agilitytwo[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

agilitytwo.zip
Size

2.6MB
MD5

38f4a1a908980aa31637f122cec55ac5
SHA1

ce60403f37778517f9558a6bb1cc10609ed1ca23
SHA256

4bfd0ff06fae48baf838a88d6f15fac710fa4ea13a7e1c9e17aad470069e529c
SHA512

b865ed84969d741dcbd07fba8a2a625dc8efd7e1b8bdfa4e00a6ab64c55d9e6883e0ec928b89fa0912148796e9651fd0adc41f05908a4e6c991879311d654d8a
SSDEEP

49152:rRbZmWSEP1PsIPvi9q01J1yjd45pnsNFGknkiwrp2wRTxY1em6Q5rqlyz0tEiO:Ndxp9PviXfnsNFNwlRTxY1Dulyw6

Score

N/A

Malware Config

Signatures

Files

agilitytwo.zip
.zip
agilitytwo.exe
.exe windows x64

f2002eb90c4b130f51f3d0311226a7ec

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

wsock32

WSAStartup
inet_addr
WSACleanup
gethostbyname
gethostname

winmm

waveOutGetVolume
waveOutSetVolume
joyGetDevCapsW
joyGetPosEx
mixerSetControlDetails
mixerOpen
mixerGetDevCapsW
mixerGetLineInfoW
mixerClose
mixerGetLineControlsW
mixerGetControlDetailsW
mciSendStringW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

comctl32

ImageList_ReplaceIcon
CreateStatusWindowW
ImageList_Destroy
ImageList_AddMasked
ImageList_Create
ImageList_GetIconSize

shlwapi

HashData

crypt32

CryptBinaryToStringA

psapi

GetModuleBaseNameW
GetProcessImageFileNameW
GetModuleFileNameExW

wininet

InternetOpenW
InternetOpenUrlW
InternetReadFile
InternetReadFileExA
InternetCloseHandle

kernel32

GetExitCodeThread
CloseHandle
CreateMutexW
GetLastError
GetModuleHandleW
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
SystemTimeToFileTime
SetFilePointerEx
ReadFile
SetFilePointer
GlobalSize
lstrcpyA
lstrlenA
lstrcmpiA
lstrcmpA
LocalFileTimeToFileTime
CreateDirectoryA
CreateDirectoryW
IsBadReadPtr
CreateFileW
CreateFileA
WriteFile
SetFileTime
DuplicateHandle
LoadResource
LockResource
SizeofResource
GetCurrentDirectoryA
GetLocalTime
FileTimeToDosDateTime
GetFileInformationByHandle
GetFileSize
lstrlenW
FindFirstFileW
FindNextFileW
FindClose
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
SetLastError
FlushInstructionCache
RtlAddFunctionTable
CreateThread
HeapAlloc
HeapReAlloc
VirtualAlloc
VirtualFree
LoadLibraryA
GetProcessHeap
HeapCreate
HeapFree
HeapDestroy
GetCommandLineW
WaitForSingleObject
GetThreadLocale
VirtualQuery
GetSystemInfo
GetVersionExW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetCPInfo
GetModuleFileNameW
GetFullPathNameW
GetShortPathNameW
FileTimeToLocalFileTime
SetEnvironmentVariableW
Beep
MoveFileW
OutputDebugStringW
CreateProcessW
GetFileAttributesW
GetExitCodeProcess
WriteProcessMemory
ReadProcessMemory
GetCurrentProcessId
OpenProcess
TerminateProcess
SetPriorityClass
GetEnvironmentVariableW
GetDateFormatW
GetTimeFormatW
GetDiskFreeSpaceExW
SetVolumeLabelW
DeviceIoControl
GetDriveTypeW
GetVolumeInformationW
GetDiskFreeSpaceW
GetCurrentDirectoryW
DeleteFileW
SetFileAttributesW
GetFileSizeEx
GetSystemTime
GetSystemDefaultUILanguage
GetComputerNameW
GetSystemWindowsDirectoryW
GetTempPathW
TryEnterCriticalSection
QueryDosDeviceW
CompareStringW
RemoveDirectoryW
CopyFileW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
FormatMessageW
GetPrivateProfileStringW
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesW
WritePrivateProfileStringW
WritePrivateProfileSectionW
HeapWalk
HeapSize
SetEndOfFile
GetACP
GetFileType
GetStdHandle
FileTimeToSystemTime
IsWow64Process
VirtualAllocEx
VirtualFreeEx
EnumResourceNamesW
LoadLibraryExW
RemoveVectoredExceptionHandler
ExitProcess
ExitThread
GetStringTypeExW
lstrcmpiW
OpenThread
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
ResumeThread
SetThreadPriority
SuspendThread
GlobalUnlock
GlobalLock
AddVectoredExceptionHandler
GetProcAddress
LoadLibraryW
SetErrorMode
InitializeCriticalSection
FindResourceW
VirtualProtect
GetSystemTimeAsFileTime
GetProcessTimes
GetCurrentProcess
CheckRemoteDebuggerPresent
GetCurrentThread
GlobalFree
_lclose
_lopen
_lread
InitializeSListHead
GetModuleFileNameA
GlobalAlloc
GetModuleHandleA
SetCurrentDirectoryW
Sleep
GetTickCount
MulDiv
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
IsProcessorFeaturePresent
QueryPerformanceCounter
GetTempPathA
RtlCaptureContext
GetStartupInfoW
SetUnhandledExceptionFilter

