1634f7be06812c57f5c439de8897d2fa0e51a75f1cd7b42726313d46df612a91

Sharing

Copy URL

Twitter E-mail

General

Target

1634f7be06812c57f5c439de8897d2fa0e51a75f1cd7b42726313d46df612a91
Size

1.9MB
MD5

acd01f8f39624510565881d3e7574f7c
SHA1

ca1307b8c85e38d9e7eb526397f38449c6dc9312
SHA256

1634f7be06812c57f5c439de8897d2fa0e51a75f1cd7b42726313d46df612a91
SHA512

3cad1cce44dbd7ece37988e5e9e65872c374a06097ced4b37d4741f2c48c218148a7f612c192be6bd749b5f12af96b5572ebdb9e5f74234ef8acf2f2af9f8850
SSDEEP

24576:YxsLq7aRe3Af91o3P88Iyq8YpSIaeXzoOcMth/8m3L78FbTE2vGLQ1GVCUM9G:YeO7aRKgLoQpDmW3L6TEgbGVCUM9G

Score

N/A

Malware Config

Signatures

Files

1634f7be06812c57f5c439de8897d2fa0e51a75f1cd7b42726313d46df612a91
.exe windows x86

2c6330f375ba3a2d2c9bc23ef3363776

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
GetConsoleCP
GetConsoleMode
GetCommandLineA
GetStartupInfoA
RtlUnwind
RaiseException
VirtualProtect
VirtualQuery
ExitProcess
HeapSize
GetACP
IsValidCodePage
HeapCreate
VirtualFree
GetStdHandle
SetHandleCount
LCMapStringA
LCMapStringW
GetTimeZoneInformation
SetStdHandle
GetProcessHeap
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
CompareStringW
SetEnvironmentVariableA
FindResourceA
HeapReAlloc
FindNextFileA
HeapAlloc
HeapFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
SetErrorMode
GetOEMCP
GetCPInfo
InterlockedIncrement
GetModuleHandleW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
TlsGetValue
FileTimeToSystemTime
GlobalFlags
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
GetModuleFileNameW
FindFirstFileA
FindClose
DuplicateHandle
GetThreadLocale
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
MulDiv
FreeResource
SetLastError
InterlockedDecrement
CopyFileA
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetSystemInfo
AreFileApisANSI
GetSystemTime
GetTempPathA
GetCurrentProcessId
DeleteFileW
GetCurrentThreadId
DeleteCriticalSection
GetDiskFreeSpaceA
GetDiskFreeSpaceW
EnterCriticalSection
LockFileEx
GetTempPathW
FlushFileBuffers
CreateFileW
GetFileAttributesW
GetFileAttributesA
LeaveCriticalSection
Sleep
InitializeCriticalSection
WriteFile
GetSystemTimeAsFileTime
GetTickCount
LockFile
UnlockFile
InterlockedCompareExchange
QueryPerformanceCounter
SetEndOfFile
GetFullPathNameA
GetFullPathNameW
LocalAlloc
WritePrivateProfileStringA
GetSystemDirectoryA
GetVersion
GetModuleHandleA
FormatMessageA
VirtualAlloc
GetVolumeInformationA
GetDriveTypeA
lstrcmpiA
GetPrivateProfileIntA
CreateProcessA
WaitForSingleObject
SetFilePointer
GetFileSize
lstrlenA
lstrcmpA
DeleteFileA
GetModuleFileNameA
LoadLibraryExA
GetLastError
LoadLibraryA
ReadFile
CreateFileA
GlobalReAlloc
GlobalFree
GlobalUnlock
GlobalAlloc
GlobalLock
GetWindowsDirectoryA
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
lstrcpyA
LocalFree
CloseHandle
GetVersionExA
GetProcAddress
MultiByteToWideChar
LoadLibraryW
GetCurrentProcess
FreeLibrary
GetEnvironmentVariableA
LockResource
SizeofResource
WideCharToMultiByte
LoadResource

