9e705bed8069378dd938ef1100dba10ee19e7ac7c85c08f021101265115dba0f

Sharing

Copy URL

Twitter E-mail

General

Target

9e705bed8069378dd938ef1100dba10ee19e7ac7c85c08f021101265115dba0f
Size

1.3MB
MD5

4930a59befd86bd310933f32045a9efb
SHA1

bd9841fd405d20f62e2592ab53fb100655178479
SHA256

9e705bed8069378dd938ef1100dba10ee19e7ac7c85c08f021101265115dba0f
SHA512

12c871870c3e5c3a2ccd1ec4a811b5c6cb763f9725d235ae936367f2addf754960304f6b05b5f88a2553546091403a51dd64dad124af4107c978820cb591f316
SSDEEP

12288:U9xOCDp7jnLQrf6Roo/e52vxKpynSK3yDdPGMGydnUVnp2VihITsTTVqy6:UaCDpr4f6RE52vcM+dPJNUtthITg5ql

Score

N/A

Malware Config

Signatures

Files

9e705bed8069378dd938ef1100dba10ee19e7ac7c85c08f021101265115dba0f
.exe windows x86

e50d909d12d4b2d07e7b366b3bb91c0c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
GetWindowsDirectoryW
VirtualFree
VirtualAlloc
LocalFree
FormatMessageW
InterlockedCompareExchange
GetFileSizeEx
LocalAlloc
FlushFileBuffers
CreateFileA
InterlockedIncrement
InterlockedDecrement
OutputDebugStringW
GetDiskFreeSpaceExW
GetExitCodeThread
SleepEx
DuplicateHandle
TerminateThread
SetEnvironmentVariableA
GetLocaleInfoW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetCurrentDirectoryA
GetFullPathNameA
QueryPerformanceCounter
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
RaiseException
GetTimeZoneInformation
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStartupInfoA
GetStdHandle
SetHandleCount
HeapCreate
GetConsoleMode
GetConsoleCP
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
RtlUnwind
FindFirstFileA
GetDriveTypeA
FileTimeToLocalFileTime
ExitProcess
GetModuleHandleA
ExitThread
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
LoadLibraryA
GetThreadLocale
GetLocaleInfoA
GetACP
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
FreeLibrary
FreeResource
LoadLibraryW
SetLastError
GetCurrentThreadId
GetCommandLineW
GetFileSize
FlushInstructionCache
GetModuleFileNameW
InterlockedExchange
LeaveCriticalSection
GetPrivateProfileIntW
EnterCriticalSection
OpenProcess
RemoveDirectoryW
FindNextFileW
GetModuleFileNameA
WaitForMultipleObjects
SetFilePointer
SetEndOfFile
ResetEvent
SetEvent
CreateThread
CreateEventW
CreateDirectoryW
CopyFileW
GetFileAttributesW
SetFileAttributesW
QueryDosDeviceW
GetLogicalDriveStringsW
MoveFileW
ExpandEnvironmentStringsW
Module32NextW
Module32FirstW
CreateToolhelp32Snapshot
GetCurrentProcessId
ReleaseMutex
GetTickCount
DeleteCriticalSection
InitializeCriticalSection
GetLocalTime
GetPrivateProfileStringW
GetFileType
GetCurrentProcess
CreateMutexW
MultiByteToWideChar
WriteFile
lstrlenA
ReadFile
Sleep
WaitForSingleObject
FindClose
CreateProcessW
FindFirstFileW
GetStartupInfoW
DeleteFileW
FindResourceW
GetSystemDefaultLangID
GetLastError
GetVersionExW
GetSystemInfo
GetModuleHandleW
GetProcAddress
WideCharToMultiByte
lstrlenW
GetSystemDirectoryW
CloseHandle
FileTimeToSystemTime
CreateFileW
FindResourceExW
LoadResource
LockResource
SizeofResource

user32

GetMonitorInfoW
IntersectRect
KillTimer
ClientToScreen
GetNextDlgTabItem
SetRect
GetWindow
DestroyWindow
GetDesktopWindow
GetWindowLongW
CreateWindowExW
MonitorFromWindow
BeginPaint
SetFocus
InflateRect
GetDlgCtrlID
MapWindowPoints
DefWindowProcW
LoadCursorW
PostMessageW
RegisterClassExW
IsWindow
GetWindowRect
GetActiveWindow
GetClassInfoExW
LoadIconW
GetWindowThreadProcessId
GetForegroundWindow
GetClientRect
SystemParametersInfoW
AttachThreadInput
SetForegroundWindow
IsWindowEnabled
RegisterWindowMessageW
SetActiveWindow
SetWindowLongW
SendMessageW
SetWindowPos
FindWindowW
InvalidateRect
GetDC
MoveWindow
ReleaseDC
CopyRect
GetParent
ExitWindowsEx
PostThreadMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
GetCursorPos
OffsetRect
ScreenToClient
SetCapture
DrawTextW
DrawFrameControl
UnionRect
ShowWindow
EqualRect
SetTimer
CallWindowProcW
GetFocus
ReleaseCapture
IsChild
UpdateLayeredWindow
IsWindowVisible
IsDialogMessageW
GetDlgItem
LoadImageW
SetRectEmpty
IsRectEmpty
SetCursor
PtInRect
EndPaint
DrawIconEx
DestroyIcon
EnableWindow
UnregisterClassA

