5289a697d2c3fe0b1dd61281c07acbb235c2a62c47429afb96715d204a676611

Sharing

Copy URL Twitter E-mail

General

Target

5289a697d2c3fe0b1dd61281c07acbb235c2a62c47429afb96715d204a676611
Size

242KB
MD5

435241a401cf5b4d84e0acd42efb1180
SHA1

cd94e9efe1129ed0ae79ec30a5f6964d52857117
SHA256

5289a697d2c3fe0b1dd61281c07acbb235c2a62c47429afb96715d204a676611
SHA512

e9f9c55960792cf14aa47cb54141f957090527c68a0ba07c5f3ed05d9891623556d0a9d6adc72367a39efa4c0f4add66d2318bd64eaa091e85f26159977bc323
SSDEEP

6144:9dY74NdZ77EgmWcxsKIkFF/T4hCk5plFWlqbIa33/ouLC:f+yZHWpND7T4hCk5pl8l/UgCC

Score

N/A

Malware Config

Signatures

Files

5289a697d2c3fe0b1dd61281c07acbb235c2a62c47429afb96715d204a676611
.cab
DQNLYMIY.exe
.exe windows x86

59810f33b5d720536dc4be37b5a3b483

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathRemoveFileSpecA

comctl32

ord17

wininet

InternetConnectA
HttpOpenRequestA
InternetOpenUrlA
InternetQueryDataAvailable
InternetReadFile
HttpSendRequestA
HttpQueryInfoA
InternetErrorDlg
InternetAttemptConnect
InternetCloseHandle
InternetOpenA

winmm

PlaySoundA

kernel32

FindClose
FindFirstFileA
FindNextFileA
DeleteFileA
GetSystemDefaultLCID
Sleep
SetCurrentDirectoryA
WaitForSingleObject
LocalFree
FormatMessageA
ReadFile
GetFileInformationByHandle
CreateFileA
UnlockFile
WriteFile
LockFile
SetFilePointer
FreeLibrary
LoadLibraryA
GetProcAddress
GetStringTypeW
GetStringTypeA
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetDriveTypeA
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
HeapSize
GetCurrentProcess
TerminateProcess
FlushFileBuffers
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
SetLastError
TlsAlloc
GetCPInfo
LCMapStringW
GetVolumeInformationA
GetModuleFileNameA
GetCurrentDirectoryA
CreateMutexA
GetLastError
CloseHandle
OutputDebugStringA
SetEnvironmentVariableA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
IsBadCodePtr
GetACP
GetOEMCP
SetStdHandle
GetTimeZoneInformation
GetLocaleInfoW
SetEndOfFile
CompareStringA
CompareStringW
GetEnvironmentStringsW
MultiByteToWideChar
LCMapStringA
FileTimeToLocalFileTime
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
RaiseException
ExitProcess
IsBadReadPtr
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapReAlloc
FileTimeToSystemTime

user32

DrawTextA
SetWindowRgn
BeginPaint
EndPaint
InvalidateRect
GetDC
SetWindowTextA
FindWindowA
GetClientRect
OffsetRect
MoveWindow
LoadIconA
SetCapture
SetCursor
GetWindowRect
ReleaseCapture
PostQuitMessage
ClipCursor
WaitMessage
PeekMessageA
TranslateMessage
DispatchMessageA
GetSystemMetrics
LoadImageA
CloseWindow
SetWindowLongA
LoadCursorA
RegisterClassExA
ShowWindow
UpdateWindow
DestroyWindow
DefWindowProcA
SetRect
ReleaseDC
SendMessageA
GetDesktopWindow
MessageBoxA
CreateWindowExA

gdi32

SetBkMode
SetBkColor
SetTextColor
SelectClipRgn
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
CreateDIBitmap
CreateRectRgn
ExtCreateRegion
CombineRgn
GetRgnBox
PtInRegion
CreateFontA
DeleteObject
CreateCompatibleBitmap

advapi32

RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA

shell32

SHAppBarMessage
ShellExecuteExA

Sections

.text
Size: 412KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ITKOKA~1.EXE
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

59810f33b5d720536dc4be37b5a3b483

Headers

File Characteristics

Imports

shlwapi

comctl32

wininet

winmm

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 412KB - Virtual size: 408KB

.rdata Size: 100KB - Virtual size: 99KB

.data Size: 16KB - Virtual size: 20KB

.rsrc Size: 12KB - Virtual size: 9KB

Headers

File Characteristics

Sections

.data Size: - Virtual size: 52KB

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 26KB - Virtual size: 28KB

.idata Size: 1024B - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 4KB

.text
Size: 412KB - Virtual size: 408KB

.rdata
Size: 100KB - Virtual size: 99KB

.data
Size: 16KB - Virtual size: 20KB

.rsrc
Size: 12KB - Virtual size: 9KB

.data
Size: - Virtual size: 52KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 26KB - Virtual size: 28KB

.idata
Size: 1024B - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 4KB