e08a706570ef3f75eb61d00bed77ab497c992626469bb554a8ac569c2667a5f7

Sharing

Copy URL

Twitter E-mail

General

Target

e08a706570ef3f75eb61d00bed77ab497c992626469bb554a8ac569c2667a5f7
Size

2.6MB
MD5

bb34de0642bc9cbecfb7c18cdc04ca1a
SHA1

b495da0aad1ebceb3bdbbf10083b482723243feb
SHA256

e08a706570ef3f75eb61d00bed77ab497c992626469bb554a8ac569c2667a5f7
SHA512

f76cf38f3eeed30614c05668a0fa9f83d0d7f878cbea5537b1a7283fdbfa0d3626b8725e9476a9aa520f76527048674b29002f3fdc6d605cfc591aebdbdb1056
SSDEEP

49152:WdB/zl5yqP+qtC8Loqe3NLI0EprJtcS29aGiOmYKL2kJKE3aN6ovUcWWcAq36GRZ:WX7yvqU8Loqe3NI0EprXka7OnKtYEvoy

Score

N/A

Malware Config

Signatures

Files

e08a706570ef3f75eb61d00bed77ab497c992626469bb554a8ac569c2667a5f7
.exe windows x86

ed1e17eb573ae907053760ff9b66471a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
GlobalFlags
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
GetCPInfo
GetOEMCP
GetModuleHandleW
GetCurrentDirectoryA
lstrcpyA
GetFileAttributesA
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
SetErrorMode
GetTempFileNameA
GetTempPathA
SearchPathA
GetTickCount
GetProfileIntA
Sleep
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
VirtualProtect
FindResourceExA
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetTimeFormatA
GetDateFormatA
VirtualAlloc
GetSystemInfo
VirtualQuery
GetPrivateProfileIntA
GetStartupInfoA
RtlUnwind
RaiseException
HeapReAlloc
ExitProcess
ExitThread
CreateThread
HeapSize
GetSystemTimeAsFileTime
SetStdHandle
GetFileType
HeapCreate
VirtualFree
GetStdHandle
GetTimeZoneInformation
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
CompareStringW
GetConsoleCP
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetProcessHeap
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
FileTimeToSystemTime
GetThreadLocale
GetModuleFileNameW
GetCurrentProcessId
GetModuleFileNameA
CopyFileA
GlobalSize
FormatMessageA
LocalFree
lstrlenW
MulDiv
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
GetVersionExA
SetLastError
FreeResource
SetThreadPriority
GetCommandLineA
WritePrivateProfileStringA
WinExec
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleA
GlobalFree
CloseHandle
GlobalUnlock
ReadFile
GlobalLock
GlobalAlloc
GetFileSize
CreateFileA
FreeLibrary
GetProcAddress
LoadLibraryA
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetLastError
MultiByteToWideChar
lstrlenA
ResumeThread
InterlockedDecrement

user32

WaitMessage
DeleteMenu
SetRectEmpty
PostThreadMessageA
CopyAcceleratorTableA
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
CharUpperA
DestroyAcceleratorTable
LoadAcceleratorsA
CreateAcceleratorTableA
SetWindowRgn
NotifyWinEvent
CreatePopupMenu
SetParent
SetClassLongA
GetSystemMenu
IsMenu
IsRectEmpty
BringWindowToTop
LockWindowUpdate
EnumChildWindows
RegisterClipboardFormatA
DrawStateA
OpenClipboard
CopyImage
DestroyIcon
LoadImageA
SetClipboardData
CloseClipboard
EmptyClipboard
CharNextA
SetRect
InvalidateRgn
GetNextDlgGroupItem
TranslateAcceleratorA
InsertMenuItemA
ReuseDDElParam
UnpackDDElParam
DrawEdge
DrawFrameControl
DrawFocusRect
DrawIconEx
SetCursorPos
UnionRect
EnableScrollBar
UpdateLayeredWindow
SetMenuDefaultItem
GetMenuDefaultItem
IsCharLowerA
MapVirtualKeyExA
IsClipboardFormatAvailable
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
FrameRect
GetUpdateRect
CharUpperBuffA
CopyIcon
SubtractRect
GetIconInfo
GetDoubleClickTime
CreateMenu
GetWindowRgn
DestroyCursor
InflateRect
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
GetMenuStringA
AppendMenuA
InsertMenuA
RemoveMenu
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
ShowWindow
SetWindowTextA
IsDialogMessageA
TranslateMessage
ReleaseCapture
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
UpdateWindow
PostMessageA
GetMenuItemID
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
PtInRect
GetMenu
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
MapVirtualKeyA
GetKeyNameTextA
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
EnableWindow
GetClientRect
SendMessageA
CopyRect
LoadBitmapA
InvalidateRect
LoadIconA
LoadMenuA
SetWindowLongA
GetWindowLongA
GetDC
ReleaseDC
SetTimer
IsIconic
GetSystemMetrics
DrawIcon
GetWindowRect
GetAsyncKeyState
GetSubMenu
ClientToScreen
SetCursor
LoadCursorA
KillTimer
SetCapture
UnregisterClassA
GetSysColorBrush
ShowOwnedPopups
ValidateRect
GetCursorPos
RegisterWindowMessageA
GetMessageA
WindowFromPoint
DestroyMenu
GetMenuItemInfoA
SetWindowContextHelpId
MapDialogRect
MessageBeep
RedrawWindow
IsZoomed
CheckDlgButton
PostQuitMessage
MoveWindow

