0ef6f0ba766b351c186be93c52089a901b01ffab479ca84c24b53020d38d779e

Sharing

Copy URL Twitter E-mail

General

Target

0ef6f0ba766b351c186be93c52089a901b01ffab479ca84c24b53020d38d779e
Size

927KB
MD5

aeb004648f919ebc523404103e0d43ef
SHA1

be26157b6fd8cff6f2065641f26e0a299f7a0056
SHA256

0ef6f0ba766b351c186be93c52089a901b01ffab479ca84c24b53020d38d779e
SHA512

b8e2e22f3c249970d9d66c8a9b2e2f44746ab84fbfa39b9c8d0cd0ffca763f5b200a481acd00f963b3b27bdab196bf46dbe429d13c1a6be113b04116712993e3
SSDEEP

24576:hfKYlBhEE7efih3U/MONXDdJisebxMZEs9v/C4jHc:9FlTgUU/MbbaJJrc

Score

N/A

Malware Config

Signatures

Files

0ef6f0ba766b351c186be93c52089a901b01ffab479ca84c24b53020d38d779e
.exe windows x86

bb924edf5d34f1bbee061512cb363295

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
GetCPInfo
IsDebuggerPresent
InterlockedDecrement
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsGetValue
TlsSetValue
DecodePointer
GetModuleHandleW
SetLastError
GetCurrentThreadId
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetStringTypeW
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
HeapFree
ExitProcess
Sleep
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
LoadLibraryW
RtlUnwind
GetProcAddress
GetLastError
HeapCreate
GlobalAlloc
HeapAlloc
SetUnhandledExceptionFilter
MulDiv

user32

ShowCaret
UnregisterClassA
RedrawWindow
EmptyClipboard
CharUpperBuffW
GetKeyNameTextA
MapVirtualKeyA
DestroyWindow
ModifyMenuA
SetClassLongA
CreateWindowExW
GetLastActivePopup
DrawTextA
GetClassInfoW
CharUpperBuffA
GetForegroundWindow
EnableScrollBar
DefWindowProcA
IsWindowEnabled
GetCaretPos
WaitForInputIdle
FindWindowA
GetClassInfoA
SetTimer
FlashWindow
DeferWindowPos
GetWindow
CheckMenuItem
EnumThreadWindows
HideCaret
SetForegroundWindow
CreateIcon
SetRect
RegisterClassW
PtInRect
DrawTextExA
ClientToScreen
SetFocus
IntersectRect
GetSubMenu
GetClipboardFormatNameA
EnumWindows
InvalidateRect
SetMenuItemInfoA
LoadBitmapA
CharNextW
IsClipboardFormatAvailable
SetActiveWindow
PeekMessageA
GetWindowDC
DestroyCursor
DrawEdge
CreateMenu
GetIconInfo
TabbedTextOutA
GetClipboardData
DefMDIChildProcA
CreateWindowExA
DialogBoxParamA
DrawMenuBar
TranslateMessage
CallWindowProcA
EnableWindow
ShowWindow
SystemParametersInfoA
ReleaseDC
ValidateRect
SetKeyboardState
RegisterWindowMessageA
CallNextHookEx
EqualRect
UpdateWindow
GetScrollInfo
DrawIcon
EndPaint
IsZoomed
EndDeferWindowPos
DispatchMessageA
DefWindowProcW
GetTopWindow
GetWindowTextLengthW
DestroyCaret
FrameRect
GetKeyboardLayout
GetPropA
DeleteMenu
BringWindowToTop
IsCharAlphaA
InvalidateRgn
GetScrollRange
SetWindowTextW
MoveWindow
SetMenu
UnhookWindowsHookEx
MessageBeep
GetMessageA
DefFrameProcA
BeginDeferWindowPos
LoadCursorA
GetMenuCheckMarkDimensions
DrawCaption
IsWindow
GetAsyncKeyState
ToUnicode
CloseClipboard
PostMessageA
DrawTextW
RegisterClipboardFormatA
WindowFromPoint
OffsetRect
GetScrollPos
IsWindowVisible
GetMessageTime
CallWindowProcW
OpenClipboard
ToAscii
GetActiveWindow
IsChild
LoadKeyboardLayoutA
CreateDialogParamA
GetKeyState
SendNotifyMessageA
OemToCharA
GetMenuItemCount
GetKeyboardLayoutList
WinHelpA
GetMenuItemID
GetWindowTextA
ScrollWindow
ChildWindowFromPoint
GetSysColor
GetCapture
PostThreadMessageA
SetWindowRgn
GetMenuState
EnableMenuItem
DestroyIcon
SetParent
RemoveMenu
SetClipboardData
CharNextA
GetDlgItem
CreateCaret
BeginPaint
GetTabbedTextExtentA
MapWindowPoints
GetDoubleClickTime
RemovePropA
TrackPopupMenu
RegisterClassA
SetWindowPos
ActivateKeyboardLayout
CharLowerBuffA
LoadIconA
GetMessagePos
EndDialog
SetWindowsHookExA
ScreenToClient
TranslateMDISysAccel
GetSystemMetrics
GetMenu
GetCursorPos
IsIconic
CharUpperA
SetScrollInfo
DestroyMenu
GetCursor
DrawFrameControl
SendMessageW
InsertMenuItemA
InsertMenuA
GetUpdateRect
GetDesktopWindow
SetCapture
SendDlgItemMessageA
GetWindowThreadProcessId
EnumClipboardFormats
WaitMessage
GetWindowLongA
SetWindowLongW
GetMenuItemInfoA
InflateRect
FindWindowExA
LoadCursorFromFileA
DrawTextExW
ShowOwnedPopups
IsWindowUnicode
SetCursor
CreatePopupMenu
GetSystemMenu
SetWindowTextA
SetWindowPlacement
SendMessageTimeoutA
ReleaseCapture
GetClassNameA
IsCharAlphaNumericA
DrawIconEx
CopyImage
GetSysColorBrush
mouse_event
SetWindowLongA
PostQuitMessage
InvertRect
SubtractRect
CopyRect
AdjustWindowRectEx
SetScrollPos
LockWindowUpdate
WindowFromDC
IsDialogMessageA
SetScrollRange
GetFocus
CharLowerA
IsRectEmpty
UnionRect
wsprintfA
GetParent
MessageBoxA
GetDCEx
SendMessageA
MsgWaitForMultipleObjects
FillRect
ShowCursor
GetMenuStringA
GetDC
GetMenuItemRect
DrawFocusRect
SetRectEmpty
CharPrevW
GetWindowPlacement
SetCaretPos
ScrollWindowEx
ScrollDC
SetPropA
GetKeyboardState
GetClientRect
KillTimer
GetWindowRgn
GetWindowTextW
GetWindowRect
ShowScrollBar

