e390f402bb50aa38aa668c9d2f95690194f0365559cf83a98640e6631bed569b

Sharing

Copy URL Twitter E-mail

General

Target

e390f402bb50aa38aa668c9d2f95690194f0365559cf83a98640e6631bed569b
Size

675KB
MD5

5126992856285d1a9b6bcf0f8acc5126
SHA1

31c466d25b803ff3fc146ee4de042f55efe4ce4a
SHA256

e390f402bb50aa38aa668c9d2f95690194f0365559cf83a98640e6631bed569b
SHA512

f32b28c3506586c0a38ce58f02114456f1b4d06daf4a7b19d719b80e16831f8a0532d4d958a21542c2b5727e8e620a44aaa0d527eb0ad67381f31af4e2dcfb51
SSDEEP

12288:vyhbY8sE6YSeILSqrrmDoqtE8IILsbetnTP073M+rstKjwYX0AOCm0Y:v6CFARouLrtnTP9+ryKjwU00Y

Score

N/A

Malware Config

Signatures

Files

e390f402bb50aa38aa668c9d2f95690194f0365559cf83a98640e6631bed569b
.exe windows x86

e84f7e1b4e46b653201fdf2334d32bbc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetStartupInfoW
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
RtlUnwind
HeapFree
HeapAlloc
HeapReAlloc
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetFileTime
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA
GetProcessHeap
SetEnvironmentVariableA
GetFileSizeEx
GetFileAttributesW
SetFilePointerEx
LocalFileTimeToFileTime
FileTimeToLocalFileTime
SetErrorMode
SystemTimeToFileTime
FileTimeToSystemTime
lstrlenA
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
GetFileSize
UnlockFile
LockFile
GetThreadLocale
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetModuleHandleA
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
FreeResource
GlobalFree
GlobalUnlock
FormatMessageW
LocalFree
MulDiv
SetLastError
GlobalAddAtomW
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
MultiByteToWideChar
WideCharToMultiByte
InterlockedExchange
GlobalLock
lstrcmpW
GlobalAlloc
LoadLibraryExW
FlushFileBuffers
SetEndOfFile
WriteFile
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetCommandLineW
Sleep
GetLocalTime
lstrlenW
GetModuleHandleW
GetCurrentProcess
GetVersionExW
FindNextFileW
FindFirstFileW
FindClose
GetTempPathW
GetTempFileNameW
DeleteFileW
InterlockedDecrement
GetProcAddress
FreeLibrary
GetModuleFileNameW
InterlockedIncrement
ReadFile
SetFilePointer
GetCurrentProcessId
CreateFileW
DeviceIoControl
LoadLibraryW
FindResourceW
LoadResource
LockResource
SizeofResource
CloseHandle
CreateMutexW
GetSystemTimeAsFileTime
GetLastError

user32

MessageBeep
GetNextDlgGroupItem
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableW
CharNextW
CharUpperW
GetSysColorBrush
ReleaseCapture
LoadCursorW
SetCapture
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
DestroyMenu
SetWindowContextHelpId
MapDialogRect
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
RegisterWindowMessageW
SendDlgItemMessageW
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
CopyRect
PtInRect
GetMenu
SetWindowLongW
ShowWindow
SetForegroundWindow
FindWindowW
MessageBoxW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetNextDlgTabItem
EndDialog
GetMenuItemID
GetMenuItemCount
GetSubMenu
PostThreadMessageW
RegisterClipboardFormatW
UnregisterClassW
GetActiveWindow
EnableWindow
DrawIcon
AppendMenuW
SendMessageW
GetSystemMenu
IsIconic
GetWindowRect
GetClientRect
LoadIconW
GetSystemMetrics
GetDlgItem
PostMessageW
InvalidateRect
SetTimer
KillTimer
MoveWindow
DrawTextW
LoadStringW
PostQuitMessage
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuW
GetParent
GetFocus
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ValidateRect
GetCursorPos
PeekMessageW
GetKeyState
IsWindowVisible
DispatchMessageW
TranslateMessage
GetMessageW
CallNextHookEx
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
SetCursor
SetWindowsHookExW
SendDlgItemMessageA

gdi32

GetBkColor
GetTextColor
GetRgnBox
GetMapMode
CreateRectRgnIndirect
GetStockObject
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
RestoreDC
SaveDC
ExtTextOutW
GetObjectW
SetBkColor
SetTextColor
GetClipBox
TextOutW
SelectObject
GetDeviceCaps
CreateBitmap
RectVisible

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegDeleteKeyW
RegQueryValueExA
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid

shell32

ShellExecuteW
CommandLineToArgvW

shlwapi

PathIsRelativeW
PathFileExistsW
PathRemoveFileSpecW
SHGetValueW
PathAppendW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW
PathCombineW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleIsCurrentClipboard
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysStringLen
SysFreeString
VariantInit
VariantClear
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
VariantChangeType
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString

Sections

.text
Size: 318KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 253KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e84f7e1b4e46b653201fdf2334d32bbc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 318KB - Virtual size: 317KB

.rdata Size: 72KB - Virtual size: 71KB

.data Size: 24KB - Virtual size: 39KB

.rsrc Size: 253KB - Virtual size: 256KB

.text
Size: 318KB - Virtual size: 317KB

.rdata
Size: 72KB - Virtual size: 71KB

.data
Size: 24KB - Virtual size: 39KB

.rsrc
Size: 253KB - Virtual size: 256KB