22416a5a006ddda80cca069ef8536ff1a5e2e4d3efdb6d1f4c0f605d753679dc

Sharing

Copy URL Twitter E-mail

General

Target

22416a5a006ddda80cca069ef8536ff1a5e2e4d3efdb6d1f4c0f605d753679dc
Size

1022KB
MD5

4689dd3e835c004630767d688d8024b0
SHA1

51a89ac8b45f19935589d7f87a7653f7fc338d74
SHA256

22416a5a006ddda80cca069ef8536ff1a5e2e4d3efdb6d1f4c0f605d753679dc
SHA512

a0c0aef10d2be9ee31462309ed950d2dc09c14760761fabd3e0cdcfbece95d00a4db2b3d0b3f9b15c150a14bff02ce43e43610dd7c57c67d3722345ea67cb032
SSDEEP

24576:LFmCxOqaEsqyqJlbA5dwCQUtjZbjx/9lShiY8T2irGN:ZoOyq3A8CjtjZXx/9Q0T2aG

Score

N/A

Malware Config

Signatures

Files

22416a5a006ddda80cca069ef8536ff1a5e2e4d3efdb6d1f4c0f605d753679dc
.exe windows x86

425f2979bcbeb85b2b3daa3342a80002

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipDeleteBrush
GdipSetClipRectI
GdipFree
GdipAlloc
GdipCloneBrush
GdipFillRectangleI
GdipGetImageWidth
GdipGetImageHeight
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromHICON
GdipDrawImageRectRectI
GdipCreateFont
GdipGetGenericFontFamilySansSerif
GdipCreatePath
GdipSetClipPath
GdipDeletePath
GdipAddPathRectangle
GdipDrawImage
GdipFillPolygon
GdipReleaseDC
GdipGetFontHeight
GdipGetDC
GdipSetPenDashStyle
GdipDrawLineI
GdipSetPenDashCap197819
GdipSetPenColor
GdipCreateBitmapFromStream
GdipDrawRectangleI
GdipBitmapGetPixel
GdipDrawRectangle
GdipCreateImageAttributes
GdipSetImageAttributesColorKeys
GdipDisposeImageAttributes
GdipCreateSolidFill
GdipDrawImagePointsI
GdipCreateBitmapFromGraphics
GdiplusShutdown
GdiplusStartup
GdipCreateFromHWND
GdipDeletePen
GdipCreatePen1
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetLineWrapMode
GdipCreateLineBrushFromRectI
GdipSetSolidFillColor
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipDeleteGraphics
GdipCreateFromHDC
GdipGetImagePixelFormat
GdipRestoreGraphics
GdipDrawString
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipSaveGraphics
GdipMeasureString
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteFont
GdipCreateFontFamilyFromName
GdipDeleteFontFamily

kernel32

GetModuleFileNameA
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStringTypeW
LCMapStringW
LCMapStringA
GetCPInfo
RtlUnwind
HeapSize
ExitProcess
HeapReAlloc
GetStdHandle
GetFileType
WriteConsoleW
GetStartupInfoW
ExitThread
FileTimeToLocalFileTime
FileTimeToSystemTime
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedExchange
InterlockedCompareExchange
DeleteFileA
AreFileApisANSI
GetSystemTime
GetTempPathA
GetDiskFreeSpaceA
LoadLibraryA
GetDiskFreeSpaceW
LockFileEx
GetTempPathW
FlushFileBuffers
GetFileAttributesA
FormatMessageA
GetSystemTimeAsFileTime
OutputDebugStringW
FreeLibrary
LoadLibraryW
GetProcAddress
CreateFileW
CreateFileMappingW
MapViewOfFile
GetFileSize
UnmapViewOfFile
CloseHandle
GetFileAttributesW
ReadFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
GetCurrentDirectoryA
GetACP
GetLastError
InitializeCriticalSection
DeleteFileW
OpenFileMappingW
RaiseException
GetCurrentThreadId
DeleteCriticalSection
WaitForSingleObject
GetPrivateProfileIntW
WritePrivateProfileStringW
GetModuleHandleW
CreateEventW
Sleep
SetErrorMode
CreateThread
FindFirstFileW
FindNextFileW
FindClose
SetEvent
FindResourceW
LoadResource
LockResource
WriteFile
SizeofResource
FreeResource
GetCurrentProcess
FlushInstructionCache
FormatMessageW
SetUnhandledExceptionFilter
IsBadWritePtr
GetVersionExW
VirtualQuery
MultiByteToWideChar
lstrcmpiW
lstrlenW
LoadLibraryExW
InterlockedDecrement
InterlockedIncrement
GetLogicalDriveStringsW
GetDriveTypeW
GetDiskFreeSpaceExW
GetVolumeInformationW
DeviceIoControl
CopyFileExW
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalLock
GetTickCount
GetCurrentProcessId
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
GetOEMCP
SetLastError
IsValidCodePage
GetFullPathNameW
GetFullPathNameA
CreateFileA
SetFilePointer
SetEndOfFile
QueryPerformanceCounter
UnlockFile
LockFile
InitializeCriticalSectionAndSpinCount
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetModuleHandleA
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
SetStdHandle
GetDriveTypeA
CompareStringA
CompareStringW
SetEnvironmentVariableA
WideCharToMultiByte
lstrcpyW

