a4395dfe61285da772662d44ef3966f2fa8c2995e38f8c75cd819fdab02ca313

Sharing

Copy URL Twitter E-mail

General

Target

a4395dfe61285da772662d44ef3966f2fa8c2995e38f8c75cd819fdab02ca313
Size

136KB
MD5

084376c0ed247ac613bbaf6e44272300
SHA1

8ded11fe24e2b1c2fd01bb96ec5a85c1ff763c0a
SHA256

a4395dfe61285da772662d44ef3966f2fa8c2995e38f8c75cd819fdab02ca313
SHA512

f6e63322f2b618e3eef3c2982c50f918d97f266d15129310540957407c341c8e265bcf537d7ccc0783174b725561d1a668b8b68401a4c3b89111d82177af137c
SSDEEP

3072:Fj4/TddJBmWTT+gVWxjI+5cYST055bWl7tWG3ZyIL0lLJbLyMn:9CL7LTDYx/rST0fb47P03a

Score

N/A

Malware Config

Signatures

Files

a4395dfe61285da772662d44ef3966f2fa8c2995e38f8c75cd819fdab02ca313
.exe windows x86

ee2f1e3742b3837e03e1f7e05bf488bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
ExitProcess
DeleteCriticalSection
IsDebuggerPresent
TlsGetValue
IsProcessorFeaturePresent
LocalFree
FlushInstructionCache
lstrlenW
GetWindowsDirectoryW
GetVersionExW
InitializeCriticalSectionAndSpinCount
HeapAlloc
GetModuleHandleW
UnhandledExceptionFilter
GetPrivateProfileIntW
GetFileSize
GetOEMCP
RtlUnwind
CreateFileW
GetEnvironmentStringsW
HeapFree
EnumSystemLocalesA
GlobalAlloc
LCMapStringA
GetModuleHandleA
GetFileType
lstrcmpiW
GetDateFormatA
GetPrivateProfileStringW
SizeofResource
FindNextChangeNotification
SetUnhandledExceptionFilter
GetCurrentThreadId
GetCurrentProcessId
lstrcpynA
MultiByteToWideChar
FindResourceW
IsValidLocale
GetStdHandle
HeapReAlloc
LoadLibraryW
CompareStringA
GetConsoleCP
CreateThread
QueryPerformanceCounter
TerminateProcess
GetFileAttributesW
TlsSetValue
GlobalSize
InterlockedIncrement
WritePrivateProfileStringW
GetModuleFileNameW
GetTempPathW
lstrcmpW
GetACP
IsValidCodePage
WideCharToMultiByte
GetStringTypeA
VirtualQuery
LeaveCriticalSection
ExpandEnvironmentStringsA
RaiseException
ExpandEnvironmentStringsW
ResetEvent
GetConsoleMode
InterlockedExchange
GetFileAttributesExW
GetCurrentProcess
OpenEventW
lstrcpyW
SystemTimeToTzSpecificLocalTime
LCMapStringW
VirtualFree
GetModuleFileNameA
GetComputerNameW
GetStartupInfoW
FreeEnvironmentStringsW
lstrcatW
InterlockedCompareExchange
TlsFree
WriteConsoleW
FindAtomA
GetVersion
lstrlenA
GetCurrentThread
SetLastError
GetLastError
SetHandleCount
GetStartupInfoA
ReadFile
FindFirstChangeNotificationW
OutputDebugStringW
SetStdHandle
SetConsoleCtrlHandler
LoadLibraryExW
HeapCreate
CreateFileA
lstrcpynW
GetTempFileNameW
InterlockedDecrement
LoadLibraryA
GetTimeFormatA
GlobalLock
CloseHandle
GetSystemDefaultLangID
FreeLibrary
LocalAlloc
CopyFileW
CompareStringW
TlsAlloc
EnterCriticalSection
MulDiv
DebugBreak
GetDateFormatW
HeapDestroy
WritePrivateProfileSectionW
GetProcAddress
GlobalUnlock
GetUserDefaultLCID
GetStringTypeW
WinExec
GetConsoleOutputCP
GetCommandLineW
LockResource
FormatMessageW
WaitForMultipleObjects
HeapSize
VirtualAlloc
FileTimeToSystemTime
WaitForSingleObject
WriteConsoleA
VerLanguageNameW
GetCPInfo
InitializeCriticalSection
LoadResource
GetSystemDirectoryW

