a35bfdd660af95c7643933980bc58ff7ea98d527956cccc8014f27bd26b26645

Sharing

Copy URL Twitter E-mail

General

Target

a35bfdd660af95c7643933980bc58ff7ea98d527956cccc8014f27bd26b26645
Size

167KB
MD5

ecfc97716a5004d47606b5a8e924cf4f
SHA1

9c3f2e29b42352c615f9c0aab839ccb8d01e1bd0
SHA256

a35bfdd660af95c7643933980bc58ff7ea98d527956cccc8014f27bd26b26645
SHA512

bf5b7cf7a8f1d1c8735310fbf0473920aa0c01d65ef910f7bc5f87e525c8f4d68bed16a519481782dd56fbeb6d914a716000adda2dbbbebd3f8d23c33005969f
SSDEEP

3072:ecWchz7nia6DN/94tvB9s+rEm7bLnYcV3Y0SKYezq2X:ecWcBnHyV4tJTDBSXed

Score

N/A

Malware Config

Signatures

Files

a35bfdd660af95c7643933980bc58ff7ea98d527956cccc8014f27bd26b26645
.exe windows x86

f806a9afcd8382693fc463a4744dcc31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

CStdStubBuffer_AddRef
CStdStubBuffer_Connect

kernel32

FindResourceExW
UnmapViewOfFile
IsBadWritePtr
GetSystemTime
CreateThread
GetStdHandle
VirtualFree
CreatePipe
GetWindowsDirectoryA
ResumeThread
lstrcmpA
GetCurrentThread
VirtualProtect
SetThreadLocale
GlobalFlags
UnlockFile
PulseEvent
SetupComm
GetWindowsDirectoryW
lstrlenW
FlushViewOfFile
GetDateFormatA
GetCommModemStatus
MoveFileExW
LocalLock
CreateRemoteThread
IsDBCSLeadByteEx
ReleaseMutex
GetNumberFormatW
CancelIo
FindCloseChangeNotification
GetFileSize
LoadResource
GetThreadTimes
EscapeCommFunction
GetFullPathNameW
LCMapStringW
GetAtomNameA
LocalFree
FindResourceExA
LockResource
SetCurrentDirectoryW
lstrlenA
GetComputerNameW
GlobalDeleteAtom
FileTimeToLocalFileTime
GetFileType
GetModuleHandleW
IsDBCSLeadByte
DisconnectNamedPipe
GetFileInformationByHandle
HeapWalk
CreateEventW
CompareStringA
SearchPathA
SystemTimeToFileTime
HeapUnlock
GetProfileIntA
GlobalSize
LockFile
GetTempPathA
LocalReAlloc
SetThreadPriority
CreateMailslotW
SetTimerQueueTimer
RemoveDirectoryW
GetSystemInfo
MoveFileA
FileTimeToSystemTime
FindClose
CreateMutexA
FoldStringW
IsBadStringPtrW
GetTempFileNameW
SetLocalTime
SetLastError
GetCurrentThreadId
GetLocaleInfoW
GetVersionExW
RtlUnwind
SetNamedPipeHandleState
SetFileAttributesA
SetFileAttributesW
GetFullPathNameA
DuplicateHandle
FreeResource
EnumResourceLanguagesA
GetFileAttributesExW
lstrcmpiA
DeleteFileA
FormatMessageA
LeaveCriticalSection
GetTimeZoneInformation
CreateSemaphoreW
GetCPInfo
GlobalReAlloc
lstrcpynA
GetTimeFormatA
GetModuleFileNameW
GetShortPathNameA
GlobalMemoryStatusEx
VirtualQuery
CreateWaitableTimerW
FindFirstFileA
CreateFileW
CreateNamedPipeW
GetComputerNameExA
RemoveDirectoryA
RegisterWaitForSingleObject
lstrcpyA
GetOverlappedResult
WaitForSingleObject
InitializeCriticalSection
TlsGetValue

