4ab9abf81592391386f0f710b90ea8a9a92b2690d218259dfcb6901d8ef3f7ee

Sharing

Copy URL Twitter E-mail

General

Target

4ab9abf81592391386f0f710b90ea8a9a92b2690d218259dfcb6901d8ef3f7ee
Size

710KB
MD5

466f5008d7fa3ed152ab95f74cc229e0
SHA1

5b9ed506d6242e37d0933a2a859904f40071c993
SHA256

4ab9abf81592391386f0f710b90ea8a9a92b2690d218259dfcb6901d8ef3f7ee
SHA512

ecc54657065c9761a466bcb6fed96689159c49b288075397217e4a4737ff682148cd6897bc955666323db6271362825360ff90ee1d7d4a4fb76d12f1dbf1edad
SSDEEP

12288:svwH/z0jO3DU3ocd8o9f0kcPVGCq+hLcYB6L0Uhh8UAbIud01co:UwrWOsoy8oR0kcNVhLcuVb/yR

Score

N/A

Malware Config

Signatures

Files

4ab9abf81592391386f0f710b90ea8a9a92b2690d218259dfcb6901d8ef3f7ee
.exe windows x86

f3b0be0586f4e460adb5aa2b3c76d9fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessW
WaitForSingleObject
GetWindowsDirectoryW
GetTickCount
LoadLibraryA
MoveFileW
GetCurrentThreadId
GetDriveTypeW
GetDiskFreeSpaceExW
SetLastError
RaiseException
GetCurrentProcess
FlushInstructionCache
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
GetCurrentDirectoryA
GetFullPathNameA
FindFirstFileA
GetDriveTypeA
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateThread
ExitThread
ExpandEnvironmentStringsW
PeekNamedPipe
GetExitCodeThread
TerminateThread
SetEvent
CreateMutexW
ReleaseMutex
DuplicateHandle
WaitForMultipleObjects
CreateEventW
FormatMessageW
SleepEx
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
WriteConsoleW
WriteConsoleA
GetTimeZoneInformation
CreateFileA
FlushFileBuffers
SetStdHandle
GetLocaleInfoW
GetConsoleMode
GetCommandLineW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetModuleFileNameA
GetStdHandle
HeapCreate
ExitProcess
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
LCMapStringW
LCMapStringA
RtlUnwind
GetCPInfo
GetStartupInfoW
VirtualQuery
GetSystemInfo
GetModuleHandleA
VirtualProtect
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
FindClose
CreateDirectoryW
SetFilePointer
GlobalAlloc
GlobalLock
GetPrivateProfileIntW
lstrlenA
FreeResource
GlobalUnlock
GlobalFree
LoadLibraryW
GetFileSize
FreeLibrary
CreateFileW
WaitNamedPipeW
GetModuleFileNameW
MapViewOfFile
OpenFileMappingW
GetFileAttributesW
CloseHandle
LeaveCriticalSection
WideCharToMultiByte
UnmapViewOfFile
EnterCriticalSection
DeleteCriticalSection
lstrlenW
InitializeCriticalSection
GetProcAddress
GetModuleHandleW
ReadFile
MultiByteToWideChar
WriteFile
GetConsoleOutputCP
Sleep
FindResourceExW
LoadResource
LockResource
SizeofResource
WritePrivateProfileStringW
CopyFileW
FindResourceW
GetSystemTime
GetPrivateProfileStringW
GetLastError
UnhandledExceptionFilter
TerminateProcess
InterlockedDecrement
InterlockedIncrement
VirtualAlloc
VirtualFree
SetEnvironmentVariableW
IsProcessorFeaturePresent
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
HeapSize
HeapDestroy
GetConsoleCP
DeleteFileW

