26b3c605d72804f865681c21b995e63a72868a8faea282ce55001401fca1b54f

Sharing

Copy URL

Twitter E-mail

General

Target

26b3c605d72804f865681c21b995e63a72868a8faea282ce55001401fca1b54f
Size

2.3MB
MD5

e2571a45994f73232136bdb0facc8663
SHA1

878525746ab6f5650669025ac2e95da46441427c
SHA256

26b3c605d72804f865681c21b995e63a72868a8faea282ce55001401fca1b54f
SHA512

6f02cd5f217ef26fdf3b0983b6b517ef3831f4c4f742582c3768a73c0598d33919b1a706e5483640f782b6dcd06cc2e99b2eae131d4e3f5a550080e324469963
SSDEEP

49152:Lo0lZ+wLS6rePJQEhMv60cF65+DXyFgvvVCX/MKGSJnJEMPz:LTtLuWIjvvVCXQq

Score

N/A

Malware Config

Signatures

Files

26b3c605d72804f865681c21b995e63a72868a8faea282ce55001401fca1b54f
.exe windows x86

35a493b125249f1c11e8c56065069193

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mixerGetNumDevs
mixerOpen
mixerSetControlDetails
mixerGetLineInfoW
mixerGetLineControlsW
mixerClose
mixerGetDevCapsW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

comdlg32

GetOpenFileNameW
PrintDlgW
PageSetupDlgW
CommDlgExtendedError
ChooseColorW
ChooseFontW
GetSaveFileNameW

winspool.drv

GetPrinterW
ClosePrinter
OpenPrinterW

rpcrt4

RpcStringFreeW
UuidCreate
UuidToStringW

kernel32

SetEvent
GetDateFormatW
GetTimeFormatW
IsDBCSLeadByte
FormatMessageW
GetSystemTimeAsFileTime
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
InterlockedPushEntrySList
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
InterlockedPopEntrySList
GetStartupInfoW
RtlUnwind
ExitThread
ResumeThread
ExitProcess
GetLocalTime
VirtualProtect
GetSystemInfo
VirtualQuery
GetCPInfo
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
LCMapStringW
SetUnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
LoadLibraryA
LocalAlloc
SetEnvironmentVariableA
CreateEventW
WaitForSingleObject
GetExitCodeProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileInformationByHandle
GetLongPathNameW
GetShortPathNameW
GetCommandLineW
lstrlenA
QueryPerformanceCounter
QueryPerformanceFrequency
CompareStringW
RemoveDirectoryW
SetFileAttributesW
GetLogicalDriveStringsW
DeleteFileW
MoveFileW
VerSetConditionMask
VerifyVersionInfoW
GetTempPathW
GetTempFileNameW
DeviceIoControl
GetVolumeInformationW
GlobalHandle
GetSystemTime
GetDiskFreeSpaceExW
CreateProcessW
FindNextFileW
GetSystemDirectoryW
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
IsBadWritePtr
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetProfileStringW
lstrcpynA
GetVersionExW
lstrcmpiW
SetLastError
lstrcpyW
lstrcpynW
GlobalAlloc
GlobalLock
GlobalUnlock
GetTickCount
MulDiv
GlobalFree
GetLocaleInfoW
lstrcatW
lstrcmpW
GetFullPathNameW
CreateThread
RaiseException
DeleteCriticalSection
GetCurrentThreadId
InterlockedExchange
LoadLibraryW
GetCurrentDirectoryW
FreeLibrary
GetFileSize
ReadFile
CreateDirectoryW
AllocConsole
WideCharToMultiByte
GetFileAttributesW
FindFirstFileW
FindClose
GetModuleFileNameW
lstrlenW
GetModuleHandleW
GetProcAddress
GetCurrentProcess
FlushInstructionCache
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
CreateFileW
WriteFile
CopyFileW
SetEndOfFile
GetDriveTypeW
CreateFileA
WriteConsoleW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
InitializeCriticalSection
EncodePointer
DecodePointer
HeapSetInformation
Sleep
GetLastError
CreateMutexW
CloseHandle
SetStdHandle
FlushFileBuffers
SetFilePointer
GetConsoleMode
GetConsoleCP
GetStringTypeW
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
HeapCreate
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetACP
GetOEMCP
IsValidCodePage
LocalFree

