eb222e36736ddac43ff5268ec2a77d94509d3e2509d64e9070b8fa7b16685e25

Sharing

Copy URL Twitter E-mail

General

Target

eb222e36736ddac43ff5268ec2a77d94509d3e2509d64e9070b8fa7b16685e25
Size

5.3MB
MD5

71366473a4989b8c458e04847e4d3a82
SHA1

a5953180ae5a963c6115d82360780af7f1fcf1c8
SHA256

eb222e36736ddac43ff5268ec2a77d94509d3e2509d64e9070b8fa7b16685e25
SHA512

1e844cc9ca28a4bf6ec48b894d5170bcb7a07a26eb1af1583494c5b95af04482431e5986165b61d511f38a1dbea33aee4f4ae8fe00774823dc948ec15491d27c
SSDEEP

98304:JOd67pYxgCqcSidOogAroFGR4hCFKS2Ed7ieqVKTVs8XWI97FLOAkGkzdnEVomFH:JOdwYmCqiOogiKCtiQTVs8XzFLOyomFl

Score

N/A

Malware Config

Signatures

Files

eb222e36736ddac43ff5268ec2a77d94509d3e2509d64e9070b8fa7b16685e25
.exe windows x86

7cce49dedfc187a2aa8cc2be6e5f063b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA

kernel32

GetStartupInfoW
RtlUnwind
RaiseException
ExitThread
HeapQueryInformation
HeapSize
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
SetHandleCount
GetStdHandle
IsValidCodePage
GetConsoleCP
GetTimeFormatA
IsProcessorFeaturePresent
GetLocaleInfoW
LCMapStringW
GetStringTypeW
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetDriveTypeW
CompareStringW
WriteConsoleW
EnumSystemLocalesA
IsValidLocale
GetCurrentDirectoryW
GetProcessHeap
SetEnvironmentVariableA
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapAlloc
DecodePointer
EncodePointer
HeapReAlloc
HeapFree
SearchPathA
GetNumberFormatA
GetWindowsDirectoryA
SetErrorMode
GetVolumeInformationA
MoveFileA
GetStringTypeExA
GetFileSizeEx
GetFileAttributesExA
GetSystemDirectoryW
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
GlobalHandle
GlobalReAlloc
GetACP
FindResourceExW
GlobalFlags
GetThreadLocale
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
LoadLibraryExA
GetModuleHandleW
FindFirstFileA
FindNextFileA
FindClose
GetDiskFreeSpaceA
GetTempFileNameA
GetFileTime
ReplaceFileA
GetUserDefaultLCID
LocalAlloc
FileTimeToLocalFileTime
GetProfileIntA
SetThreadPriority
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GetCurrentProcessId
CopyFileA
FormatMessageA
LocalFree
lstrlenW
HeapSetInformation
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
FreeResource
VirtualProtect
GetCommandLineA
ExitProcess
ExpandEnvironmentStringsA
AreFileApisANSI
GetSystemTime
GetTempPathA
DeleteFileW
TlsAlloc
LockFileEx
GetTempPathW
FlushFileBuffers
GetFileAttributesW
GetFileAttributesA
LoadLibraryW
TlsSetValue
GetSystemTimeAsFileTime
LockFile
UnlockFile
SetEndOfFile
TlsGetValue
GetFullPathNameA
GetFullPathNameW
CreateThread
GetVersion
GetVersionExA
GetTickCount
GetFileInformationByHandle
CreateFileMappingA
GetLocalTime
FileTimeToSystemTime
UnmapViewOfFile
MapViewOfFile
GetFileSize
LocalFileTimeToFileTime
DuplicateHandle
GetCurrentDirectoryA
GlobalFree
lstrcmpiA
CreateFileW
ReadFile
SetFileTime
IsBadReadPtr
CreateDirectoryW
GetCurrentProcess
SystemTimeToFileTime
lstrcmpA
FindResourceA
GetPrivateProfileSectionA
lstrcpyA
TerminateThread
ResumeThread
PulseEvent
WriteFile
SetFilePointer
CreateFileA
GetPrivateProfileIntA
WritePrivateProfileSectionA
WritePrivateProfileStringA
InitializeCriticalSectionAndSpinCount
GetExitCodeThread
Sleep
SuspendThread
CloseHandle
lstrlenA
InterlockedExchange
GetPrivateProfileStringA
RemoveDirectoryA
DeleteFileA
GlobalSize
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GlobalUnlock
GlobalLock
GlobalAlloc
CreateDirectoryA
ActivateActCtx
DeactivateActCtx
SetEvent
WaitForSingleObject
CreateEventA
GetProcAddress
LoadLibraryA
FreeLibrary
SetLastError
GetCurrentThreadId
GetLastError
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
MulDiv
GetDateFormatA
GetConsoleMode

user32

DrawMenuBar
TranslateMDISysAccel
IsCharLowerA
MapVirtualKeyExA
GetWindowRgn
MonitorFromPoint
LoadAcceleratorsW
CharUpperA
UnregisterClassA
SetLayeredWindowAttributes
EnumDisplayMonitors
SetCursorPos
RealChildWindowFromPoint
NotifyWinEvent
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
CopyImage
GetNextDlgGroupItem
LockWindowUpdate
UnionRect
SetClassLongA
CharNextA
WaitMessage
ShowOwnedPopups
SetWindowContextHelpId
SetWindowRgn
DrawEdge
IsRectEmpty
DestroyMenu
MapVirtualKeyA
GetKeyNameTextA
GetWindowThreadProcessId
GrayStringA
DrawTextExA
DrawTextA
RemoveMenu
IsDialogMessageA
IsDlgButtonChecked
GetDlgItemTextA
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SendDlgItemMessageA
WinHelpA
GetClassLongA
GetWindowTextLengthA
GetForegroundWindow
GetLastActivePopup
GetTopWindow
GetMessageTime
MonitorFromWindow
GetMonitorInfoA
ScrollWindow
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
CreateDialogIndirectParamA
EndDialog
GetActiveWindow
MapDialogRect
GetAsyncKeyState
IsWindowEnabled
ShowScrollBar
DrawTextW
TabbedTextOutA
SetActiveWindow
DrawAnimatedRects
SetParent
FindWindowA
SetMenuDefaultItem
DefMDIChildProcA
MoveWindow
ValidateRect
ShowWindow
DestroyCursor
GetCapture
GetMessageA
GetDlgCtrlID
LoadBitmapA
FillRect
GetWindowDC
ReleaseCapture
SetCapture
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
SetMenu
LoadMenuA
GetMenuStringA
GetMenu
GetMenuState
SystemParametersInfoA
PtInRect
DrawStateA
DrawFocusRect
OffsetRect
SetRect
MapWindowPoints
IntersectRect
SetWindowPos
SetPropA
CallWindowProcA
RemovePropA
GetPropA
EndPaint
BeginPaint
GetUpdateRect
GetFocus
GetComboBoxInfo
TranslateMessage
GetDesktopWindow
SetDlgItemTextA
IsWindowVisible
MessageBeep
GetSysColorBrush
GetScrollBarInfo
CheckMenuItem
GetDlgItemTextW
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetWindow
SetRectEmpty
LoadImageA
GetMessagePos
GetMenuItemID
MsgWaitForMultipleObjects
DispatchMessageA
PeekMessageA
LoadCursorA
DrawFrameControl
KillTimer
TrackPopupMenu
SetForegroundWindow
CreateIconIndirect
IsZoomed
CopyRect
DeleteMenu
InsertMenuA
CreatePopupMenu
DrawIcon
GetSystemMetrics
IsIconic
SetTimer
GetSystemMenu
LoadIconW
RedrawWindow
DestroyIcon
GetMenuItemCount
EnumChildWindows
GetWindowInfo
SetWindowTextA
DefFrameProcA
CharUpperBuffA
HideCaret
InvertRect
SubtractRect
FrameRect
UpdateLayeredWindow
InvalidateRgn
CreateAcceleratorTableA
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
PostThreadMessageA
GetWindowTextA
WindowFromPoint
RegisterClipboardFormatA
GetClassNameA
IsChild
GetDlgItem
SetClipboardData
EmptyClipboard
CloseClipboard
GetClipboardData
OpenClipboard
DestroyAcceleratorTable
GetDoubleClickTime
CopyIcon
EnableScrollBar
GetMenuDefaultItem
LoadImageW
LoadIconA
IsMenu
wsprintfA
GetNextDlgTabItem
GetKeyState
GetMenuItemInfoA
ModifyMenuA
SetMenuItemInfoA
AppendMenuA
CreateMenu
EnableMenuItem
GetSubMenu
LoadMenuW
IsClipboardFormatAvailable
ClientToScreen
ScreenToClient
GetCursorPos
GetSysColor
SetFocus
UpdateWindow
SendMessageA
IsWindow
SetCursor
PostQuitMessage
ReleaseDC
GetDC
LoadBitmapW
LoadCursorW
RegisterWindowMessageA
MessageBoxA
PostMessageA
DefWindowProcA
GetWindowLongA
DestroyWindow
SetWindowLongA
CreateWindowExA
RegisterClassExA
InvalidateRect
InflateRect
GetWindowRect
GetParent
DrawIconEx
GetClientRect
GetIconInfo
EnableWindow
BringWindowToTop

