fd15ceb81fe452b20b552c01fd9acdbbdeeeb35881d30114b9b1af7e1039e31f

Sharing

Copy URL Twitter E-mail

General

Target

fd15ceb81fe452b20b552c01fd9acdbbdeeeb35881d30114b9b1af7e1039e31f
Size

5.4MB
MD5

705c8d431b4b8fa834491ff6975a0532
SHA1

95907e1d57ccfd691e8608d3bbf9b6f9fa6e84ac
SHA256

fd15ceb81fe452b20b552c01fd9acdbbdeeeb35881d30114b9b1af7e1039e31f
SHA512

987e3c2727e59e7d39342c827e74f89d4cf6f18a754930a065dddca4ee203855616121ab9f2977b19c900dd72910693e0c7e1a0f293b89b4a571c16897a4e8b1
SSDEEP

98304:8ICbLDcqmYYbLC9BEUe4sZy6lZaputk3Q5viaK:ebLY9YYbLC0Uek3L

Score

N/A

Malware Config

Signatures

Files

fd15ceb81fe452b20b552c01fd9acdbbdeeeb35881d30114b9b1af7e1039e31f
.exe windows x86

a0055b5d3a38e21796114cdce3937647

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegSetKeySecurity
RegOpenKeyExW
RegCloseKey
RegEnumKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW

kernel32

HeapDestroy
HeapCreate
TerminateProcess
GetEnvironmentVariableA
GlobalMemoryStatusEx
Module32FirstW
GetSystemInfo
CreateToolhelp32Snapshot
GetCurrentThreadId
OutputDebugStringA
Module32NextW
GetCurrentProcessId
InterlockedIncrement
InterlockedDecrement
GetProcAddress
GetUserDefaultUILanguage
AllocConsole
CreateProcessW
VerSetConditionMask
SetConsoleScreenBufferSize
FormatMessageA
LoadLibraryW
GetModuleFileNameW
VerifyVersionInfoW
GetStdHandle
GetConsoleScreenBufferInfo
lstrcpyW
GetTempFileNameW
GetDriveTypeW
CreateDirectoryW
SetFileTime
WriteFile
GetVolumePathNameW
ReadFile
CreateFileW
WritePrivateProfileStringW
GetTempPathW
GetPrivateProfileIntW
GetFileSizeEx
GetLongPathNameW
GetFileTime
GetFileAttributesExW
GetShortPathNameW
DeleteFileW
GetFileInformationByHandle
RaiseException
CompareFileTime
ReadDirectoryChangesW
WaitForMultipleObjectsEx
QueueUserAPC
ResetEvent
CancelIo
GetModuleHandleW
WideCharToMultiByte
MultiByteToWideChar
GetThreadContext
VirtualQuery
GetCurrentThread
Thread32First
Thread32Next
OpenThread
GetModuleFileNameA
GetModuleHandleA
SuspendThread
ResumeThread
GetEnvironmentVariableW
GetExitCodeProcess
TryEnterCriticalSection
GetVersionExW
LocalFileTimeToFileTime
SetFilePointer
CreateFileA
AreFileApisANSI
FreeLibrary
GetCurrentDirectoryW
SetConsoleCtrlHandler
SetLastError
CompareStringW
IsDBCSLeadByte
GetCPInfo
FileTimeToSystemTime
FileTimeToLocalFileTime
FlushFileBuffers
SetEndOfFile
GetFileType
CreateEventA
InterlockedExchange
InterlockedCompareExchange
GetFullPathNameA
GetFileAttributesA
MoveFileW
DeviceIoControl
GetConsoleMode
SetThreadPriority
CreateHardLinkW
RemoveDirectoryW
GetProcessAffinityMask
ReleaseSemaphore
CreateSemaphoreW
lstrcpynW
WriteConsoleW
GetTimeZoneInformation
CreateProcessA
GetProcessHeap
GetConsoleCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
PeekNamedPipe
LCMapStringW
SetHandleCount
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapSize
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetCurrentDirectoryA
GetCurrentDirectoryA
SetEnvironmentVariableA
DuplicateHandle
RtlUnwind
InitializeCriticalSectionAndSpinCount
SetStdHandle
FindFirstFileExW
GetStartupInfoW
HeapSetInformation
GetCommandLineA
MoveFileA
DecodePointer
EncodePointer
GetFullPathNameW
ExitProcess
GetCommandLineW
SetErrorMode
MoveFileExW
GetSystemTimeAsFileTime
CopyFileW
FormatMessageW
HeapFree
GetCurrentProcess
SetUnhandledExceptionFilter
HeapAlloc
GetLocaleInfoA
HeapReAlloc
LockResource
SizeofResource
LoadResource
FindResourceW
GetSystemTime
QueryPerformanceFrequency
SetThreadExecutionState
QueryPerformanceCounter
SystemTimeToFileTime
GetLogicalDrives
CreateEventW
GetTickCount
SetEvent
GetTimeFormatW
GetLocaleInfoW
GetDateFormatW
GlobalAddAtomW
GlobalDeleteAtom
GetWindowsDirectoryW
GetSystemDirectoryW
CreateThread
CloseHandle
DeleteCriticalSection
GlobalFree
EnterCriticalSection
GlobalUnlock
LeaveCriticalSection
Sleep
GlobalAlloc
InitializeCriticalSection
WaitForSingleObject
GlobalLock
FindNextFileW
FindClose
FindFirstFileW
SetFileAttributesW
LocalFree
GetLastError
MulDiv
GetFileAttributesW
GetACP