gdi32

GetObjectA
MoveToEx
LineTo
TextOutW
ScaleWindowExtEx
GetCharWidth32W
LineDDA
RealizePalette
PatBlt
CreateHatchBrush
SetDIBitsToDevice
SetTextColor
GetTextExtentPoint32W
GetBitmapBits
GetTextMetricsW
StretchBlt
CreatePenIndirect
GetPaletteEntries
CreateHalftonePalette
SetLayout
EndDoc
SetViewportExtEx
CreateSolidBrush
TextOutA
CombineRgn
IntersectClipRect
ExtFloodFill
GetTextMetricsA
CreateBitmap
RectInRegion
GetDIBColorTable
GetTextExtentPointA
EndPage
SetRectRgn
CreatePatternBrush
BitBlt
RemoveFontResourceW
SetBrushOrgEx
SetViewportOrgEx
GetDIBits
GetTextExtentPoint32A
GetViewportOrgEx
ExtTextOutA
PolyBezier
GetSystemPaletteUse
GetDeviceCaps
SetTextAlign
TranslateCharsetInfo
ResizePalette
GetROP2
RestoreDC
GetTextAlign

user32

ModifyMenuW
CharNextExA
CharLowerA
LockWindowUpdate
GetWindowLongA
CreateDialogParamA
CreateCaret
SendMessageTimeoutW
IsDlgButtonChecked
IsWindow
CheckMenuRadioItem
CharPrevA
LoadMenuA
SetRect
GetKeyboardLayoutNameW
GetCursorPos
DrawTextA
CharUpperBuffW
GetUpdateRgn
DrawStateA
WindowFromPoint
GetDlgCtrlID
SwitchToThisWindow
DrawTextW
GetUserObjectInformationA
LoadAcceleratorsA
FindWindowW
DefWindowProcW
TranslateAcceleratorW
ShowWindow
ValidateRect
SystemParametersInfoW
AppendMenuW
ArrangeIconicWindows
SetDlgItemTextW
SetCaretPos
CheckDlgButton
GetClipCursor
PostQuitMessage
CopyRect
GetMenuItemCount
CreateWindowExA
DrawAnimatedRects
DispatchMessageA
GetFocus
SetMenuItemBitmaps
CheckRadioButton
ShowWindowAsync
InsertMenuW
FindWindowA
RegisterHotKey
GetMenuItemInfoW
GetClassInfoW
GetUserObjectInformationW
DrawMenuBar
PtInRect
SendNotifyMessageW
LookupIconIdFromDirectory
GetClassInfoA
CallWindowProcW
CharUpperBuffA
GetMenuItemID
GetClassLongW
SetWindowTextA
TrackPopupMenu
SetActiveWindow
IsRectEmpty
MessageBoxW
ChildWindowFromPointEx
ReplyMessage
MapVirtualKeyExW
GetMessageExtraInfo
LoadStringA
CharToOemBuffA
InvalidateRect
GetClientRect
GetWindowLongW
GetDCEx
DefDlgProcW
CopyImage
GetMessageW
EnableMenuItem
HideCaret
InSendMessageEx
TabbedTextOutW
GetNextDlgTabItem
DragObject
GetMessagePos
SetWindowLongA
CallWindowProcA
DestroyIcon
UpdateWindow
OemToCharA
GetMessageTime
CreateWindowExW
DefWindowProcA
EnumThreadWindows
GetDesktopWindow
SystemParametersInfoA
GetClassInfoExW
InsertMenuA
RedrawWindow
RemoveMenu
FindWindowExA
DefFrameProcW
CharToOemA
DestroyCursor
PeekMessageA
SetWindowTextW
DestroyCaret
ShowCursor
CreatePopupMenu
DrawEdge
UnloadKeyboardLayout
GetClassLongA
SetScrollInfo

ole32

CoInitialize

Exports

Exports

PenExW

Sections

.text
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Agio
Size: 10KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Much
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lex
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sat
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fix
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oypac
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jibmed
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f806a9afcd8382693fc463a4744dcc31

Headers

DLL Characteristics

File Characteristics

Imports

rpcrt4

kernel32

gdi32

user32

ole32

Exports

Exports

Sections

.text Size: 127KB - Virtual size: 126KB

.Agio Size: 10KB - Virtual size: 13KB

.Much Size: 512B - Virtual size: 32B

.lex Size: 512B - Virtual size: 32B

.sat Size: 512B - Virtual size: 32B

.fix Size: 512B - Virtual size: 32B

.oypac Size: 512B - Virtual size: 368B

.jibmed Size: 22KB - Virtual size: 22KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 127KB - Virtual size: 126KB

.Agio
Size: 10KB - Virtual size: 13KB

.Much
Size: 512B - Virtual size: 32B

.lex
Size: 512B - Virtual size: 32B

.sat
Size: 512B - Virtual size: 32B

.fix
Size: 512B - Virtual size: 32B

.oypac
Size: 512B - Virtual size: 368B

.jibmed
Size: 22KB - Virtual size: 22KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 4KB - Virtual size: 3KB