gdi32

SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
SelectPalette
GetObjectType
CreateHatchBrush
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
GetCharWidthA
CreateEllipticRgn
CreatePolygonRgn
GetBkColor
GetTextColor
Polyline
EnumFontFamiliesExA
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
OffsetRgn
GetRgnBox
GetClipBox
SetPixel
SetWindowOrgEx
RealizePalette
StretchBlt
RoundRect
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
GetWindowOrgEx
SetPixelV
GetTextFaceA
SetMapMode
CreateRoundRectRgn
OffsetWindowOrgEx
SetROP2
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
GetDIBits
GetObjectA
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
CreateBitmap
SetBkColor
SetTextColor
StretchDIBits
CreatePen
GetViewportOrgEx
Rectangle
Polygon
CreateFontA
GetTextMetricsA
Ellipse
CreateSolidBrush
AbortDoc
EndDoc
EndPage
StartPage
StartDocA
SetAbortProc
DPtoLP
GetDeviceCaps
CreateRectRgn
EnumFontsA
GetTextExtentPoint32A
LPtoDP
SetDIBColorTable
CreateDIBSection
DeleteDC
CreateFontIndirectA
GetStockObject
SelectObject
GetPixel
CreatePatternBrush
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteObject
ExcludeClipRect

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegQueryValueA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueA
SetFileSecurityA
RegEnumKeyExA
RegCreateKeyExA
RegEnumKeyA
RegDeleteKeyA
GetFileSecurityA

shell32

SHGetDesktopFolder
SHGetPathFromIDListA
SHGetMalloc
SHBrowseForFolderA
DragQueryFileA
DragFinish
Shell_NotifyIconA
SHGetSpecialFolderLocation
ShellExecuteA
SHGetFileInfoA
SHAddToRecentDocs
SHAppBarMessage

comctl32

ImageList_GetIconSize

shlwapi

PathRemoveFileSpecW
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA

ole32

CoRegisterMessageFilter
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
CoUninitialize
CoCreateInstance
CoInitializeEx
CoCreateGuid
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CLSIDFromProgID
CoTaskMemFree
CLSIDFromString
OleGetClipboard
CoInitialize
CreateStreamOnHGlobal
CoGetClassObject
CoRevokeClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleLockRunning
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator

oleaut32

SysFreeString
VarBstrFromDate
SafeArrayDestroy
VariantCopy
SysStringLen
SysAllocString
OleCreateFontIndirect
SysAllocStringByteLen
VariantInit
VariantChangeType
SystemTimeToVariantTime
VariantTimeToSystemTime
VarDateFromStr
SysAllocStringLen
VariantClear

oledlg

ord8

gdiplus

GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromStream
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipFree
GdipAlloc

ws2_32

WSAStartup
WSACleanup
select
sendto
recvfrom
ntohl
ioctlsocket
accept
connect
WSAAsyncGetHostByName
send
recv
WSACancelAsyncRequest
closesocket
bind
htonl
WSAAsyncSelect
socket
WSASetLastError
htons
gethostbyname
WSAGetLastError
inet_addr

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

wininet

InternetGetLastResponseInfoA
InternetSetOptionExA
HttpOpenRequestA
InternetConnectA
FtpFindFirstFileA
FtpCommandA
FtpOpenFileA
HttpSendRequestA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetQueryDataAvailable
InternetCloseHandle
InternetFindNextFileA
HttpQueryInfoA
FtpGetFileA
FtpPutFileA
FtpGetCurrentDirectoryA
FtpSetCurrentDirectoryA
FtpDeleteFileA

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 528KB - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

_�C�Aq
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7cce49dedfc187a2aa8cc2be6e5f063b

Headers

DLL Characteristics

File Characteristics

Imports

winmm

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

ws2_32

oleacc

wininet

imm32

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.rdata Size: 528KB - Virtual size: 528KB

.data Size: 83KB - Virtual size: 123KB

.rsrc Size: 1.8MB - Virtual size: 1.8MB

.reloc Size: 252KB - Virtual size: 251KB

_�C�Aq Size: 82KB - Virtual size: 84KB

.text
Size: 2.6MB - Virtual size: 2.6MB

.rdata
Size: 528KB - Virtual size: 528KB

.data
Size: 83KB - Virtual size: 123KB

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

.reloc
Size: 252KB - Virtual size: 251KB

_�C�Aq
Size: 82KB - Virtual size: 84KB