user32

DeferWindowPos
SetPropW
RemovePropW
OemToCharBuffA
CharToOemA
OemToCharA
CharToOemBuffW
CharUpperW
CheckRadioButton
SetDlgItemTextW
EnableWindow
GetWindow
IsCharAlphaNumericW
CloseClipboard
EmptyClipboard
OpenClipboard
HideCaret
LoadImageW
ShowCaret
SetClassLongW
SetForegroundWindow
RedrawWindow
GetMessagePos
GetWindowTextLengthW
ShowWindowAsync
ReuseDDElParam
MessageBeep
IsWindowUnicode
UnpackDDElParam
DdeInitializeW
DdeCreateStringHandleW
PostMessageW
DdeFreeStringHandle
DdeUninitialize
DdeClientTransaction
DdeConnect
DdeDisconnect
DdeFreeDataHandle
TrackPopupMenu
GetMenuItemID
CreateMenu
ModifyMenuW
GetMenu
CheckMenuRadioItem
AppendMenuW
EnableMenuItem
IsDlgButtonChecked
RemoveMenu
InsertMenuW
MapWindowPoints
CheckMenuItem
SetActiveWindow
DrawTextW
CopyImage
EndPaint
EndDeferWindowPos
GetPropW
EnumDisplayMonitors
ScreenToClient
GetWindowDC
GetWindowInfo
MonitorFromWindow
GetDesktopWindow
GetCursorPos
AdjustWindowRectEx
SetClipboardData
SetMenuItemInfoW
GetMonitorInfoW
DispatchMessageW
MoveWindow
DefWindowProcW
CallWindowProcW
GetScrollPos
SetScrollInfo
DestroyMenu
UpdateWindow
SendMessageW
IsWindowVisible
GetSystemMetrics
ReleaseCapture
MessageBoxW
GetCursor
CreateWindowExW
ShowScrollBar
IsWindow
LoadBitmapW
SetMenu
ShowWindow
SetWindowPos
GetSysColor
SetWindowLongW
GetDlgItem
SystemParametersInfoW
GetAncestor
GetWindowLongW
InvalidateRect
GetScrollInfo
LoadIconW
RegisterClassExW
GetForegroundWindow
LoadAcceleratorsW
TranslateMessage
GetCapture
CharLowerW
IsCharUpperW
BeginPaint
SetFocus
GetClientRect
FindWindowW
SetParent
LoadCursorW
MonitorFromRect
GetDC
ReleaseDC
DrawFrameControl
wsprintfA
DialogBoxIndirectParamW
DialogBoxParamW
EndDialog
SendDlgItemMessageW
CreatePopupMenu
CheckDlgButton
TrackMouseEvent
GetParent
GetFocus
GetKeyState
IsZoomed
KillTimer
SetCapture
FillRect
IsIconic
PostQuitMessage
GetMessageW
GetWindowRect
SetTimer
TranslateAcceleratorW
SetCursor
DestroyWindow
BeginDeferWindowPos

