a0a4995538a1ffe8778a2d981bf855afc706a4462d6862be1664084e2d07f3f3

Sharing

Copy URL Twitter E-mail

General

Target

a0a4995538a1ffe8778a2d981bf855afc706a4462d6862be1664084e2d07f3f3
Size

236KB
MD5

fcfe07cca6f0ca130c4c888733b825bf
SHA1

eaebfbefe5ed28b7f4ec45e2657fb2bda2f9ee2a
SHA256

a0a4995538a1ffe8778a2d981bf855afc706a4462d6862be1664084e2d07f3f3
SHA512

49eb7565edf8604c15e6c6d90192801542068408c7317d56e6bd6b77c8bcda8088fb4b881114948f438ce4954972f1693807a29bc075024f85011cb684122b82
SSDEEP

3072:+mrFbDTY7F5mQrEeNoAHavL7fsNnvsVHqkOoJbfMca3gzr7e8n6Qeie4AKe1S:+D7Dn4eNoA+fSqHAoJTjjmwevv

Score

N/A

Malware Config

Signatures

Files

a0a4995538a1ffe8778a2d981bf855afc706a4462d6862be1664084e2d07f3f3
.exe windows x86

2f0768ea12a26bd8dc434dbdf113221a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

printf
_chdrive
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
memmove
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
_CxxThrowException
??0exception@@QAE@ABV0@@Z
abs
_ftol
strcpy
atof
atol
srand
strcat
_strnicmp
strcmp
strtok
strncpy
??2@YAPAXI@Z
atoi
strcspn
sscanf
strlen
memcmp
isdigit
malloc
_strcmpi
_itoa
_strupr
_strlwr
_stricmp
_chmod
_rmdir
memchr
realloc
strrchr
strchr
memcpy
strncmp
free
rand
sprintf
time
_access
strstr
strncat
__CxxFrameHandler
memset
??3@YAXPAX@Z
_chdir

shfolder

SHGetFolderPathA

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance
OleRun
CLSIDFromString

oleaut32

SysFreeString
GetErrorInfo
VariantClear
SysAllocString
VariantInit

kernel32

ResetEvent
SetEvent
FreeResource
GetTempFileNameA
TerminateProcess
GetCurrentProcess
CreateDirectoryA
MultiByteToWideChar
FormatMessageA
GetVersionExA
GetWindowsDirectoryA
GetProcAddress
WaitForSingleObject
LocalAlloc
LocalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
CreateEventA
OutputDebugStringA
CloseHandle
InterlockedDecrement
lstrcpyA
SetLastError
lstrlenA
Sleep
CopyFileA
GetLastError
DeleteFileA
ExitThread
lstrcmpiA
GetModuleFileNameA
ReadFile
CreateFileA
RemoveDirectoryA
lstrcmpA
lstrcpynA
GetFileSize
WriteFile
SetFilePointer
GetModuleHandleA
GetTickCount
WideCharToMultiByte
lstrlenW
FindResourceA
GetTempPathA
CreateProcessA
OpenProcess
GetCurrentProcessId
CreateThread
GetLocalTime
FreeLibrary
SizeofResource
GetSystemDirectoryA
GetStartupInfoA
LoadResource
lstrcatA
LockResource
LoadLibraryA

user32

RedrawWindow
IsWindow
PostMessageA
FindWindowA
CharLowerA
CharUpperA
MessageBoxA
GetActiveWindow
DestroyWindow
KillTimer
GetDC
ReleaseDC
ScreenToClient
BeginPaint
EndPaint
InvalidateRect
LoadImageA
PostQuitMessage
DefWindowProcA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
CreateDialogParamA
ShowWindow
SetForegroundWindow
ReleaseCapture
GetParent
GetDesktopWindow
LoadMenuA
GetCursorPos
GetSubMenu
TrackPopupMenuEx
DestroyMenu
SetFocus
GetAsyncKeyState
EnableMenuItem
GetWindowTextA
SetWindowLongA
GetWindowLongA
CallWindowProcA
EnableWindow
GetDlgItemTextA
GetWindow
IsIconic
LoadStringA
SetDlgItemTextA
SystemParametersInfoA
SetTimer
FillRect
DialogBoxParamA
EndDialog
SetWindowTextA
LoadIconA
GetClientRect
GetDlgItem
IsWindowVisible
SendMessageA
SetCapture
PeekMessageA
GetWindowThreadProcessId
GetDlgCtrlID
SetCursor
GetWindowRect
SetWindowPos

gdi32

RealizePalette
StretchBlt
CreateCompatibleDC
GetObjectA
SelectObject
BitBlt
DeleteDC
CreateFontA
SetTextColor
CreateSolidBrush
SetBkColor
DeleteObject
SelectPalette
CreatePalette
GetDIBColorTable

shell32

ShellExecuteA
Shell_NotifyIconA

urlmon

URLDownloadToFileA

wininet

InternetOpenA
HttpQueryInfoA
InternetReadFile
InternetCrackUrlA
InternetGetConnectedState
InternetCloseHandle
InternetSetStatusCallback
InternetOpenUrlA
InternetQueryDataAvailable

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

advapi32

RegEnumValueA
CryptEncrypt
CryptDeriveKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
CryptHashData
CryptCreateHash
CryptDestroyHash
CryptDestroyKey
CryptAcquireContextA
CryptDecrypt
CryptReleaseContext
RegEnumKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegConnectRegistryA
RegOpenKeyExA
RegCreateKeyExA

Sections

pec1
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pec
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2f0768ea12a26bd8dc434dbdf113221a

Headers

File Characteristics

Imports

msvcrt

shfolder

ole32

oleaut32

kernel32

user32

gdi32

shell32

urlmon

wininet

version

advapi32

Sections

pec1 Size: 152KB - Virtual size: 152KB

.rsrc Size: 60KB - Virtual size: 60KB

.pec Size: 16KB - Virtual size: 16KB

.rsrc Size: 4KB - Virtual size: 4KB

pec1
Size: 152KB - Virtual size: 152KB

.rsrc
Size: 60KB - Virtual size: 60KB

.pec
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 4KB