027d8d4a34d126f4f19a14a4dc9e039e68a18817c816618aabc157ceebb0fcfc

Sharing

Copy URL Twitter E-mail

General

Target

027d8d4a34d126f4f19a14a4dc9e039e68a18817c816618aabc157ceebb0fcfc
Size

668KB
MD5

25ceac1768b26c962676dad365788064
SHA1

1ecf1231d0bb3b3ed7d1026876987c05bad61d08
SHA256

027d8d4a34d126f4f19a14a4dc9e039e68a18817c816618aabc157ceebb0fcfc
SHA512

b97133bc3d10c346c8734628a8e04d3718c5207ed78e3d659211f34d04f759c34fe4661de75ba0cfb5f1e7ab9f7e564d9701cef658802775a12b60683a2d1da1
SSDEEP

6144:ezt4qRUF9aDywflSUtGt4cv1igWphgqN3OxJdjqEGGvHxDAjcqcW+2mt:eWqRW9s3HHftOzd2hjcY+2mt

Score

N/A

Malware Config

Signatures

Files

027d8d4a34d126f4f19a14a4dc9e039e68a18817c816618aabc157ceebb0fcfc
.exe windows x86

b8b14f5c7869f1d0596abca71d5569d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

user32

GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
wvsprintfW
UpdateWindow
UnregisterClassW
TranslateMessage
TrackPopupMenu
TrackMouseEvent
SystemParametersInfoW
ShowWindow
ShowCursor
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowLongW
SetTimer
SetRectEmpty
SetPropW
SetParent
SetMenuItemInfoW
SetMenuInfo
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClassLongW
SetCapture
SetActiveWindow
SendMessageW
ScreenToClient
RemovePropW
ReleaseDC
ReleaseCapture
RegisterClassW
PtInRect
PostMessageW
OpenClipboard
OffsetRect
MoveWindow
MessageBoxW
MessageBeep
MapWindowPoints
LoadImageW
LoadIconW
LoadCursorW
KillTimer
IsWindowVisible
IsWindowEnabled
IsWindow
IsIconic
InvalidateRect
IntersectRect
InsertMenuItemW
InflateRect
GetWindowThreadProcessId
GetWindowTextLengthW
GetWindowTextW
GetWindowRect
GetWindowLongW
GetWindowDC
GetSystemMenu
GetPropW
GetParent
GetWindow
GetMessageTime
GetMessageW
GetMenuItemInfoW
GetMenuItemCount
GetMenuInfo
GetKeyState
GetForegroundWindow
GetDesktopWindow
GetDC
GetCursorPos
GetClipboardData
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetActiveWindow
FindWindowW
FillRect
ExitWindowsEx
EnumWindows
EndPaint
EnableWindow
DrawTextW
DrawIconEx
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
CreatePopupMenu
CopyRect
CloseClipboard
ChangeDisplaySettingsExW
CallWindowProcW
BeginPaint
AppendMenuW
AdjustWindowRectEx

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
CreateThread
CompareStringW
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
lstrcmpiW
lstrcmpW
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
UnmapViewOfFile
TerminateProcess
Sleep
SizeofResource
SetEvent
ReleaseMutex
ReadFile
OutputDebugStringW
OpenProcess
MultiByteToWideChar
MulDiv
MapViewOfFile
LockResource
LoadResource
LoadLibraryW
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetWindowsDirectoryW
GetVolumeInformationW
GetVersionExW
GetUserDefaultLangID
GetTickCount
GetSystemInfo
GetSystemDirectoryW
GetShortPathNameW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocalTime
GetLastError
GetFileSize
GetFileAttributesW
GetExitCodeProcess
GetCurrentProcessId
GetCurrentProcess
GetComputerNameW
InterlockedIncrement
InterlockedDecrement
FreeLibrary
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
EnumResourceNamesW
DeviceIoControl
DeleteFileW
CreateProcessW
CreateMutexW
CreateFileMappingW
CreateFileW
CreateEventW
CopyFileW
CompareStringW
CloseHandle
GetUserDefaultUILanguage

gdi32

SetTextColor
SetDCPenColor
SetBkMode
SelectObject
PatBlt
MoveToEx
LineTo
GetStockObject
GetDeviceCaps
ExcludeClipRect
DeleteObject
DeleteDC
CreateSolidBrush
CreatePolygonRgn
CreateFontIndirectW
CreateFontW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

gdiplus

GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipCreateStringFormat
GdipMeasureString
GdipDrawString
GdipGetLogFontW
GdipDeleteFont
GdipCreateFontFromLogfontW
GdipCreateFontFromDC
GdipDrawImageRectI
GdipDrawImageRect
GdipDrawImageI
GdipDrawImage
GdipFillPath
GdipFillRectangle
GdipDrawPath
GdipDrawRectangle
GdipSetInterpolationMode
GdipSetPixelOffsetMode
GdipSetSmoothingMode
GdipReleaseDC
GdipGetDC
GdipDeleteGraphics
GdipCreateFromHDC
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipLoadImageFromFileICM
GdipLoadImageFromStreamICM
GdipLoadImageFromFile
GdipLoadImageFromStream
GdipDeletePen
GdipCreatePen1
GdipCreateLineBrushFromRect
GdipSetSolidFillColor
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipAddPathPolygon
GdipAddPathRectangle
GdipAddPathLine
GdipDeletePath
GdipCreatePath
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc

ole32

CreateStreamOnHGlobal
CoCreateInstance
OleUninitialize
OleInitialize
CreateStreamOnHGlobal

wininet

InternetReadFile
InternetOpenUrlW
InternetOpenW
InternetCloseHandle
HttpQueryInfoW

comdlg32

GetSaveFileNameW

crypt32

CryptBinaryToStringW
CryptStringToBinaryA

ntdll

NtShutdownSystem
RtlAdjustPrivilege

shell32

SHGetSpecialFolderPathW
Shell_NotifyIconW
ShellExecuteExW
ShellExecuteW
ExtractIconW

comctl32

InitCommonControls
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create

Sections

.text
Size: 640KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b8b14f5c7869f1d0596abca71d5569d3

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

gdiplus

ole32

wininet

comdlg32

crypt32

ntdll

shell32

comctl32

Sections

.text Size: 640KB - Virtual size: 640KB

.rsrc Size: 24KB - Virtual size: 24KB

.text
Size: 640KB - Virtual size: 640KB

.rsrc
Size: 24KB - Virtual size: 24KB