03c141047336c966a5bcdc9fbcaff9e5dcd3bdd56513e1faeae780c02dbfcba7

Sharing

Copy URL

Twitter E-mail

General

Target

03c141047336c966a5bcdc9fbcaff9e5dcd3bdd56513e1faeae780c02dbfcba7
Size

468KB
MD5

7119ac323831b4c5dbdce6633a55ffc0
SHA1

db6d0bd4a416864fc59a05bd31891e850227295a
SHA256

03c141047336c966a5bcdc9fbcaff9e5dcd3bdd56513e1faeae780c02dbfcba7
SHA512

69aa2d69963fc7b3fa57e1f067707280589abdf3eb778a6900288b4d56f9e517acc49bfb23e87ea43b5ca95abdfd0075ac38c046a5db82b7bc3dfecf1f9f5f87
SSDEEP

12288:HtNK/vI0S/xwaWKewTkpHWaWMUq1a1OXnZj8DKOihme:HtUvpS/xwaWrwTkpH2gEwh

Score

N/A

Malware Config

Signatures

Files

03c141047336c966a5bcdc9fbcaff9e5dcd3bdd56513e1faeae780c02dbfcba7
.exe windows x86

13bfc20351abe134b07b22a61a642419

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsWindowEnabled
GetTopWindow
SetWindowRgn
ReleaseDC
GetWindowDC
PostMessageA
GetWindowRect
InvalidateRect
EnableWindow
GetSysColorBrush
GetClientRect
SetWinEventHook
CharNextW
WinHelpA
DrawTextExA
PackDDElParam
GetMenu
BringWindowToTop
GetAltTabInfoA
CloseClipboard
MsgWaitForMultipleObjects
InsertMenuItemW
CopyIcon
DialogBoxIndirectParamW
LoadImageA
CopyRect
OffsetRect
SendMessageA
wsprintfA
DestroyCursor
SetCursor
CallWindowProcW
WinHelpW
SetActiveWindow
ReleaseCapture
SetCapture
SetParent
FindWindowExW
GetClassInfoW
UnregisterClassW
RegisterClassW
GetCursorPos
GetFocus
SetWindowPlacement
SystemParametersInfoW
FindWindowW
SetForegroundWindow
IntersectRect
DialogBoxParamW
CreateDialogIndirectParamW
CreateDialogParamW
LoadCursorW
LoadStringW
LoadMenuIndirectW
LoadMenuW
SetProcessDefaultLayout
LoadImageW
LoadIconW
LoadBitmapW
GetMenuStringW
ModifyMenuW
GetMenuItemInfoW
GetMenuState
DeleteMenu
CreateAcceleratorTableW
LoadAcceleratorsW
CharNextA
GetWindowTextLengthW
GetDlgItemTextW
IsDlgButtonChecked
GetAsyncKeyState
DestroyWindow
GetForegroundWindow
ShowWindow
GetSystemMenu
EnableMenuItem
SetDlgItemTextW
CheckDlgButton
CreateWindowExW
GetLastActivePopup
SetWindowsHookExW
MessageBoxW
GetClassNameW
CallNextHookEx
wsprintfW
SetWindowLongW
GetWindowLongW
InflateRect
GetWindowTextW
DrawTextW
DefWindowProcW
GetDlgItem
SetFocus
MapWindowPoints
MoveWindow
SetWindowTextW
SendMessageW
EndDialog
GetMessageW
TranslateMessage
DispatchMessageW
WaitForInputIdle
PostThreadMessageW
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetSysColor
EndPaint
GetDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextA
TabbedTextOutA
LoadCursorA
GetClassNameA
DestroyMenu
UnhookWindowsHookEx
GetSystemMetrics
ExitWindowsEx
LoadIconA
GetDesktopWindow
BeginPaint
IsIconic
DrawIcon
LoadBitmapA
MessageBoxA
GetParent

urlmon

RevokeFormatEnumerator
RegisterMediaTypes
CreateURLMoniker

shell32

SHGetFileInfoW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteW
SHGetFolderPathW
SHGetSpecialFolderPathW
Shell_NotifyIconW
FindExecutableA
ShellExecuteA
Shell_NotifyIconA
SHGetSpecialFolderLocation
ExtractAssociatedIconW
ShellAboutA

ole32

OleUninitialize
OleInitialize
StringFromGUID2
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
OleDraw
StgIsStorageFile
CoRegisterMessageFilter
ReadClassStm
StgGetIFillLockBytesOnILockBytes
CoCreateInstance

advapi32

InitializeSecurityDescriptor
RegQueryValueExW
GetServiceDisplayNameW
EnumDependentServicesA
RegSetValueExW
IsValidSecurityDescriptor
SetThreadToken
RegisterServiceCtrlHandlerA
LookupPrivilegeDisplayNameW
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
AdjustTokenPrivileges
OpenProcessToken
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
LookupPrivilegeValueA
RegOpenKeyExW
RegOpenKeyW
RegQueryValueW
RegSetValueW
RegDeleteKeyW
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyW
RegDeleteValueW
RegCreateKeyExW

