f6fc7442449ac48b039f5e29230bd26383b62bee2a050f5e81553755b69e6f25

Sharing

Copy URL

Twitter E-mail

General

Target

f6fc7442449ac48b039f5e29230bd26383b62bee2a050f5e81553755b69e6f25
Size

944KB
MD5

b31b8740568360abdfcf934916c65bca
SHA1

7926eb5dc593c8a82bd5b7aecbbcd1255f4e6685
SHA256

f6fc7442449ac48b039f5e29230bd26383b62bee2a050f5e81553755b69e6f25
SHA512

77ee7ff01783d9eb13587952f2d4e8440a32f6533435fe8cfd36a55bc74b7a7382bfffb49646d4e49ed9a556d961e6ab8e67c5e53f76682c59762456a6aaf6a9
SSDEEP

24576:ef2hkHvvtppyIOThBmM4IUEJYtUs3SLnxDZnExUwNLA+l:efRvByZPsiLxG

Score

N/A

Malware Config

Signatures

Files

f6fc7442449ac48b039f5e29230bd26383b62bee2a050f5e81553755b69e6f25
.exe windows x86

31d615ba2a4b158be24600919b8d17f1

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
FindClose
GetSystemTime
SystemTimeToFileTime
GetEnvironmentVariableA
CreateFileW
FindFirstFileW
DeleteFileA
AreFileApisANSI
LocalFree
GetTempPathA
DeleteFileW
GetVersionExA
OutputDebugStringA
GetFileAttributesExW
GetSystemInfo
GetDiskFreeSpaceA
CreateFileMappingW
CreateFileMappingA
GetDiskFreeSpaceW
LockFileEx
HeapSize
GetTempPathW
FlushFileBuffers
MultiByteToWideChar
ReadFile
GetFileAttributesW
HeapValidate
HeapCreate
GetFileAttributesA
HeapDestroy
GetVersionExW
FormatMessageW
LoadLibraryW
WideCharToMultiByte
WriteFile
FormatMessageA
GetSystemTimeAsFileTime
UnlockFileEx
GetTickCount
OutputDebugStringW
WaitForSingleObjectEx
LockFile
FlushViewOfFile
UnlockFile
InterlockedCompareExchange
QueryPerformanceCounter
SetEndOfFile
UnmapViewOfFile
SetFilePointer
HeapCompact
CreateMutexW
GetFileSize
CreateFileA
HeapReAlloc
GetFullPathNameA
GetFullPathNameW
GetCurrentThreadId
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
DeleteCriticalSection
PeekNamedPipe
GetFileInformationByHandle
SetEnvironmentVariableA
GetStringTypeW
LCMapStringW
CompareStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTimeZoneInformation
SetStdHandle
GetDriveTypeW
FindFirstFileExW
FileTimeToLocalFileTime
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetCurrentDirectoryW
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcessId
GetCurrentProcess
FreeLibrary
GetUserDefaultLCID
GetUserDefaultLangID
EnumTimeFormatsA
GetDateFormatA
FindResourceExW
FindResourceA
GetModuleHandleA
LoadLibraryA
CreateEventA
LoadResource
WaitForSingleObject
SetEvent
GetLastError
ExitProcess
GlobalAlloc
GetProcAddress
CloseHandle
MapViewOfFile
Sleep
GetProcessHeap
HeapFree
HeapAlloc
InterlockedExchange
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedIncrement
SetLastError
GetCommandLineW
IsProcessorFeaturePresent
IsDebuggerPresent
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileA
FindFirstFileExA
RtlUnwind
RaiseException
WriteConsoleW
GetModuleFileNameW
GetFileType
InitializeConditionVariable
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSRWLockExclusive
GetModuleHandleExW
InterlockedDecrement
LoadLibraryExW
ExitThread
CreateThread
DecodePointer
TryEnterCriticalSection
InitializeSRWLock
EncodePointer

user32

EnableWindow
GetDlgItem
EndDialog
SetWindowLongW
GetShellWindow
CreateWindowStationA
GetMessageA
DispatchMessageA
DialogBoxParamW
SendMessageW
GetCursorPos
SystemParametersInfoA
LoadImageA
LoadBitmapA
GetSysColor
SetCaretPos
ShowCaret
MessageBoxA
SetWindowContextHelpId
GetClientRect
SetWindowTextA
ValidateRect
InvalidateRect
EndPaint
BeginPaint
UpdateWindow
TrackPopupMenu
EnableMenuItem
GetSystemMetrics
GetDialogBaseUnits
SendDlgItemMessageA
DialogBoxParamA
ShowWindow
DestroyWindow
CreateWindowExA
RegisterClassA
PostQuitMessage
DefWindowProcA
SendMessageA

gdi32

TextOutA
MoveToEx
GetObjectA
SetTextColor
SetStretchBltMode
SetBkMode
SelectObject
Rectangle
GetTextExtentPoint32A
GetStockObject
GetPixel
ExcludeClipRect
Ellipse
DeleteObject
DeleteDC
CreateFontIndirectA
CreateCompatibleDC
CreateBitmap
CombineRgn
BitBlt
SwapBuffers

comdlg32

GetOpenFileNameA

advapi32

RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey

shell32

Shell_NotifyIconA
SHBrowseForFolderA

ole32

CoInitialize
CoInitializeEx
CoUninitialize
CreateStreamOnHGlobal

oleaut32

SafeArrayPutElement
SafeArrayCreateVector
SafeArrayCreate
SafeArrayDestroy
SafeArrayAccessData
SafeArrayUnaccessData

opengl32

glGetString
glGetIntegerv
wglGetCurrentDC
wglGetProcAddress

comctl32

InitCommonControlsEx
ord335
ord410
ord6

pdh

PdhCollectQueryData

winhttp

WinHttpOpen

d2d1

ord1

dwrite

DWriteCreateFactory

Sections

.text
Size: 572KB - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 165KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

31d615ba2a4b158be24600919b8d17f1

Code Sign

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

opengl32

comctl32

pdh

winhttp

d2d1

dwrite

Sections

.text Size: 572KB - Virtual size: 572KB

.rdata Size: 56KB - Virtual size: 55KB

.data Size: 165KB - Virtual size: 220KB

.tls Size: 512B - Virtual size: 4B

.rsrc Size: 149KB - Virtual size: 148KB

.text
Size: 572KB - Virtual size: 572KB

.rdata
Size: 56KB - Virtual size: 55KB

.data
Size: 165KB - Virtual size: 220KB

.tls
Size: 512B - Virtual size: 4B

.rsrc
Size: 149KB - Virtual size: 148KB