f1880e1877d442e4f64c44fab2c9e9120f943f31b327a2b350c8605f3e111c58

Sharing

Copy URL Twitter E-mail

General

Target

f1880e1877d442e4f64c44fab2c9e9120f943f31b327a2b350c8605f3e111c58
Size

53KB
MD5

be435dec343757890d571e246d5ff5b1
SHA1

d8151f800dc74622f68354554da2768ca2893837
SHA256

f1880e1877d442e4f64c44fab2c9e9120f943f31b327a2b350c8605f3e111c58
SHA512

12bd2823007341df1b0da7681fb780ae777d87a3ef3c403777a4ea8585cc19a857192a2b50ba78f02dabaa1b6c34bff6416d24f1e0a0d0c066146e5893b9b71d
SSDEEP

768:QJKH3OUJzRPTPTIFa+hdrhMN+jcoJxzAM8I4opzsNbAkhO3BzsPKwGoOyD+w0fsv:e5UHya+Du+BANNNJORwtOo0Uv

Score

N/A

Malware Config

Signatures

Files

f1880e1877d442e4f64c44fab2c9e9120f943f31b327a2b350c8605f3e111c58
.exe windows x86

63ee4124520f8b8cad569033621a85ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

WSAStartup
recv
WSACleanup
gethostname
gethostbyname
inet_addr
closesocket
socket
ioctlsocket
htons
connect
send

wininet

InternetReadFile
InternetOpenA
InternetCloseHandle
InternetOpenUrlA

kernel32

GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
ExitThread
SetEvent
Sleep
CloseHandle
WaitForSingleObject
CreateThread
CreateEventA
GetComputerNameA
GetLocaleInfoA
GetTickCount
GetModuleFileNameA
CopyFileA
GetWindowsDirectoryA
GetTempPathA
GetVolumeInformationA
ExitProcess
WinExec
GetLastError
GetCurrentProcessId
TerminateProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
Module32Next
Module32First
SetFileAttributesA
CreateMutexA
FreeResource
LockResource
SizeofResource
LoadResource
FindResourceA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess

user32

SetWindowsHookExA
CallNextHookEx
GetKeyState
GetKeyboardState
ToAscii
MapVirtualKeyA
GetLastInputInfo
MessageBoxA
GetForegroundWindow
GetWindowTextA
GetMessageA
DispatchMessageA
TranslateMessage

advapi32

GetCurrentHwProfileA
GetUserNameA
RegDeleteKeyA
RegOpenKeyExA
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

msvcr100

_fmode
_commode
__setusermatherr
_configthreadlocale
__set_app_type
_initterm
_crt_debugger_hook
_except_handler4_common
_invoke_watson
_controlfp_s
?terminate@@YAXXZ
_initterm_e
_itoa
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_acmdln
_ismbblead
_XcptFilter
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??3@YAXPAX@Z
memcpy
memmove
??2@YAPAXI@Z
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
__CxxFrameHandler3
memset
strchr
fclose
fopen
sprintf
atoi
printf
fread
calloc
ftell
fseek
system
remove
_ctime64
_time64
fputs
exit
_unlock
__dllonexit
_lock
_onexit
_amsg_exit
__getmainargs
_cexit
_exit

msvcp100

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z

urlmon

URLDownloadToFileA

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63ee4124520f8b8cad569033621a85ab

Headers

DLL Characteristics

File Characteristics

Imports

wsock32

wininet

kernel32

user32

advapi32

shell32

msvcr100

msvcp100

urlmon

Sections

.text Size: 38KB - Virtual size: 38KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 968B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 38KB - Virtual size: 38KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 968B

.reloc
Size: 3KB - Virtual size: 2KB