a5f2c931098eebc43d24d62eb5b613c3e432f6c3bd5fde8f549fc59ca23690d6

Sharing

Copy URL Twitter E-mail

General

Target

a5f2c931098eebc43d24d62eb5b613c3e432f6c3bd5fde8f549fc59ca23690d6
Size

612KB
MD5

e44df34a5639ba9e94f61c34df679e0f
SHA1

7f26ca476269c1c342a94f500b790ca508bfdc24
SHA256

a5f2c931098eebc43d24d62eb5b613c3e432f6c3bd5fde8f549fc59ca23690d6
SHA512

47838959d46b353e690557fb2bcf0e16e8507dbdd07c4665dfd800843be13307e46284db596e9ea29456371eb8fc1f0116613145b8a2014d20930a7ae08c1311
SSDEEP

12288:3Qm8i/76LM0t7ULs9PfZAui6266UKY6UK:3x/j0JUL6fZOBnJ

Score

1^/10

Malware Config

Signatures

Files

a5f2c931098eebc43d24d62eb5b613c3e432f6c3bd5fde8f549fc59ca23690d6
.exe windows x86

4af5925d6d9761da3e6415621d1aa418

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

select
recv
gethostbyname
shutdown
ntohs
inet_ntoa
getsockname
getpeername
closesocket
WSAEventSelect
WSAGetLastError
WSAStartup
setsockopt
socket
send
htons
inet_addr
connect

comctl32

_TrackMouseEvent
ord17

opencv_world300

?allocate@String@cv@@AAEPADI@Z
?deallocate@String@cv@@AAEXXZ
?error@cv@@YAXHABVString@1@PBD1H@Z
?fastFree@cv@@YAXPAX@Z
?deallocate@Mat@cv@@QAEXXZ
??0Mat@cv@@QAE@ABV01@ABV?$Rect_@H@1@@Z
?getAffineTransform@cv@@YA?AVMat@1@ABV_InputArray@1@0@Z
?warpAffine@cv@@YAXABV_InputArray@1@ABV_OutputArray@1@0V?$Size_@H@1@HHABV?$Scalar_@N@1@@Z

kernel32

QueryPerformanceFrequency
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetModuleFileNameA
FreeLibrary
HeapSize
AreFileApisANSI
GetModuleHandleExW
ExitProcess
HeapReAlloc
RtlUnwind
RaiseException
GetCommandLineA
ReadFile
GetTimeZoneInformation
HeapAlloc
LoadLibraryExW
QueryPerformanceCounter
SetStdHandle
HeapFree
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetProcessHeap
WriteFile
GetModuleFileNameW
GetCPInfo
IsValidCodePage
GetCurrentDirectoryA
CreateThread
GetACP
OutputDebugStringA
GetModuleHandleA
WideCharToMultiByte
MultiByteToWideChar
GetSystemTimeAsFileTime
GetCurrentProcess
SetEvent
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WaitForSingleObject
GetStdHandle
GetCurrentThreadId
SetEndOfFile
SetFilePointerEx
GetProcAddress
LoadLibraryA
FlushFileBuffers
TerminateProcess
FormatMessageA
Sleep
CreateEventA
ResetEvent
CloseHandle
GetLastError
GetOEMCP
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStringTypeW
CompareStringW
LCMapStringW
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
WriteConsoleW
CreateFileW
GetFileType
SetEnvironmentVariableA

user32

ToAscii
GetKeyboardState
GetDesktopWindow
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetForegroundWindow
EmptyClipboard
GetClipboardData
SetClipboardData
ChangeClipboardChain
SetClipboardViewer
GetClipboardOwner
CloseClipboard
OpenClipboard
DrawFocusRect
DrawIcon
GetIconInfo
ReleaseDC
GetDC
GetSysColor
GetWindowTextA
GetPropA
CallWindowProcA
TrackMouseEvent
MoveWindow
GetWindowRgn
SetPropA
IsWindow
InflateRect
PtInRect
ClientToScreen
FindWindowA
DefWindowProcA
PostQuitMessage
DrawTextA
RegisterClassExA
LoadCursorA
LoadIconA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
SystemParametersInfoA
EnableWindow
FindWindowExA
LoadStringA
SetWindowTextA
ShowCursor
GetSystemMenu
TrackPopupMenu
GetCursorPos
GetAsyncKeyState
SendMessageA
PostMessageA
SetCursor
SetScrollInfo
GetClientRect
GetSystemMetrics
AdjustWindowRect
InvalidateRect
EndPaint
FillRect
SetRect
BeginPaint
ScrollWindowEx
DestroyWindow
GetWindowDC
GetWindowRect
CreateWindowExA
UnregisterClassA
RegisterClassA
LoadImageA
SetWindowLongA
KillTimer
SetTimer
DispatchMessageA
PeekMessageA
MsgWaitForMultipleObjects
SetWindowPos
GetWindowLongA
GetUpdateRect
UpdateWindow
ShowWindow
MessageBeep
MessageBoxA
SetWindowRgn

gdi32

SetTextColor
DeleteDC
CreatePen
CreateRoundRectRgn
SaveDC
CreateRectRgn
SelectClipRgn
RestoreDC
GetObjectA
RoundRect
CreateFontIndirectA
MoveToEx
LineTo
CreateDIBSection
SetDIBColorTable
GetDIBits
CreateSolidBrush
SetBkMode
SetBrushOrgEx
SetStretchBltMode
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
GetStockObject
CreatePalette
DeleteObject
ResizePalette
UnrealizeObject
SetPaletteEntries
StretchBlt
RealizePalette
SelectPalette

advapi32

AbortSystemShutdownA
InitiateSystemShutdownA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

Sections

.text
Size: 317KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4af5925d6d9761da3e6415621d1aa418

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

comctl32

opencv_world300

kernel32

user32

gdi32

advapi32

Sections

.text Size: 317KB - Virtual size: 317KB

.rdata Size: 81KB - Virtual size: 80KB

.data Size: 16KB - Virtual size: 39KB

.rsrc Size: 196KB - Virtual size: 196KB

.text
Size: 317KB - Virtual size: 317KB

.rdata
Size: 81KB - Virtual size: 80KB

.data
Size: 16KB - Virtual size: 39KB

.rsrc
Size: 196KB - Virtual size: 196KB