376691d533441807a052c1adaf91babed52a846153cb25fe26cb5bb2d1d1808b

Sharing

Copy URL Twitter E-mail

General

Target

376691d533441807a052c1adaf91babed52a846153cb25fe26cb5bb2d1d1808b
Size

812KB
MD5

40c41579ce4ccd1795f063ae5fe08cb0
SHA1

c221a94a029122962d9be1808c0e936ddc06bc62
SHA256

376691d533441807a052c1adaf91babed52a846153cb25fe26cb5bb2d1d1808b
SHA512

26e8f5a334ad3dc7c2e540db2fabe77f89e4609c43a6e3af7af53edd0f24431890ad52005336fe809713e6ab98b53146798e5c7fb551cefc4fd5468ab0ae19fd
SSDEEP

12288:FOJugfejkD6+7vfEJK+2FTNg7QF5UHgSiuScTY5wzwBJwBansGSj3:F7jfJ5Y2bHgSisThzGJGa23

Score

N/A

Malware Config

Signatures

Files

376691d533441807a052c1adaf91babed52a846153cb25fe26cb5bb2d1d1808b
.exe windows x86

7cb6d6d119d595b5e656eb23798762b0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

dbghelp

MiniDumpWriteDump

kernel32

GetLongPathNameA
CreateProcessA
DeviceIoControl
GlobalMemoryStatus
VirtualQuery
RaiseException
GetFileSize
WriteFile
SetFilePointer
GetFileTime
GetSystemTimeAsFileTime
GetSystemInfo
FileTimeToLocalFileTime
FileTimeToDosDateTime
lstrcpyA
lstrlenA
GetTickCount
lstrcmpA
GetVersionExA
GetProcAddress
FlushInstructionCache
VirtualProtectEx
WriteProcessMemory
LoadLibraryA
lstrcpynA
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
OpenFileMappingA
GetLocalTime
MultiByteToWideChar
WideCharToMultiByte
SetProcessWorkingSetSize
WinExec
WaitForSingleObject
ReadFile
DeleteFileA
CopyFileA
GetShortPathNameA
GetCurrentThread
SetThreadPriority
lstrcatA
CreateEventA
GetEnvironmentVariableA
OutputDebugStringW
SetEndOfFile
CreateFileW
SetEnvironmentVariableA
WriteConsoleW
GetStringTypeW
OutputDebugStringA
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
LoadLibraryW
SetFilePointerEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
ReadConsoleW
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetConsoleCtrlHandler
LoadLibraryExW
FreeLibrary
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetFileType
HeapSize
GetModuleFileNameW
GetStdHandle
CreateSemaphoreW
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetLastError
UnhandledExceptionFilter
FatalAppExitA
GetCommandLineA
VirtualProtect
VirtualAlloc
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileA
FindFirstFileExA
FindClose
AreFileApisANSI
GetModuleHandleExW
IsProcessorFeaturePresent
IsDebuggerPresent
SetPriorityClass
CreateDirectoryA
GetTempPathA
GetModuleHandleA
CreateMutexA
Sleep
ReleaseMutex
ResumeThread
GetLastError
CreateThread
OpenProcess
GetProcessHeap
HeapFree
HeapAlloc
GlobalAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CreateFileA
GetFileAttributesExW
GetModuleFileNameA
CloseHandle
InitializeCriticalSectionAndSpinCount
SetErrorMode
GetCurrentThreadId
SetUnhandledExceptionFilter
ExitProcess
GetCurrentProcessId
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
GlobalFree
SetStdHandle
RtlUnwind
DecodePointer
EncodePointer
lstrcatW
GetSystemDirectoryA
lstrlenW
LocalFree
FindResourceA
SizeofResource
LoadResource
LockResource
FreeResource
InterlockedExchange

user32

GetClassNameA
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
wvsprintfA
wsprintfA
SendMessageA
GetParent
GetWindowRect
EnumChildWindows
TrackMouseEvent
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
PostMessageA
IsZoomed
CallWindowProcA
UnregisterClassA
RegisterClassExA
CreateWindowExA
ShowWindow
MoveWindow
GetDC
ReleaseDC
BeginPaint
EndPaint
RemovePropA
GetClientRect
MapWindowPoints
FindWindowExA
LoadCursorA
LoadImageA
RegisterWindowMessageA
PostThreadMessageA
DefWindowProcW
CallWindowProcW
SetPropA
GetPropA
IsWindowEnabled
DrawTextA
GetWindowTextA
SystemParametersInfoA
FillRect
SetCursor
SetWindowTextA
InvalidateRect
SetWindowRgn
GetForegroundWindow
KillTimer
SetTimer
OffsetRect
SetWindowPos
DestroyWindow
PostQuitMessage
DrawIconEx
DestroyIcon
GetWindowLongA
SetWindowLongW

gdi32

GetObjectA
CreatePolygonRgn
TextOutA
CreateSolidBrush
SetTextColor
StretchBlt
GetTextExtentPoint32A
CreateFontA
CreateDIBSection
SetBkMode
SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC
BitBlt
GetBitmapBits

advapi32

GetUserNameA
StartServiceA
OpenServiceA
OpenSCManagerA
DeleteService
CreateServiceA
ControlService
CloseServiceHandle
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyA
RegCloseKey

shell32

ShellExecuteExA
SHChangeNotify

ole32

OleUninitialize
StgCreateDocfile
OleCreate
OleInitialize
CoUninitialize
CreateStreamOnHGlobal
CoCreateInstance
CoInitialize

oleaut32

VariantClear
VariantCopy
VarCmp
SysAllocStringLen
SysStringLen
SysStringByteLen
SysAllocStringByteLen
VariantInit
SafeArrayDestroy
SafeArrayAccessData
SafeArrayPutElement
VariantChangeType
CreateErrorInfo
SetErrorInfo
GetErrorInfo
SafeArrayCreate
SysAllocString
SysFreeString

ws2_32

accept
bind
closesocket
inet_ntoa
gethostbyname
gethostname
__WSAFDIsSet
WSACleanup
WSAStartup
connect
ioctlsocket
socket
shutdown
setsockopt
sendto
send
select
recvfrom
recv
listen
inet_addr
htons
htonl
getsockname
getpeername

msimg32

AlphaBlend

shlwapi

StrStrIA

wininet

InternetCloseHandle
InternetOpenA
DeleteUrlCacheEntry
InternetReadFile
InternetOpenUrlA

psapi

GetModuleInformation

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

Sections

.text
Size: 442KB - Virtual size: 441KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 255KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7cb6d6d119d595b5e656eb23798762b0

Headers

DLL Characteristics

File Characteristics

Imports

dbghelp

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

ws2_32

msimg32

shlwapi

wininet

psapi

version

Sections

.text Size: 442KB - Virtual size: 441KB

.rdata Size: 93KB - Virtual size: 93KB

.data Size: 20KB - Virtual size: 47KB

.rsrc Size: 255KB - Virtual size: 254KB

.text
Size: 442KB - Virtual size: 441KB

.rdata
Size: 93KB - Virtual size: 93KB

.data
Size: 20KB - Virtual size: 47KB

.rsrc
Size: 255KB - Virtual size: 254KB