1907a0cc44810a9ddcdcd3701c390d036feedbc55a812e797add53a7c935e178

Sharing

Copy URL

Twitter E-mail

General

Target

1907a0cc44810a9ddcdcd3701c390d036feedbc55a812e797add53a7c935e178
Size

2.0MB
MD5

b5843ad453d4b6e360b939c5d348d0b2
SHA1

511b7849dfbca06c951001f8f3e958806fd4acfa
SHA256

1907a0cc44810a9ddcdcd3701c390d036feedbc55a812e797add53a7c935e178
SHA512

0eeeb1f0e88fb66f0d44e836ae8e9d7eebcb039397abe4ce331071d8077a7e84e4286e432c80a39502cd46548a1ce973eff195de2325d298ecb1980bcbf77ef2
SSDEEP

49152:+tXllZxOVV6zCmJMaNFeJ3L7ge7yiHVyEldN3yz7ECgSOZ:+b+6zCdaAHgGyiHVxldN3yz7H

Score

N/A

Malware Config

Signatures

Files

1907a0cc44810a9ddcdcd3701c390d036feedbc55a812e797add53a7c935e178
.exe windows x86

7b11f990dbcc5b281748577ddaa3543a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
DuplicateHandle
GetVolumeInformationA
GlobalFlags
GetVersionExA
GetUserDefaultUILanguage
GetOEMCP
GetCPInfo
FileTimeToLocalFileTime
GetFileAttributesA
GetFileAttributesExA
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
GetACP
lstrcpyA
FindResourceExW
GetWindowsDirectoryA
VerSetConditionMask
VerifyVersionInfoA
GetTickCount
GetProfileIntA
SearchPathA
GetTempFileNameA
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
RtlUnwind
VirtualQuery
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
HeapQueryInformation
GetCommandLineA
GetCommandLineW
QueryPerformanceFrequency
SetStdHandle
GetFileType
ExitProcess
GetStdHandle
CompareStringW
LCMapStringW
GetStringTypeW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
CreateFileW
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
CreateFileA
GlobalFindAtomA
GlobalAddAtomA
FindResourceA
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
FreeLibrary
GetSystemDirectoryW
EncodePointer
FileTimeToSystemTime
GlobalGetAtomNameA
lstrcmpA
CompareStringA
ResumeThread
SetThreadPriority
GetCurrentThreadId
WaitForSingleObject
CloseHandle
MultiByteToWideChar
CopyFileA
FormatMessageA
MulDiv
GlobalSize
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
GetModuleFileNameA
GetCurrentProcessId
LocalFree
LocalReAlloc
LocalAlloc
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
SetLastError
OutputDebugStringA
GetCurrentProcess
CreateDirectoryA
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
ResetEvent
GetSystemInfo
RaiseException
HeapReAlloc
DeleteFileA
GetLastError
GetTempPathA
Sleep
HeapSize
GetCurrentDirectoryA
InitializeCriticalSectionAndSpinCount
VirtualAlloc
HeapFree
lstrcmpiA
VirtualProtect

user32

DrawIcon
UnionRect
UpdateLayeredWindow
MonitorFromPoint
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageA
WaitMessage
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
CopyAcceleratorTableA
SetRect
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuA
RegisterClipboardFormatA
CharUpperBuffA
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
GetWindowRgn
DestroyCursor
IsRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
KillTimer
SetTimer
DeleteMenu
SetCursor
ShowOwnedPopups
LoadImageW
InvalidateRect
TrackMouseEvent
IntersectRect
MapDialogRect
GetAsyncKeyState
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
PostQuitMessage
OffsetRect
SetRectEmpty
CopyImage
SystemParametersInfoA
InflateRect
GetMenuItemInfoA
DestroyMenu
FillRect
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
RealChildWindowFromPoint
GetDesktopWindow
ClientToScreen
CharUpperA
DestroyIcon
IsDialogMessageA
SetWindowTextA
SendDlgItemMessageA
CheckDlgButton
SetParent
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
CopyIcon
GetWindow
GetTopWindow
GetClassNameA
GetClassLongA
PtInRect
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetClientRect
RemovePropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
SetScrollPos
ScrollWindow
RedrawWindow
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
GetDlgItem
IsIconic
EndDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
GetClassInfoExA
GetClassInfoA
RegisterClassA
DefWindowProcA
PostMessageA
GetMessageTime
GetMessagePos
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
GetWindowTextLengthA
GetWindowTextA
LoadCursorA
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GetSystemMetrics
CallNextHookEx
SetWindowsHookExA
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageA
DispatchMessageA
GetMessageA
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
GetLastActivePopup
GetWindowThreadProcessId
GetParent
GetWindowLongA
MessageBoxA
IsWindowEnabled
EnableWindow
SendMessageA
UnhookWindowsHookEx
FrameRect
SetCursorPos
BringWindowToTop
GetSystemMenu
LoadMenuW
IsZoomed
DrawFrameControl
SetWindowRgn
SetClassLongA
DrawStateA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
GetKeyNameTextA
MapVirtualKeyA
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
LoadIconW
DrawEdge
LoadCursorW
InvertRect
HideCaret
EnableScrollBar
MessageBeep
GetIconInfo
DrawIconEx
LoadImageA
SetScrollInfo
DeferWindowPos
UnregisterHotKey
GetScrollInfo
IsWindow
BeginDeferWindowPos
RegisterWindowMessageA
SetMenuItemInfoA
SetWindowLongA
CallWindowProcA
GetPropA
CreateWindowExA
TranslateMessage
LoadIconA
CreateMenu
GetScrollPos

