Sample details: 83f995f172fe9df1907dc31e5b7a0367 --

Hashes
MD5: 83f995f172fe9df1907dc31e5b7a0367
SHA1: 1dce3bb10a1820334c337a89b7e2ca549f403b54
SHA256: 9af94c68fbfa33a7a912ea7a4d75e3688e85496d82762f17fe50e121925b81ae
SSDEEP: 6144:/LkpB3IkhHKePB1pilu2A8SJxauUPx3Olg:/+asRbpi1A8SJxauUJ/
Details
File Type: PE32
Yara Hits
YRP/Armadillo_v171 | YRP/Microsoft_Visual_Cpp_v60 | YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional | YRP/Microsoft_Visual_Cpp_50 | YRP/Microsoft_Visual_Cpp_v50v60_MFC | YRP/Armadillo_v171_additional | YRP/Armadillo_v4x | YRP/Microsoft_Visual_Cpp | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/HasRichSignature | YRP/domain | YRP/contentis_base64 | YRP/keylogger | YRP/win_files_operation |
Source
http://fruploadtool.com/arbayt/creed.exe
Strings
		!This program cannot be run in DOS mode.
`.rdata
@.data
SS@SSPVSS
t#SSUP
t$$VSS
_^][YY
t.;t$$t(
VC20XC00U
EV_HMAC_OID_INTEL_SET_IWT_SAMPLE_VALID_PERIOD
60M_SISO_20M - antenna A
MsiPreviewBillboardW
msi.dll
runtime error 
TLOSS error
SING error
DOMAIN error
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
abnormal program termination
- not enough space for environment
- not enough space for arguments
- floating point not loaded
Microsoft Visual C++ Runtime Library
Runtime Error!
Program: 
<program name unknown>
GetLastActivePopup
GetActiveWindow
MessageBoxA
user32.dll
GetClientRect
InflateRect
CreateWindowExW
CreateWindowExA
SetActiveWindow
OffsetRect
DestroyWindow
DrawFocusRect
SetMenuItemInfoA
CheckMenuItem
UnregisterClassA
RegisterClassW
SetWindowTextW
PtInRect
GetMenuStringW
SetTimer
PostMessageW
GetKeyState
AdjustWindowRectEx
SetCapture
DefWindowProcW
ShowWindowAsync
LoadStringW
SetWindowLongW
LoadIconA
USER32.dll
OleQueryLinkFromData
OleInitialize
ole32.dll
VirtualAlloc
GetProcAddress
LoadLibraryA
EnterCriticalSection
ExitProcess
GetModuleHandleA
WideCharToMultiByte
WaitForSingleObjectEx
SetLastError
GetLastError
CloseHandle
GetVersionExA
LeaveCriticalSection
TerminateProcess
DeleteCriticalSection
SetFilePointer
GetVersionExW
WaitForSingleObject
InterlockedExchange
MultiByteToWideChar
KERNEL32.dll
GetStartupInfoA
GetCommandLineA
GetVersion
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
N|o`4[