51ebca0f5bc7384e3b59c5b5ad5afabd9e47e8accebab7b543f4345bbb1374fc

Sharing

Copy URL Twitter E-mail

General

Target

51ebca0f5bc7384e3b59c5b5ad5afabd9e47e8accebab7b543f4345bbb1374fc
Size

835KB
MD5

6bc1acd5be60e7a30e4045f48303c460
SHA1

4da3cad4ae99c8ea26078fc1dfa1d808669179cd
SHA256

51ebca0f5bc7384e3b59c5b5ad5afabd9e47e8accebab7b543f4345bbb1374fc
SHA512

4eb88c10392b36a334a2f8947e53ecf0412a56c42a7895f56124e127ed32a1ba2515f2a4d43fbc72d6875046c92c843ba07cefd1e8c2b4ef80db843f43caf3c0
SSDEEP

24576:NLMqDhookQ5LknmiyA9mD+aLQ6NLQJHBBnpyT+NiLJ:NLL+ok8LkmyCJ6hBnpy

Score

N/A

Malware Config

Signatures

Files

51ebca0f5bc7384e3b59c5b5ad5afabd9e47e8accebab7b543f4345bbb1374fc
.exe windows x86

710648feb64911751b00b2cc7e6a18b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
GetTickCount
GetConsoleCursorInfo
VirtualProtect
GetModuleHandleA
SetStdHandle
GetStdHandle
GetConsoleCP
lstrcmpA
ExitProcess
LoadResource
FreeLibrary
InitializeCriticalSectionAndSpinCount
LoadLibraryA
OpenEventW
SetEndOfFile
FormatMessageW
GlobalFree
GetCurrentProcess
LoadLibraryExW
Process32FirstW
TerminateProcess
InterlockedDecrement
GetLastError
SetCurrentDirectoryW
UnhandledExceptionFilter
HeapFree
SetErrorMode
LoadLibraryW
IsDebuggerPresent
DuplicateHandle
HeapDestroy
HeapAlloc
SetFilePointer
Thread32Next
GlobalUnlock
WideCharToMultiByte
DeleteCriticalSection
GetFileSize
MulDiv
HeapSize
LockResource
HeapSetInformation
CreateFileW
LocalFree
EnterCriticalSection
GetProcessHeap
GetSystemDirectoryW
ResetEvent
ReadFile
DeviceIoControl
WaitForMultipleObjects
OutputDebugStringW
GetModuleFileNameW
CreateToolhelp32Snapshot
MultiByteToWideChar
GetStartupInfoW
WaitForSingleObject
InterlockedCompareExchange
WriteFile
SetLastError
GetProcAddress
OpenProcess
GetLogicalDriveStringsW
FindResourceExW
GetSystemTimeAsFileTime
GetFileAttributesExW
InterlockedExchange
Process32NextW
GetModuleHandleW
GetFullPathNameW
Sleep
Thread32First
QueryDosDeviceW
HeapReAlloc
VerSetConditionMask
IsProcessorFeaturePresent
GlobalLock
RaiseException
GlobalAlloc
GetFileAttributesW
GetVersion
LeaveCriticalSection
SizeofResource
GetExitCodeProcess
SetEvent
CloseHandle
LocalAlloc
InterlockedIncrement
GetCurrentProcessId
GetPrivateProfileIntW
QueryPerformanceCounter
VerifyVersionInfoW
CreateEventW
FindResourceW
CreateProcessW

user32

GetWindowRect
BeginPaint
ChangeDisplaySettingsW
ShowCaret
TranslateMessage
GetWindowTextW
GetMenuItemInfoW
UpdateWindow
DrawFocusRect
ChildWindowFromPoint
GetDesktopWindow
LoadIconW
SetClipboardData
GetCursorPos
SetWindowLongW
ShowWindow
SetFocus
CreateWindowExW
CreateAcceleratorTableW
GetSystemMenu
AdjustWindowRectEx
InsertMenuItemW
GetClassNameW
MoveWindow
DdeGetData
DdeConnect
CheckMenuItem
GetSubMenu
DestroyIcon
CallNextHookEx
RegisterClipboardFormatW
IsDialogMessageW
GetCapture
DeferWindowPos
GetClientRect
ReleaseCapture
GetWindowThreadProcessId
DdePostAdvise
DdeCmpStringHandles
SetCursor
GetWindowDC
CallWindowProcW
SetScrollInfo
CreateIconIndirect
ToUnicode
GetMessageTime
DrawFrameControl
FlashWindow
AppendMenuW
BeginDeferWindowPos
GetActiveWindow
DdeDisconnect
MsgWaitForMultipleObjects
DrawEdge
CreateDialogIndirectParamW
SystemParametersInfoW
LoadImageW
DdeInitializeW
GetMessagePos
LoadBitmapW
SetWindowsHookExW
ReleaseDC
ClientToScreen
keybd_event
KillTimer
DestroyWindow
ModifyMenuW
UnhookWindowsHookEx
CheckMenuRadioItem
SetWindowRgn
MessageBoxW
SetTimer
IsZoomed
MapWindowPoints
ScrollWindow
GetWindow
GetMenu
IsWindowEnabled
GetForegroundWindow
EnumDisplaySettingsW
CreatePopupMenu
GetClipboardData
SetMenu
PeekMessageW
RedrawWindow
EnableWindow
DrawTextW
IsClipboardFormatAvailable
DestroyCursor
PostQuitMessage
EnumThreadWindows
OpenClipboard
CreateMenu
CreateDialogParamW
DdeClientTransaction
DrawIconEx
ShowCursor
EndDeferWindowPos
LoadCursorFromFileW
GetWindowTextLengthW
InsertMenuW
GetKeyState
DdeCreateDataHandle
DestroyAcceleratorTable
DefWindowProcW
GetDoubleClickTime
GetWindowLongW
DdeQueryStringW
VkKeyScanW
GetMessageW
SetWindowPos
GetUpdateRgn
RegisterWindowMessageW
DdeFreeStringHandle
FindWindowExW
SetParent
SetWindowTextW
CloseClipboard
HideCaret
EnumClipboardFormats
DestroyMenu
GetAsyncKeyState
GetSysColor
DdeGetLastError
DrawMenuBar
TrackPopupMenu
SetForegroundWindow
GetMenuItemCount
PostMessageW
WindowFromPoint
DdeFreeDataHandle
GetFocus
GetIconInfo
InvalidateRect
GetKeyboardState
RemoveMenu
FillRect
OffsetRect
DdeCreateStringHandleW
MessageBeep
EndPaint
PostThreadMessageW
IsWindowVisible
DdeNameService
PtInRect
ValidateRect
GetMenuState
DrawIcon
GetUpdateRect
BringWindowToTop
CopyRect
UnregisterClassW
IsWindow
SetCursorPos
DdeUninitialize
WaitForInputIdle
DispatchMessageW
EndDialog
GetParent
SendMessageW
GetScrollInfo
EnumWindows
DrawStateW
GetDC
EnableMenuItem
GetClassInfoW
SetCapture
UnionRect
ExitWindowsEx
ScreenToClient
GetSystemMetrics
IsIconic
GetClipboardFormatNameW
SetMenuItemInfoW
InflateRect
TranslateAcceleratorW
EmptyClipboard