user32

SetFocus
CreateMenu
HideCaret
CallWindowProcW
GetMenuItemCount
GetDesktopWindow
GetMenuState
LoadMenuW
GetMenuStringW
GetSubMenu
GetMenuItemID
SetLayeredWindowAttributes
DestroyWindow
DialogBoxParamW
CreateDialogParamW
SetTimer
KillTimer
GetActiveWindow
GetKeyState
UpdateWindow
PostQuitMessage
IsDialogMessageW
MessageBoxW
SetWindowRgn
UpdateLayeredWindow
SetCapture
ShowCaret
AnimateWindow
LoadCursorW
SetCursor
GetCursorPos
ReleaseCapture
ScreenToClient
PostMessageW
ReleaseDC
SendMessageW
InvalidateRect
GetDlgCtrlID
SetScrollRange
AppendMenuW
GetSysColor
CreateCaret
SetCaretPos
ClientToScreen
SetForegroundWindow
GetWindowTextW
SetWindowTextW
ShowWindow
EnableWindow
IsWindowEnabled
IsWindowVisible
SetWindowLongW
GetDC
GetSystemMetrics
LoadImageW
EndDialog
GetWindow
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
GetParent
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
EndPaint
CharNextW
GetClientRect
MapWindowPoints
SetWindowPos
CreateWindowExW
GetClassInfoExW
RegisterClassExW
UnregisterClassA
IsWindow
BeginPaint
DefWindowProcW
MoveWindow

gdi32

SaveDC
OffsetViewportOrgEx
RestoreDC
DeleteDC
BitBlt
CreateRectRgn
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
OffsetRgn
GetDeviceCaps
DeleteObject
CombineRgn

advapi32

RegSetValueExW
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegEnumKeyExW

shell32

SHFileOperationW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
ShellExecuteW
SHGetSpecialFolderPathW

ole32

CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitialize
OleInitialize
CoUninitialize
OleUninitialize
CreateStreamOnHGlobal
RevokeDragDrop
ReleaseStgMedium
DoDragDrop
RegisterDragDrop

oleaut32

SysFreeString
VarUI4FromStr

shlwapi

PathFileExistsW
PathAddBackslashW
PathIsDirectoryW
StrRChrW
PathFindFileNameW

comctl32

InitCommonControlsEx
_TrackMouseEvent

riched20

ord4

psapi

GetModuleBaseNameW
EnumProcessModules
GetModuleInformation

imm32

ImmGetContext
ImmReleaseContext

Sections

.text
Size: 677KB - Virtual size: 676KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

425f2979bcbeb85b2b3daa3342a80002

Headers

DLL Characteristics

File Characteristics

Imports

gdiplus

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

riched20

psapi

imm32

Sections

.text Size: 677KB - Virtual size: 676KB

.rdata Size: 153KB - Virtual size: 152KB

.data Size: 16KB - Virtual size: 28KB

.rsrc Size: 81KB - Virtual size: 80KB

.reloc Size: 37KB - Virtual size: 37KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 677KB - Virtual size: 676KB

.rdata
Size: 153KB - Virtual size: 152KB

.data
Size: 16KB - Virtual size: 28KB

.rsrc
Size: 81KB - Virtual size: 80KB

.reloc
Size: 37KB - Virtual size: 37KB

.rmnet
Size: 56KB - Virtual size: 60KB