4a37b35b795e5cc74bc7e38d194cb66ed93bc36e715137e5be04b9fc69d0dc7d

Sharing

Copy URL Twitter E-mail

General

Target

4a37b35b795e5cc74bc7e38d194cb66ed93bc36e715137e5be04b9fc69d0dc7d
Size

179KB
MD5

2f9da6ab25db2d0d2db069539423d690
SHA1

3ce5468961810d7d87ca32bc6d1561842623515b
SHA256

4a37b35b795e5cc74bc7e38d194cb66ed93bc36e715137e5be04b9fc69d0dc7d
SHA512

d8fab0bd96e57f33c02cc04c009af57b5bc182bcefe2e170ad36e844afa6e25d904311adfcf37e34df268eb31acb46a8258fb84ee0e2fe5850d51c8edbb02a0e
SSDEEP

3072:qMUryIIFZW/p4Q4YWslqar+hJcVoMGKT2iiODWtXt9eitHRwikWBx6L:z3CUHAq7hdMN3DWtXfEqg

Score

N/A

Malware Config

Signatures

Files

4a37b35b795e5cc74bc7e38d194cb66ed93bc36e715137e5be04b9fc69d0dc7d
.exe windows x86

e81674e13f8e517a11a4191ee71d2c98

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatA
GetSystemDefaultLangID
GetDateFormatA
TlsGetValue
OutputDebugStringW
InterlockedCompareExchange
GetCPInfo
HeapSize
GetModuleFileNameW
GetFileAttributesW
WritePrivateProfileStringW
InterlockedIncrement
GetFileAttributesExW
OpenEventW
GetVersionExW
LeaveCriticalSection
IsDebuggerPresent
lstrcatW
WaitForSingleObject
GetUserDefaultLCID
HeapReAlloc
GetComputerNameW
GetWindowsDirectoryW
SetConsoleCtrlHandler
InitializeCriticalSection
FormatMessageW
GetSystemDirectoryW
LoadLibraryExW
DebugBreak
GetCurrentThread
MulDiv
GetModuleHandleA
GetCommandLineW
SystemTimeToTzSpecificLocalTime
CompareStringA
VirtualFree
DeleteCriticalSection
GetCurrentThreadId
GetModuleFileNameA
WaitForMultipleObjects
InterlockedExchange
TlsAlloc
InterlockedDecrement
ResetEvent
GetStringTypeA
RtlUnwind
GetStartupInfoW
GetStdHandle
lstrlenA
CompareStringW
GetOEMCP
GetPrivateProfileIntW
GlobalAlloc
SetUnhandledExceptionFilter
lstrcpynA
FreeLibrary
GetFileType
HeapDestroy
GetConsoleCP
SetStdHandle
GetPrivateProfileStringW
GetLastError
LocalAlloc
SetLastError
RaiseException
lstrcmpiW
GetFileSize
EnumSystemLocalesA
SizeofResource
LockResource
UnhandledExceptionFilter
CopyFileW
MultiByteToWideChar
GetCurrentProcess
HeapAlloc
GetDateFormatW
TlsSetValue
LCMapStringA
lstrcpyW
WritePrivateProfileSectionW
GetStringTypeW
GetSystemDefaultUILanguage
FindAtomA
GetVersion
WriteConsoleA
IsValidCodePage
GlobalSize
WriteConsoleW
LoadLibraryW
FileTimeToSystemTime
CloseHandle
WideCharToMultiByte
GetTempPathW
LocalFree
QueryPerformanceCounter
GetProcAddress
GlobalLock
GetModuleHandleW
Sleep
HeapCreate
ExpandEnvironmentStringsW
GetTempFileNameW
GetConsoleMode
lstrcpynW
FreeEnvironmentStringsW
ExpandEnvironmentStringsA
GetCurrentProcessId
LoadLibraryA
EnterCriticalSection
SetHandleCount
IsProcessorFeaturePresent
lstrlenW
FindNextChangeNotification
FlushInstructionCache
ExitProcess
IsValidLocale
HeapFree
GetEnvironmentStringsW
LoadResource
GlobalUnlock
ReadFile
CreateThread
lstrcmpW
FindResourceW
CreateFileA
FindFirstChangeNotificationW
InitializeCriticalSectionAndSpinCount
CreateFileW
VerLanguageNameW
LCMapStringW
WinExec
GetConsoleOutputCP
GetStartupInfoA
VirtualQuery

