CA6E178CF7F43C2337C2DED38798BCCEE6CE28353FE83[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

CA6E178CF7F43C2337C2DED38798BCCEE6CE28353FE83.exe
Size

499KB
MD5

96e178f1be9b70e56d3944cc0f73d726
SHA1

c1fca5294c94200c8abcbe30ad0fd0991becf2db
SHA256

ca6e178cf7f43c2337c2ded38798bccee6ce28353fe83044266848c921b2df5c
SHA512

4ed8b2ee3b41b2acb4289ca561a5cf1f14b7a8c11a7c3ceb06d4b91cf1e6b01a4546df8e2e0db2437d987b26340697bb6ec9c922855085422ee47c59964fa4cf
SSDEEP

6144:sz4q0llllllllllJTP+GShljFZ/gZquHiJKXjs1+BzTMnZX1WxgTEcLHAF:sXQTPNSh/Z/00rQZTMZXExgbLHAF

Score

1^/10

Malware Config

Signatures

Files

CA6E178CF7F43C2337C2DED38798BCCEE6CE28353FE83.exe
.exe windows x86

fb599da96ec68b816a7f084ae9468b50

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
SetStdHandle
LCMapStringW
CompareStringW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
GetStringTypeW
HeapAlloc
GetProcessHeap
CloseHandle
GetACP
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameA
WriteFile
GetStdHandle
RaiseException
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
HeapReAlloc
LeaveCriticalSection
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
DecodePointer
EnterCriticalSection
LoadLibraryW
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
GetLastError
SetLastError
CreateFileW

comdlg32

PageSetupDlgW
GetFileTitleA
GetOpenFileNameA
GetFileTitleW
ChooseFontA
PrintDlgW
GetSaveFileNameW
PageSetupDlgA
CommDlgExtendedError

ole32

OleSave
CoDisconnectObject
OleIsCurrentClipboard
StgCreateDocfile
ReadStringStream
CreateStreamOnHGlobal
HGLOBAL_UserFree
OleDraw
OleGetIconOfClass
HMETAFILEPICT_UserMarshal
CreateGenericComposite
CoMarshalHresult
HMENU_UserFree
OleConvertIStorageToOLESTREAMEx
CoCreateGuid
CoCopyProxy
CoReleaseServerProcess
CoTaskMemFree
HACCEL_UserMarshal
OleLoadFromStream
CoSetProxyBlanket
HPALETTE_UserMarshal

ws2_32

getpeername
WSAInstallServiceClassA
ioctlsocket
WSAHtonl
WSAAsyncGetHostByAddr
WSAAddressToStringA
WSACreateEvent
WSALookupServiceNextA
WSAInstallServiceClassW
WSAJoinLeaf
listen
WSASocketA
accept
WSASetBlockingHook
WSASend
WSASendTo
WSAAsyncGetProtoByNumber
inet_addr

msacm32

acmDriverClose
acmFilterChooseA
acmFilterTagEnumA
acmFormatChooseW
acmFilterDetailsW
acmFormatEnumA
acmFormatEnumW
acmFormatTagEnumW
acmDriverAddA
acmStreamPrepareHeader
acmFilterTagDetailsW
acmFormatTagEnumA
acmDriverOpen
acmDriverDetailsW
acmFormatTagDetailsW

msvfw32

ICDrawBegin
DrawDibOpen
GetOpenFileNamePreview
MCIWndCreateA
MCIWndCreate

avifil32

EditStreamPaste
EditStreamSetInfo
AVIStreamFindSample
AVIFileInfoW
AVIStreamOpenFromFileA
AVIStreamLength
AVIGetFromClipboard
AVISave
AVIStreamWrite

avicap32

videoThunk32

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 388KB - Virtual size: 387KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb599da96ec68b816a7f084ae9468b50

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comdlg32

ole32

ws2_32

msacm32

msvfw32

avifil32

avicap32

Sections

.text Size: 50KB - Virtual size: 49KB

.rdata Size: 24KB - Virtual size: 24KB

.data Size: 29KB - Virtual size: 32KB

.rsrc Size: 388KB - Virtual size: 387KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 50KB - Virtual size: 49KB

.rdata
Size: 24KB - Virtual size: 24KB

.data
Size: 29KB - Virtual size: 32KB

.rsrc
Size: 388KB - Virtual size: 387KB

.reloc
Size: 6KB - Virtual size: 5KB