gdi32

GetStockObject
RectInRegion
CreateRoundRectRgn
GetObjectW
OffsetRgn
CreateRectRgnIndirect
GetTextExtentPoint32W
LineTo
MoveToEx
TextOutW
SetTextColor
CreatePen
RoundRect
CreateDIBSection
Rectangle
CombineRgn
CreateFontIndirectW
ExtSelectClipRgn
GetClipRgn
BitBlt
SetViewportOrgEx
DeleteDC
GetViewportOrgEx
ExtTextOutW
SetBkColor
GetTextColor
SelectObject
RestoreDC
CreateCompatibleDC
SaveDC
GetCurrentObject
SelectClipRgn
GetDeviceCaps
DeleteObject
CreateRectRgn
SetBkMode

advapi32

RegOpenKeyExA
RegCreateKeyExW
RegOpenKeyW
RegQueryValueExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
LookupPrivilegeValueW
OpenProcessToken
AdjustTokenPrivileges
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW

shell32

ShellExecuteW

shlwapi

PathAddBackslashW
StrToIntA
PathFindFileNameW
PathAppendW
PathFileExistsW
PathRemoveFileSpecW
StrToIntW

comctl32

_TrackMouseEvent

msimg32

AlphaBlend

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

gdiplus

GdipDeletePath
GdipCreatePen1
GdipDeleteFont
GdipSetClipPath
GdipCreateSolidFill
GdipCreatePath
GdipGetFontSize
GdipSetStringFormatTrimming
GdipCreateFont
GdipSetPenEndCap
GdipLoadImageFromFile
GdipSetPenStartCap
GdipCreateFontFromLogfontW
GdipDrawLinesI
GdipDrawLineI
GdipDrawImageRectRectI
GdipDrawLine
GdipDeletePen
GdipSetStringFormatLineAlign
GdipCreateBitmapFromScan0
GdipDrawImageRectRect
GdipSetStringFormatAlign
GdipAddPathPieI
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipDrawImageRectI
GdipDrawImageI
GdipCreateStringFormat
GdiplusShutdown
GdipAddPathRectangleI
GdiplusStartup
GdipPrivateAddFontFile
GdipRotateWorldTransform
GdipDeletePrivateFontCollection
GdipNewPrivateFontCollection
GdipTranslateWorldTransform
GdipMeasureString
GdipResetWorldTransform
GdipDrawString
GdipSetPixelOffsetMode
GdipSetPenDashStyle
GdipCloneFontFamily
GdipSetSmoothingMode
GdipCreateLineBrushFromRectWithAngleI
GdipGetFontCollectionFamilyList
GdipGetFontCollectionFamilyCount
GdipSetInterpolationMode
GdipSetImageAttributesColorMatrix
GdipFillPath
GdipDisposeImageAttributes
GdipSetTextRenderingHint
GdipCreateImageAttributes
GdipAddPathArcI
GdipDisposeImage
GdipSetCompositingQuality
GdipFillRectangleI
GdipGetImageHeight
GdipFillRectangle
GdipSetPenMode
GdipGetImageWidth
GdipGraphicsClear
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipClosePathFigure
GdipAlloc
GdipCreateFromHDC
GdipCloneImage
GdipDrawPath
GdipFree
GdipDeleteFontFamily
GdipCloneBrush
GdipGetFamily
GdipAddPathStringI
GdipDeleteBrush
GdipDrawRectangleI

ws2_32

connect
__WSAFDIsSet
WSASetLastError
ioctlsocket
WSAStartup
socket
closesocket
gethostbyname
WSACleanup
inet_ntoa
WSAGetLastError
recv
send
getsockname
ntohs
bind
htons
getsockopt
setsockopt
select

Sections

.text
Size: 756KB - Virtual size: 754KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 416KB - Virtual size: 414KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e50d909d12d4b2d07e7b366b3bb91c0c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

comctl32

msimg32

version

gdiplus

ws2_32

Sections

.text Size: 756KB - Virtual size: 754KB

.rdata Size: 152KB - Virtual size: 150KB

.data Size: 16KB - Virtual size: 24KB

.rsrc Size: 416KB - Virtual size: 414KB

.text
Size: 756KB - Virtual size: 754KB

.rdata
Size: 152KB - Virtual size: 150KB

.data
Size: 16KB - Virtual size: 24KB

.rsrc
Size: 416KB - Virtual size: 414KB