56f3eed01139e537b6a36969b07a7aa33addae28dd51ac3116a5e202bbe55e77

Sharing

Copy URL

Twitter E-mail

General

Target

56f3eed01139e537b6a36969b07a7aa33addae28dd51ac3116a5e202bbe55e77
Size

441KB
MD5

66100bd382b6fe6ca3339bc59ba3e170
SHA1

d678a79ef7e47d7e997e0ab08f62e7a344bc6151
SHA256

56f3eed01139e537b6a36969b07a7aa33addae28dd51ac3116a5e202bbe55e77
SHA512

654652af654ad39097ac9f87107f0856231e72ed4b8e60c3f7abd28c0ec5972d81e4e9c537719a747150f460c29b9804c71f0ed93afc6c30df8929b0e3de26e8
SSDEEP

6144:dCDndPRFeGvCJn0iOuFlN2oHf06ANdFosOi3WgglxV:dgPrcDHHf06AN5SP

Score

N/A

Malware Config

Signatures

Files

56f3eed01139e537b6a36969b07a7aa33addae28dd51ac3116a5e202bbe55e77
.exe windows x86

fc5c55ecfc1dad29436f940ccc111bfa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

WindowFromPoint
GetKeyboardType
GetKeyboardLayoutNameA
FindWindowExW
SendNotifyMessageW
GetWindowRgn
GetKeyboardState
GetAncestor
DdeInitializeW
CreateCaret
CreateIconFromResourceEx
GetWindow
AdjustWindowRectEx
SetCaretPos
CharLowerBuffA
SetDlgItemTextA
OemToCharW
KillTimer
GetProcessWindowStation
DrawCaption
ToAsciiEx
GetTabbedTextExtentA
GetSysColor
CharLowerBuffW
SetThreadDesktop
EnumDisplayMonitors
GetKeyNameTextW
FindWindowW
SendMessageCallbackW
GetDCEx
InsertMenuW
DestroyWindow
CallWindowProcW
GetMenuItemInfoW
GetMessageA
GetLastInputInfo
GetMenuItemRect
EnableWindow
CheckMenuRadioItem
WinHelpW
WindowFromDC
GetClipboardViewer
GetAltTabInfoA
EmptyClipboard
TabbedTextOutW
GetDlgCtrlID
OemToCharA
GetMenuContextHelpId
GetSystemMenu
CreateDialogIndirectParamA
ShowCursor
LockWorkStation
RealGetWindowClassW
UnloadKeyboardLayout
GetMenuItemID
GetScrollRange
CallWindowProcA
OemToCharBuffA
GetWindowTextLengthW
LoadMenuIndirectA
SetWindowPlacement
ValidateRect
GetListBoxInfo
GetClipboardData
GetDlgItemTextW
ActivateKeyboardLayout
GetDlgItem
InflateRect
TranslateAcceleratorW
LoadBitmapA
GetScrollPos
GetMessagePos
GetUserObjectSecurity
SetDlgItemInt
ScreenToClient
GetWindowInfo
GetWindowPlacement
FlashWindowEx
LoadAcceleratorsW
GetShellWindow
GetClipCursor
EnumDesktopWindows
InvalidateRect
SetMenu
GetUserObjectInformationW
SwitchDesktop
GetKeyboardLayout
CloseWindowStation
WaitForInputIdle
EnumThreadWindows
GetClassInfoExA
ChildWindowFromPointEx
GetSysColorBrush
ShowScrollBar
SetPropW
DrawFrameControl
LoadImageA
RemoveMenu
SetDebugErrorLevel
OpenClipboard
wvsprintfA
GetWindowRect
CreateAcceleratorTableA
CreateIcon
MoveWindow
PostThreadMessageW
EnumPropsA
GetComboBoxInfo
CharNextA
IsRectEmpty
PrivateExtractIconsW
LoadKeyboardLayoutW
RealGetWindowClassA
EnableScrollBar
GetMenuItemInfoA
EnumPropsExW
IsCharUpperW
TranslateMessage
DefFrameProcW
ChildWindowFromPoint
LoadCursorA
RemovePropW
MapDialogRect
RegisterHotKey
SetCursorPos
IsCharUpperA
MonitorFromPoint
GetKeyboardLayoutNameW
CopyAcceleratorTableA
CharToOemBuffA
DialogBoxParamA
DefWindowProcA
SetCaretBlinkTime
PrintWindow
GetClassNameW
GetCursor
OffsetRect
RegisterWindowMessageA
FlashWindow
CharToOemA
SetWindowWord
RegisterDeviceNotificationW
ToUnicodeEx
DialogBoxIndirectParamW
LoadBitmapW
GetWindowTextLengthA
GetPropA