gdi32

LineTo
SetBkMode
CombineRgn
IntersectClipRect
ExcludeClipRect
Escape
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
BitBlt
DeleteObject
GetObjectA
SetTextColor
SetBkColor
CreateBitmap
GetDeviceCaps
CreateDCA
CopyMetaFileA
GetTextExtentPoint32A
CreateFontIndirectA
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
CreateCompatibleDC
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetViewportExtEx
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
ExtTextOutA
TextOutA
MoveToEx
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
GetTextMetricsA
EnumFontFamiliesExA
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceA
DeleteDC

comctl32

ImageList_ReplaceIcon
ImageList_DragShowNolock
ImageList_DragMove

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
FindTextA

advapi32

RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegCreateKeyExA
CreateServiceA
AdjustTokenPrivileges
RegEnumKeyA
RegCloseKey
StartServiceCtrlDispatcherA
CloseServiceHandle
RegQueryValueExA
AllocateAndInitializeSid
LookupPrivilegeValueA
SetServiceStatus
RegisterServiceCtrlHandlerA
DeleteService
ControlService
RegSetValueExA
OpenProcessToken
FreeSid
InitializeSecurityDescriptor
RegOpenKeyExA
GetTokenInformation

ole32

CoCreateInstance
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc
CoUninitialize
CoInitialize
CoInitializeEx
CreateStreamOnHGlobal
IsAccelerator
OleTranslateAccelerator
DoDragDrop
OleGetClipboard
CoLockObjectExternal
CoTaskMemFree
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleInitialize
OleCreate
OleUninitialize
OleLockRunning
RevokeDragDrop
RegisterDragDrop

oleaut32

VarBstrFromDate
VariantInit
SysAllocString
VariantClear
VariantCopy
VariantChangeType
SysFreeString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringLen
SysStringLen
LoadTypeLi
SysAllocStringByteLen

userenv

DestroyEnvironmentBlock
ExpandEnvironmentStringsForUserA
EnterCriticalPolicySection
CreateEnvironmentBlock

wtsapi32

WTSLogoffSession
WTSOpenServerA
WTSCloseServer

uxtheme

DrawThemeBackground
GetThemeColor
GetThemePartSize
GetCurrentThemeName
GetWindowTheme
IsAppThemed
DrawThemeText
DrawThemeParentBackground
GetThemeSysColor
GetThemeTextExtent
OpenThemeData
CloseThemeData
GetThemeBackgroundRegion
IsThemeBackgroundPartiallyTransparent

mpr

WNetAddConnection2A
WNetGetUniversalNameA
WNetGetUserA

msimg32

GradientFill
AlphaBlend
TransparentBlt

tapi32

lineAccept
lineNegotiateAPIVersion
lineInitialize
lineTranslateDialogA
lineTranslateAddressA
lineHold
lineClose
lineOpenA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

shell32

ShellExecuteA
SHGetFileInfoA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileA
SHAppBarMessage
DragFinish

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipDrawImageI
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipGetImagePalette
GdipDrawImageRectI

shlwapi

PathIsUNCA
PathStripToRootA
PathFindExtensionA
PathRemoveFileSpecW
StrFormatKBSizeA
PathFindFileNameA

winmm

PlaySoundA

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 308KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 1018KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b11f990dbcc5b281748577ddaa3543a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comctl32

comdlg32

advapi32

ole32

oleaut32

userenv

wtsapi32

uxtheme

mpr

msimg32

tapi32

winspool.drv

shell32

oleacc

gdiplus

shlwapi

winmm

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 308KB - Virtual size: 308KB

.data Size: 19KB - Virtual size: 1018KB

.rsrc Size: 68KB - Virtual size: 67KB

.reloc Size: 131KB - Virtual size: 130KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 308KB - Virtual size: 308KB

.data
Size: 19KB - Virtual size: 1018KB

.rsrc
Size: 68KB - Virtual size: 67KB

.reloc
Size: 131KB - Virtual size: 130KB