4d9dfce882c849c41895e322cf92ddaf3b07896e40d9fad1d36db4bc8333362d

Sharing

Copy URL

Twitter E-mail

General

Target

4d9dfce882c849c41895e322cf92ddaf3b07896e40d9fad1d36db4bc8333362d
Size

416KB
MD5

6cf5d46da29401a9c512062bea46a920
SHA1

5aceba83a63de1967867940832c9969f55a86d40
SHA256

4d9dfce882c849c41895e322cf92ddaf3b07896e40d9fad1d36db4bc8333362d
SHA512

dd5befce404d45ef570b69f0b90d5df38456905fbd44d46e992976b6277dbaf2dffbdf71916b6fe1ee7cd872d3f1522cfef337a9a2c7631c671e14d457185ceb
SSDEEP

6144:w8uZLW4NtAOZc9HVakI9ZXQ9paTccn3paTccnf:w8mLptCakIDg9gTtn3gTtnf

Score

N/A

Malware Config

Signatures

Files

4d9dfce882c849c41895e322cf92ddaf3b07896e40d9fad1d36db4bc8333362d
.exe windows x86

8f78dc60cfc09bcb91b47b142c75906f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetKeyboardType
RegisterClassW
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PostMessageA
PeekMessageW
PeekMessageA
OpenClipboard
OffsetRect
OemToCharA
MsgWaitForMultipleObjects
MessageBoxW
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyW
MapVirtualKeyA
LoadStringA
LoadKeyboardLayoutA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsDialogMessageA
IsChild
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
GetWindowThreadProcessId
GetWindowTextLengthW
GetWindowTextW
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetWindow
GetMessagePos
GetMenuStringW
GetMenuStringA
GetMenuState
GetMenuItemInfoW
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameA
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameW
GetClassNameA
GetClassLongA
GetClassInfoW
GetClassInfoA
GetCapture
GetActiveWindow
FrameRect
FindWindowA
FillRect
ExitWindowsEx
EqualRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefWindowProcA
DefMDIChildProcW
DefMDIChildProcA
DefFrameProcW
DefFrameProcA
CreatePopupMenu
CreateMenu
CreateMDIWindowW
CreateIcon
CloseClipboard
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
CharUpperBuffW
CharPrevW
CharNextW
CharLowerBuffW
CallWindowProcW
CallWindowProcA
CallNextHookEx
BringWindowToTop
BeginPaint
AttachThreadInput
CharPrevA
CharNextA
CharLowerBuffA
CharLowerA
CharUpperBuffA
CharToOemA
AdjustWindowRectEx
ActivateKeyboardLayout

shell32

ShellExecuteW
ShellExecuteA
SHGetSpecialFolderPathW
SHGetPathFromIDListA
SHGetMalloc
SHGetDesktopFolder
SHBrowseForFolderA

ole32

CoCreateGuid
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
ProgIDFromCLSID
StringFromCLSID
CoCreateInstance
CoUninitialize
CoInitializeEx
CoInitialize

advapi32

RegFlushKey
AllocateAndInitializeSid
EqualSid
FreeSid
GetTokenInformation
LookupPrivilegeValueA
OpenProcessToken
OpenThreadToken
RegCloseKey
DecryptFileW
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
AdjustTokenPrivileges

wininet

InternetOpenUrlW
InternetOpenW
InternetCloseHandle
InternetReadFile

comctl32

ord17
ImageList_Create
ImageList_Destroy
ImageList_GetImageCount
ImageList_SetImageCount
ImageList_Add
ImageList_SetBkColor
ImageList_Draw
ImageList_Replace
ImageList_DrawEx
ImageList_Remove
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_GetDragImage
ImageList_Read
ImageList_Write
ImageList_GetIconSize
ImageList_SetIconSize
_TrackMouseEvent
ImageList_GetBkColor

version

VerQueryValueW
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoW
GetFileVersionInfoA

kernel32

WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualAlloc
SizeofResource
SetThreadLocale
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
ReleaseMutex
ReadFile
MultiByteToWideChar
MulDiv
LockResource
LocalFree
LoadResource
LoadLibraryW
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalLock
GlobalGetAtomNameA
GlobalFree
GlobalFindAtomA
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetVersionExA
GetVersion
GetUserDefaultLangID
GetTickCount
GetThreadLocale
GetTempPathW
GetTempPathA
GetStringTypeExW
GetStringTypeExA
GetStdHandle
GetProcAddress
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameW
GetFullPathNameA
GetFileAttributesW
GetFileAttributesA
GetExitCodeThread
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCurrentThread
WriteFile
GetComputerNameA
GetCommandLineW
GetCPInfo
GetACP
FreeResource
FreeLibrary
FormatMessageW
FormatMessageA
FindResourceA
FindFirstFileW
FindFirstFileA
FindClose
EnumCalendarInfoA
EnterCriticalSection
DeleteFileW
DeleteFileA
DeleteCriticalSection
CreateThread
CreateMutexA
CreateFileW
CreateFileA
CreateEventA
CreateDirectoryW
CreateDirectoryA
CompareStringW
CompareStringA
GetNamedPipeHandleStateW
FindFirstVolumeA
IsBadCodePtr
SystemTimeToTzSpecificLocalTime
GetPrivateProfileStringA
HeapWalk
SetTimerQueueTimer
GetCurrentProcessId
OpenProcess
VirtualAllocEx
CloseHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
WritePrivateProfileStringA
lstrcmpA
lstrcpyA
lstrlenW
LocalAlloc
TlsGetValue
TlsSetValue
GetFileType
GetFileSize
RaiseException
RtlUnwind
UnhandledExceptionFilter
ExitThread
ExitProcess
GetCommandLineA
GetStartupInfoA
SetEnvironmentVariableA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
lstrcpynA
lstrlenA
VirtualFree
Sleep
GetTimeFormatA
GetSystemTimeAsFileTime
InterlockedIncrement
InterlockedDecrement
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsAlloc
TlsFree
HeapFree
GetTimeZoneInformation
LCMapStringW
LCMapStringA
HeapAlloc
QueryPerformanceCounter
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
HeapSize
GetCurrentProcess
HeapReAlloc

Sections

.text
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 121KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f78dc60cfc09bcb91b47b142c75906f

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

ole32

advapi32

wininet

comctl32

version

kernel32

Sections

.text Size: 105KB - Virtual size: 105KB

.rdata Size: 36KB - Virtual size: 36KB

.data Size: 121KB - Virtual size: 149KB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: 105KB - Virtual size: 105KB

.rdata
Size: 36KB - Virtual size: 36KB

.data
Size: 121KB - Virtual size: 149KB

.rsrc
Size: 20KB - Virtual size: 19KB