fpkxovme[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

fpkxovme.exe
Size

108KB
MD5

daf0394ab4a267f7723d8b0aeb045246
SHA1

d45b79f8cf8028ade1a42026b4a062620ab9ecb6
SHA256

efe9e15b8d2154ec73c8eb160b2ffe91f15e5df189afd88bff463f7a44fead3b
SHA512

f495231e5faeb9a74d36ce54396aeab91c3333d9f676d5e3d492ae476f7e82c46e1310b0429a9b3e1dbb9aaaf755911bdaac902454df0c86a2ade19efe1d2cf7
SSDEEP

3072:yRIYo30ZCJSxPQdrzokRIEoTDfcepEgSEkTAnpdgNNAymQf:yRGEpQF8jEZgONf

Score

1^/10

Malware Config

Signatures

Files

fpkxovme.exe
.exe windows x86

0ffce9bf950c7c47ebc72dd4c8d35580

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

UrlIsOpaqueW
PathFindNextComponentA
StrCSpnA
UrlIsOpaqueA
StrRStrIA
UrlUnescapeW
PathStripToRootA
SHRegWriteUSValueA

kernel32

lstrlenW
FormatMessageW
VirtualAlloc
GetProcessHeap
HeapFree
HeapReAlloc
HeapAlloc
SetLastError
FileTimeToSystemTime
GetLastError
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCommandLineW
GetCommandLineA
GetCPInfo
GetDateFormatW
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
SetFilePointerEx
FindClose
ReadConsoleW
GetConsoleMode
ReadFile
GetFileType
GetModuleHandleExW
ExitProcess
WriteConsoleW
GetModuleFileNameW
WriteFile
GetStdHandle
RaiseException
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GetLocaleInfoW
GetOEMCP
CloseHandle
CreateFileW
HeapSize
FlushFileBuffers
GetConsoleCP
SetEndOfFile
DecodePointer
LCMapStringW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
EnterCriticalSection

crypt32

CertGetPublicKeyLength
CertGetNameStringW
CertNameToStrW
CertVerifyCRLRevocation
CryptSignMessageWithKey
CryptSignCertificate
CertStrToNameW
CryptSignAndEncryptMessage
CryptDecodeMessage
CertAddEncodedCertificateToStore
CryptFormatObject
CryptFindOIDInfo

mswsock

dn_expand
MigrateWinsockConfiguration
s_perror
GetTypeByNameW
NPLoadNameSpaces

mpr

WNetGetProviderNameW
WNetCancelConnectionA
WNetGetLastErrorW
WNetOpenEnumW
WNetGetUniversalNameW
MultinetGetConnectionPerformanceA
WNetCancelConnectionW

msvfw32

MCIWndCreate
DrawDibStop
DrawDibChangePalette

avifil32

AVIStreamRelease

msi

ord134
ord103
ord50
ord74
ord160

user32

LoadStringW

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ffce9bf950c7c47ebc72dd4c8d35580

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

crypt32

mswsock

mpr

msvfw32

avifil32

msi

user32

Sections

.text Size: 70KB - Virtual size: 70KB

.rdata Size: 28KB - Virtual size: 28KB

.data Size: 3KB - Virtual size: 5KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 70KB - Virtual size: 70KB

.rdata
Size: 28KB - Virtual size: 28KB

.data
Size: 3KB - Virtual size: 5KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 4KB - Virtual size: 4KB