user32

IsClipboardFormatAvailable
SetDlgItemTextW
GetClassInfoW
SetWindowsHookExW
MessageBoxW
GetMessageW
EnableWindow
RegisterClassW
RegisterWindowMessageW
PeekMessageW
LoadAcceleratorsW
IsWindowVisible
GetActiveWindow
DialogBoxParamW
FillRect
GetSubMenu
SetCapture
FrameRect
ReleaseCapture
UpdateWindow
LoadImageW
CreatePopupMenu
DrawEdge
GetWindowRect
LockWindowUpdate
GetDC
CallNextHookEx
LoadBitmapW
CharLowerW
DrawFrameControl
IsMenu
GetFocus
SetWindowTextW
IsChild
LoadIconW
RegisterClassExW
MapWindowPoints
PostQuitMessage
GetWindowTextLengthW
DefMDIChildProcW
MoveWindow
SetDlgItemInt
CallWindowProcW
KillTimer
DestroyWindow
CopyRect
wvsprintfW
GetSystemMenu
GetParent
RegisterClipboardFormatW
RemoveMenu
BeginDeferWindowPos
TrackPopupMenu
EndPaint
EqualRect
GetMenuStringW
UnregisterClassW
OffsetRect
GetCursorPos
InflateRect
AppendMenuW
GetMenu
SendMessageW
LoadMenuW
SetMenuItemInfoW
PtInRect
DestroyCaret
SetForegroundWindow
MonitorFromWindow
DragDetect
GetKeyState
OpenClipboard
LoadStringW
SetScrollPos
GetMenuDefaultItem
InvalidateRect
GetWindowLongW
CharNextW
EmptyClipboard
LoadStringA
SetMenuDefaultItem
TrackPopupMenuEx
GetDlgCtrlID
SetFocus
ShowScrollBar
SetParent
LoadCursorW
GetDlgItemTextW
GetWindowLongA
GetSystemMetrics
BeginPaint
GetWindowPlacement
GetClassNameW
GetMessagePos
EndDialog
InsertMenuW
ScrollWindowEx
PostMessageW
SetCaretPos
GetCapture
GetMonitorInfoW
GetClassLongW
CloseClipboard
FindWindowW
SystemParametersInfoW
GetSysColorBrush
DestroyMenu
GetWindowTextW
SetClipboardData
DefWindowProcW
EnableMenuItem
SetWindowPos
DrawFocusRect
WindowFromPoint
TranslateMessage
DispatchMessageW
BringWindowToTop
ClientToScreen
UnregisterClassA
DefFrameProcW
SetMenu
GetMenuItemInfoW
IsWindowEnabled
GetDoubleClickTime
CreateCaret
TranslateMDISysAccel
GetWindowThreadProcessId
GetMenuItemID
ScreenToClient
SetCursor
SetScrollInfo
GetDlgItemInt
TranslateAcceleratorW
SetRectEmpty
MessageBeep
RedrawWindow
UnhookWindowsHookEx
EndDeferWindowPos
GetWindowDC
GetScrollInfo
GetWindow
IntersectRect
ReleaseDC
SetTimer
DrawMenuBar
ModifyMenuW
CreateWindowExW
GetDesktopWindow
GetClientRect
DeferWindowPos

gdi32

CreateDIBSection
SetViewportOrgEx
ExtTextOutW
Polyline
GetObjectW
CreateFontIndirectW
MoveToEx
GetTextExtentPointW
GetDeviceCaps
DeleteObject
GetClipRgn
SaveDC
CreateCompatibleBitmap
Rectangle
CreatePatternBrush
Polygon
SetBkColor
SelectPalette
CreatePalette
LineTo
CreateCompatibleDC
IntersectClipRect
RealizePalette
TextOutW
RestoreDC
SetWindowOrgEx
BitBlt
CreateRectRgn
SelectObject
SelectClipRgn
SetBkMode
PatBlt
CreateBitmap
GetViewportOrgEx
GetTextExtentPoint32W
GetStockObject
CreateFontW
SetPolyFillMode
DPtoLP
CreateSolidBrush
SetTextColor
SetBrushOrgEx
LPtoDP
GetClipBox
CreatePen
GetTextMetricsW
DeleteDC

comdlg32

ChooseFontW
GetSaveFileNameW
ChooseColorW
GetOpenFileNameW

oleaut32

SystemTimeToVariantTime
SysFreeString
VarR8FromStr
VarUI4FromStr
VarDecFromStr
VarDecCmp
VarI4FromStr

wsock32

getsockname
WSAAsyncSelect
ioctlsocket
WSASetLastError
recv
listen
accept
send
gethostbyname
WSAGetLastError
htons
connect
bind
shutdown
getpeername
socket
inet_addr
ntohs
closesocket

msvcrt

localtime
strchr
fclose
sprintf
rand
_onexit
exit
fwrite
atoi
_i64toa
_acmdln
strncmp
__dllonexit
atol
_setmbcp
_strnicmp
__getmainargs
_initterm
_XcptFilter
_ftol
_controlfp
wcslen
_exit
__p__fmode
memmove
fopen
__setusermatherr
_stricmp
__set_app_type
__CxxFrameHandler
__p__commode
_adjust_fdiv
_except_handler3
_purecall
time

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data1
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data2
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee2f1e3742b3837e03e1f7e05bf488bf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

oleaut32

wsock32

msvcrt

Sections

.text Size: 15KB - Virtual size: 15KB

.data1 Size: 3KB - Virtual size: 3KB

.data2 Size: 42KB - Virtual size: 41KB

.rdata Size: 42KB - Virtual size: 41KB

.data Size: 28KB - Virtual size: 312KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 15KB - Virtual size: 15KB

.data1
Size: 3KB - Virtual size: 3KB

.data2
Size: 42KB - Virtual size: 41KB

.rdata
Size: 42KB - Virtual size: 41KB

.data
Size: 28KB - Virtual size: 312KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB