74b3f40a78a5323edc9973dae01b2f29a7900db5ebad41650a5602f824c67893

Sharing

Copy URL Twitter E-mail

General

Target

74b3f40a78a5323edc9973dae01b2f29a7900db5ebad41650a5602f824c67893
Size

721KB
MD5

6690b18cc2b460d19cdf6f5df255b590
SHA1

37722b924b1dc6ed9e25a3b657ba49253392c3d2
SHA256

74b3f40a78a5323edc9973dae01b2f29a7900db5ebad41650a5602f824c67893
SHA512

313e144c8d3a3ff9378223a1a1da487c7cdcc965ff5814e6467b5358a9b37b752dee035cf986d3f2a599d665d694ebb28753a5a16a761e6f7023af32d8901203
SSDEEP

12288:aSrE/5xiX9LPnP5xeplW8c+foWxbGkkO0+3B/0Xx3UT9MGki8PEKyYTdhLgd:14/EbkkO1/LMGypyYJi

Score

N/A

Malware Config

Signatures

Files

74b3f40a78a5323edc9973dae01b2f29a7900db5ebad41650a5602f824c67893
.exe windows x86

ffa0667aa1a6674f27a80ec2da98e675

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
lstrlenA
GetLastError
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrlenW
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
SetThreadAffinityMask
FileTimeToSystemTime
SetEvent
WaitForMultipleObjectsEx
ResetEvent
CreateEventW
SetFilePointer
SetEndOfFile
FreeLibrary
SystemTimeToTzSpecificLocalTime
GetCurrentProcess
CreateDirectoryW
WriteFile
LoadLibraryW
CopyFileW
FlushFileBuffers
GetProcAddress
MoveFileW
GetFileAttributesExW
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
FormatMessageA
GetCommandLineA
GetSystemDirectoryW
GetVolumeInformationA
GetSystemDirectoryA
GetModuleFileNameA
OutputDebugStringA
LocalFree
RaiseException
GetExitCodeThread
GetLocalTime
FindNextFileW
WideCharToMultiByte
CancelIo
GetUserDefaultLCID
VirtualFree
VirtualAlloc
GetOEMCP
GlobalAlloc
GlobalFree
DeviceIoControl
GetPrivateProfileStringW
FlushViewOfFile
GetOverlappedResult
lstrcmpA
LocalAlloc
FileTimeToLocalFileTime
lstrcpyW
CreateMutexW
OpenMutexW
GetVersionExW
GetTempPathW
GetPrivateProfileIntW
SetCurrentDirectoryW
GetCurrentThread
GetSystemTimeAsFileTime
GetThreadLocale
GetLocaleInfoA
GetACP
GetVersionExA
HeapSize
HeapReAlloc
HeapDestroy
InterlockedExchange
IsDebuggerPresent
ExitThread
Process32NextW
Process32FirstW
UnhandledExceptionFilter
FindClose
CreateFileW
ReadFile
TerminateProcess
MulDiv
GetFileAttributesW
OpenProcess
CreateThread
GetTimeFormatA
GetDateFormatA
GetStartupInfoW
RtlUnwind
GetModuleHandleA
ExitProcess
ReadFileEx
DeleteFileW
LCMapStringA
LCMapStringW
GetCPInfo
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetTickCount
FindFirstFileW
GetFileSize
ResumeThread
SuspendThread
GetCurrentProcessId
CloseHandle
GetCurrentThreadId
CreateToolhelp32Snapshot
LockResource
CreateFileMappingW
OpenThread
GetModuleFileNameW
Thread32Next
IsBadWritePtr
SizeofResource
Thread32First
GetProcessHeap
WaitForSingleObject
HeapFree
SetUnhandledExceptionFilter
HeapAlloc
CreateProcessW
LoadResource
FindResourceW
FindResourceExW
VirtualQuery
UnmapViewOfFile
MapViewOfFile
GetCommandLineW
GetModuleHandleW
SetEnvironmentVariableA
CreateFileA
SetLastError
GetStdHandle
HeapCreate
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
SetHandleCount
GetFileType
CompareStringW
CompareStringA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
LoadLibraryA
IsValidLocale
EnumSystemLocalesA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
GetStartupInfoA

user32

KillTimer
PostThreadMessageW
UnregisterClassA
DestroyWindow
EndPaint
SetCursor
SetTimer
PostQuitMessage
FillRect
PostMessageW
SetForegroundWindow
AttachThreadInput
LoadCursorW
GetClientRect
BeginPaint
GetForegroundWindow
RegisterClassExW
LoadIconW
InvalidateRect
BringWindowToTop
GetWindowLongW
SetWindowLongW
LoadBitmapW
CreateWindowExW
GetSystemMetrics
SendMessageW
UpdateWindow
EnableWindow
SetWindowTextW
DefWindowProcW
GetWindowThreadProcessId
MoveWindow
GetMessageW
TranslateMessage
DispatchMessageW
ShowWindow

gdi32

SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetTextExtentPointW
CreateFontW
CreatePen
TextOutW
GetTextColor
DeleteObject
SetBkMode
GetDeviceCaps
SetTextColor
LineTo
BitBlt
MoveToEx
DeleteDC
CreateSolidBrush

advapi32

BuildExplicitAccessWithNameW
SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
RegOpenKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW

shell32

SHCreateDirectoryExW
ShellExecuteW
SHGetSpecialFolderPathW

oleaut32

OleLoadPicturePath

shlwapi

PathIsDirectoryW
PathFileExistsW
PathFileExistsA

ws2_32

WSAAsyncSelect
WSACancelAsyncRequest
WSAAsyncGetHostByName
WSAIoctl
recvfrom
WSAEventSelect
WSAWaitForMultipleEvents
ioctlsocket
connect
select
WSAGetLastError
WSACleanup
bind
__WSAFDIsSet
send
getsockopt
getsockname
htons
setsockopt
sendto
socket
closesocket
ntohs
inet_addr
inet_ntoa
gethostbyname
ntohl
htonl
WSAStartup
recv

msimg32

GradientFill

iphlpapi

GetAdaptersInfo

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

crypt32

CryptMsgGetParam
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetNameStringW
CryptQueryObject
CryptDecodeObject
CryptMsgClose

Sections

.text
Size: 472KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 40KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ffa0667aa1a6674f27a80ec2da98e675

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

oleaut32

shlwapi

ws2_32

msimg32

iphlpapi

version

crypt32

Sections

.text Size: 472KB - Virtual size: 468KB

.rdata Size: 80KB - Virtual size: 78KB

.data Size: 40KB - Virtual size: 93KB

.rsrc Size: 120KB - Virtual size: 120KB

.text
Size: 472KB - Virtual size: 468KB

.rdata
Size: 80KB - Virtual size: 78KB

.data
Size: 40KB - Virtual size: 93KB

.rsrc
Size: 120KB - Virtual size: 120KB