gdi32

SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateCompatibleBitmap
GetObjectA
GetDIBits
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
OffsetViewportOrgEx
CreateFontIndirectA
CreateRectRgn
CombineRgn
SelectObject
StretchBlt
BitBlt
GetBkColor
CreateCompatibleDC
CreateDIBPatternBrushPt
AddFontResourceExA
CloseMetaFile
CreateDIBitmap
CheckColorsInGamut
AbortPath
CreateColorSpaceA
Chord
CloseFigure
AddFontResourceExW
AddFontResourceW
CreateBrushIndirect
SetViewportExtEx
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
CreateDIBSection
GetObjectW
CreateFontIndirectW
GetTextExtentPoint32W
CreateDCW
GetTextMetricsW
PatBlt
SelectPalette
RealizePalette
StretchDIBits
Rectangle
Polygon
MoveToEx
LineTo
ExtTextOutW
GetPixel
GetTextFaceW
GetDCOrgEx
GetTextExtentPointA
CreateFontW
CreatePen
CreateSolidBrush
CreatePatternBrush
CreateBitmapIndirect
GetNearestColor
GetTextCharset
GetStockObject
CreateBitmap

opengl32

wglMakeCurrent
glColorMask
glCallList
glDepthFunc
glLogicOp
glTexEnviv
glFogi

dbghelp

SymSetOptions
SymLoadModuleEx
SymGetLineFromAddr
SymGetOptions
SymGetSymNext64
SymEnumSym

comctl32

_TrackMouseEvent

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

shlwapi

PathFindExtensionA
PathFindFileNameA

kernel32

GetTickCount
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetErrorMode
CreateFileA
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
WritePrivateProfileStringA
GetThreadLocale
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentProcessId
CloseHandle
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
QueryPerformanceCounter
GlobalAlloc
GlobalFree
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
lstrcmpW
GlobalLock
GlobalUnlock
MulDiv
FreeLibrary
GetModuleFileNameW
SetLastError
GetModuleHandleA
GetProcAddress
lstrlenA
CompareStringA
GetVersion
MultiByteToWideChar
GetCurrentProcess
CreateProcessA
GetLastError
FormatMessageA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
Sleep
GetStdHandle
VirtualFree
HeapCreate
HeapDestroy
GetACP
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapSize
ExitProcess
RaiseException
GetStartupInfoA
GetProcessHeap
GetCommandLineA
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
SetEnvironmentVariableA
CompareStringW
IsValidLocale
EnumSystemLocalesA
LoadLibraryW
GetModuleHandleW
GetFileAttributesW
CreateProcessW
CreateThread
MoveFileW
FatalAppExitA
SetConsoleCtrlHandler
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetFileSize
CreateFileW
OutputDebugStringA
GetShortPathNameW
FindClose
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
LoadLibraryExW
GlobalMemoryStatus
QueryPerformanceFrequency
SetEndOfFile
VirtualQuery
FileTimeToSystemTime
GetDateFormatW
GetTimeFormatW
GetCurrentDirectoryW
ReleaseSemaphore
CreateSemaphoreW
GetSystemInfo
GetVersionExW
GlobalSize
FindNextFileW
IsBadReadPtr
GetNumberFormatW
EnumResourceLanguagesW
GetSystemDefaultLCID
SetThreadLocale
GetLocaleInfoW
GetUserDefaultUILanguage
FindResourceW
FindResourceExW
GetVolumeInformationW
SetFileTime
GetFileTime
CopyFileW
MoveFileExW
IsBadWritePtr
CreateDirectoryW
GetDiskFreeSpaceW
GetTempPathW
GetLocalTime
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetProfileIntW
GetProfileStringW
GetCommState
SetCommState
DeviceIoControl
GetFullPathNameW
lstrcmpiW
SetEvent
GetCommandLineW
GetWindowsDirectoryW
CreateEventW
FormatMessageW
RemoveDirectoryW
FindFirstFileW
SetFileAttributesW
DeleteFileW
InterlockedIncrement
InterlockedDecrement
LocalFree
WaitForSingleObject
GetExitCodeProcess
GetSystemDirectoryA
GetModuleFileNameA
GetVersionExA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
WaitForSingleObjectEx
IsValidCodePage
WriteProfileStringW
LoadLibraryExA
InitializeCriticalSectionAndSpinCount
lstrcmpA
IsDBCSLeadByteEx
GetTimeZoneInformation
VirtualAlloc

Sections

.text
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.johnny
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 241KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13bfc20351abe134b07b22a61a642419

Headers

DLL Characteristics

File Characteristics

Imports

user32

urlmon

shell32

ole32

advapi32

gdi32

opengl32

dbghelp

comctl32

version

shlwapi

kernel32

Sections

.text Size: 158KB - Virtual size: 157KB

.data Size: 6KB - Virtual size: 155KB

.johnny Size: 61KB - Virtual size: 61KB

.rsrc Size: 241KB - Virtual size: 241KB

.text
Size: 158KB - Virtual size: 157KB

.data
Size: 6KB - Virtual size: 155KB

.johnny
Size: 61KB - Virtual size: 61KB

.rsrc
Size: 241KB - Virtual size: 241KB