user32

DrawTextW
AdjustWindowRectEx
SystemParametersInfoW
GetClientRect
GetWindowRect
MoveWindow
EnumChildWindows
SetActiveWindow
SetFocus
SetWindowRgn
SetWindowPos
SetLayeredWindowAttributes
InvalidateRect
EnableWindow
GetWindowTextLengthW
EnumWindows
IsZoomed
IsIconic
EnumDisplayMonitors
GetMonitorInfoW
IsCharUpperW
GetSysColor
GetSysColorBrush
DrawIconEx
FillRect
DefWindowProcW
SetForegroundWindow
DialogBoxParamW
SendDlgItemMessageW
GetDlgItem
SetDlgItemTextW
MessageBeep
ClientToScreen
GetCursorInfo
GetLastInputInfo
GetSystemMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuStringW
ExitWindowsEx
SetScrollInfo
ScrollWindow
SetMenu
FlashWindow
GetPropW
SetPropW
RemovePropW
MapWindowPoints
RedrawWindow
SetParent
SetWindowLongPtrW
GetClassInfoExW
DefDlgProcW
GetAncestor
UpdateWindow
GetMessagePos
GetClassLongPtrW
CallWindowProcW
CheckRadioButton
IntersectRect
GetUpdateRect
PtInRect
CreateDialogIndirectParamW
CreateAcceleratorTableW
InsertMenuItemW
SetMenuDefaultItem
GetIconInfo
SetMenuItemInfoW
IsMenu
GetMenuItemInfoW
CreateMenu
CreatePopupMenu
SetMenuInfo
AppendMenuW
IsWindowVisible
TrackPopupMenuEx
GetDesktopWindow
CopyImage
CreateIconIndirect
CreateIconFromResourceEx
MessageBoxW
EnumClipboardFormats
GetWindow
BringWindowToTop
GetTopWindow
GetQueueStatus
IsCharLowerW
ToUnicodeEx
GetKeyboardLayout
CallNextHookEx
CharLowerW
ReleaseDC
GetDC
OpenClipboard
GetClipboardData
GetClipboardFormatNameW
CloseClipboard
SetClipboardData
EmptyClipboard
PostMessageW
FindWindowW
EndDialog
DispatchMessageW
TranslateMessage
ShowWindow
CountClipboardFormats
SetWindowLongW
ScreenToClient
IsDialogMessageW
WindowFromPoint
SendMessageW
IsWindowEnabled
GetWindowLongW
GetKeyState
TranslateAcceleratorW
KillTimer
PeekMessageW
GetFocus
GetClassNameW
GetWindowThreadProcessId
GetForegroundWindow
GetMessageW
SetTimer
GetScrollInfo
GetParent
GetDlgCtrlID
CharUpperW
IsClipboardFormatAvailable
MapVirtualKeyW
VkKeyScanExW
MapVirtualKeyExW
BlockInput
CheckMenuItem
LoadImageW
ChangeClipboardChain
SetRect
RemoveMenu
SetWindowTextW
GetKeyboardLayoutNameW
ActivateKeyboardLayout
GetGUIThreadInfo
GetWindowTextW
mouse_event
GetSystemMetrics
keybd_event
SetKeyboardState
GetKeyboardState
GetCursorPos
GetAsyncKeyState
AttachThreadInput
SendInput
UnregisterHotKey
RegisterHotKey
PostQuitMessage
SendMessageTimeoutW
UnhookWindowsHookEx
SetWindowsHookExW
PostThreadMessageW
SetClipboardViewer
LoadAcceleratorsW
EnableMenuItem
GetMenu
CreateWindowExW
RegisterClassExW
LoadCursorW
DestroyAcceleratorTable
UnregisterClassW
DestroyIcon
DestroyWindow
IsCharAlphaW
DestroyMenu
GetWindowLongPtrW
IsCharAlphaNumericW
IsWindow
RegisterWindowMessageW

gdi32

GetTextMetricsW
GetObjectW
DeleteDC
CreateEllipticRgn
CreateRoundRectRgn
CreateRectRgn
CreatePolygonRgn
GetStockObject
GetDIBits
GetSystemPaletteEntries
CreateCompatibleBitmap
BitBlt
GetPixel
GetTextFaceW
SetTextColor
ExcludeClipRect
GetClipRgn
FillRgn
GetClipBox
GetCharABCWidthsW
SetBkMode
CreatePatternBrush
SetBrushOrgEx
EnumFontFamiliesExW
CreateDIBSection
GdiFlush
CreateDCW
SetBkColor
SelectObject
CreateCompatibleDC
CreateSolidBrush
CreateFontW
GetDeviceCaps
DeleteObject

comdlg32

CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW

advapi32

RegCloseKey
CryptReleaseContext
CryptDestroyKey
CryptDestroyHash
CryptDeriveKey
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegDeleteValueW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CloseServiceHandle
UnlockServiceDatabase
LockServiceDatabase
OpenSCManagerW
RegConnectRegistryW
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
GetUserNameW

