ac88f91fdbc328bdef0ba331d883c16e1d47f8244190c70385fab75533fce1c4

Sharing

Copy URL Twitter E-mail

General

Target

ac88f91fdbc328bdef0ba331d883c16e1d47f8244190c70385fab75533fce1c4
Size

2.7MB
MD5

4ff0dab0399d5fa0f098ed0e13002e3d
SHA1

a2a622ad5bbd7ba689449165097c56f152ab7e9d
SHA256

ac88f91fdbc328bdef0ba331d883c16e1d47f8244190c70385fab75533fce1c4
SHA512

0aaf195b047214c8f7c2c92621c27622f3d1bfed16efab9ca33293f7a4240f48d7e306edf68c2598b04924542ecfc25341472b271dec2b188fdf3aad264e8e96
SSDEEP

49152:7mj5tKMJmGpyDPE8LmcTxlgCYRV5iZyvZT16+VtOJVFFf9j:iNmGYPnT1+UmH3GFf9

Score

N/A

Malware Config

Signatures

Files

ac88f91fdbc328bdef0ba331d883c16e1d47f8244190c70385fab75533fce1c4
.exe windows x86

e606def7e01623fb1d818d625364abcc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetDriveTypeA
GetCurrentDirectoryA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
LCMapStringW
LCMapStringA
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
SetThreadContext
GetThreadContext
FlushInstructionCache
LocalSize
lstrcpynW
GetExitCodeThread
ResetEvent
EnumResourceTypesW
EnumResourceNamesW
LoadLibraryExA
GetACP
GetCPInfo
QueryPerformanceCounter
VirtualFree
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
RtlUnwind
UnhandledExceptionFilter
VirtualQuery
VirtualAlloc
HeapReAlloc
HeapSize
CreateThread
ExitThread
GetStartupInfoW
GetFileTime
GetFileSizeEx
GetCurrentDirectoryW
GlobalFlags
GlobalGetAtomNameW
GetModuleHandleA
VirtualProtect
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
SetErrorMode
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
GlobalFindAtomW
CompareStringW
GetVersionExA
GlobalAddAtomW
SetThreadPriority
GlobalDeleteAtom
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
lstrcmpW
GetPrivateProfileStringW
WritePrivateProfileStringW
LoadLibraryA
SetLastError
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
FreeResource
InterlockedCompareExchange
SetThreadLocale
lstrcmpiW
LoadLibraryExW
InterlockedDecrement
FreeLibrary
TerminateThread
GetExitCodeProcess
GetTempFileNameW
GetTempPathW
FindNextFileW
FileTimeToSystemTime
GetSystemInfo
SizeofResource
FindClose
FindFirstFileW
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
GetFileAttributesW
InterlockedIncrement
CopyFileW
MoveFileExW
OpenEventW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
WriteFile
lstrlenW
GetSystemDirectoryW
GetVersionExW
GetModuleHandleW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
DeleteFileW
lstrcpyW
GetCurrentProcessId
GetCurrentThreadId
IsDebuggerPresent
lstrcatW
RaiseException
GetModuleFileNameW
SetUnhandledExceptionFilter
CreateProcessW
LocalAlloc
GetCurrentThread
GetTickCount
GetFileSize
HeapDestroy
HeapCreate
GetProcAddress
LoadLibraryW
CreateFileW
HeapFree
HeapAlloc
GetProcessHeap
ReadFile
SetFilePointer
CreateEventW
SetEvent
CreateDirectoryW
GetCurrentProcess
ResumeThread
SuspendThread
WaitForSingleObject
Sleep
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
LocalFree
FormatMessageW
ExitProcess
GetLastError
CreateMutexW
CloseHandle
FindResourceW
LoadResource
LockResource