gdi32

GetRandomRgn

comdlg32

GetSaveFileNameA
ChooseFontA
PrintDlgA
GetOpenFileNameA
ChooseColorA

advapi32

RegEnumValueA
RegQueryValueA
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyA
RegCloseKey
RegQueryInfoKeyA
RegSetValueExA
RegDeleteKeyA
RegFlushKey
RegOpenKeyExA
RegDeleteValueA
GetUserNameA
RegCreateKeyExA

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder

ole32

OleUninitialize
OleInitialize

oleaut32

VarCmp
OleLoadPicture

comctl32

ImageList_Read
ImageList_DragShowNolock
ImageList_Write
ImageList_DrawEx
ImageList_DragEnter
ImageList_GetDragImage
ImageList_Add
ImageList_GetIcon
ImageList_SetIconSize
ImageList_GetBkColor
ImageList_SetDragCursorImage
ImageList_GetIconSize
ord17
ImageList_SetBkColor
ImageList_DragLeave
ImageList_Draw
ImageList_Destroy
ImageList_EndDrag
ImageList_DragMove
ImageList_GetImageCount
ImageList_Replace
ImageList_ReplaceIcon
ImageList_Remove
ImageList_Create
ImageList_BeginDrag
ImageList_GetImageInfo
ImageList_LoadImageA

winmm

timeEndPeriod
mciSendCommandA
mciGetErrorStringA
timeBeginPeriod
timeGetTime

msimg32

AlphaBlend

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

wsock32

WSAStartup
gethostbyname
recvfrom
select
listen
connect
WSACleanup
getsockname
getsockopt
setsockopt
WSAAsyncSelect
socket
closesocket
accept
ioctlsocket
htons
inet_ntoa
sendto
gethostname
bind

mpr

WNetGetUniversalNameA
WNetGetConnectionA
WNetEnumResourceA
WNetOpenEnumA
WNetCloseEnum

imm32

ImmSetCompositionFontA
ImmGetCompositionStringA
ImmGetCompositionStringW
ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext

ws2_32

WSARecv
WSAGetOverlappedResult
WSAEventSelect
WSAStringToAddressA
WSASocketA
WSAAddressToStringA
WSASend

wldap32

ord315

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.wert
Size: 1024B - Virtual size: 1017B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 903KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zert
Size: 736KB - Virtual size: 735KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb924edf5d34f1bbee061512cb363295

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

winmm

msimg32

version

wsock32

mpr

imm32

ws2_32

wldap32

Sections

.text Size: 91KB - Virtual size: 90KB

.wert Size: 1024B - Virtual size: 1017B

.rdata Size: 41KB - Virtual size: 40KB

.data Size: 46KB - Virtual size: 903KB

.zert Size: 736KB - Virtual size: 735KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 91KB - Virtual size: 90KB

.wert
Size: 1024B - Virtual size: 1017B

.rdata
Size: 41KB - Virtual size: 40KB

.data
Size: 46KB - Virtual size: 903KB

.zert
Size: 736KB - Virtual size: 735KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 8KB - Virtual size: 8KB