fc04d0a5242dd2f6f80ab1098e347fc9279da85a74a4afe30f2649f9900e4623

Sharing

Copy URL Twitter E-mail

General

Target

fc04d0a5242dd2f6f80ab1098e347fc9279da85a74a4afe30f2649f9900e4623
Size

253KB
MD5

febf097655f293a635d349de71a61730
SHA1

8550acecf918151ad954d5a295e6ded3e923d0bd
SHA256

fc04d0a5242dd2f6f80ab1098e347fc9279da85a74a4afe30f2649f9900e4623
SHA512

e688b3f7d31717833f83d91c710ddba07f1c250b28d8fcbddba0d46d6695ecc089bc97bf10ddf632b09ad0a7bb69d8a61a2f577349dd0b464171e9752e15dfd0
SSDEEP

3072:BY6SFdUlSzgYaRw5/rb226VEp7yvQZF/w9WEEPgEhgDiRnHUF7tyQA8ehMmFx5nv:0KSTaRQ/3n6VEpOvQz/ZEegIRZEmdv

Score

N/A

Malware Config

Signatures

Files

fc04d0a5242dd2f6f80ab1098e347fc9279da85a74a4afe30f2649f9900e4623
.exe windows x86

209130c4f7d199aca36ecd71f7893ed3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSectionAndSpinCount
VirtualAlloc
HeapReAlloc
HeapSize
HeapAlloc
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
GetStringTypeA
GetStringTypeW
VirtualFree
HeapFree
GetLocaleInfoA
LoadLibraryA
SetEndOfFile
GetProcessHeap
ReadFile
GetTickCount
GetLocalTime
Sleep
WriteFile
GetModuleFileNameA
GetCommandLineA
GetTempPathA
CreateDirectoryA
DeleteFileA
RemoveDirectoryA
MoveFileA
CreateMutexA
GetLastError
lstrcpyA
lstrcatA
lstrlenA
ExpandEnvironmentStringsA
GetFileAttributesExA
CreateThread
WaitForSingleObject
TerminateThread
CloseHandle
SetFilePointer
HeapCreate
HeapDestroy
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
LoadLibraryW
ExitProcess
OutputDebugStringW
GetFileType
WriteConsoleW
OutputDebugStringA
GetStdHandle
DebugBreak
LCMapStringW
LCMapStringA
MultiByteToWideChar
IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetStartupInfoA
HeapValidate
IsBadReadPtr
GetProcAddress
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
WideCharToMultiByte
GetConsoleCP
GetConsoleMode

user32

GetClassLongA
wsprintfA

advapi32

RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegCloseKey

ole32

CoInitialize

shell32

ShellExecuteA

shlwapi

PathFileExistsA
PathIsDirectoryA
PathRemoveBlanksA
PathGetArgsA
PathFindFileNameA

gdi32

RemoveFontMemResourceEx
SetPixelV
CreateBrushIndirect
GetKerningPairsA
GetObjectW
CreateFontIndirectW
Arc
GetTextExtentPointW
GetCharABCWidthsI
GetTextExtentPointI
PtInRegion
GetOutlineTextMetricsA
GdiGetBatchLimit
EnumFontFamiliesExW
RectVisible
CombineRgn
GdiFlush
GetCharacterPlacementA
CreateFontIndirectExA
GetWindowExtEx
RealizePalette
CreateCompatibleBitmap
SetWindowExtEx
SetPolyFillMode
SetColorAdjustment
AddFontResourceW
GetTextFaceW
GetLogColorSpaceW
SetDIBits
GetDIBColorTable
Rectangle
CancelDC
StartDocW
CreateDIBPatternBrushPt
CreateScalableFontResourceW
Polyline
GetCharWidth32W
SetDIBitsToDevice
RemoveFontResourceW
GetFontData
GetWorldTransform
GetTextExtentExPointI
SetAbortProc
LineTo
GetTextExtentPointA
StrokePath

ws2_32

__WSAFDIsSet
select
connect
ioctlsocket
recv
socket
gethostbyname
WSAStartup
send
htons
closesocket

netapi32

Netbios

comdlg32

PageSetupDlgW
GetOpenFileNameA
CommDlgExtendedError
ChooseColorA
PageSetupDlgA
GetFileTitleW

comsvcs

RecycleSurrogate

imm32

ImmConfigureIMEW
ImmInstallIMEA
ImmSetStatusWindowPos
ImmConfigureIMEA
ImmAssociateContext
ImmSetCandidateWindow
ImmSetCompositionStringW
ImmGetVirtualKey
ImmEscapeW
ImmSetConversionStatus
ImmGetCompositionStringW
ImmGetConversionListA
ImmGetProperty
ImmGetCompositionFontW
ImmGetCompositionFontA
ImmDestroyContext
ImmGetDescriptionW
ImmGetCandidateListCountW
ImmDisableTextFrameService
ImmEnumInputContext
ImmGetDefaultIMEWnd
ImmNotifyIME
ImmGetCandidateListCountA
ImmIsUIMessageW
ImmGetGuideLineW
ImmGetConversionListW
ImmEnumRegisterWordA
ImmGetDescriptionA
ImmSetCompositionFontA
ImmGetCandidateWindow
ImmGetImeMenuItemsW
ImmGetImeMenuItemsA
ImmGetCompositionWindow
ImmGetCandidateListW
ImmGetOpenStatus
ImmCreateContext
ImmIsUIMessageA
ImmSetCompositionWindow

msimg32

GradientFill

msvfw32

DrawDibStart
ICDraw
ICOpen
ICCompress
DrawDibEnd
MCIWndRegisterClass
DrawDibStop
ICOpenFunction
DrawDibOpen
DrawDibRealize
ICLocate
ICRemove
DrawDibProfileDisplay
ICClose
ICGetInfo
ICCompressorChoose
ord2
DrawDibSetPalette
DrawDibChangePalette
ICImageCompress

mswsock

GetAcceptExSockaddrs
TransmitFile

Sections

.text
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

209130c4f7d199aca36ecd71f7893ed3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

shell32

shlwapi

gdi32

ws2_32

netapi32

comdlg32

comsvcs

imm32

msimg32

msvfw32

mswsock

Sections

.text Size: 167KB - Virtual size: 166KB

.rdata Size: 63KB - Virtual size: 63KB

.data Size: 4KB - Virtual size: 21KB

.reloc Size: 17KB - Virtual size: 16KB

.text
Size: 167KB - Virtual size: 166KB

.rdata
Size: 63KB - Virtual size: 63KB

.data
Size: 4KB - Virtual size: 21KB

.reloc
Size: 17KB - Virtual size: 16KB