c5fdfe992c789f5f00963e03d0f470e46cebe05bfd2792c13be1f23103aa1889

Sharing

Copy URL Twitter E-mail

General

Target

c5fdfe992c789f5f00963e03d0f470e46cebe05bfd2792c13be1f23103aa1889
Size

252KB
MD5

02f60729d1c0f41e66cd19ce731eb889
SHA1

ff4ef3aa3dc34756e2284ad3127d713be2d6d810
SHA256

c5fdfe992c789f5f00963e03d0f470e46cebe05bfd2792c13be1f23103aa1889
SHA512

8a99c9b43523d7c47e760126888e10ee4a91a095d92c1e3211bc2acef14d9a151466af5cb678b0c72649bace2692f1915ff7eb39c2f50a415474d6d013ca153c
SSDEEP

3072:lu9yVomS0oXBbcOP2YrctiPMZpgkkodPTiHfeW7RKhc8XGd43SF7fyQA8ehMxDdD:xSDBbCY4gPMZpgk5BiH2W7d4TJEx3

Score

N/A

Malware Config

Signatures

Files

c5fdfe992c789f5f00963e03d0f470e46cebe05bfd2792c13be1f23103aa1889
.exe windows x86

eb8ace7a273c60c824cd0b3d22201e7c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
HeapAlloc
HeapSize
VirtualAlloc
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
GetStringTypeA
GetStringTypeW
VirtualFree
HeapFree
HeapCreate
GetLocaleInfoA
LoadLibraryA
SetEndOfFile
GetProcessHeap
ReadFile
GetTickCount
GetLocalTime
Sleep
GetModuleFileNameA
GetCommandLineA
GetTempPathA
CreateDirectoryA
DeleteFileA
RemoveDirectoryA
MoveFileA
CreateMutexA
GetLastError
lstrcpyA
lstrcatA
lstrlenA
ExpandEnvironmentStringsA
GetFileAttributesExA
CreateThread
WaitForSingleObject
TerminateThread
CloseHandle
HeapReAlloc
WriteFile
HeapDestroy
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
LoadLibraryW
ExitProcess
OutputDebugStringW
GetFileType
WriteConsoleW
OutputDebugStringA
GetStdHandle
DebugBreak
LCMapStringW
LCMapStringA
MultiByteToWideChar
IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
SetLastError
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetStartupInfoA
HeapValidate
IsBadReadPtr
GetProcAddress
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree

user32

wsprintfA
GetClassLongA

advapi32

RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegCloseKey

ole32

CoInitialize

shell32

ShellExecuteA

shlwapi

PathRemoveBlanksA
PathGetArgsA
PathFileExistsA
PathIsDirectoryA
PathFindFileNameA

ws2_32

recv
closesocket
__WSAFDIsSet
select
connect
ioctlsocket
htons
socket
gethostbyname
WSAStartup
send

netapi32

Netbios

comdlg32

PageSetupDlgA
ChooseColorA
FindTextW
GetSaveFileNameA
CommDlgExtendedError
ChooseFontW
ReplaceTextW
ChooseColorW
FindTextA
GetFileTitleW
PrintDlgA

comsvcs

RecycleSurrogate
MTSCreateActivity

iphlpapi

DisableMediaSense
GetPerAdapterInfo
GetTcpStatisticsEx
SetIfEntry
IpRenewAddress
DeleteIpForwardEntry
UnenableRouter
CreateIpNetEntry
GetBestInterfaceEx
GetAdapterIndex
SetTcpEntry
GetOwnerModuleFromTcpEntry
GetIfEntry
GetBestRoute
GetUdpStatisticsEx
GetInterfaceInfo
GetIpErrorString
GetIpStatistics
CreateIpForwardEntry
GetFriendlyIfIndex
GetAdapterOrderMap
SetIpNetEntry
SetIpTTL
SetIpStatistics
NotifyAddrChange
DeleteIPAddress
IpReleaseAddress
GetUdpStatistics
DeleteIpNetEntry
GetIcmpStatistics
GetRTTAndHopCount
NotifyRouteChange
GetIpAddrTable
AddIPAddress
CreateProxyArpEntry
EnableRouter
GetIpNetTable
SetIpForwardEntry

msimg32

GradientFill

msvfw32

ICSeqCompressFrameEnd
ICGetDisplayFormat
ICDraw
DrawDibTime
DrawDibSetPalette
DrawDibRealize
ICCompress
ICLocate
DrawDibGetBuffer
DrawDibOpen
MCIWndCreateA
ICInstall
ICRemove
ICDecompress
ICCompressorChoose
ICSendMessage
DrawDibEnd
ICImageDecompress
ICGetInfo
DrawDibGetPalette
DrawDibChangePalette
DrawDibStart
ICCompressorFree
MCIWndRegisterClass

mswsock

GetAcceptExSockaddrs
TransmitFile
WSARecvEx

Sections

.text
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb8ace7a273c60c824cd0b3d22201e7c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

shell32

shlwapi

ws2_32

netapi32

comdlg32

comsvcs

iphlpapi

msimg32

msvfw32

mswsock

Sections

.text Size: 167KB - Virtual size: 166KB

.rdata Size: 62KB - Virtual size: 62KB

.data Size: 4KB - Virtual size: 21KB

.reloc Size: 17KB - Virtual size: 16KB

.text
Size: 167KB - Virtual size: 166KB

.rdata
Size: 62KB - Virtual size: 62KB

.data
Size: 4KB - Virtual size: 21KB

.reloc
Size: 17KB - Virtual size: 16KB