9cd5770b21125f678935725e0b8638f7ac367e4bad0cd3c6da23ebccbb18d669

Sharing

Copy URL

Twitter E-mail

General

Target

9cd5770b21125f678935725e0b8638f7ac367e4bad0cd3c6da23ebccbb18d669
Size

48KB
MD5

94cea4fe2d0d90c805194de77a5f1a79
SHA1

a9d8321462a61a990407ef16e26041603cc643e2
SHA256

9cd5770b21125f678935725e0b8638f7ac367e4bad0cd3c6da23ebccbb18d669
SHA512

73a626dab5da24f0ed249781d08b511a05439a30e004416f0da6cf246c4dab7f401cf6c0402478f045da698110f9ebaf2b08999ef6a597d2676b7487435323eb
SSDEEP

768:JcOV63olLQQtDmdM8dasw938mWWsExlPhuKj4ImG8QQSs7GRpxPywGe4X2+bJVtD:BVNlLQw8nw938mhlPlj4nJQQSsirE1Xf

Score

N/A

Malware Config

Signatures

Files

9cd5770b21125f678935725e0b8638f7ac367e4bad0cd3c6da23ebccbb18d669
.exe windows x86

eef75de78981f6741ce307bdad396530

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

wglDescribeLayerPlane
wglChoosePixelFormat
glTexGend
glRasterPos4fv
glTexCoord1sv
glTranslated
glTexCoord3fv
glColor3f
GlmfPlayGlsRecord
glFrustum
glMultMatrixd
glMap2f
glEnd
glTexEnvi
glIndexf
glTexCoord3i
glIndexd
glPolygonOffset
glRecti
glRasterPos3sv
glTexImage2D
glEvalCoord1dv
glRasterPos4iv
glGetBooleanv
glTexCoord2iv
glCopyPixels
glPixelMapuiv
glBindTexture
glSelectBuffer
glRectiv
glColor4s
glEndList
glPopAttrib
GlmfEndPlayback
glTexCoord2d
glPixelMapusv
glTexCoord1s
glLogicOp
glTexCoord3iv
glColor3bv
wglSetPixelFormat
glRasterPos4f
glNormal3bv
glVertex2fv
glNormal3f
glScalef
wglUseFontBitmapsA
glGetFloatv
glReadBuffer
glEnableClientState
glCopyTexSubImage2D
glLightf
wglGetPixelFormat
glLoadMatrixf
glTexParameteri
glTexCoord4s
glVertex2iv
glTexCoord2dv
glArrayElement
glRectf
glVertex2dv
glBegin
glDisableClientState
glVertex4fv
wglGetCurrentContext
wglCreateLayerContext

kernel32

GetFullPathNameA
GetProfileSectionA
QueueUserWorkItem
SetFileAttributesA
GetTapeParameters
OpenFile
LoadLibraryA
QueryActCtxW
RaiseException
GetFileSize
InterlockedExchangeAdd
WritePrivateProfileSectionW
GetModuleFileNameA
UnlockFile
DebugBreak
RtlCaptureContext
Process32FirstW
GlobalReAlloc
FindClose
VerifyConsoleIoHandle
GetFileType
UTRegister
HeapLock
CreateEventA
Module32NextW
PostQueuedCompletionStatus
_lwrite
GetCommandLineW
VirtualAlloc
GetStartupInfoW
ReleaseActCtx
SetThreadExecutionState
CreateWaitableTimerA
GetProcessHeap
IsDebuggerPresent
GetLogicalDrives
CreateDirectoryExA
HeapSetInformation
ReadFile
FindNextFileW
RemoveDirectoryW
GetBinaryType
GetSystemWindowsDirectoryA
ProcessIdToSessionId
CreateSemaphoreW
GetOEMCP
WriteConsoleOutputAttribute
GetConsoleCursorMode
ConvertFiberToThread
SetTimerQueueTimer
WaitCommEvent
QueueUserAPC
lstrcatA
GetPrivateProfileIntW
SetEnvironmentVariableW
GetCommTimeouts
GetLocaleInfoW
DeleteFileW
DosPathToSessionPathA
SetLocaleInfoA
LocalUnlock
SetConsoleMenuClose
GetConsoleKeyboardLayoutNameA
QueryInformationJobObject
VirtualFreeEx
GetUserDefaultLCID
SetNamedPipeHandleState
SetConsoleCursor
ClearCommError
RtlCaptureStackBackTrace
LocalFree
SetConsoleMode
CreateJobObjectA
GetConsoleAliasExesA
EnumCalendarInfoW
GetConsoleAliasExesLengthW
GetConsoleHardwareState
VerSetConditionMask
PurgeComm
RegisterConsoleOS2
GetVolumeInformationW
EnumUILanguagesW
GlobalWire
GetEnvironmentStringsW
GetDateFormatW
GetOverlappedResult
GetConsoleNlsMode
lstrlenW

