c559d2c9ac142ac7418c9c4b8a6a6851cbadf05ba6fc8010d54f9f17e27c3a21

Sharing

Copy URL Twitter E-mail

General

Target

c559d2c9ac142ac7418c9c4b8a6a6851cbadf05ba6fc8010d54f9f17e27c3a21
Size

2.5MB
MD5

166b8b52d7069dd1ea9d45d612b35c57
SHA1

bb3f240b71e39f287b0bab8089e8ad68169d3e25
SHA256

c559d2c9ac142ac7418c9c4b8a6a6851cbadf05ba6fc8010d54f9f17e27c3a21
SHA512

ef8772a8c982da2709ceaf515260c2ec1cef5f415afcaab5d5e829d2beb009718d5a7a14d2831fffbecfeb2d617dc23e7f549378e9715279eed3c5a34b21764d
SSDEEP

49152:0U3U+ZYmxjpv7x4GFM/+b8dTMNh9Wr73h7NXSWEqNJO5hYTVMCRisKEq5a5l+:0iU2YmxjpDx4Zo8dYNh9q73h7NXYkRiB

Score

N/A

Malware Config

Signatures

Files

c559d2c9ac142ac7418c9c4b8a6a6851cbadf05ba6fc8010d54f9f17e27c3a21
.dll windows x86

e80a69b510452a1169b3ee8c87b1b98d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
InterlockedIncrement
FileTimeToSystemTime
FileTimeToLocalFileTime
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
WriteFile
FlushFileBuffers
IsProcessorFeaturePresent
GetSystemInfo
GetTimeZoneInformation
CompareStringA
GetACP
GetWindowsDirectoryA
GetSystemDirectoryA
InterlockedExchange
GetCurrentProcess
ReadProcessMemory
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetLastError
GetSystemTime
SystemTimeToFileTime
GetVersionExA
GetSystemDefaultLCID
GetModuleHandleA
SetLastError
FreeLibrary
LoadLibraryA
WaitForMultipleObjects
FindNextChangeNotification
FindCloseChangeNotification
GetTickCount
FindClose
lstrlenA
CreateFileA
lstrcmpiA
GetPrivateProfileStringA
GetFileSize
SetFilePointer
ReadFile
GetModuleFileNameA
CloseHandle
InterlockedCompareExchange
Sleep
GetCurrentThread
GetThreadSelectorEntry

user32

DestroyWindow
GetDesktopWindow
RegisterClassA
DefWindowProcA
MessageBoxA
wsprintfA
ReleaseDC
GetDC
CreateWindowExA

gdi32

SetTextAlign
SetBkMode
PatBlt
GetBitmapBits
ExtTextOutA
GetTextExtentPointA
GetCharABCWidthsA
GetTextMetricsA
SetTextColor
SetBkColor
CreateBitmap
CreateCompatibleDC
DeleteDC
SelectObject
GetFontData
DeleteObject
GetDeviceCaps

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA

shell32

SHGetSpecialFolderLocation
SHGetMalloc

msvcp80

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?_Xlen@_String_base@std@@SAXXZ
?_Xran@_String_base@std@@SAXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

msvcr80

_CxxThrowException
memcpy
strlen
memset
_setjmp3
labs
memmove
abort
fprintf
__iob_func
longjmp
__CxxFrameHandler3
memcmp
strncmp
strcmp
atol
strtol
atoi
strtoul
strncpy
strchr
strcpy
_purecall
atan
__RTDynamicCast
sprintf
wcslen
wcscat
sqrt
wcscmp
strstr
wcsstr
ceil
floor
wcsrchr
towupper
wcsncmp
wcsncpy
qsort
sscanf
_vswprintf
_time64
rand
srand
_wsplitpath
_wfullpath
wcschr
exit
_waccess
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
bsearch
isdigit
_invalid_parameter_noinfo
memmove_s
asin
realloc
isxdigit
isalnum
memcpy_s
isalpha
strcat
strtok
strrchr
isspace
_errno
__CxxLongjmpUnwind
strncat
tan
strpbrk
??0exception@std@@QAE@ABQBDH@Z
fabs
vsprintf
strtod
printf
_localtime64
wcstok
strspn
strcspn
_gmtime64
_mktime64
clearerr
ferror
feof
fread
fwrite
fputs
fgets
ftell
fseek
fflush
fclose
_get_osfhandle
_fileno
_open_osfhandle
isupper
toupper
tolower
wcsncat
fopen
rewind
fputc
fgetc
ungetc
remove
modf
fmod
pow
log
_tzset
__timezone
getenv
__tzname
_stricmp
__CxxFrameHandler
_unlock
_encode_pointer
__dllonexit
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
free
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_wcsnicmp
_wcsicmp
wcscpy
_fdopen

Exports

Exports

CTCleanup
CTGetVersion
CTInit

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 516KB - Virtual size: 515KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 116KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 380KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e80a69b510452a1169b3ee8c87b1b98d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msvcp80

msvcr80

Exports

Exports

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 516KB - Virtual size: 515KB

.data Size: 88KB - Virtual size: 136KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 116KB - Virtual size: 113KB

.text Size: 380KB - Virtual size: 380KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 516KB - Virtual size: 515KB

.data
Size: 88KB - Virtual size: 136KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 116KB - Virtual size: 113KB

.text
Size: 380KB - Virtual size: 380KB