gdi32

SetStretchBltMode
SelectClipRgn
CreateFontIndirectW
GetTextExtentPoint32W
SetLayout
AbortDoc
EndDoc
StartDocW
SetMapMode
CreateDCW
GetDeviceCaps
StartPage
EndPage
CreateRoundRectRgn
SetBkColor
SetWorldTransform
GetObjectW
SetDIBits
CreateCompatibleBitmap
GetDIBits
LineTo
SetGraphicsMode
MoveToEx
ExtTextOutW
CreateDIBitmap
CreateRectRgn
RoundRect
TextOutW
SetTextColor
BitBlt
DeleteDC
StretchBlt
DeleteObject
SelectObject
CreateCompatibleDC
Rectangle
CreatePen
GetStockObject
SetBkMode
CreateSolidBrush

comdlg32

PrintDlgExW
GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError

shell32

SHAddToRecentDocs
SHGetFileInfoW
DragAcceptFiles
DragQueryFileW
DragFinish
SHGetDesktopFolder
ShellExecuteExW
SHGetFolderPathW
SHBindToParent
SHChangeNotify

gdiplus

GdipDrawLine
GdipGetFamilyName
GdipSetPenDashArray
GdipSetWorldTransform
GdipGetFamily
GdipTransformMatrixPoints
GdipInvertMatrix
GdipSetPenDashOffset
GdipGetImageHorizontalResolution
GdipSetImageAttributesWrapMode
GdipImageSelectActiveFrame
GdipGetPropertyItem
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipGetPointCount
GdipGetFontCollectionFamilyList
GdipCreatePath2
GdipSetImageAttributesColorMatrix
GdipGetEmHeight
GdipAddPathPath
GdipFillPolygon
GdipPrivateAddFontFile
GdipSetClipRect
GdipDrawImagePointsRect
GdipSetPageScale
GdipGetDpiY
GdipGetFontCollectionFamilyCount
GdipGetMatrixElements
GdipTransformRegion
GdipGraphicsClear
GdipCreateRegionRectI
GdipSetPenLineCap197819
GdipWidenPath
GdipIsStyleAvailable
GdipDrawRectangle
GdipSetPenColor
GdipCreateMatrix2
GdipCreateRegionPath
GdipSetImagePalette
GdipNewPrivateFontCollection
GdipGetWorldTransform
GdipSetCompositingMode
GdipCreateStringFormat
GdipDeletePrivateFontCollection
GdipSetPenTransform
GdipGetCellAscent
GdipRestoreGraphics
GdipCloneFontFamily
GdipSetPixelOffsetMode
GdipSetPenLineJoin
GdipGetClipBounds
GdiplusShutdown
GdiplusStartup
GdipFree
GdipGetImageHeight
GdipAlloc
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipCreateHBITMAPFromBitmap
GdipSaveImageToFile
GdipFillRectangle
GdipDrawString
GdipClonePath
GdipTransformPath
GdipSetPenMiterLimit
GdipGetPathWorldBoundsI
GdipSetPenMode
GdipCreateMatrix
GdipCreatePen2
GdipSetPropertyItem
GdipFillEllipseI
GdipDrawImageRectRect
GdipAddPathLine
GdipClosePathFigure
GdipStartPathFigure
GdipDrawImageI
GdipDrawRectangleI
GdipCreateBitmapFromGraphics
GdipCreateFontFamilyFromName
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipDeleteFontFamily
GdipDeleteFont
GdipSetTextRenderingHint
GdipCreateLineBrushFromRect
GdipSaveGraphics
GdipGetFontHeight
GdipDeleteStringFormat
GdipGetLogFontW
GdipDrawLineI
GdipBitmapLockBits
GdipStringFormatGetGenericTypographic
GdipSetCompositingQuality
GdipCloneStringFormat
GdipGetImageEncoders
GdipMeasureCharacterRanges
GdipRotateMatrix
GdipSetPageUnit
GdipSetStringFormatMeasurableCharacterRanges
GdipGetImageEncodersSize
GdipTranslateMatrix
GdipBitmapUnlockBits
GdipSetSmoothingMode
GdipGetDC
GdipGetRegionHRgn
GdipTranslateWorldTransform
GdipDeleteMatrix
GdipGetRegionBounds
GdipBitmapSetResolution
GdipCreateBitmapFromStream
GdipMeasureString
GdipGetStringFormatFlags
GdipScaleMatrix
GdipCloneBitmapAreaI
GdipSetStringFormatFlags
GdipCreateRegion
GdipDeleteRegion
GdipSetClipRectI
GdipGetClip
GdipSetClipRegion
GdipFillRectangleI
GdipSetInterpolationMode
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipDrawImageRectRectI
GdipCreatePen1
GdipCreatePath
GdipFillPath
GdipCreateFromHDC
GdipDeletePath
GdipCreateSolidFill
GdipDeleteGraphics
GdipDrawPath
GdipWindingModeOutline
GdipAddPathRectangleI
GdipCloneBrush
GdipDeletePen
GdipDeleteBrush
GdipGetImageWidth
GdipCloneImage
GdipReleaseDC

