d1fe8fea741f9758292df1b335ed203c4f9f6ec462690dd7338f043a01ffae8c

Sharing

Copy URL Twitter E-mail

General

Target

d1fe8fea741f9758292df1b335ed203c4f9f6ec462690dd7338f043a01ffae8c
Size

566KB
MD5

66f52c67ae029c4c96921a67339d15d0
SHA1

4bbd5045afaf52b4978687b1a3cdbb7e0d58ae3a
SHA256

d1fe8fea741f9758292df1b335ed203c4f9f6ec462690dd7338f043a01ffae8c
SHA512

18653f83c126d07497b01055fd6e6c2e8556c14d1887ca9451212184ff22786290fbfbad2a8119908c21816949ff620043154a125f04e4f580cf8e5c1ce5197e
SSDEEP

12288:WWTb+eCPaQnpt3SV7gO1Q6NIm5OgpiKMCIwLnw8SmU+ICD9n:WWT4PayptiVMO1ZNiWnw8D1n

Score

N/A

Malware Config

Signatures

Files

d1fe8fea741f9758292df1b335ed203c4f9f6ec462690dd7338f043a01ffae8c
.exe windows x86

01b58fecf2410079a5b9a644c619c702

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_SYSTEM

Imports

kernel32

HeapFree
HeapQueryInformation
HeapSize
HeapReAlloc
GetConsoleMode
GetConsoleCP
SetFilePointer
LoadLibraryW
OutputDebugStringW
WriteConsoleW
OutputDebugStringA
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
RtlUnwind
MultiByteToWideChar
LCMapStringW
WideCharToMultiByte
SetLastError
TlsFree
TlsSetValue
TlsGetValue
IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
ExitProcess
GetModuleHandleW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
IsBadReadPtr
HeapValidate
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
DecodePointer
EncodePointer
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
FlushFileBuffers
GetStringTypeW
CreateFileA
SetStdHandle
SetEndOfFile
GetProcessHeap
ReadFile
lstrcpyA
lstrcpyW
GlobalReAlloc
GetPrivateProfileSectionW
CloseHandle
GetCurrentThreadId
CompareStringA
GetCurrentDirectoryA
CancelIo
DeviceIoControl
LoadLibraryA
FindClose
GetProcAddress
lstrcmpiA
GetLastError
SetProcessAffinityMask
FindFirstFileA
GetStdHandle
GetPrivateProfileIntW
lstrcatA
GetModuleFileNameW
MulDiv
Sleep
GetVolumeInformationA
GlobalAlloc
WriteFile
_lcreat
_lclose
WaitForSingleObject
GetCurrentProcess
_lwrite
HeapAlloc
lstrlenA
lstrcmpA
TlsAlloc
CreateFileW

user32

CopyRect
MoveWindow
EndPaint
CheckMenuItem
DestroyWindow
SetCursor
GetDlgItemInt
GetSystemMenu
IsWindowVisible
GetSystemMetrics
ReleaseCapture
UnhookWindowsHookEx
SetDlgItemTextA
DrawFrameControl
FindWindowA
LoadCursorA
ClientToScreen
GetDlgItemTextA
PostMessageA
IsWindow
GetMenuItemCount
AppendMenuA
IsDlgButtonChecked
GetSysColorBrush
CreatePopupMenu
SetMenu
SetTimer
HideCaret
ScreenToClient
GetWindowRect
SetActiveWindow
InsertMenuItemA
PostQuitMessage
TrackPopupMenu
GetWindowDC
FillRect
SetCapture
KillTimer
DrawTextA
LoadStringA
DeleteMenu
GetFocus
MessageBeep
IsWindowEnabled
FindWindowExA
SetFocus
SendMessageA
BeginPaint
EnumWindows
GetDC
InflateRect
SetDlgItemInt
GetMenu
OffsetRect
GetWindowTextA
TrackPopupMenuEx
SetRect
SetWindowLongA
MessageBoxA
UnionRect
InvalidateRect
GetAltTabInfoA
GetWindowLongA
CreateWindowExA
ReleaseDC
GetDlgItem
EndDialog
DefWindowProcA
SetWindowsHookExA
GetDesktopWindow
GetSysColor
GetCursorPos

gdi32

SetTextColor
DeleteDC
CreateDIBSection
GetDeviceCaps
GetDIBits
ExcludeClipRect
BitBlt
CreatePalette
DeleteObject
SelectObject
CreateCompatibleDC
CreateRectRgnIndirect
DPtoLP
CombineRgn
LineTo
CreateCompatibleBitmap
GetMapMode
Ellipse
FillRgn
GetCharWidth32A
Polyline
CreatePen
GetObjectA
TextOutW
GetStockObject
CreateSolidBrush
TextOutA
MoveToEx
SetMapMode
GetTextExtentPoint32A
CreateDCA
CreateFontA

advapi32

RegCloseKey

shell32

SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA

ws2_32

htons
inet_addr
socket
closesocket
listen
bind

iphlpapi

IcmpCreateFile
IcmpCloseHandle
GetAdaptersInfo

shlwapi

PathStripToRootA
wvnsprintfA
wnsprintfA
PathFindExtensionW
AssocCreate
StrToIntExA
PathFindFileNameA
StrChrA

comctl32

ImageList_Destroy
ord413
ImageList_DragEnter
ImageList_DragLeave
ord412
ord16
ord17
ImageList_Draw
ImageList_DragMove
InitCommonControlsEx
ImageList_LoadImageA
ImageList_BeginDrag
ImageList_EndDrag

pdh

PdhAddCounterA
PdhOpenQueryA
PdhOpenLogA
PdhUpdateLogA
PdhCloseLog
PdhCloseQuery

wtsapi32

WTSFreeMemory
WTSEnumerateProcessesA

uxtheme

CloseThemeData
DrawThemeBackground
OpenThemeData
GetThemeInt

Sections

.text
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 307KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

01b58fecf2410079a5b9a644c619c702

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ws2_32

iphlpapi

shlwapi

comctl32

pdh

wtsapi32

uxtheme

Sections

.text Size: 158KB - Virtual size: 157KB

.rdata Size: 307KB - Virtual size: 307KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 95KB - Virtual size: 95KB

.text
Size: 158KB - Virtual size: 157KB

.rdata
Size: 307KB - Virtual size: 307KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 95KB - Virtual size: 95KB