user32

TrackPopupMenuEx
TrackPopupMenu
SetMenu
SetScrollPos
GetScrollPos
SetForegroundWindow
CreateWindowExW
GetClassInfoExW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
PtInRect
GetMenu
SetWindowLongW
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowThreadProcessId
MapWindowPoints
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
GetForegroundWindow
GetWindowTextW
GetLastActivePopup
ShowOwnedPopups
SetCursor
SetWindowsHookExW
CallNextHookEx
GetWindowTextLengthW
SetFocus
RemovePropW
GetPropW
SetPropW
GetClassLongW
GetCapture
IsChild
WinHelpW
SendDlgItemMessageA
SendDlgItemMessageW
LoadIconW
RegisterWindowMessageW
PostMessageW
EnableWindow
SendMessageW
RedrawWindow
SetTimer
GetSystemMenu
AppendMenuW
PostQuitMessage
IsWindowVisible
MessageBoxW
KillTimer
IsDialogMessageW
IsWindow
ExitWindowsEx
GetAsyncKeyState
IsIconic
DestroyIcon
GetSystemMetrics
FindWindowW
SendMessageTimeoutW
ShowWindow
CharNextW
GetParent
GetWindow
GetDesktopWindow
ReleaseDC
GetDC
GetClassNameW
FillRect
GetWindowRect
GetClientRect
GetClassInfoW
LoadStringW
MapDialogRect
InflateRect
UpdateWindow
SetWindowTextW
MoveWindow
GetMenuItemInfoW
DestroyMenu
SystemParametersInfoW
CharUpperW
UnregisterClassW
IsRectEmpty
SetWindowRgn
ClientToScreen
SetCapture
LoadCursorW
ReleaseCapture
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
GetWindowDC
BeginPaint
EndPaint
GetSysColorBrush
SetRect
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
IsClipboardFormatAvailable
WindowFromPoint
WaitMessage
DeleteMenu
SetRectEmpty
TranslateAcceleratorW
BringWindowToTop
CreatePopupMenu
InsertMenuItemW
LoadAcceleratorsW
ReuseDDElParam
UnpackDDElParam
RegisterClipboardFormatW
SetParent
InvalidateRect
LoadImageW
GetMessageW
TranslateMessage
DispatchMessageW
OffsetRect
GetSubMenu
GetMenuItemCount
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
InsertMenuW
GetMenuItemID
TranslateMDISysAccel
GetKeyboardLayoutList
GetKeyboardState
ToUnicodeEx
UnionRect
PostThreadMessageW
SetCursorPos
HideCaret
ShowCaret
GetDCEx
LockWindowUpdate
IsMenu
GetCursor
GetTabbedTextExtentA
GetWindowRgn
GetMenuDefaultItem
GetDoubleClickTime
SetClassLongW
DrawFocusRect
InvertRect
EnumWindows
IsWindowUnicode
GetWindowLongA
SetWindowLongA
DrawIconEx
CreateIconIndirect
CopyIcon
GetIconInfo
DrawStateW
LoadMenuIndirectW
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
DrawMenuBar
DrawFrameControl
DrawEdge
RegisterClassA
DefMDIChildProcW
DefMDIChildProcA
DefDlgProcW
DefDlgProcA
EnableMenuItem
CheckMenuItem
MapVirtualKeyW
CopyRect
LoadMenuW
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SetWindowContextHelpId
SetWindowPos
GetMenuState
GetMenuStringW
SetMenuDefaultItem
EnableScrollBar
CallWindowProcA
DefWindowProcA
DefFrameProcA
DefFrameProcW

gdi32

SetRectRgn
CombineRgn
GetMapMode
CreateFontW
StretchDIBits
CreateCompatibleBitmap
EnumFontFamiliesExW
GetTextColor
GetBkColor
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
PolyBezierTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RectVisible
GetCharWidthW
GetPixel
GetWindowExtEx
GetDeviceCaps
CreateFontIndirectW
GetObjectW
DeleteObject
CreateRectRgnIndirect
PatBlt
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
CreateCompatibleDC
BitBlt
ExtTextOutW
GetTextExtentPoint32W
DPtoLP
Ellipse
SaveDC
RestoreDC
SetBkMode
SetStretchBltMode
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
GetTextMetricsW
GetRgnBox
CreateSolidBrush
CreatePen
GetObjectType
PtVisible
GetStockObject
StretchBlt
CreateDIBSection
SetPixel
GetDIBits
Polygon
GetCurrentObject
OffsetRgn
GetTextCharsetInfo
SetBrushOrgEx
CreatePalette
CreateDIBitmap
ExtCreateRegion
Polyline
GetViewportOrgEx
GetTextAlign
GetTextExtentPoint32A
StrokePath
FillPath
StrokeAndFillPath
EndPath
CloseFigure
BeginPath
GetBitmapBits
PtInRegion
CreatePolygonRgn
RoundRect
GetWindowOrgEx
MoveToEx
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectPalette
GetViewportExtEx

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

QueryServiceStatus
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenSCManagerW
OpenServiceW
ChangeServiceConfigW
CloseServiceHandle
QueryServiceConfigW
StartServiceW
OpenThreadToken
DuplicateToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegFlushKey
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
SetNamedSecurityInfoW
RegCreateKeyExW
AddAccessAllowedAceEx
InitializeSid
RegSetValueExW
RegQueryValueExW
FreeSid
AccessCheck
IsValidSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
AddAccessAllowedAce
RegOpenKeyExW

shell32

Shell_NotifyIconW
ord165
ShellExecuteW
ShellExecuteExW
ord727
SHGetFileInfoW
DragFinish
DragQueryFileW
SHGetFolderPathW

comctl32

ImageList_ReplaceIcon
ImageList_DrawIndirect
ImageList_GetImageInfo
ImageList_GetBkColor
_TrackMouseEvent
FlatSB_GetScrollProp
ImageList_GetImageCount
ImageList_Destroy
ImageList_DrawEx
ImageList_GetIconSize
InitCommonControlsEx

shlwapi

PathAppendW
PathRemoveFileSpecW
PathFindFileNameW
PathQuoteSpacesW
PathStripPathW
PathFindExtensionW
PathAddBackslashW
SHDeleteKeyW
PathStripToRootW
PathIsUNCW
PathRemoveExtensionW

oledlg

OleUIBusyW
OleUIAddVerbMenuW

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleRun
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoRevokeClassObject
OleIsCurrentClipboard
CreateStreamOnHGlobal
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromProgID
CLSIDFromString
StringFromGUID2
CoCreateGuid
CoCreateInstance
CoUninitialize
CoInitializeSecurity
CoInitialize
CoSetProxyBlanket
OleFlushClipboard
CoRegisterMessageFilter
CoDisconnectObject

oleaut32

VariantChangeTypeEx
SysAllocStringLen
OleCreateFontIndirect
LoadTypeLi
VarBstrFromDate
SafeArrayDestroy
VariantCopy
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocStringByteLen
VarDateFromStr
VarUI4FromStr
SysStringByteLen
VariantChangeType
OleLoadPicturePath
SysStringLen
VariantInit
VariantClear
SysAllocString
SysFreeString
SystemTimeToVariantTime
VariantTimeToSystemTime
VarUdateFromDate

dbghelp

ImageDirectoryEntryToData
MiniDumpWriteDump

fltlib

FilterConnectCommunicationPort
FilterSendMessage

imagehlp

ImageEnumerateCertificates
ImageGetCertificateData
ImageGetCertificateHeader

crypt32

CertVerifyCertificateChainPolicy
CertGetCertificateChain
CryptUnprotectData
CertFreeCertificateContext
CertGetNameStringW
CryptProtectData
CryptVerifyMessageSignature
CertFreeCertificateChain

wintrust

WTHelperProvDataFromStateData
WTHelperGetProvCertFromChain
WTHelperGetProvSignerFromChain
WinVerifyTrust

msi

ord224

winmm

PlaySoundW

gdiplus

GdiplusStartup
GdipCreateFromHDC
GdipDeleteGraphics
GdiplusShutdown
GdipFree
GdipAlloc
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipDrawImageRectI
GdipGetImageWidth
GdipGetImageHeight
GdipDisposeImage
GdipCloneImage

wininet

HttpSendRequestW
HttpOpenRequestW
InternetReadFile
InternetOpenW
InternetQueryOptionW
InternetCloseHandle
InternetSetOptionW
InternetGetLastResponseInfoW
HttpQueryInfoW
InternetConnectW

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 505KB - Virtual size: 505KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 37KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 547KB - Virtual size: 546KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.trdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e606def7e01623fb1d818d625364abcc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

dbghelp

fltlib

imagehlp

crypt32

wintrust

msi

winmm

gdiplus

wininet

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 505KB - Virtual size: 505KB

.data Size: 37KB - Virtual size: 75KB

.rsrc Size: 547KB - Virtual size: 546KB

.trdata Size: 76KB - Virtual size: 76KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 505KB - Virtual size: 505KB

.data
Size: 37KB - Virtual size: 75KB

.rsrc
Size: 547KB - Virtual size: 546KB

.trdata
Size: 76KB - Virtual size: 76KB