4cab75687467167db9a86c242d336c2758a4e61dc3f02a2bb8fc9a3bc124b5d4

Sharing

Copy URL Twitter E-mail

General

Target

4cab75687467167db9a86c242d336c2758a4e61dc3f02a2bb8fc9a3bc124b5d4
Size

831KB
MD5

09a5e554a20836695f3cf4bd9002dc30
SHA1

cb003511d96e4ce655e58d08cec47f685b1b33ec
SHA256

4cab75687467167db9a86c242d336c2758a4e61dc3f02a2bb8fc9a3bc124b5d4
SHA512

358a9957309f3269e5f5d4dc22856f764855837c06c9782654417036d0832dcdd725c23f59ed3d24a2747881a52c91401e4e3fbfaee3f58abf0edb63b66866f0
SSDEEP

24576:gSXBKUlRHVSt9Mt8LHOHoxyNm6bU7XHkkeKWMNg:gSwaR4/MuCH46oQkOM

Score

N/A

Malware Config

Signatures

Files

4cab75687467167db9a86c242d336c2758a4e61dc3f02a2bb8fc9a3bc124b5d4
.exe windows x86

656155dbb4f82fdc41310143e5873b5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapReAlloc
SetHandleCount
GetThreadLocale
GetCommandLineA
LocalReAlloc
CreateFileA
QueryPerformanceCounter
FileTimeToSystemTime
DuplicateHandle
CompareStringA
GetCommandLineW
GetACP
TlsSetValue
GetVersionExA
SystemTimeToFileTime
GetFileSize
GetOEMCP
IsDebuggerPresent
WriteConsoleA
GetCurrentProcessId
GetStringTypeA
GetProcessHeap
GetModuleFileNameA
GetWindowsDirectoryA
SetEnvironmentVariableA
ReadFile
GetCurrentThreadId
VirtualQuery
SetUnhandledExceptionFilter
TerminateProcess
GlobalAlloc
LocalFileTimeToFileTime
HeapAlloc
GlobalDeleteAtom
lstrlenA
GetFileType
FreeLibrary
GlobalReAlloc
GetSystemInfo
ConvertDefaultLocale
FileTimeToLocalFileTime
LocalFree
TlsAlloc
GlobalLock
GetFileTime
LCMapStringA
LocalAlloc
HeapFree
SetFileTime
GetLastError
HeapSize
HeapDestroy
VirtualFree
RtlUnwind
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemDirectoryA
GlobalFree
RaiseException
HeapCreate
GetLocaleInfoA
GetConsoleMode
GetStdHandle
GetModuleHandleA
SetErrorMode
GetCurrentThread
GetConsoleOutputCP
GetVersion
CloseHandle
GlobalFlags
lstrcmpA
GlobalHandle
GlobalUnlock
SetStdHandle
LoadLibraryExA
FindAtomA
LoadLibraryA
GetProcAddress
TlsFree

user32

GetMenu
AdjustWindowRectEx
PostQuitMessage
SetWindowRgn
ShowScrollBar
GetWindow
GetWindowPlacement
EndPaint
GetDC
ReleaseDC
DeferWindowPos
GetCapture
SetWindowPos
ValidateRect
MessageBeep
SetActiveWindow
GetWindowDC
GetNextDlgGroupItem
SetScrollInfo
ReuseDDElParam
GetSysColor
SetForegroundWindow
GetSysColorBrush
SendDlgItemMessageA
GetActiveWindow
GetMenuCheckMarkDimensions
IsRectEmpty
CopyRect
SetParent
DestroyMenu
GetScrollInfo
GetWindowThreadProcessId
SetMenuItemBitmaps
GetTopWindow
SetCapture
FillRect
IsZoomed
ShowWindow
CheckMenuItem
RedrawWindow
GetParent
LockWindowUpdate
IsWindowEnabled
BeginPaint
SetRectEmpty
ReleaseCapture
MapDialogRect
GetDesktopWindow
GetClientRect
EnableMenuItem
MoveWindow
GetDlgItem
GetMenuItemID
SetWindowContextHelpId
SetScrollRange
GetNextDlgTabItem
TrackPopupMenu
PtInRect
UpdateWindow
InflateRect
GetScrollRange
CreatePopupMenu
GetLastActivePopup
BeginDeferWindowPos
SetMenu
SetFocus
KillTimer
GetScrollPos
EndDialog
SetScrollPos
MapWindowPoints
IntersectRect
EndDeferWindowPos
IsChild
GetSystemMenu
GetMessageTime
ShowOwnedPopups
EqualRect
GetFocus
InvalidateRect
GetSystemMetrics
IsWindow
ScreenToClient
GetWindowRect
OffsetRect
TranslateMessage
UnpackDDElParam
GetMenuItemCount