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
SHGetMalloc
SHFileOperationW
ShellExecuteExW
Shell_NotifyIconW
DragFinish
DragQueryFileW
SHEmptyRecycleBinW
DragQueryPoint
SHGetFolderPathW
ExtractIconW

ole32

CoInitialize
CLSIDFromString
CLSIDFromProgID
CoGetObject
StringFromGUID2
CoUninitialize
CoCreateInstance
CreateStreamOnHGlobal

oleaut32

SafeArrayUnaccessData
SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnlock
SafeArrayPtrOfIndex
SafeArrayLock
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
VariantCopyInd
SafeArrayCopy
VariantChangeType
VariantClear
SafeArrayCreate
SysStringLen
GetActiveObject
SafeArrayDestroy
SysFreeString
SysAllocString
OleLoadPicture

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcmp
memmove
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memset
__current_exception_context
__current_exception
_purecall
wcsrchr
wcsstr
wcschr
__C_specific_handler
__std_terminate
memcpy
__RTDynamicCast

api-ms-win-crt-convert-l1-1-0

_ui64tow
_wcstoi64
wcstoul
_ultow
_wcstoui64
_wtoi64
_wtoi
wcstol
_i64tow
_wtof
wcstombs
wcstod
_itow

api-ms-win-crt-string-l1-1-0

_wcsnicmp
wcsncmp
iswdigit
tolower
_wcsupr
wcscspn
iswspace
towupper
_wcsicmp
iswxdigit
_isctype
_wcsdup
isxdigit
toupper
isdigit
wcsncpy

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode
_expand
_callnewh
malloc
_msize
realloc

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback
_c_exit
_exit
_initterm_e
_initterm
_beginthreadex
_get_wide_winmain_command_line
_initialize_wide_environment
exit
__p___wargv
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
__p___argc
_seh_filter_exe
_set_app_type
terminate
_configure_wide_argv

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__acrt_iob_func
fwrite
fclose
_set_fmode
fread
ftell
fseek
_wfopen
__p__commode
setvbuf

api-ms-win-crt-utility-l1-1-0

rand
bsearch
qsort

api-ms-win-crt-filesystem-l1-1-0

_wsplitpath

api-ms-win-crt-math-l1-1-0

cos
exp
floor
acos
ceil
fmod
tan
log
asin
log10
pow
sin
sqrt
atan
__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Exports

Exports

AHKASSIGN
AHKEXECUTELINE
AHKFINDFUNC
AHKFINDLABEL
AHKFUNCTION
AHKGETVAR
AHKISUNICODE
AHKLABEL
AHKPAUSE
AHKPOSTFUNCTION
AhkAssign
AhkExecuteLine
AhkExecuteline
AhkFindFunc
AhkFindLabel
AhkFindfunc
AhkFindlabel
AhkFunction
AhkGetVar
AhkGetvar
AhkIsUnicode
AhkIsunicode
AhkLabel
AhkPause
AhkPostFunction
AhkPostfunction
Ahkassign
AhkexecuteLine
Ahkexecuteline
AhkfindFunc
AhkfindLabel
Ahkfindfunc
Ahkfindlabel
Ahkfunction
AhkgetVar
Ahkgetvar
AhkisUnicode
Ahkisunicode
Ahklabel
Ahkpause
AhkpostFunction
Ahkpostfunction
MinHookDisable
MinHookEnable
ahkAssign
ahkExecuteLine
ahkExecuteline
ahkFindFunc
ahkFindLabel
ahkFindfunc
ahkFindlabel
ahkFunction
ahkGetVar
ahkGetvar
ahkIsUnicode
ahkIsunicode
ahkLabel
ahkPause
ahkPostFunction
ahkPostfunction
ahkassign
ahkexecuteLine
ahkexecuteline
ahkfindFunc
ahkfindLabel
ahkfindfunc
ahkfindlabel
ahkfunction
ahkgetVar
ahkgetvar
ahkisUnicode
ahkisunicode
ahklabel
ahkpause
ahkpostFunction
ahkpostfunction

Sections

.text
Size: 884KB - Virtual size: 884KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f2002eb90c4b130f51f3d0311226a7ec

Headers

DLL Characteristics

File Characteristics

Imports

wsock32

winmm

version

comctl32

shlwapi

crypt32

psapi

wininet

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

vcruntime140_1

vcruntime140

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Exports

Exports

Sections

.text Size: 884KB - Virtual size: 884KB

.rdata Size: 203KB - Virtual size: 203KB

.data Size: 13KB - Virtual size: 37KB

.pdata Size: 24KB - Virtual size: 24KB

.rsrc Size: 2.2MB - Virtual size: 2.2MB

.text
Size: 884KB - Virtual size: 884KB

.rdata
Size: 203KB - Virtual size: 203KB

.data
Size: 13KB - Virtual size: 37KB

.pdata
Size: 24KB - Virtual size: 24KB

.rsrc
Size: 2.2MB - Virtual size: 2.2MB