user32

BeginPaint
GetWindowLongW
MapWindowPoints
GetClientRect
GetParent
SetWindowPos
InvalidateRect
GetWindow
SetCapture
GetNextDlgTabItem
ShowWindow
DrawTextW
PostThreadMessageW
GetDlgCtrlID
SystemParametersInfoW
SetWindowLongW
ReleaseCapture
CopyRect
ClientToScreen
DefWindowProcW
IsWindowVisible
GetDesktopWindow
MonitorFromWindow
SetRect
CallWindowProcW
GetMonitorInfoW
PtInRect
OffsetRect
EqualRect
GetKeyState
UnregisterClassA
LoadBitmapW
LoadCursorW
GetSystemMetrics
SetRectEmpty
GetScrollPos
FindWindowW
SetFocus
GetWindowRect
SetWindowRgn
DestroyWindow
LoadIconW
MoveWindow
PostMessageW
DestroyIcon
GetDlgItem
DrawIconEx
IsWindow
UpdateLayeredWindow
IsWindowEnabled
GetClassInfoExW
GetActiveWindow
GetFocus
EnableWindow
IsChild
IsDialogMessageW
GetWindowThreadProcessId
GetForegroundWindow
RegisterClassExW
AttachThreadInput
CreateWindowExW
SendMessageW
EndPaint
CharNextW
SetCursor
CharLowerW
LoadImageW
GetDC
SetForegroundWindow
PeekMessageW
GetMessageW
SetActiveWindow
ReleaseDC
InflateRect
WindowFromPoint
DispatchMessageW
TranslateMessage

gdi32

OffsetRgn
GetTextColor
CombineRgn
RoundRect
GetClipRgn
TextOutW
GetCurrentObject
CreateRectRgnIndirect
SetBkMode
LineTo
GetTextExtentPoint32W
MoveToEx
CreateFontIndirectW
CreatePen
RestoreDC
SetStretchBltMode
Rectangle
GetObjectW
GetStockObject
CreateCompatibleDC
StretchBlt
CreateCompatibleBitmap
CreateBitmap
SetBkColor
DeleteObject
BitBlt
SetTextColor
SelectObject
CreateDIBSection
DeleteDC
ExtTextOutW
CreateRectRgn
SaveDC
SelectClipRgn
RectInRegion

advapi32

RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegOpenKeyW
RegCloseKey
RegQueryValueExW

shell32

SHGetSpecialFolderPathW
ShellExecuteW

ole32

CoUninitialize
CoCreateInstance
CreateStreamOnHGlobal
CoInitialize

shlwapi

PathRemoveFileSpecW
PathAddBackslashW
StrToIntW
StrToIntA

comctl32

_TrackMouseEvent

msimg32

AlphaBlend

gdiplus

GdipCreateFontFromDC
GdipDeleteStringFormat
GdipImageRotateFlip
GdipDeleteFont
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipDeleteGraphics
GdipCreateHBITMAPFromBitmap
GdipGetImageHeight
GdipDrawImageRectI
GdiplusShutdown
GdipDrawImageRectRectI
GdipGetImageWidth
GdiplusStartup
GdipFree
GdipCloneImage
GdipAlloc
GdipCreateImageAttributes
GdipDisposeImage
GdipDisposeImageAttributes
GdipDeletePen
GdipCreateFontFromLogfontW
GdipCreateStringFormat
GdipCreateSolidFill
GdipDeleteBrush
GdipResetWorldTransform
GdipCloneBrush
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipDrawString
GdipSetStringFormatTrimming
GdipLoadImageFromFile
GdipCreateBitmapFromStream
GdipCreateFromHDC
GdipCreatePen1
GdipDrawLinesI
GdipLoadImageFromStream
GdipSetImageAttributesColorMatrix
GdipDrawImagePointsRectI

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

ws2_32

recvfrom
sendto
gethostbyname
WSAEventSelect
WSAConnect
WSAEnumNetworkEvents
WSASend
WSAResetEvent
freeaddrinfo
accept
WSAGetLastError
WSASetLastError
WSAGetOverlappedResult
closesocket
WSACloseEvent
WSAStartup
getaddrinfo
WSASocketW
WSACreateEvent
gethostname
WSASetEvent
WSACleanup
listen
__WSAFDIsSet
WSARecv
inet_ntoa
bind
socket
getsockopt
ioctlsocket
connect
inet_addr
getsockname
setsockopt
htons
select
ntohs
recv
send

iphlpapi

GetAdaptersInfo

winmm

timeGetTime

Sections

.text
Size: 480KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f3b0be0586f4e460adb5aa2b3c76d9fc

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

comctl32

msimg32

gdiplus

version

ws2_32

iphlpapi

winmm

Sections

.text Size: 480KB - Virtual size: 476KB

.rdata Size: 92KB - Virtual size: 91KB

.data Size: 16KB - Virtual size: 20KB

.rsrc Size: 112KB - Virtual size: 112KB

.text
Size: 480KB - Virtual size: 476KB

.rdata
Size: 92KB - Virtual size: 91KB

.data
Size: 16KB - Virtual size: 20KB

.rsrc
Size: 112KB - Virtual size: 112KB