Sample details: 586b615abca112d52f165a8335e72e50 --

Hashes
MD5: 586b615abca112d52f165a8335e72e50
SHA1: 0ba737a5a7b87765c8806b4d18be8f24a871387c
SHA256: 68c2c0df6aa83585a10c2b709584769729da7441d4c8a4c4a88e540fd01b02f6
SSDEEP: 3072:6CpmFp0CHDZG1yl4L8KtYM+Y1pUKfXR0WxL/BniCv2lTag91STXzozO6qNgF+:6CweCHg14pKq4zNR7x/BZeNagHSPhtg
Details
File Type: PE32
Yara Hits
YRP/Armadillo_v171 | YRP/Microsoft_Visual_Cpp_v60 | YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional | YRP/Microsoft_Visual_Cpp_50 | YRP/Microsoft_Visual_Cpp_v50v60_MFC | YRP/Armadillo_v171_additional | YRP/Armadillo_v4x | YRP/Microsoft_Visual_Cpp | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/HasRichSignature | YRP/domain | YRP/contentis_base64 | YRP/keylogger | YRP/win_files_operation |
Source
http://fruploadtool.com/arbayt/creed.exe
http://fruploadtool.com/arbayt/creed.exe
Strings
		!This program cannot be run in DOS mode.
`.rdata
@.data
SS@SSPVSS
t#SSUP
t$$VSS
_^][YY
t.;t$$t(
VC20XC00U
"WWSh 
STATUS_ADDRESS_NOT_ASSOCIATED
Average retrain frequency is %d symbols
MsiPreviewBillboardW
msi.dll
runtime error 
TLOSS error
SING error
DOMAIN error
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
abnormal program termination
- not enough space for environment
- not enough space for arguments
- floating point not loaded
Microsoft Visual C++ Runtime Library
Runtime Error!
Program: 
<program name unknown>
GetLastActivePopup
GetActiveWindow
MessageBoxA
user32.dll
PtInRect
SetWindowTextW
SetWindowLongW
GetSubMenu
InflateRect
GetActiveWindow
SetActiveWindow
GetCursorPos
UnregisterClassA
CreateWindowExW
AdjustWindowRectEx
LoadStringW
GetClientRect
GetMenuItemCount
SetCapture
ReleaseDC
LoadIconA
CheckMenuItem
TrackPopupMenu
ShowWindowAsync
MessageBeep
DefWindowProcW
ClientToScreen
CreateWindowExA
GetMenuStringW
SetWindowPos
MoveWindow
DrawFocusRect
GetKeyState
RegisterClassW
OffsetRect
SetTimer
SetMenuItemInfoA
DestroyIcon
USER32.dll
OleQueryLinkFromData
OleInitialize
ole32.dll
VirtualAlloc
GetProcAddress
LoadLibraryA
LeaveCriticalSection
GetVersionExA
CloseHandle
WaitForSingleObjectEx
SetFilePointer
MultiByteToWideChar
TerminateProcess
FreeLibrary
GetModuleHandleA
DeleteCriticalSection
KERNEL32.dll
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW