f25238eb79b365e3377144adfad866873a3c9c3f1497154cde610906281f1e99

Sharing

Copy URL Twitter E-mail

General

Target

f25238eb79b365e3377144adfad866873a3c9c3f1497154cde610906281f1e99
Size

250KB
MD5

60884043b6569e68fe8ae42c3b210bf0
SHA1

1e8d2d630098af27f75a5a25bcaa1b5f0533a728
SHA256

f25238eb79b365e3377144adfad866873a3c9c3f1497154cde610906281f1e99
SHA512

2ed0a3a1dfc829c8c32139a6918df7f681d9994c71350f7a9530b9e07c59568d65ae6323fbdea3805510bcdf4bd6c6fdd9cb254574877d86490a47121c44f2f6
SSDEEP

3072:bGxP7xX2S8vCweAsDHxdAD2wRo9vWA4UU75XsG/33t6CoxnJiEn86:CRIS86wellH4USckN6C1Q

Score

N/A

Malware Config

Signatures

Files

f25238eb79b365e3377144adfad866873a3c9c3f1497154cde610906281f1e99
.exe windows x86

8b45f8f29aad1339aa4f2b5ba43d7933

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowRect
GetClientRect
InvalidateRect
EnableWindow
LoadImageA
CopyRect
OffsetRect
PostMessageA
GetParent
MessageBoxA
LoadBitmapA
EnumWindowStationsW
OpenInputDesktop
DeferWindowPos
CharNextW
GetClipboardOwner
GetQueueStatus
ReleaseDC
SetWindowRgn
SendMessageA
GetTopWindow
ChangeDisplaySettingsExW
SetDebugErrorLevel
DdeSetUserHandle
VkKeyScanExW
BringWindowToTop
GetAltTabInfoA
GetWindowDC
GetWindowTextLengthW
DrawIcon
IsIconic
BeginPaint
GetDesktopWindow
LoadIconA
wsprintfA
DestroyCursor
SetCursor
CallWindowProcW
WinHelpW
SetActiveWindow
ReleaseCapture
SetCapture
SetParent
FindWindowExW
GetClassInfoW
UnregisterClassW
RegisterClassW
GetCursorPos
GetFocus
SetWindowPlacement
SystemParametersInfoW
FindWindowW
SetForegroundWindow
IntersectRect
DialogBoxParamW
CreateDialogIndirectParamW
CreateDialogParamW
LoadCursorW
LoadStringW
LoadMenuIndirectW
LoadMenuW
SetProcessDefaultLayout
LoadImageW
LoadIconW
LoadBitmapW
GetMenuStringW
ModifyMenuW
GetMenuItemInfoW
GetMenuState
DeleteMenu
CreateAcceleratorTableW
LoadAcceleratorsW
CharNextA
GetForegroundWindow
GetDlgItemTextW
IsDlgButtonChecked
GetAsyncKeyState
DestroyWindow
DialogBoxIndirectParamW
ShowWindow
GetSystemMenu
EnableMenuItem
SetDlgItemTextW
CheckDlgButton
CreateWindowExW
GetLastActivePopup
SetWindowsHookExW
MessageBoxW
GetClassNameW
CallNextHookEx
wsprintfW
SetWindowLongW
GetWindowLongW
InflateRect
GetWindowTextW
DrawTextW
DefWindowProcW
GetDlgItem
SetFocus
MapWindowPoints
MoveWindow
SetWindowTextW
SendMessageW
EndDialog
GetMessageW
TranslateMessage
DispatchMessageW
WaitForInputIdle
PostThreadMessageW
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetSysColor
EndPaint
GetDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
LoadCursorA
GetSysColorBrush
GetClassNameA
DestroyMenu
UnhookWindowsHookEx
GetSystemMetrics
ExitWindowsEx

urlmon

RegisterMediaTypes
CoInternetQueryInfo
RegisterBindStatusCallback
FindMediaType

shell32

SHGetSpecialFolderPathW
SHGetFolderPathW
SHGetPathFromIDListW
SHGetFileInfoW
Shell_NotifyIconA
SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteW
ExtractIconExA
DragAcceptFiles
ShellExecuteExW
FindExecutableA
ShellExecuteA
FindExecutableW
DoEnvironmentSubstW
SHBrowseForFolderW
DuplicateIcon

ole32

OleInitialize
CoCreateInstance
StringFromGUID2
CoInitialize
CoUninitialize
CoMarshalInterThreadInterfaceInStream
CoRegisterMessageFilter
OleLockRunning
OleConvertIStorageToOLESTREAMEx
CoGetClassObject
OleCreateFromFile
OleBuildVersion
OleSaveToStream
OleUninitialize

advapi32

GetSidSubAuthorityCount
RegQueryValueExW
ObjectCloseAuditAlarmA
RegisterEventSourceA
CloseServiceHandle
ObjectPrivilegeAuditAlarmW
ReadEventLogW
ObjectDeleteAuditAlarmA
AllocateLocallyUniqueId
LookupPrivilegeDisplayNameW
IsTextUnicode
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
AdjustTokenPrivileges
RegOpenKeyExA
OpenProcessToken
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
LookupPrivilegeValueA
RegOpenKeyExW
RegOpenKeyW
RegQueryValueW
RegSetValueW
RegDeleteKeyW
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW

gdi32

RectVisible
PtVisible
CreateCompatibleBitmap
GetObjectA
GetDIBits
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
GetStockObject
TextOutA
CreateRectRgn
CombineRgn
SelectObject
StretchBlt
BitBlt
GetBkColor
CreateCompatibleDC
CreateDIBSection
CreateDIBitmap
CheckColorsInGamut
CloseMetaFile
Chord
CreateDIBPatternBrushPt
ColorMatchToTarget
CopyEnhMetaFileA
ChoosePixelFormat
AddFontMemResourceEx
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
CreateBitmap
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
GetObjectW
CreateFontIndirectW
GetTextExtentPoint32W
CreateDCW
GetTextMetricsW
PatBlt
SelectPalette
RealizePalette
StretchDIBits
Rectangle
Polygon
MoveToEx
LineTo
ExtTextOutW
GetPixel
GetTextFaceW
GetDCOrgEx
GetTextExtentPointA
CreateFontW
CreatePen
CreateSolidBrush
CreatePatternBrush
CreateBitmapIndirect
GetNearestColor
GetTextCharset
CreateFontIndirectA
SetViewportExtEx

opengl32

glIndexiv
glTexCoord3iv
glEvalMesh1
glRasterPos3f
glVertex2fv
glTexImage1D
glLoadIdentity

dbghelp

DbgHelpCreateUserDumpW
SymGetSymNext64
SymGetSymFromName
FindExecutableImageEx
SymFunctionTableAccess64
SymMatchString
StackWalk

comctl32

_TrackMouseEvent

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

shlwapi

PathFindExtensionA
PathAppendW
StrCpyNW
PathFindFileNameA

winmm

sndPlaySoundW

kernel32

QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetErrorMode
CreateFileA
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
WritePrivateProfileStringA
GetThreadLocale
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentProcessId
CloseHandle
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GlobalAlloc
GetFileType
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
lstrcmpW
GlobalLock
GlobalUnlock
MulDiv
FreeLibrary
GetModuleFileNameW
SetLastError
GetModuleHandleA
GetProcAddress
lstrlenA
CompareStringA
GetVersion
MultiByteToWideChar
GetCurrentProcess
CreateProcessA
GetLastError
FormatMessageA
LocalFree
WaitForSingleObject
GetExitCodeProcess
GetSystemDirectoryA
GetModuleFileNameA
GetVersionExA
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
Sleep
GetStdHandle
VirtualFree
HeapCreate
HeapDestroy
GetACP
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapSize
ExitProcess
RaiseException
GetStartupInfoA
GetProcessHeap
GetCommandLineA
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
SetEnvironmentVariableA
CompareStringW
GetTimeZoneInformation
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
LoadLibraryW
GetModuleHandleW
GetFileAttributesW
CreateProcessW
CreateThread
MoveFileW
FatalAppExitA
SetConsoleCtrlHandler
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetFileSize
CreateFileW
OutputDebugStringA
GetShortPathNameW
FindClose
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
LoadLibraryExW
GlobalMemoryStatus
SetEndOfFile
VirtualQuery
FileTimeToSystemTime
GetDateFormatW
GetTimeFormatW
GetCurrentDirectoryW
ReleaseSemaphore
CreateSemaphoreW
GetSystemInfo
GetVersionExW
GlobalSize
FindNextFileW
IsBadReadPtr
GetNumberFormatW
EnumResourceLanguagesW
GetSystemDefaultLCID
SetThreadLocale
GetLocaleInfoW
GetUserDefaultUILanguage
FindResourceW
FindResourceExW
GetVolumeInformationW
SetFileTime
GetFileTime
CopyFileW
MoveFileExW
IsBadWritePtr
CreateDirectoryW
GetDiskFreeSpaceW
GetTempPathW
GetLocalTime
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetProfileIntW
GetProfileStringW
GetCommState
SetCommState
DeviceIoControl
GetFullPathNameW
lstrcmpiW
SetEvent
GetCommandLineW
GetWindowsDirectoryW
CreateEventW
FormatMessageW
RemoveDirectoryW
FindFirstFileW
SetFileAttributesW
DeleteFileW
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
IsValidLanguageGroup
QueryPerformanceFrequency
QueryDosDeviceW
SetVolumeLabelA
FindAtomW
ReadConsoleOutputA
VirtualFreeEx
VirtualAlloc
InitializeCriticalSectionAndSpinCount
GlobalFree

Sections

.text
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.johnny
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8b45f8f29aad1339aa4f2b5ba43d7933

Headers

DLL Characteristics

File Characteristics

Imports

user32

urlmon

shell32

ole32

advapi32

gdi32

opengl32

dbghelp

comctl32

version

shlwapi

winmm

kernel32

Sections

.text Size: 160KB - Virtual size: 159KB

.data Size: 6KB - Virtual size: 35KB

.johnny Size: 62KB - Virtual size: 61KB

.rsrc Size: 21KB - Virtual size: 20KB

.text
Size: 160KB - Virtual size: 159KB

.data
Size: 6KB - Virtual size: 35KB

.johnny
Size: 62KB - Virtual size: 61KB

.rsrc
Size: 21KB - Virtual size: 20KB