ole32

CoTaskMemFree
CoInitialize
CreateStreamOnHGlobal
CoUninitialize
CoTaskMemAlloc
OleInitialize
CoCreateInstance
CoGetMalloc
ReleaseStgMedium

comctl32

InitCommonControlsEx
CreatePropertySheetPageW
ImageList_Create
ImageList_AddMasked
ImageList_GetIconSize
ImageList_Draw
ImageList_Destroy

msimg32

GradientFill

winspool.drv

OpenPrinterW
DocumentPropertiesW
GetPrinterW
ClosePrinter
ord203

wininet

HttpSendRequestA
HttpOpenRequestW
HttpQueryInfoW
InternetSetOptionW
InternetConnectW
InternetReadFile
InternetOpenUrlW
InternetOpenW
InternetCloseHandle

oleaut32

SafeArrayPutElement
VariantInit
SafeArrayCreateVector
SysAllocString
VariantClear

shlwapi

PathIsNetworkPathW
SHSetValueW
PathAppendW
SHDeleteKeyW
StrStrIW
StrRStrIW
StrStrW
PathIsRelativeW
SHDeleteValueW
ord219

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

urlmon

CoInternetGetSession

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 299KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a0055b5d3a38e21796114cdce3937647

Headers

File Characteristics

Imports

advapi32

kernel32

user32

gdi32

comdlg32

shell32

gdiplus

ole32

comctl32

msimg32

winspool.drv

wininet

oleaut32

shlwapi

version

urlmon

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.rdata Size: 2.3MB - Virtual size: 2.3MB

.data Size: 104KB - Virtual size: 203KB

.rsrc Size: 299KB - Virtual size: 298KB

.reloc Size: 130KB - Virtual size: 129KB

.text
Size: 2.6MB - Virtual size: 2.6MB

.rdata
Size: 2.3MB - Virtual size: 2.3MB

.data
Size: 104KB - Virtual size: 203KB

.rsrc
Size: 299KB - Virtual size: 298KB

.reloc
Size: 130KB - Virtual size: 129KB