c45ed48d8089c8577c3f3e29bf93cb1664eb7c954ee1c2e51d276d807a7017b8

Sharing

Copy URL Twitter E-mail

General

Target

c45ed48d8089c8577c3f3e29bf93cb1664eb7c954ee1c2e51d276d807a7017b8
Size

1.2MB
MD5

a13da7eca97c5c629f3701a21e7e1a8a
SHA1

228c30ea12e85697e8857918db9da02964b5a2f3
SHA256

c45ed48d8089c8577c3f3e29bf93cb1664eb7c954ee1c2e51d276d807a7017b8
SHA512

739a61d22d7f76276fe7ddfe30a2fd75d9d128e8c17ed9307a9cda15fcac22118a8f295965eea20ed3af9690f3b80de7c0c80e162bda2a86fb7ca8a8ef0d2c24
SSDEEP

12288:u2tnh+0PVZVDQg2GogWKf+b7Yjpz6o9QTcIa9g28XYUf:u2tnhTVZGGvFf+b8TCTcIa9g28XYU

Score

1^/10

Malware Config

Signatures

Files

c45ed48d8089c8577c3f3e29bf93cb1664eb7c954ee1c2e51d276d807a7017b8
.exe windows x86

9790ef66693ed0586eb36011502909ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
TerminateThread
DeleteFileA
GlobalAlloc
DeleteFileW
Process32FirstW
GlobalFree
CreateThread
HeapAlloc
GlobalLock
VerSetConditionMask
GetProcessHeap
CreateProcessW
GetModuleHandleW
VerifyVersionInfoW
CreateEventA
GetTickCount
GlobalUnlock
GetExitCodeProcess
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
SetConsoleScreenBufferSize
GetStdHandle
SetEndOfFile
WriteConsoleW
HeapReAlloc
HeapSize
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetTimeZoneInformation
ReadConsoleW
SetFilePointerEx
SetStdHandle
Process32NextW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetModuleHandleExW
ExitProcess
EncodePointer
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
RtlUnwind
LoadLibraryExW
GetModuleFileNameW
GetProcAddress
FreeLibrary
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
RaiseException
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentDirectoryA
FindClose
Sleep
GetPrivateProfileStringW
OpenProcess
CreateToolhelp32Snapshot
TerminateProcess
GetPrivateProfileIntW
FindNextFileW
HeapFree
FindFirstFileW
SetCommState
SetCommTimeouts
CloseHandle
ReadFile
GetCommState
GetLastError
FormatMessageW
GetCommTimeouts
CreateFileW
PurgeComm
WriteFile
DecodePointer

user32

FillRect
GetMenuItemCount
SetWindowPos
GetDC
DestroyWindow
GetFocus
GetMenu
GetWindowRect
GetWindow
MonitorFromPoint
PostMessageW
LoadMenuW
GetKeyState
DefWindowProcW
GetWindowThreadProcessId
wsprintfW
MessageBoxW
GetWindowTextW
EnableWindow
SendInput
ToAscii
EndPaint
BeginPaint
SendMessageW
GetCursorPos
ReleaseDC
IsIconic
InvalidateRect
LoadImageW
UpdateWindow
PtInRect
DialogBoxParamW
SetDlgItemInt
GetMenuStringA
SetScrollPos
GetDesktopWindow
PostQuitMessage
CheckDlgButton
KillTimer
DrawTextW
AppendMenuW
GetDlgItem
GetClientRect
AppendMenuA
SetScrollRange
GetDlgItemInt
SetCursor
SetClipboardData
SetWindowsHookExW
LoadCursorW
DeleteMenu
GetGUIThreadInfo
CreateWindowExW
CallNextHookEx
EndDialog
GetSystemMetrics
SetWindowTextW
GetMessageW
SetScrollInfo
FindWindowW
CreatePopupMenu
GetScrollInfo
LoadIconW
TranslateMessage
TranslateAcceleratorW
SetFocus
SetLayeredWindowAttributes
EnumWindows
GetWindowTextLengthW
IsDlgButtonChecked
MoveWindow
GetForegroundWindow
GetTopWindow
RegisterClassExW
LoadAcceleratorsW
TrackPopupMenu
LoadStringW
GetKeyboardState
GetSubMenu
ShowWindow
IsWindow
OpenClipboard
DispatchMessageW
SetTimer
RedrawWindow
GetWindowInfo
GetMonitorInfoW
CloseClipboard
EmptyClipboard
SetDlgItemTextW
SetWindowTextA
SendDlgItemMessageW
MessageBoxA

gdi32

SetStretchBltMode
GetObjectW
SetBkMode
SetTextColor
GetPixel
DeleteObject
GetDIBits
GetStockObject
CreateFontW
CreateCompatibleDC
SelectObject
CreateCompatibleBitmap
BitBlt
GetDeviceCaps
GetTextExtentPoint32W
CreateSolidBrush

shell32

Shell_NotifyIconW

odbc32

ord31
ord20
ord24
ord13
ord141
ord9
ord16
ord111
ord4
ord18
ord127
ord75
ord136

ws2_32

getaddrinfo
ioctlsocket
recv
freeaddrinfo
WSAGetLastError
send
shutdown
accept
bind
WSAIoctl
ntohl
listen
getpeername
inet_addr
inet_ntoa
htonl
setsockopt
WSACleanup
closesocket
select
inet_pton
WSAStartup
socket
connect
recvfrom
getsockopt
htons
sendto
__WSAFDIsSet

uxtheme

EndBufferedPaint
BufferedPaintSetAlpha
BeginBufferedPaint

winmm

PlaySoundW

shlwapi

PathFileExistsW
PathFileExistsA

iphlpapi

IcmpCreateFile
IcmpSendEcho2
GetAdaptersInfo

rpcrt4

UuidCreate
UuidToStringW

winhttp

WinHttpSendRequest
WinHttpCloseHandle
WinHttpConnect
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpOpen
WinHttpReceiveResponse
WinHttpSetTimeouts
WinHttpOpenRequest

Sections

.text
Size: 428KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 516KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 528KB - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9790ef66693ed0586eb36011502909ad

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

odbc32

ws2_32

uxtheme

winmm

shlwapi

iphlpapi

rpcrt4

winhttp

Sections

.text Size: 428KB - Virtual size: 428KB

.rdata Size: 204KB - Virtual size: 204KB

.data Size: 75KB - Virtual size: 516KB

.rsrc Size: 528KB - Virtual size: 528KB

.reloc Size: 16KB - Virtual size: 16KB

.text
Size: 428KB - Virtual size: 428KB

.rdata
Size: 204KB - Virtual size: 204KB

.data
Size: 75KB - Virtual size: 516KB

.rsrc
Size: 528KB - Virtual size: 528KB

.reloc
Size: 16KB - Virtual size: 16KB