ab0b7fb80f4cd9521a2de6fdf1ba1860ad26810c0f7bf7dba0c7d4e1ed972f80

Sharing

Copy URL Twitter E-mail

General

Target

ab0b7fb80f4cd9521a2de6fdf1ba1860ad26810c0f7bf7dba0c7d4e1ed972f80
Size

196KB
MD5

28b849fa9ff2c5a14816f69150ab4cab
SHA1

5dee0407dcc8137c713028a3dcfc7ca703c6d4a7
SHA256

ab0b7fb80f4cd9521a2de6fdf1ba1860ad26810c0f7bf7dba0c7d4e1ed972f80
SHA512

9f42d622df9a506f7c7ad798b4e3e248c20ca76340a99498e63c839a656e93b6fa83ca2f280dae66c9506803265068a3509a7e1816ab7cb7e5f9cb26bddc1f9a
SSDEEP

3072:Tb7grTSnyp85SBxY9mXjsrXUy8BeTQUC9:Tb7gnmyG9mXjsDVC

Score

1^/10

Malware Config

Signatures

Files

ab0b7fb80f4cd9521a2de6fdf1ba1860ad26810c0f7bf7dba0c7d4e1ed972f80
.exe windows x64

9dc0378ee819e8553a694560ed361039

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

opencv_world451d

??1Mat@cv@@QEAA@XZ
??0Mat@cv@@QEAA@XZ

kernel32

LocalFree
CreateDirectoryA
CreateFileA
SetFileAttributesA
WriteFile
CloseHandle
GetLastError
WideCharToMultiByte
Sleep
GetModuleFileNameA
WinExec
CopyFileA
CreateToolhelp32Snapshot
Process32First
Process32Next
FreeLibrary
CreateMutexA
MultiByteToWideChar
GetCurrentThreadId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
InitializeSListHead
GetProcAddress
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
RaiseException
GetModuleHandleW
GetStartupInfoW

advapi32

GetUserNameA

ole32

CoInitializeSecurity
CoInitializeEx
CoUninitialize
CoCreateInstance

oleaut32

CreateErrorInfo
VariantClear
GetErrorInfo
SetErrorInfo
VariantInit
VariantChangeType
SysFreeString
SysAllocString

msvcp140d

?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
_Mbrtowc
?good@ios_base@std@@QEBA_NXZ
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_Getmonths@_Locinfo@std@@QEBAPEBDXZ
?_Getdays@_Locinfo@std@@QEBAPEBDXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?uncaught_exception@std@@YA_NXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?flags@ios_base@std@@QEBAHXZ

ws2_32

htons
connect
WSAStartup
send
socket
inet_addr
recv

vcruntime140d

__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_LoadLibraryExW
__C_specific_handler_noexcept
__C_specific_handler
__current_exception_context
__current_exception
_CxxThrowException
strrchr
memset
memmove
memcpy
_purecall
__std_exception_destroy
__std_type_info_destroy_list
__std_exception_copy

vcruntime140_1d

__CxxFrameHandler4

ucrtbased

_cexit
_CrtDbgReportW
_seh_filter_exe
_set_app_type
__setusermatherr
_get_initial_narrow_environment
_initterm
_initterm_e
_exit
_set_fmode
__p___argc
__p___argv
_c_exit
_register_thread_local_exe_atexit_callback
_configthreadlocale
_set_new_mode
__p__commode
_free_dbg
strcpy_s
strcat_s
__stdio_common_vsprintf_s
_wmakepath_s
_wsplitpath_s
wcscpy_s
_unlink
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_callnewh
terminate
_CrtDbgReport
_calloc_dbg
_access
atoi
exit
malloc
free
strlen
strcpy
strcmp
strcat
wcslen
rename
fwrite
ftell
fseek
fread
fopen
_invalid_parameter
fclose

Sections

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msvcjmc
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 355B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9dc0378ee819e8553a694560ed361039

Headers

DLL Characteristics

File Characteristics

Imports

opencv_world451d

kernel32

advapi32

ole32

oleaut32

msvcp140d

ws2_32

vcruntime140d

vcruntime140_1d

ucrtbased

Sections

.textbss Size: - Virtual size: 64KB

.text Size: 125KB - Virtual size: 125KB

.rdata Size: 37KB - Virtual size: 37KB

.data Size: 3KB - Virtual size: 5KB

.pdata Size: 12KB - Virtual size: 12KB

.idata Size: 9KB - Virtual size: 8KB

.msvcjmc Size: 1024B - Virtual size: 722B

.00cfg Size: 512B - Virtual size: 355B

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 2KB - Virtual size: 1KB

.textbss
Size: - Virtual size: 64KB

.text
Size: 125KB - Virtual size: 125KB

.rdata
Size: 37KB - Virtual size: 37KB

.data
Size: 3KB - Virtual size: 5KB

.pdata
Size: 12KB - Virtual size: 12KB

.idata
Size: 9KB - Virtual size: 8KB

.msvcjmc
Size: 1024B - Virtual size: 722B

.00cfg
Size: 512B - Virtual size: 355B

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 2KB - Virtual size: 1KB