gdi32

CreateRectRgnIndirect
PatBlt
Escape
OffsetViewportOrgEx
GetDeviceCaps
SetWindowExtEx
ExcludeClipRect
StretchDIBits
GetMapMode
SetViewportOrgEx
GetClipBox
DeleteDC
CreateCompatibleDC
SelectObject
OffsetRgn
SelectClipRgn
CreateCompatibleBitmap
CreatePatternBrush
DeleteObject
RectVisible
SaveDC
GetStockObject
GetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
SetBkMode
ExtSelectClipRgn
CreateRectRgn
IntersectClipRect
CreateBitmap
ScaleWindowExtEx
RestoreDC
CreateSolidBrush
BitBlt
GetPixel
PtVisible
DPtoLP
Ellipse
SetRectRgn
GetRgnBox
GetTextColor

ole32

StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CLSIDFromProgID
CoGetClassObject
OleUninitialize
CoRevokeClassObject
OleInitialize
CLSIDFromString
OleIsCurrentClipboard
OleFlushClipboard

oleaut32

VariantTimeToSystemTime
OleCreateFontIndirect
SafeArrayDestroy
VariantInit
SysAllocStringLen
SystemTimeToVariantTime
SysStringLen
SysFreeString
VariantClear
VariantCopy
VariantChangeType

msvcrt

strchr
strtoul
tanh
_wrmdir
_get_osfhandle
_read
_filbuf
ldexp
_telli64
_stricmp
strrchr
free
malloc
exit
_wcsnicmp
pow
tan
fputc
_open
_wsetlocale
fsetpos
_assert
_wfopen
_waccess
setvbuf
towlower
_wtoi
atof
_filelengthi64
_endthreadex
wcslen
__set_app_type
acos
strftime
fmod
wcscat
clock
strlen
ftell
strncpy
_wrename
wcsxfrm
_close
difftime
sscanf
atexit
strcat
rand
_wgetenv
_beginthreadex
_lseeki64
ctime
cos
_open_osfhandle
memset
memcpy
puts
_isctype
strncat
_wmkdir
__p__fmode
sprintf
strtod
bsearch
memchr
_wstati64
_flsbuf
wcsspn
_wopen
fputws
swscanf
wcsncpy
atan
localtime
__mb_cur_max
_setjmp
abort
realloc
__p__environ
wcstod
_stati64
floor
log
_getcwd
_cexit
strncmp
exp
atan2
_pctype
getwc
modf
sin
_iob
cosh
putwc
mktime
wcstol
toupper
wcscoll
_wcsicmp
wcsftime
wcscmp
fgetc
fputs
__getmainargs
fread
srand
strcpy
time
iswctype
log10
strtol
strcoll
fprintf
qsort
frexp
sinh
towupper
strstr
_wcsdup
_wremove
fputwc
signal
setlocale
_onexit
fclose
_errno
swprintf
ceil
_fstati64
_setmode
calloc
ungetwc
wcsncmp
wcstoul
atoi
fgets
fseek
mbstowcs
ungetc
wcschr
fgetpos
tolower
asin
strcmp
_wtol
fflush
strxfrm
longjmp
getenv
memmove
wcspbrk
wcscpy
clearerr
_write
fwrite
wcsstr
fopen
gmtime
sqrt
_fdopen
_commit
_strnicmp

Sections

.text
Size: 539KB - Virtual size: 538KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 247KB - Virtual size: 5.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

656155dbb4f82fdc41310143e5873b5d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

msvcrt

Sections

.text Size: 539KB - Virtual size: 538KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 247KB - Virtual size: 5.5MB

.tls Size: - Virtual size: 101B

.rsrc Size: 21KB - Virtual size: 20KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 539KB - Virtual size: 538KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 247KB - Virtual size: 5.5MB

.tls
Size: - Virtual size: 101B

.rsrc
Size: 21KB - Virtual size: 20KB

.reloc
Size: 10KB - Virtual size: 9KB