5e5be9c6164bd432b0fede1087b16a9022d6a86970e83f952742de79b3163b6a

Sharing

Copy URL

Twitter E-mail

General

Target

5e5be9c6164bd432b0fede1087b16a9022d6a86970e83f952742de79b3163b6a
Size

128KB
MD5

42dafd342a12d9386dde3bd48e78b062
SHA1

9f2f5c70969488d01a6d1102eed82bf239edee89
SHA256

5e5be9c6164bd432b0fede1087b16a9022d6a86970e83f952742de79b3163b6a
SHA512

4d4275deb597eddb98a07ec3a3907ac1e612c21917ed2469a31d7230766c5a2601622e88283b253b4bd2f78caff5ac0503359591afef1c7e2ee7ba962be8c767
SSDEEP

3072:oFS9rrSgZ7ria1EDauLIw2MqFzmrpSt+2zAaN:19rrSofWDzLizmrE+KAaN

Score

N/A

Malware Config

Signatures

Files

5e5be9c6164bd432b0fede1087b16a9022d6a86970e83f952742de79b3163b6a
.exe windows x86

71d4840f0b75a14350e5ac4369e2f33f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

AdjustTokenPrivileges
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
LookupPrivilegeValueA
OpenProcessToken

comctl32

InitCommonControls

comdlg32

ChooseColorA
ChooseFontA
GetOpenFileNameA
GetSaveFileNameA

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateFontA
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
Ellipse
GetDeviceCaps
GetObjectA
LineTo
MoveToEx
SelectObject
SetBkMode
SetPixel
SetTextColor
StretchBlt
TextOutA

kernel32

Beep
CloseHandle
CopyFileA
CreateDirectoryA
CreateFileA
CreateIoCompletionPort
CreateProcessA
CreateRemoteThread
CreateSemaphoreA
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeProcess
GetExitCodeThread
GetFileSize
GetFileSizeEx
GetLargestConsoleWindowSize
GetLastError
GetModuleHandleA
GetNativeSystemInfo
GetPrivateProfileIntA
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetProcAddress
GetProcessId
GetQueuedCompletionStatus
GetStartupInfoA
GetStdHandle
GetSystemTimeAsFileTime
GetTickCount
GlobalAlloc
GlobalLock
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MoveFileExA
MulDiv
MultiByteToWideChar
OpenProcess
OpenThread
PeekConsoleInputA
PostQueuedCompletionStatus
Process32First
Process32Next
QueryPerformanceCounter
QueryPerformanceFrequency
ReadConsoleInputA
ReadFile
ReadProcessMemory
ReleaseSemaphore
RemoveDirectoryA
ScrollConsoleScreenBufferA
SetConsoleCtrlHandler
SetConsoleCursorPosition
SetConsoleMode
SetConsoleWindowInfo
SetEndOfFile
SetFilePointer
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TerminateThread
TlsGetValue
UnhandledExceptionFilter
VirtualAllocEx
VirtualFreeEx
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleInputA
WriteConsoleOutputA
WriteFile
WritePrivateProfileStringA
WriteProcessMemory
lstrcpyA

msvcrt

__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_controlfp
_fmode
_fpreset
_initterm
_iob
_itoa
_lock
_onexit
_ultoa
_unlock
abort
calloc
exit
fprintf
fputs
free
fwrite
islower
isupper
malloc
memset
memcpy
rand
realloc
setlocale
signal
sprintf
srand
strcmp
strlen
strncmp
tolower
toupper
vfprintf
wcslen

psapi

GetModuleBaseNameA
GetModuleFileNameExA
GetProcessMemoryInfo

shell32

DragFinish
DragQueryFileA
DragQueryPoint
SHBrowseForFolderA
SHGetPathFromIDListA

shlwapi

PathCombineA
PathCompactPathA
PathFileExistsA
PathIsDirectoryA
PathIsRelativeA
PathRelativePathToA
PathRemoveFileSpecA
PathStripPathA

user32

AppendMenuA
BeginPaint
ClientToScreen
CloseClipboard
CreateDialogParamA
CreatePopupMenu
DeleteMenu
DestroyMenu
DestroyWindow
DispatchMessageA
DrawTextA
EmptyClipboard
EndPaint
EnumChildWindows
EnumWindows
FillRect
FrameRect
GetClassLongA
GetClassNameA
GetClipboardData
GetCursorPos
GetDC
GetDesktopWindow
GetDlgItem
GetParent
GetWindowLongA
GetWindowRect
GetWindowThreadProcessId
InvalidateRect
IsClipboardFormatAvailable
LoadBitmapA
LoadCursorA
LoadImageA
MapVirtualKeyA
OpenClipboard
PeekMessageA
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageA
SetCapture
SetClipboardData
SetCursor
SetWindowLongA
SetWindowPos
SetWindowsHookExA
TrackPopupMenu
TranslateMessage
UnhookWindowsHookEx
UpdateWindow
VkKeyScanA
WaitForInputIdle
WindowFromPoint

wininet

HttpOpenRequestA
HttpSendRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetReadFile

ws2_32

WSACleanup
WSAGetLastError
WSAGetOverlappedResult
WSAIoctl
WSARecv
WSARecvFrom
WSASend
WSASendTo
WSASocketW
WSAStartup
bind
closesocket
connect
gethostbyname
gethostname
htons
inet_addr
inet_ntoa
listen
ntohs
socket

Exports

Exports

A2U
A2W
AdjustPrivilege
Base64_Decode
Base64_Decode_File
Base64_Encode
Base64_Encode_File
CRC32
CRC32_File
Client_Create
Client_Destroy
Client_Send
Client_SetMaxCount
Client_SetThreadCount
Clip_GetText
Clip_SetText
Dlg_OpenFile
Dlg_OpenFiles
Dlg_SaveFile
Dlg_SelColor
Dlg_SelFolder
Dlg_SelFont
DoEvents
File_Append
File_AppendEx
File_Copy
File_Create
File_Exists
File_Len
File_LenEx
File_List
File_ListName
File_Move
File_Read
File_ReadEx
File_Rename
File_Write
File_WriteEx
Folder_Copy
Folder_Create
Folder_Delete
Folder_Exists
Folder_Len
Folder_LenEx
Folder_Move
GetPathAbs
GetPathDir
GetPathFile
GetPathPixel
GetPathPixelDC
GetPathRel
GetRandPath
HiByte
HiInt
HiWord
Hook_DelKey_LowLevel
Hook_DelMouse_LowLevel
Hook_InsKey_LowLevel
Hook_InsMouse_LowLevel
Http_Get
Http_GetFile
Http_Post
Http_PostFile
Http_SetAccept
Http_SetAgent
Http_SetBlock
Http_SetHead
Http_SetVer
Ini_DelKey
Ini_DelSec
Ini_EnumKey
Ini_EnumSec
Ini_Read
Ini_ReadInt
Ini_Write
LoByte
LoInt
LoWord
MD5
MD5_File
MakeInt
MakeLng
MakeSrt
Menu_Append
Menu_Create
Menu_Delete
Menu_Destroy
Menu_Popup
Network_LocalIP
PID_CmdLine
PID_CurPath
PID_FindChild
PID_GetPath
PID_ImageName
PID_InjectDll
PID_Is64
PID_Kill
PID_ListChild
PID_PageMenory
PID_Parent
PID_Pause
PID_Resume
PID_Status
PID_WorkMenory
Paint_Circ
Paint_Clear
Paint_Create
Paint_Destroy
Paint_DrawText
Paint_Flip
Paint_GetDrop
Paint_HBITMAP
Paint_HDC
Paint_Image
Paint_Line
Paint_PSet
Paint_PrintScreen
Paint_Rect
Paint_SetFont
Paint_Size
Paint_TextOut
Ping
Ping_Port
Process_CmdLine
Process_CurPath
Process_FindChild
Process_GetPath
Process_H2ID
Process_ImageName
Process_InjectDll
Process_Is64
Process_Kill
Process_List
Process_ListChild
Process_Parent
Process_Pause
Process_Resume
Process_Status
Proecss_PageMenory
Proecss_WorkMenory
Rect_Bottom
Rect_GetCenterX
Rect_GetCenterY
Rect_GetRandomX
Rect_GetRandomY
Rect_Height
Rect_Left
Rect_Right
Rect_Top
Rect_Width
SHA1
SHA1_File
SHA256
SHA256_File
Server_CloseClient
Server_Create
Server_Destroy
Server_GetConnCount
Server_GetEnterCount
Server_GetLeaveCount
Server_ListClient
Server_Send
Server_SendAll
Spy_Create
Spy_Destroy
Sys_Bits
TID_Kill
TID_Status
Thread_Kill
Thread_Status
TreeView_AddNode
TreeView_Clear
TreeView_ClickNode
TreeView_Count
TreeView_Create
TreeView_DblClickNode
TreeView_DelNode
TreeView_GetChileNode
TreeView_GetNextList
TreeView_GetNextNode
TreeView_GetNodeRect
TreeView_GetSelNode
TreeView_GetText
TreeView_RootNode
TreeView_SelNode
U2A
U2W
UDP_Create
UDP_Destroy
UDP_Send
W2A
W2U
Window_ConvC2S
Window_ConvS2C
Window_E2H
Window_Find
Window_FindChild
Window_FormMouse
Window_FormPoint
Window_GetCaption
Window_GetClassName
Window_GetPID
Window_GetPath
Window_GetRect
Window_GetRoot
Window_GetTID
Window_H2E
Window_List
Window_ListChild
Window_Scan
Window_ScanChild

Sections

.text
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 49KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

71d4840f0b75a14350e5ac4369e2f33f

Headers

File Characteristics

Imports

advapi32

comctl32

comdlg32

gdi32

kernel32

msvcrt

psapi

shell32

shlwapi

user32

wininet

ws2_32

Exports

Exports

Sections

.text Size: 90KB - Virtual size: 89KB

.data Size: 7KB - Virtual size: 6KB

.rdata Size: 6KB - Virtual size: 6KB

.bss Size: - Virtual size: 49KB

.edata Size: 5KB - Virtual size: 4KB

.idata Size: 8KB - Virtual size: 8KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 90KB - Virtual size: 89KB

.data
Size: 7KB - Virtual size: 6KB

.rdata
Size: 6KB - Virtual size: 6KB

.bss
Size: - Virtual size: 49KB

.edata
Size: 5KB - Virtual size: 4KB

.idata
Size: 8KB - Virtual size: 8KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 3KB