user32

SetForegroundWindow
SetDlgItemTextW
SystemParametersInfoW
SetRectEmpty
CreatePopupMenu
BeginDeferWindowPos
RemoveMenu
IsWindowEnabled
GetSystemMetrics
CreateCaret
LoadStringA
GetMonitorInfoW
UnregisterClassA
OffsetRect
RegisterClassExW
MonitorFromWindow
IntersectRect
GetDC
SetScrollPos
SetFocus
GetClassLongW
PostMessageW
DefMDIChildProcW
GetWindowTextLengthW
SetParent
IsClipboardFormatAvailable
GetWindowDC
GetFocus
DispatchMessageW
CharLowerW
GetClientRect
FindWindowW
FillRect
SetMenuItemInfoW
LoadCursorW
LoadStringW
ReleaseCapture
SetScrollInfo
DeferWindowPos
GetScrollInfo
SetMenuDefaultItem
GetCursorPos
ScreenToClient
IsMenu
DefWindowProcW
TranslateMessage
GetDesktopWindow
CopyRect
SetCursor
OpenClipboard
InflateRect
GetWindowThreadProcessId
GetMenuDefaultItem
KillTimer
GetDlgCtrlID
DrawFocusRect
GetMenuItemInfoW
GetDoubleClickTime
GetSysColorBrush
GetKeyState
SetTimer
TrackPopupMenuEx
CallNextHookEx
LoadIconW
GetClassNameW
SetWindowTextW
GetDlgItemInt
UnhookWindowsHookEx
ReleaseDC
PtInRect
SendMessageW
IsChild
InsertMenuW
ScrollWindowEx
GetClassInfoW
GetMenu
SetMenu
CreateWindowExW
PostQuitMessage
UpdateWindow
LoadMenuW
GetMenuItemID
UnregisterClassW
AppendMenuW
GetWindowRect
GetCapture
TranslateAcceleratorW
MessageBeep
GetWindowLongA
WindowFromPoint
GetSystemMenu
EndPaint
DestroyCaret
DrawFrameControl
BeginPaint
SetCaretPos
DrawMenuBar
GetMenuStringW
GetWindowTextW
GetWindowPlacement
EndDialog
DestroyMenu
DialogBoxParamW
ShowScrollBar
EnableWindow
SetWindowPos
DestroyWindow
GetWindowLongW
BringWindowToTop
EnableMenuItem
SetCapture
EqualRect
ModifyMenuW
RegisterWindowMessageW
PeekMessageW
DragDetect
wvsprintfW
CallWindowProcW
LoadAcceleratorsW
RegisterClassW
SetDlgItemInt
CloseClipboard
EmptyClipboard
ClientToScreen
GetDlgItemTextW
DefFrameProcW
MapWindowPoints
GetMessageW
LockWindowUpdate
TranslateMDISysAccel
LoadImageW
SetClipboardData
TrackPopupMenu
GetActiveWindow
GetMessagePos
GetWindow
GetSubMenu
GetParent
SetWindowsHookExW
MessageBoxW
DrawEdge
MoveWindow
RegisterClipboardFormatW
FrameRect
EndDeferWindowPos
IsWindowVisible
InvalidateRect
RedrawWindow
CharNextW

gdi32

GetDeviceCaps
GetViewportOrgEx
GetObjectW
DPtoLP
SetBkColor
SelectClipRgn
CreatePalette
LineTo
CreateCompatibleBitmap
CreateRectRgn
CreateCompatibleDC
BitBlt
IntersectClipRect
CreatePatternBrush
SetViewportOrgEx
CreatePen
CreateDIBSection
Polyline
TextOutW
SelectObject
SetTextColor
PatBlt
GetTextExtentPoint32W
SetBkMode
GetClipRgn
MoveToEx
Rectangle
CreateFontW
GetClipBox
LPtoDP
RestoreDC
CreateSolidBrush
CreateBitmap
ExtTextOutW
GetStockObject
SelectPalette
SetBrushOrgEx
CreateFontIndirectW
SaveDC
GetTextExtentPointW
RealizePalette
GetTextMetricsW
DeleteDC
DeleteObject
SetPolyFillMode
Polygon
SetWindowOrgEx

comdlg32

GetFileTitleW

oleaut32

VarDecCmp
SysFreeString
SystemTimeToVariantTime
VarUI4FromStr
VarR8FromStr
VarI4FromStr
VarDecFromStr

wsock32

ntohs
htons
WSAAsyncSelect
bind
socket
listen
connect
accept
ioctlsocket
shutdown
WSAGetLastError
getsockname
recv
inet_addr
WSASetLastError
getpeername
gethostbyname
send
closesocket

msvcrt

fclose
_i64toa
strchr
atol
wcslen
atoi
_setmbcp
__p__commode
_initterm
rand
_purecall
time
__getmainargs
_acmdln
exit
_strnicmp
__CxxFrameHandler
strncmp
_controlfp
_adjust_fdiv
fopen
fwrite
localtime
_ftol
__setusermatherr
sprintf
_exit
__dllonexit
_XcptFilter
__set_app_type
memmove
_stricmp
__p__fmode
_except_handler3
_onexit

msacm32

acmDriverID

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e81674e13f8e517a11a4191ee71d2c98

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

oleaut32

wsock32

msvcrt

msacm32

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 154KB - Virtual size: 154KB

.data Size: 13KB - Virtual size: 62KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 154KB - Virtual size: 154KB

.data
Size: 13KB - Virtual size: 62KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB