652e1bdc264a59eb3a5f4990a3955fcf36fff0dcb5afef3feb7acced57f85c7b

Sharing

Copy URL Twitter E-mail

General

Target

652e1bdc264a59eb3a5f4990a3955fcf36fff0dcb5afef3feb7acced57f85c7b
Size

190KB
MD5

64dafc47ef69c89e4b95ef7d655d3f40
SHA1

cd7dd714dc159ad24d8d8b24282f8fbdcdc447b7
SHA256

652e1bdc264a59eb3a5f4990a3955fcf36fff0dcb5afef3feb7acced57f85c7b
SHA512

ccb9be9fdff3e50fe2bfae0ce3443a03b8bac737fc21ffe61fc32f99526c968aa688ab26d4e20f0b879141e541174cb75622586f1dc4ea96716a2a1a364dcb78
SSDEEP

3072:5LQZvY2xBhFBNVBNhxxRPXH/x+cdDZCRHT1oE8BDjsAFkS:QvY4hr1FNdDZ6HTu1FkS

Score

N/A

Malware Config

Signatures

Files

652e1bdc264a59eb3a5f4990a3955fcf36fff0dcb5afef3feb7acced57f85c7b
.exe windows x86

ed80ca5afdb47ae58e6cc4930b8332f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DdeFreeDataHandle
DdeGetLastError
DdeCreateStringHandleA
DdeUnaccessData
DdeAccessData
DdeCreateDataHandle
DdeClientTransaction
DdeNameService
DdePostAdvise
DdeSetUserHandle
DdeQueryConvInfo
DdeDisconnect
DdeConnect
DdeUninitialize
DdeQueryStringA
DdeFreeStringHandle
DdeCmpStringHandles
AnyPopup
DestroyWindow
AdjustWindowRect
DeferWindowPos
CreateWindowExA
CharNextA
MessageBoxA
LoadStringA
GetKeyboardType
ActivateKeyboardLayout
GetMessageTime
SendDlgItemMessageA
ScrollWindowEx
ScrollWindow
ScreenToClient
RemovePropA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageA
PeekMessageW
PeekMessageA
OpenClipboard
OffsetRect
OemToCharA
MsgWaitForMultipleObjects
MessageBeep
MapWindowPoints
MapVirtualKeyA
MapDialogRect
LookupIconIdFromDirectoryEx
LoadMenuIndirectA
LoadKeyboardLayoutA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsDialogMessageA
IsClipboardFormatAvailable
IsChild
IsCharAlphaNumericA
IsCharAlphaA
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetUpdateRect
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetWindow
DdeInitializeA
GetMessagePos
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameA
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItem
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameA
GetClassLongA
GetClassInfoA
GetCaretPos
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowA
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyMenu
DestroyIcon
DestroyCursor
DestroyCaret
DeleteMenu
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreatePopupMenu
CreateMenu
CreateIconFromResourceEx
CreateIcon
CreateDialogIndirectParamA
CreateCaret
CloseClipboard
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
ChangeClipboardChain
CallWindowProcA
CallNextHookEx
BringWindowToTop
BeginPaint
CharLowerBuffA
CharLowerA
CharUpperBuffA
CharToOemA
AdjustWindowRectEx

comdlg32

FindTextA
ChooseColorA
GetSaveFileNameA
ChooseFontA
GetOpenFileNameA

shell32

SHGetDataFromIDListA
SHGetFileInfoA
ShellExecuteA
ShellExecuteExA
SHBrowseForFolderA
SHChangeNotify
SHFileOperationA
SHGetDesktopFolder
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation

ole32

CoInitialize
CoUninitialize
CoCreateInstance
StringFromCLSID
CoTaskMemAlloc
CoTaskMemFree
OleInitialize
OleUninitialize
RegisterDragDrop
RevokeDragDrop
DoDragDrop
OleGetClipboard
ReleaseStgMedium
CLSIDFromString

advapi32

RegDeleteKeyA
RegSetValueExA
RegQueryInfoKeyA
RegFlushKey
RegEnumValueA
RegEnumKeyExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA

gdi32

GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetPixel
GetPaletteEntries
GetObjectType
GetObjectA
GetNearestPaletteIndex
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
ExtTextOutA
ExtCreatePen
GetTextExtentPointA
EndPage
EndDoc
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgn
CreatePenIndirect
CreatePen
CreatePalette
CreateICA
CreateHalftonePalette
CreateFontIndirectA
CreateDIBitmap
CreateDIBSection
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileA
CombineRgn
BitBlt
GetTextMetricsA
GetWinMetaFileBits
GetWindowOrgEx
IntersectClipRect
LineTo
MaskBlt
MoveToEx
PatBlt
PlayEnhMetaFile
PolyPolyline
Polygon
Polyline
RealizePalette
RectVisible
Rectangle
RestoreDC
RoundRect
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetAbortProc
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBColorTable
SetEnhMetaFileBits
SetMapMode
SetPixel
SetROP2
SetStretchBltMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWinMetaFileBits
SetWindowExtEx
SetWindowOrgEx
StartDocA
StartPage
StretchBlt
StretchDIBits
UnrealizeObject
ExcludeClipRect
GetRgnBox

comctl32

ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_Write
ImageList_LoadImageA
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_SetOverlayImage
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_GetIconSize
ImageList_SetIconSize
_TrackMouseEvent
ord17
ImageList_BeginDrag
ImageList_Create

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

winmm

mciGetErrorStringA
timeGetTime
mciSendCommandA

winspool.drv

DocumentPropertiesA
EnumPrintersA
OpenPrinterA
ClosePrinter

kernel32

TlsGetValue
LocalAlloc
GetACP
VirtualFree
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
SetCurrentDirectoryA
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCurrentDirectoryA
GetCommandLineA
FreeLibrary
TlsSetValue
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringA
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
MoveFileW
GetAtomNameW
SetProcessPriorityBoost
BeginUpdateResourceA
FindFirstVolumeMountPointA
SetMessageWaitingIndicator
WriteConsoleOutputCharacterA
WriteConsoleOutputA
Beep
VirtualAlloc
GetStdHandle
GetConsoleScreenBufferInfo
CloseHandle
CreateDirectoryA
CreateEventA
CreateFileA
CreateFileMappingA
CreatePipe
Sleep
CreateProcessA
CreateSemaphoreA
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
EnumCalendarInfoA
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindCloseChangeNotification
FindFirstChangeNotificationA
FindNextChangeNotification
FindNextFileA
FindResourceA
FlushViewOfFile
FormatMessageA
FreeResource
GetCPInfo
GetCurrentProcessId
GetDateFormatA
GetDiskFreeSpaceA
GetExitCodeThread
GetFileAttributesA
GetFileSize
GetFullPathNameA
GetLastError
GetLocalTime
GetProfileStringA
GetShortPathNameA
GetSystemDefaultLCID
GetSystemInfo
GetTempFileNameA
GetTempPathA
GetTimeFormatA
GetUserDefaultLCID
GetVersion
GetVersionExA
GetWindowsDirectoryA
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFree
GlobalLock
GlobalHandle
GlobalSize
GlobalUnlock
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadResource
LockResource
MapViewOfFile
MoveFileA
MoveFileExA
MulDiv
OpenSemaphoreA
ReadFile
ReleaseSemaphore
RemoveDirectoryA
ResetEvent
ResumeThread
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesA
SetFilePointer
SetThreadLocale
SetThreadPriority
SizeofResource
SystemTimeToFileTime
TerminateThread
UnmapViewOfFile
WaitForMultipleObjects
WaitForSingleObject
WinExec
lstrcmpA
lstrcpyA
lstrlenW
GetSystemTimeAsFileTime
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsAlloc
TlsFree
SetLastError
HeapFree
GetTimeZoneInformation
HeapAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
HeapReAlloc
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetConsoleCP
FlushFileBuffers
HeapSize
SetStdHandle
CompareStringW
SetEnvironmentVariableA
FindFirstFileA

Sections

.text
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed80ca5afdb47ae58e6cc4930b8332f8

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

shell32

ole32

advapi32

gdi32

comctl32

version

winmm

winspool.drv

kernel32

Sections

.text Size: 86KB - Virtual size: 85KB

.rdata Size: 50KB - Virtual size: 50KB

.data Size: 33KB - Virtual size: 62KB

.rsrc Size: 19KB - Virtual size: 19KB

.text
Size: 86KB - Virtual size: 85KB

.rdata
Size: 50KB - Virtual size: 50KB

.data
Size: 33KB - Virtual size: 62KB

.rsrc
Size: 19KB - Virtual size: 19KB