imm32

ImmIMPQueryIMEW
ImmLockImeDpi
ImmUnlockClientImc
ImmUnregisterWordA
ImmIMPQueryIMEA
ImmTranslateMessage
ImmSetCompositionStringW
ImmWINNLSGetIMEHotkey
ImmIMPGetIMEA
ImmLockIMC
ImmGenerateMessage
ImmIsUIMessageA
ImmDestroyContext
ImmInstallIMEW
ImmSystemHandler
ImmSetCompositionStringA
ImmUnregisterWordW
ImmLoadLayout
ImmUnlockIMCC
ImmIMPSetIMEW
ImmGetCompositionWindow
ImmWINNLSGetEnableStatus
ImmIMPGetIMEW
ImmReSizeIMCC
ImmGetCandidateListW
ImmSetCandidateWindow
ImmGetCompositionStringA
ImmEnumInputContext
ImmRegisterClient
ImmFreeLayout
ImmSetActiveContext
ImmGetRegisterWordStyleW
ImmRequestMessageW
ImmSetHotKey
ImmAssociateContext

atmlib

ATMGetPostScriptNameW
ATMGetOutlineA
ATMEndFontChange
ATMXYShowTextA
ATMGetMenuName
ATMMakePFMW
ATMGetMenuNameW
ATMGetOutlineW
ATMMakePSSA
ATMFontStatusA
ATMEnumFontsA
ATMGetVersionEx
ATMSelectEncoding
ATMGetNtmFieldsA
ATMGetMenuNameA
ATMProperlyLoaded
ATMFontStatusW
ATMSelectObject
ATMFinish
ATMAddFontEx
ATMInstallSubstFontA
ATMXYShowTextW
ATMAddFont
ATMGetFontPathsA
ATMGetFontPaths
ATMAddFontExA
ATMFontAvailableA
ATMGetPostScriptName
ATMEnumFonts
ATMSetFlags
ATMRemoveSubstFontA
ATMGetVersionExW
ATMGetNtmFields
ATMBBoxBaseXYShowTextW
ATMGetGlyphListA
ATMGetOutline
ATMAddFontA
ATMMakePSS
ATMFontSelected
ATMBBoxBaseXYShowText
ATMForceFontChange

sqlunirl

_FindExecutable_@12
_CallNamedPipe_@28
_lstrcmpi_@8
_CreateFontIndirect@4
_Shell_NotifyIcon_@8
_NDdeIsValidShareName_@4
newWideCharFromMultiByte
_UpdateResource_@24
AllocConvertMultiSZNameToAEx
_GetModuleHandle_@4
_GetMessage_@16
_DlgDirSelectComboBoxEx_@16
_LogonUser_@24
_DeleteFile@4
_FatalAppExit_@8
_RegUnLoadKey_@8
_GetCompressedFileSize_@8
_LoadBitmap@8
_DrawText@20
_trename
_DispatchMessage_@4
_RegSetValueEx_@24
_DefWindowProc@16
_CompareString_@24
_CreateMutex_@12
_GetTextFace_@12
_ExpandEnvironmentStrings_@12
_PageSetupDlg_@4
_GetObject@12
_GetOpenFileName@4
_GetICMProfile_@12
_FindResource@12
_InitiateSystemShutdown_@20
_DefDlgProc_@16
_LookupAccountName_@28
_GetSaveFileName@4
AbortSystemShutdown_
_SetMenuItemInfo_@16
_RegOpenKey_@12
_RegDeleteKey_@8
_GetCurrentDirectory_@8
_ShellExecute_@24
_SetEnvironmentVariable_@8
_GetFileAttributes_@4
_CreateColorSpace_@4

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eef75de78981f6741ce307bdad396530

Headers

DLL Characteristics

File Characteristics

Imports

opengl32

kernel32

imm32

atmlib

sqlunirl

Sections

.text Size: 33KB - Virtual size: 33KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 1KB - Virtual size: 65KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 1024B

.text
Size: 33KB - Virtual size: 33KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 1KB - Virtual size: 65KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 1024B