abe078dd021e0e08

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

msvcp60

skinmagic

Sections

.text Size: 164KB - Virtual size: 162KB

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 20KB - Virtual size: 20KB

.rsrc Size: 44KB - Virtual size: 42KB

.text
Size: 164KB - Virtual size: 162KB

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 44KB - Virtual size: 42KB