gdi32

SetTextColor
SetBkColor
CreateBitmap
GetDeviceCaps
CopyMetaFileA
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
CreateCompatibleDC
GetObjectA
BitBlt
CreateSolidBrush
SelectObject
GetStockObject
Rectangle
DeleteObject
CreateFontA
Ellipse
CreatePen
GetClipBox
StretchBlt
DeleteDC
SetDIBColorTable
CreateDIBSection
SetPixel
Polygon
SetTextAlign
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
GetDCOrgEx
PatBlt
CreateRoundRectRgn
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
GetRgnBox
OffsetRgn
GetTextMetricsA
GetTextExtentPoint32A
DPtoLP
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
GetMapMode
CombineRgn
SetRectRgn
CreateFontIndirectA
CreateHatchBrush
GetObjectType
SelectPalette
CreatePatternBrush
ExtSelectClipRgn
CreateCompatibleBitmap
CreateRectRgnIndirect
SetPixelV
GetTextFaceA
SetWindowExtEx
ScaleWindowExtEx
GetTextColor
GetDIBits
RealizePalette
GetBkColor
CreateEllipticRgn
CreatePolygonRgn
Polyline
RoundRect
CreatePalette
GetPaletteEntries
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
LPtoDP
ExtFloodFill
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExA

ole32

OleFlushClipboard
DoDragDrop
OleGetClipboard
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleIsCurrentClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
CreateStreamOnHGlobal
CLSIDFromProgID
CLSIDFromString
OleRun
CoCreateInstance
CoUninitialize
CoInitialize
OleLockRunning
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitializeEx
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree

oleaut32

SysAllocStringByteLen
SysStringLen
VariantTimeToSystemTime
VariantChangeType
SysAllocString
SysFreeString
VariantClear
VariantCopy
VariantInit
SysAllocStringLen
CreateErrorInfo
SafeArrayDestroy
SystemTimeToVariantTime
OleCreateFontIndirect
GetErrorInfo

msimg32

TransparentBlt
AlphaBlend

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathIsUNCA
PathStripToRootA
PathRemoveFileSpecW
PathFindFileNameA
PathFindExtensionA

oledlg

ord8

gdiplus

GdipGetImageHeight
GdiplusStartup
GdipGetImagePixelFormat
GdipCreateBitmapFromStream
GdipGetImageWidth
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateBitmapFromScan0
GdipCloneImage
GdipAlloc
GdipFree
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdiplusShutdown

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

comdlg32

GetFileTitleA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegEnumKeyExA

shell32

DragQueryFileA
SHGetFileInfoA
SHBrowseForFolderA
SHGetPathFromIDListA
SHAppBarMessage
ShellExecuteA
DragFinish

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 773KB - Virtual size: 772KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed1e17eb573ae907053760ff9b66471a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

msimg32

comctl32

shlwapi

oledlg

gdiplus

oleacc

imm32

winmm

winspool.drv

comdlg32

advapi32

shell32

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 295KB - Virtual size: 294KB

.data Size: 24KB - Virtual size: 51KB

.rsrc Size: 773KB - Virtual size: 772KB

.reloc Size: 158KB - Virtual size: 157KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 295KB - Virtual size: 294KB

.data
Size: 24KB - Virtual size: 51KB

.rsrc
Size: 773KB - Virtual size: 772KB

.reloc
Size: 158KB - Virtual size: 157KB