1649336db033457cb387daba9e83f36b35c8487f1d5dc95356b8a87bad63a749

Sharing

Copy URL

Twitter E-mail

General

Target

1649336db033457cb387daba9e83f36b35c8487f1d5dc95356b8a87bad63a749
Size

438KB
MD5

150eb0b98235ca55a041ea93995bc3ef
SHA1

b5ba2c578306e6aeca30892e473ab6a712bfa487
SHA256

1649336db033457cb387daba9e83f36b35c8487f1d5dc95356b8a87bad63a749
SHA512

6ee5cbf14ce4239bbb6626e4b703cc9895c7ca34ba9bab8b2658fe92b1a9847855e0b3dedb657302d5f2e9d8e03e2f62a2a4dd9444f69f1718bd615ea3de8e31
SSDEEP

6144:r7PanwiOun50Ew+zveROhabrO2Qfraw7gAGHXenFpRhIV:r7Pawi750EJecwbr0uw7ti2C

Score

N/A

Malware Config

Signatures

Files

1649336db033457cb387daba9e83f36b35c8487f1d5dc95356b8a87bad63a749
.exe windows x86

44bfb4ec9a1dfdfe4f330a1667032f36

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
HeapSize
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
ReadFile
GetFileType
SetHandleCount
GetModuleFileNameA
WriteFile
ExitProcess
HeapReAlloc
VirtualAlloc
VirtualFree
GetFullPathNameW
GetOEMCP
GetACP
GetCPInfo
DeleteCriticalSection
CreateFileA
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetCommandLineA
LeaveCriticalSection
EnterCriticalSection
SetStdHandle
GetConsoleCP
SetFilePointer
SetEndOfFile
GetProcessHeap
IsDBCSLeadByte
lstrcpyW
lstrcatW
FindFirstFileW
OutputDebugStringW
FindNextFileW
FindClose
GetLastError
Sleep
FindResourceA
LoadResource
LockResource
GetWindowsDirectoryA
ConvertDefaultLocale
GetThreadLocale
IsValidLocale
SetLastError
HeapCreate
HeapAlloc
GetCurrentThreadId
CreateFileMappingW
MapViewOfFileEx
GetCurrentProcessId
GetStdHandle
LocalFree
lstrcmpiA
lstrcpyA
lstrlenA
CloseHandle
GetModuleFileNameW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
CreateFileW
LockFile
FlushFileBuffers
LoadLibraryA
HeapFree
MultiByteToWideChar
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
RtlUnwind
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
OutputDebugStringA
GetModuleHandleA
IsValidCodePage

user32

SetCapture
ReleaseCapture
SetMenu
DefWindowProcA
CreateMenu
MapWindowPoints
SetWindowTextA
CreatePopupMenu
EndPaint
MessageBoxA
CheckMenuItem
GetMenu
SendMessageA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetClientRect
ReleaseDC
GetDC
SetFocus
SetActiveWindow
SetForegroundWindow
LoadImageA
DestroyIcon
GetSysColor
GetFocus
FindWindowA
DrawMenuBar
GetWindowLongA
WindowFromPoint
GetDlgCtrlID
GetWindowContextHelpId
AppendMenuA
GetCursorPos
TrackPopupMenu
SetWindowLongA
GetParent
GetScrollPos
GetScrollRange
BeginPaint
FrameRect
GetDlgItem
SetScrollPos
InvalidateRect
GetIconInfo
DrawIcon
IsWindow
GetWindowThreadProcessId
AttachThreadInput
GetCursor
LoadCursorA
RegisterClassExA
CreateWindowExA
LoadIconA
GetMessageA
TranslateMessage
DispatchMessageA
SetWindowPos
GetWindowPlacement
ShowWindow
EnumDisplayMonitors
wsprintfW

gdi32

GetObjectType
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
GetDIBits
StretchDIBits
DeleteObject
DeleteDC
SetBkColor
SetTextColor
TextOutA
CreateSolidBrush
CreateDIBSection
CreateHalftonePalette
SetBkMode
GetTextMetricsA
SetTextAlign
CreateBitmap
SelectPalette
RealizePalette
SetStretchBltMode
GetSystemPaletteEntries
CreatePalette
Rectangle
CreateHatchBrush
CreateDCA
GetPixel
GetClipBox
Chord
CloseEnhMetaFile
CloseFigure
ColorCorrectPalette
ColorMatchToTarget
GetDeviceCaps

advapi32

ReportEventA
RegisterEventSourceA
AreAllAccessesGranted
AreAnyAccessesGranted
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
AllocateAndInitializeSid
SetEntriesInAclA
SetNamedSecurityInfoW
FreeSid
RegCloseKey
DeregisterEventSource

shell32

SHGetFileInfoA
SHBrowseForFolderA
SHAddToRecentDocs
Shell_NotifyIconA

ole32

CoUninitialize
CoInitializeEx
CreateFileMoniker
StgOpenStorage
CoInitialize
OleGetClipboard
CoCreateInstance
StgCreateDocfile

oleaut32

SafeArrayCreateVector
SafeArrayGetUBound
SafeArrayPutElement
SafeArrayDestroy
SafeArrayAccessData
SafeArrayUnaccessData
VariantInit
SafeArrayGetLBound
VariantCopyInd

psapi

GetModuleFileNameExA

msvfw32

DrawDibOpen
DrawDibDraw
ord2
MCIWndCreateA

shlwapi

PathRemoveBackslashA
PathFindFileNameA
AssocCreate
PathRelativePathToA

comctl32

ImageList_ReplaceIcon
CreateToolbarEx

rpcrt4

RpcStringFreeW
RpcStringBindingComposeW
RpcBindingFromStringBindingW

gdiplus

GdipCreateFromHWND
GdipCreateFromHDC
GdipDeleteGraphics
GdipDeletePen
GdipDrawLine
GdipCreatePen1

opengl32

glClearColor
glShadeModel
glDepthFunc
glClearDepth
glEnable
glHint

oledlg

OleUIInsertObjectW

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsW
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo

wtsapi32

WTSFreeMemory
WTSEnumerateProcessesA

urlmon

HlinkSimpleNavigateToString
GetClassFileOrMime

tapi32

lineGatherDigitsA
lineForwardW

Exports

Exports

Exception

Sections

.text
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 241KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

44bfb4ec9a1dfdfe4f330a1667032f36

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

psapi

msvfw32

shlwapi

comctl32

rpcrt4

gdiplus

opengl32

oledlg

setupapi

wtsapi32

urlmon

tapi32

Exports

Exports

Sections

.text Size: 147KB - Virtual size: 146KB

.rdata Size: 43KB - Virtual size: 42KB

.data Size: 6KB - Virtual size: 13KB

.rsrc Size: 241KB - Virtual size: 241KB

.text
Size: 147KB - Virtual size: 146KB

.rdata
Size: 43KB - Virtual size: 42KB

.data
Size: 6KB - Virtual size: 13KB

.rsrc
Size: 241KB - Virtual size: 241KB