2519bcc267650f584f62c1710b85e6c2c773044d2b8a0c2532b1068decdbba59

Sharing

Copy URL Twitter E-mail

General

Target

2519bcc267650f584f62c1710b85e6c2c773044d2b8a0c2532b1068decdbba59
Size

42KB
MD5

39c6ac1b33316e1be37774744446231b
SHA1

cbba5b9ae182491bbc4fb6a882f4798fedbfe6bf
SHA256

2519bcc267650f584f62c1710b85e6c2c773044d2b8a0c2532b1068decdbba59
SHA512

145f743c9afa4ab3f498bc225ea9df5de9c9ca2240c5686879aad9fec002f14874f4a6a5201ae6b83665dc9f51491305b8b1b1a29ddd6d3cecea858ef5427041
SSDEEP

768:W34NY+HA8iRb2j/8i3SJPCotxSVStWHhduTJaG7NaPqAeGvcUa8JSje:W3MYkqFmYC4tWBctL7JPy

Score

N/A

Malware Config

Signatures

Files

2519bcc267650f584f62c1710b85e6c2c773044d2b8a0c2532b1068decdbba59
.exe windows x86

d31adcc7c291236a5f034d1b58ef3319

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
memmove
memcpy
_exit
_XcptFilter
exit
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
memset

comctl32

ord17
CreateStatusWindowW
CreateToolbarEx

kernel32

VirtualAlloc
EnumLanguageGroupLocalesW
GetModuleHandleW
ReadFile
GetFileSize
GetStartupInfoW
GlobalUnlock
lstrcpyW
GlobalLock
GlobalAlloc
lstrlenW
HeapFree
HeapAlloc
GetProcessHeap
lstrcmpW
LocalFree
FormatMessageW
GetLastError
CloseHandle
WriteFile
WideCharToMultiByte
CreateFileW
GetCurrentDirectoryW
MultiByteToWideChar
CreateProcessW
lstrcatW
GetWindowsDirectoryW

wininet

CreateUrlCacheGroup
InternetAttemptConnect
InternetConfirmZoneCrossing
InternetSetDialState
FtpSetCurrentDirectoryA
InternetCrackUrlA
FtpSetCurrentDirectoryW
GetUrlCacheEntryInfoExA
FtpGetCurrentDirectoryW
GetUrlCacheEntryInfoA
FindNextUrlCacheEntryExA

odbc32

ord207
ord167
ord70
ord265
ord52
ord260

rpcrt4

MesEncodeFixedBufferHandleCreate
NdrRpcSsDisableAllocate
RpcAsyncInitializeHandle
RpcServerUseProtseqIfExA
UuidCreateNil
RpcBindingInqAuthInfoExA
UuidFromStringA
NdrNsSendReceive

msi

ord85
ord151
ord29
ord167
ord135
ord78
ord145
ord49
ord33

rtutils

RouterLogEventDataA
RouterLogEventStringW
TracePrintfA
RouterLogEventStringA
LogErrorW

user32

LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
PostQuitMessage
GetCursorPos
CheckDlgButton
IsDlgButtonChecked
EndDialog
GetWindowTextW
GetWindowTextLengthW
GetDlgItem
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
SendMessageW
wsprintfW
GetClientRect
IsWindowVisible
MoveWindow
EnableMenuItem
GetMenu
LoadStringW
UpdateWindow
ShowWindow
CreateWindowExW
ReleaseDC
InvertRect
GetDC
SetWindowTextW
DialogBoxParamW
DefWindowProcW
RegisterClassW
LoadCursorW
MessageBoxW
CheckMenuItem
DestroyWindow
SetFocus
SetCapture
ReleaseCapture
GetCapture
SetCursor
ScreenToClient

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegQueryValueW
RegEnumKeyW
RegGetValueW
RegCreateKeyW
RegCloseKey
RegSetValueExW
RegOpenKeyW
RegEnumValueW

shell32

ShellAboutW

ole32

OleUninitialize
OleInitialize
CLSIDFromString

oleaut32

VariantInit
SysStringLen
LoadTypeLi
SysFreeString
VariantChangeType

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d31adcc7c291236a5f034d1b58ef3319

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

comctl32

kernel32

wininet

odbc32

rpcrt4

msi

rtutils

user32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 31KB - Virtual size: 31KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 2KB

.text
Size: 31KB - Virtual size: 31KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 2KB