user32

SendDlgItemMessageW
MapDialogRect
CreateDialogParamW
IsZoomed
GetMenu
GetDlgItemTextW
CreateDialogIndirectParamW
WaitForInputIdle
EnumThreadWindows
ModifyMenuW
MonitorFromPoint
SetWindowContextHelpId
IsDialogMessageW
AdjustWindowRectEx
CheckMenuItem
TrackPopupMenu
SetWindowRgn
IsRectEmpty
SetLayeredWindowAttributes
GetTopWindow
DispatchMessageA
GetMessageA
IsWindowUnicode
MsgWaitForMultipleObjectsEx
EndDeferWindowPos
BeginDeferWindowPos
TrackPopupMenuEx
InvalidateRgn
MoveWindow
CreateAcceleratorTableW
GetClassNameW
DestroyAcceleratorTable
DrawFrameControl
SetRect
CallNextHookEx
GetSysColorBrush
GetWindowThreadProcessId
CharLowerW
UnhookWindowsHookEx
SetWindowsHookExW
DrawEdge
IsDlgButtonChecked
GetDlgItemInt
SetDlgItemInt
CheckDlgButton
GetSystemMetrics
SystemParametersInfoW
GetWindowDC
RemoveMenu
AppendMenuW
CreatePopupMenu
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
GetScrollInfo
EnableScrollBar
DeferWindowPos
DestroyIcon
CheckRadioButton
GetCaretPos
GetAsyncKeyState
RegisterClipboardFormatW
SetScrollInfo
GetComboBoxInfo
EqualRect
GetMessagePos
CharNextW
PtInRect
LoadStringA
PostQuitMessage
IntersectRect
DeleteMenu
wsprintfW
InsertMenuW
SetMenuDefaultItem
GetMenuItemInfoW
SetMenuItemInfoW
DestroyMenu
SetRectEmpty
LoadAcceleratorsW
TranslateAcceleratorW
GetMenuStringW
DialogBoxParamW
GetClassInfoExW
RegisterClassExW
IsMenu
LoadMenuW
EnableMenuItem
LoadBitmapW
GetMessageW
TranslateMessage
DispatchMessageW
BringWindowToTop
KillTimer
SetTimer
GetDoubleClickTime
EndPaint
BeginPaint
GetKeyState
GetDesktopWindow
wvsprintfW
GetFocus
SetMenu
PostMessageW
IsWindowVisible
GetKeyboardLayout
GetSubMenu
LoadIconW
UpdateWindow
SetFocus
MsgWaitForMultipleObjects
MessageBeep
DestroyWindow
EnumWindows
SetForegroundWindow
IsIconic
ShowWindow
SendMessageTimeoutW
FrameRect
DrawTextW
CallWindowProcW
CreateWindowExW
DrawFocusRect
FillRect
DefWindowProcW
OffsetRect
InflateRect
CopyRect
ReleaseDC
GetDC
GetDlgCtrlID
SetCapture
RedrawWindow
InvalidateRect
ScreenToClient
ClientToScreen
GetWindowTextLengthW
GetWindowTextW
DrawStateW
SetWindowLongW
PeekMessageW
GetCursorPos
GetCapture
WindowFromPoint
ReleaseCapture
GetIconInfo
LoadImageW
GetSysColor
DestroyCursor
RegisterWindowMessageW
IsWindow
SendMessageW
MessageBoxW
SetCursor
LoadCursorW
GetWindow
GetWindowRect
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetClientRect
MapWindowPoints
GetDlgItem
GetParent
SetDlgItemTextW
EndDialog
GetActiveWindow
EnableWindow
LoadStringW
IsWindowEnabled
SetWindowTextW
SetWindowPos
ChildWindowFromPoint
UnregisterClassA
GetMenuItemCount
IsChild

advapi32

RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteKeyW
RegEnumKeyExW
RegQueryInfoKeyW
GetUserNameW
CryptAcquireContextW
CryptImportKey
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptDestroyHash
CryptDecrypt
CryptGetUserKey
CryptEncrypt
CryptReleaseContext
CryptDestroyKey
CryptGenKey
CryptExportKey

ole32

OleUninitialize
CreateStreamOnHGlobal
CoInitializeEx
CoUninitialize
CoInitialize
CoCreateInstance
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
StringFromGUID2
CoTaskMemAlloc
OleLockRunning
CoTaskMemFree
CoTaskMemRealloc
OleRun
RegisterDragDrop
OleDuplicateData
ReleaseStgMedium
RevokeDragDrop
DoDragDrop
OleInitialize

shell32

SHGetDesktopFolder
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
DragFinish
DragQueryPoint
DragQueryFileW
SHFileOperationW
DragAcceptFiles
SHGetFileInfoW
SHBrowseForFolderW
FindExecutableW
ShellExecuteExW
ShellExecuteW

