2ee1c2cc77c90a1dd5fbbfd09288dd4394d13386f4340e80173e263caa8f142c

Sharing

Copy URL Twitter E-mail

General

Target

2ee1c2cc77c90a1dd5fbbfd09288dd4394d13386f4340e80173e263caa8f142c
Size

617KB
MD5

2328815f0bd14fea4af95969f758f1b9
SHA1

5f9bed485a3716e69ed01712f7c94696d1d8488d
SHA256

2ee1c2cc77c90a1dd5fbbfd09288dd4394d13386f4340e80173e263caa8f142c
SHA512

93e66067d5aece0bed41c907cba1dbcf09ceb20d16964b94ad5f6e372d7a871bca133cd4eee738ef596c0945d8ec06c441165575e4a3935e083c298a11aed195
SSDEEP

12288:wu59FpYJTZvR+vYcgV8D7QBqAHZh6UKY6UK:wuDciveVgVa0J

Score

1^/10

Malware Config

Signatures

Files

2ee1c2cc77c90a1dd5fbbfd09288dd4394d13386f4340e80173e263caa8f142c
.exe windows x86

be064a0a6dbc3ae2a46ee82b5282fb82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

ioctlsocket
__WSAFDIsSet
getsockopt
select
recv
gethostbyname
shutdown
ntohs
inet_ntoa
getsockname
getpeername
closesocket
WSAEventSelect
WSAGetLastError
WSAStartup
setsockopt
socket
send
htons
inet_addr
connect
WSACleanup

comctl32

_TrackMouseEvent
ord17

opencv_world300

?allocate@String@cv@@AAEPADI@Z
?deallocate@String@cv@@AAEXXZ
?error@cv@@YAXHABVString@1@PBD1H@Z
?fastFree@cv@@YAXPAX@Z
?deallocate@Mat@cv@@QAEXXZ
??0Mat@cv@@QAE@ABV01@ABV?$Rect_@H@1@@Z
?getAffineTransform@cv@@YA?AVMat@1@ABV_InputArray@1@0@Z
?warpAffine@cv@@YAXABV_InputArray@1@ABV_OutputArray@1@0V?$Size_@H@1@HHABV?$Scalar_@N@1@@Z

kernel32

QueryPerformanceFrequency
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetModuleFileNameA
FreeLibrary
HeapSize
AreFileApisANSI
GetModuleHandleExW
ExitProcess
HeapReAlloc
RtlUnwind
RaiseException
GetCommandLineA
ReadFile
GetTimeZoneInformation
HeapAlloc
LoadLibraryExW
QueryPerformanceCounter
SetStdHandle
HeapFree
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetProcessHeap
WriteFile
GetModuleFileNameW
GetCPInfo
IsValidCodePage
GetCurrentDirectoryA
CreateThread
GetACP
OutputDebugStringA
GetModuleHandleA
WideCharToMultiByte
MultiByteToWideChar
GetSystemTimeAsFileTime
GetCurrentProcess
SetEvent
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WaitForSingleObject
GetStdHandle
GetCurrentThreadId
SetEndOfFile
SetFilePointerEx
GetProcAddress
LoadLibraryA
FlushFileBuffers
TerminateProcess
FormatMessageA
Sleep
CreateEventA
ResetEvent
CloseHandle
GetLastError
GetOEMCP
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStringTypeW
CompareStringW
LCMapStringW
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
WriteConsoleW
CreateFileW
GetFileType
SetEnvironmentVariableA

user32

ToAscii
GetKeyboardState
GetDesktopWindow
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetForegroundWindow
EmptyClipboard
GetClipboardData
SetClipboardData
ChangeClipboardChain
SetClipboardViewer
GetClipboardOwner
CloseClipboard
OpenClipboard
DrawFocusRect
DrawIcon
GetIconInfo
ReleaseDC
GetDC
GetSysColor
GetWindowTextA
GetPropA
CallWindowProcA
TrackMouseEvent
MoveWindow
GetWindowRgn
SetPropA
IsWindow
InflateRect
PtInRect
ClientToScreen
FindWindowA
DefWindowProcA
PostQuitMessage
DrawTextA
RegisterClassExA
LoadCursorA
LoadIconA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
SystemParametersInfoA
EnableWindow
FindWindowExA
LoadStringA
SetWindowTextA
ShowCursor
GetSystemMenu
TrackPopupMenu
GetCursorPos
GetAsyncKeyState
SendMessageA
PostMessageA
SetCursor
SetScrollInfo
GetClientRect
GetSystemMetrics
AdjustWindowRect
InvalidateRect
EndPaint
FillRect
SetRect
BeginPaint
ScrollWindowEx
DestroyWindow
GetWindowDC
GetWindowRect
CreateWindowExA
UnregisterClassA
RegisterClassA
LoadImageA
SetWindowLongA
KillTimer
SetTimer
DispatchMessageA
PeekMessageA
MsgWaitForMultipleObjects
SetWindowPos
GetWindowLongA
GetUpdateRect
UpdateWindow
ShowWindow
MessageBeep
MessageBoxA
SetWindowRgn

gdi32

SetTextColor
DeleteDC
CreatePen
CreateRoundRectRgn
SaveDC
CreateRectRgn
SelectClipRgn
RestoreDC
GetObjectA
RoundRect
CreateFontIndirectA
MoveToEx
LineTo
CreateDIBSection
SetDIBColorTable
GetDIBits
CreateSolidBrush
SetBkMode
SetBrushOrgEx
SetStretchBltMode
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
GetStockObject
CreatePalette
DeleteObject
ResizePalette
UnrealizeObject
SetPaletteEntries
StretchBlt
RealizePalette
SelectPalette

advapi32

AbortSystemShutdownA
InitiateSystemShutdownA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

Sections

.text
Size: 322KB - Virtual size: 321KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be064a0a6dbc3ae2a46ee82b5282fb82

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

comctl32

opencv_world300

kernel32

user32

gdi32

advapi32

Sections

.text Size: 322KB - Virtual size: 321KB

.rdata Size: 81KB - Virtual size: 81KB

.data Size: 16KB - Virtual size: 40KB

.rsrc Size: 196KB - Virtual size: 196KB

.text
Size: 322KB - Virtual size: 321KB

.rdata
Size: 81KB - Virtual size: 81KB

.data
Size: 16KB - Virtual size: 40KB

.rsrc
Size: 196KB - Virtual size: 196KB