shell32

Shell_NotifyIconA
ShellAboutA
ShellExecuteExA
DragFinish
DoEnvironmentSubstW
FindExecutableW

ole32

OleRegGetUserType
StgGetIFillLockBytesOnFile
CoFreeLibrary
CoRevertToSelf
CoCreateInstanceEx
GetRunningObjectTable
StgCreateDocfile
CreateILockBytesOnHGlobal
HICON_UserFree
CLSIDFromProgIDEx
OleCreateLinkFromDataEx
IIDFromString
OleRegGetMiscStatus

advapi32

RegQueryMultipleValuesW
IsValidSecurityDescriptor
ReadEventLogW
OpenThreadToken
RegCloseKey
SetSecurityDescriptorSacl
RevertToSelf
ObjectCloseAuditAlarmA
RegSetValueW

gdi32

AddFontMemResourceEx
CopyEnhMetaFileA
AbortPath
AnimatePalette
CreateDIBPatternBrushPt
CreateCompatibleDC
ChoosePixelFormat
AddFontResourceA

comctl32

GetMUILanguage
PropertySheetW
ImageList_EndDrag
ImageList_LoadImageW
InitMUILanguage
ImageList_SetIconSize
ImageList_SetDragCursorImage
CreatePropertySheetPageA
ImageList_DrawIndirect
CreateStatusWindowW

oleaut32

SetErrorInfo

kernel32

FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
WriteFile
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
ExitProcess
HeapAlloc
GetTimeZoneInformation
HeapFree
IsValidCodePage
GetOEMCP
GetCPInfo
GetCurrentThreadId
SetLastError
TlsFree
TlsAlloc
TlsGetValue
GetProcAddress
GetModuleHandleW
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
LeaveCriticalSection
EnterCriticalSection
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
InterlockedDecrement
InterlockedIncrement
GetDateFormatA
GetTimeFormatA
RtlUnwind
GetACP
GetLastError
GetVersion
ReadConsoleInputW
LoadLibraryW
CreateJobObjectA
GetLargestConsoleWindowSize
EndUpdateResourceA
BackupRead
GetEnvironmentStringsW
CreateActCtxW
AttachConsole
CommConfigDialogA
GetLocaleInfoA
GetCurrentActCtx
HeapQueryInformation
TlsSetValue
DeleteFileA
ReplaceFileA
GetProfileIntW
GlobalFix
GetLocaleInfoW
SearchPathA
EnumCalendarInfoW
SetFileApisToOEM
SetThreadContext
WideCharToMultiByte
GetConsoleWindow
ReadConsoleOutputCharacterA
UnhandledExceptionFilter
MoveFileExW
GetAtomNameW
GetVersionExA
GetModuleHandleA
GlobalAddAtomW
IsBadStringPtrA
GetMailslotInfo
GetDiskFreeSpaceW
GetPrivateProfileStringA
QueryInformationJobObject
GetCompressedFileSizeA
Sleep
AddVectoredExceptionHandler
OpenJobObjectW
ReadConsoleInputA
GetConsoleProcessList
GlobalFindAtomW
SetFileApisToANSI
IsWow64Process
GetEnvironmentStrings
FlushFileBuffers
GetFullPathNameA
CommConfigDialogW
SetSystemTime
GetConsoleCursorInfo
GetTapePosition
DeleteTimerQueueTimer
SetCriticalSectionSpinCount
GlobalReAlloc
SetCommTimeouts
GetCurrentProcessId
OpenProcess
VirtualAllocEx
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
VirtualAlloc
HeapReAlloc
LoadLibraryA
RaiseException
WriteConsoleA
SetStdHandle
GetConsoleOutputCP
WriteConsoleW
HeapSize
CloseHandle
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
EnumDateFormatsW

Sections

.text
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fc5c55ecfc1dad29436f940ccc111bfa

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

ole32

advapi32

gdi32

comctl32

oleaut32

kernel32

Sections

.text Size: 83KB - Virtual size: 82KB

.rdata Size: 51KB - Virtual size: 50KB

.data Size: 5KB - Virtual size: 29KB

.rsrc Size: 300KB - Virtual size: 300KB

.text
Size: 83KB - Virtual size: 82KB

.rdata
Size: 51KB - Virtual size: 50KB

.data
Size: 5KB - Virtual size: 29KB

.rsrc
Size: 300KB - Virtual size: 300KB