oleaut32

VariantCopy
SysFreeString
SysStringLen
SysAllocStringLen
OleTranslateColor
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
VariantChangeType
SysStringByteLen
DispCallFunc
VarDateFromStr
VarI4FromStr
VarR8FromStr
VarDecFromStr
VarDecCmp
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrCmp
VariantClear
VariantInit
SysAllocStringByteLen
GetErrorInfo
SysAllocString

shlwapi

PathIsDirectoryW
PathRemoveFileSpecW
PathAppendW
PathAddBackslashW
PathAddExtensionW
PathRemoveExtensionW
PathUnquoteSpacesW
PathRemoveArgsW
PathGetArgsW
PathCanonicalizeW
PathRelativePathToW
PathIsFileSpecW
PathRenameExtensionW
PathFileExistsW

comctl32

ImageList_LoadImageW
ImageList_DrawEx
ImageList_DragLeave
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_DragMove
ImageList_EndDrag
ImageList_BeginDrag
ImageList_GetIcon
InitCommonControlsEx
_TrackMouseEvent
ImageList_GetImageCount
ImageList_AddMasked
ImageList_Create
ImageList_Destroy
ImageList_Draw
ImageList_DrawIndirect
CreateStatusWindowW
ord8
ImageList_GetIconSize

gdi32

DeleteObject
GetStockObject
GetObjectW
DeleteDC
SetTextColor
BitBlt
SetBkColor
SelectObject
CreateCompatibleDC
CreateBitmap
CreateCompatibleBitmap
SetBkMode
CreateSolidBrush
MoveToEx
LineTo
CreatePen
ExtTextOutW
SetViewportOrgEx
GetDeviceCaps
SetMapMode
GetMapMode
DPtoLP
SaveDC
RestoreDC
EndDoc
AbortDoc
StartDocW
DeleteEnhMetaFile
CreateEnhMetaFileW
CloseEnhMetaFile
EnumFontsW
ResetDCW
GetTextMetricsW
StartPage
EndPage
CreateDCW
GetBkColor
TextOutW
GetEnhMetaFileHeader
OffsetWindowOrgEx
PlayEnhMetaFile
CreateFontIndirectW
Rectangle
SetBrushOrgEx
SelectClipRgn
CreatePatternBrush
CreateRectRgnIndirect
CombineRgn
PatBlt
CreateDIBSection
GetTextExtentPoint32W
SetDCPenColor
SetWindowOrgEx
ModifyWorldTransform
SetGraphicsMode
CreateRectRgn
GetPixel
Polygon
CreatePolygonRgn
GetTextColor
FillRgn
FrameRgn
GetClipBox
RoundRect

msimg32

AlphaBlend
GradientFill

wininet

InternetGetConnectedState

gdiplus

GdipCreateFromHDC
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipDeleteGraphics
GdipDrawImageI
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipDisposeImage
GdipCloneImage
GdipCreateStringFormat
GdipCreateFromHWNDICM
GdipDrawString
GdipCreateFontFamilyFromName
GdipCreateFont
GdipFillRectangleI
GdipCreateBitmapFromScan0
GdipMeasureString
GdipGetImageGraphicsContext
GdipCreateFromHWND
GdipSetStringFormatAlign

wsock32

WSAStartup
listen
bind
htonl
__WSAFDIsSet
accept
ntohs
ntohl
closesocket
shutdown
WSAGetLastError
select
recv
WSACleanup
socket
gethostbyname
ioctlsocket
getsockopt
connect
inet_ntoa
htons
send
setsockopt

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.secure
Size: 512B - Virtual size: 63B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 65B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 279KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

35a493b125249f1c11e8c56065069193

Headers

DLL Characteristics

File Characteristics

Imports

winmm

version

comdlg32

winspool.drv

rpcrt4

kernel32

user32

advapi32

ole32

shell32

oleaut32

shlwapi

comctl32

gdi32

msimg32

wininet

gdiplus

wsock32

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.secure Size: 512B - Virtual size: 63B

.rdata Size: 235KB - Virtual size: 235KB

.data Size: 36KB - Virtual size: 53KB

.tls Size: 512B - Virtual size: 65B

.rsrc Size: 279KB - Virtual size: 278KB

.reloc Size: 80KB - Virtual size: 79KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.secure
Size: 512B - Virtual size: 63B

.rdata
Size: 235KB - Virtual size: 235KB

.data
Size: 36KB - Virtual size: 53KB

.tls
Size: 512B - Virtual size: 65B

.rsrc
Size: 279KB - Virtual size: 278KB

.reloc
Size: 80KB - Virtual size: 79KB