gdi32

GetTextMetricsW
GetRgnBox
SetROP2
RestoreDC
SetMetaFileBitsEx
SetBkMode
GetClipBox
GetPixel
GetDIBits
Pie
BitBlt
MoveToEx
Arc
RectInRegion
GetDeviceCaps
Rectangle
ExtFloodFill
LineTo
SetViewportExtEx
CreateICW
ExtCreatePen
RoundRect
GetWinMetaFileBits
CreateRectRgn
SetPolyFillMode
CreateDIBitmap
CreateSolidBrush
CreateRectRgnIndirect
GetTextExtentPoint32W
SelectObject
SetViewportOrgEx
GetPaletteEntries
SetWindowExtEx
PtInRegion
CreateBitmapIndirect
SetBrushOrgEx
ExtCreateRegion
DeleteEnhMetaFile
EqualRgn
CreatePalette
CreateCompatibleBitmap
SetWinMetaFileBits
PatBlt
GetNearestPaletteIndex
SetBkColor
GetRegionData
RealizePalette
CreatePen
StretchDIBits
SetMapMode
CreatePolygonRgn
Ellipse
CreateEnhMetaFileW
EnumFontFamiliesExW
GetTextExtentExPointW
GetSystemPaletteEntries
SelectPalette
CopyEnhMetaFileW
StretchBlt
GetObjectW
GetMetaFileBitsEx
CreateBitmap
SetTextAlign
CloseEnhMetaFile
CreateHatchBrush
ExtSelectClipRgn
MaskBlt
SetWindowOrgEx
SetPixel
GetEnhMetaFileW
GetStockObject
GetDIBColorTable
CombineRgn
CreatePatternBrush
SelectClipRgn
GetCharABCWidthsW
OffsetRgn
ExcludeClipRect
SaveDC
GetEnhMetaFileHeader
CreateFontIndirectW
SetStretchBltMode
CreateCompatibleDC
DeleteObject
GdiFlush
GetBkColor
DeleteDC
Polygon
GetTextColor
TextOutW
CreateDIBSection
Polyline
SetTextColor
PlayEnhMetaFile

comdlg32

ChooseColorW
CommDlgExtendedError
GetOpenFileNameW
GetSaveFileNameW
ChooseFontW

advapi32

RegQueryValueExA
RegCreateKeyW
AdjustTokenPrivileges
GetUserNameW
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegDeleteValueW
LookupPrivilegeValueW
RegQueryInfoKeyW
RegEnumValueW
RegOpenKeyExA
OpenProcessToken
RegDeleteKeyW
RegOpenKeyExW
RegEnumKeyW

shell32

SHGetFileInfoW
DragAcceptFiles
DragQueryPoint
DragFinish
SHGetMalloc
Shell_NotifyIconW
ExtractIconW
ExtractIconExW
SHGetPathFromIDListW
SHFileOperationW
SHGetFolderPathW
ShellExecuteExW
SHGetIconOverlayIndexW
SHBrowseForFolderW
SHGetSpecialFolderLocation
DragQueryFileW

oleaut32

SysAllocString
SysStringLen

Sections

.text
Size: 462KB - Virtual size: 462KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 252KB - Virtual size: 5.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

710648feb64911751b00b2cc7e6a18b8

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

oleaut32

Sections

.text Size: 462KB - Virtual size: 462KB

.rdata Size: 91KB - Virtual size: 90KB

.data Size: 252KB - Virtual size: 5.5MB

.tls Size: - Virtual size: 101B

.rsrc Size: 17KB - Virtual size: 16KB

.reloc Size: 10KB - Virtual size: 10KB

.text
Size: 462KB - Virtual size: 462KB

.rdata
Size: 91KB - Virtual size: 90KB

.data
Size: 252KB - Virtual size: 5.5MB

.tls
Size: - Virtual size: 101B

.rsrc
Size: 17KB - Virtual size: 16KB

.reloc
Size: 10KB - Virtual size: 10KB