user32

ReleaseCapture
UnregisterClassA
GetSysColorBrush
WindowFromPoint
DestroyMenu
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
SetRectEmpty
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
CharUpperA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetLastActivePopup
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
TrackPopupMenu
GetKeyState
SetMenu
EnableWindow
RegisterWindowMessageA
SetTimer
KillTimer
SetForegroundWindow
UpdateWindow
PostMessageA
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
ScreenToClient
EqualRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetMenuItemID
GetMenuItemCount
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetWindowTextLengthA
GetWindowTextA
SetCapture
CharNextA
CopyAcceleratorTableA
IsRectEmpty
SetFocus
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
GetForegroundWindow
SetRect
LoadBitmapA
wsprintfA
GetSysColor
GetClientRect
GetWindow
GetSystemMetrics
GetDlgItem
OffsetRect
SendMessageA
DrawIcon
LoadIconA
LoadMenuA
GetSubMenu
IsIconic
GetWindowRect
InvalidateRect
DrawStateA
GetParent
MapWindowPoints
IsWindowVisible
IsWindow
BeginPaint
SetWindowRgn
EndPaint
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
AdjustWindowRectEx
WindowFromDC
GetWindowRgn
GetWindowLongA
GetScrollInfo
IntersectRect
IsMenu
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
CharToOemA
SetCursor
GetFocus
LoadCursorA
CopyRect
IsZoomed
GetClassNameA
GetWindowThreadProcessId

gdi32

GetRgnBox
GetTextColor
GetBkColor
GetTextMetricsA
GetMapMode
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
GetClipRgn
SelectClipRgn
SetRectRgn
CreateRectRgnIndirect
OffsetRgn
ExtSelectClipRgn
CreatePolygonRgn
CreateBitmap
CreateCompatibleBitmap
CreateRectRgn
GetTextExtentPoint32A
CreateFontIndirectA
GetStockObject
CreateSolidBrush
CreateFontA
BitBlt
DeleteDC
DeleteObject
GetObjectA
SelectObject
GetPixel
CombineRgn
CreateCompatibleDC

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

CryptCreateHash
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegOpenKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegDeleteKeyA
GetUserNameA
RegLoadKeyA
RegUnLoadKeyA
CryptGetHashParam
CryptDestroyHash
CryptDestroyKey
CryptReleaseContext
LookupAccountSidA
GetTokenInformation
CryptHashData
CryptDecrypt
RegEnumKeyA
CryptAcquireContextA
CryptDeriveKey
RegEnumKeyExA
LsaFreeMemory
LsaRetrievePrivateData
LsaClose
LookupAccountNameA
LsaOpenPolicy
ConvertSidToStringSidA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey

shell32

SHGetSpecialFolderPathA
ShellExecuteA

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathFileExistsA
StrStrIA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW
PathFindFileNameA

oledlg

ord8

ole32

CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitializeEx
CLSIDFromString
CLSIDFromProgID
OleIsCurrentClipboard
OleRun
CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemFree
StgOpenStorageEx
OleFlushClipboard
CoRegisterMessageFilter
CoTaskMemAlloc

oleaut32

VariantClear
SysAllocStringByteLen
SysStringByteLen
SysFreeString
SysStringLen
VariantChangeType
VariantInit
SysAllocStringLen
VariantCopy
SysAllocString
SafeArrayDestroy
VariantTimeToSystemTime
OleCreateFontIndirect
SystemTimeToVariantTime
GetErrorInfo

crypt32

CryptUnprotectData

netapi32

NetApiBufferFree
NetUserEnum

rasapi32

RasGetEntryPropertiesA
RasGetEntryDialParamsA
RasEnumEntriesA

rpcrt4

UuidToStringA
RpcStringFreeA

Exports

Exports

OPENSSL_Applink

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 254KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 59KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 560KB - Virtual size: 564KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2c6330f375ba3a2d2c9bc23ef3363776

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

crypt32

netapi32

rasapi32

rpcrt4

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 254KB - Virtual size: 254KB

.data Size: 59KB - Virtual size: 81KB

.rsrc Size: 560KB - Virtual size: 564KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 254KB - Virtual size: 254KB

.data
Size: 59KB - Virtual size: 81KB

.rsrc
Size: 560KB - Virtual size: 564KB