c00d208413181222409c7e2bb808ada6c3995ffc3ff87fd1786e390684fcb705

Sharing

Copy URL Twitter E-mail

General

Target

c00d208413181222409c7e2bb808ada6c3995ffc3ff87fd1786e390684fcb705
Size

634KB
MD5

68494579e7f508375e6e19904de85146
SHA1

5d49b7d1b2b5b6982f7bee0bcfbb9b8bc92e0b20
SHA256

c00d208413181222409c7e2bb808ada6c3995ffc3ff87fd1786e390684fcb705
SHA512

0c32a4f5e1b69d9e3451327d1e7b8fd1854041aafe6264d483543461144e177b150ea407df446ca8cdb02936ad8ca31e900dce5585a283b0c1337aee2c4225f8
SSDEEP

12288:spoyjn58W8y/R3ww3wAmmSNm/vtybmNpjLiSFcBhDTpu9vPuw:s+yD6W81A3SYQbojLiSFcbHAH

Score

N/A

Malware Config

Signatures

Files

c00d208413181222409c7e2bb808ada6c3995ffc3ff87fd1786e390684fcb705
.exe windows x86

a45c99ed4fd4e29f3fba198ebae60288

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32FirstW
CreateToolhelp32Snapshot
Sleep
CreateThread
GetPrivateProfileIntW
FlushFileBuffers
WriteFile
GetFileSize
Process32NextW
GetSystemDirectoryW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
GetLocaleInfoW
GetModuleHandleA
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetPrivateProfileStringW
GetCPInfo
InitializeCriticalSectionAndSpinCount
InterlockedExchange
SetConsoleCtrlHandler
HeapSize
GetModuleFileNameA
GetStdHandle
GetCurrentThread
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
FatalAppExitA
HeapDestroy
HeapCreate
HeapReAlloc
GetStartupInfoW
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
WideCharToMultiByte
GetSystemTime
LocalFree
GetLocalTime
FormatMessageW
GetFileSizeEx
SetFilePointerEx
SetEndOfFile
LocalFileTimeToFileTime
GetSystemTimeAsFileTime
SystemTimeToFileTime
CreateFileA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetCommandLineW
LockResource
OpenProcess
TerminateProcess
OutputDebugStringW
DebugBreak
GetCurrentDirectoryW
SetCurrentDirectoryW
FindNextFileW
GetTempPathW
GetTempFileNameW
DeleteFileW
FindFirstFileW
FindClose
lstrlenA
lstrcpynW
RaiseException
GetFileAttributesW
ReadFile
SetFilePointer
GetCurrentProcessId
CreateFileW
DeviceIoControl
CloseHandle
LoadLibraryW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
SetLastError
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
GetLastError
lstrlenW
GetCurrentThreadId
InterlockedCompareExchange
GetCurrentProcess
FlushInstructionCache
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetACP

user32

SetWindowLongW
CharNextW
UnregisterClassA
GetDesktopWindow
OffsetRect
SetRect
GetDC
GetCapture
GetWindowDC
ReleaseDC
GetCursorPos
GetSystemMetrics
SetForegroundWindow
LoadIconW
CharLowerW
SendDlgItemMessageW
GetWindow
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
SetDlgItemTextW
EnableWindow
ShowWindow
BringWindowToTop
SetWindowTextW
PostMessageW
EndDialog
GetDlgItem
wvsprintfW
IsRectEmpty
SetWindowPos
MoveWindow
GetWindowTextW
LoadImageW
GetIconInfo
DrawIconEx
DestroyIcon
PtInRect
WindowFromPoint
ReleaseCapture
SetWindowRgn
GetParent
ChildWindowFromPoint
SetFocus
SetCapture
IsWindowEnabled
RedrawWindow
ClientToScreen
SetCursor
InvalidateRect
UpdateWindow
RegisterClassExW
CreateWindowExW
DrawTextW
GetWindowLongW
EndPaint
BeginPaint
MessageBoxW
LoadStringW
CopyRect
LoadCursorW
GetClassInfoExW
IsWindow
KillTimer
SetTimer
ScreenToClient
GetClientRect
GetWindowRect
CallWindowProcW
SendMessageW
DefWindowProcW
GetActiveWindow
DialogBoxParamW
DestroyWindow

gdi32

CreatePatternBrush
LineTo
MoveToEx
SetROP2
CreateBitmap
PatBlt
CreateDCW
CreateFontIndirectW
GetObjectW
CreatePolygonRgn
CreatePen
RoundRect
Rectangle
BitBlt
DeleteDC
SetTextColor
DeleteObject
CreateCompatibleBitmap
SetViewportOrgEx
SelectObject
CreateCompatibleDC
CreateFontW
SetBkColor
ExtTextOutW
ExcludeClipRect
GetClipBox
SetBkMode
CreateSolidBrush
GetROP2

advapi32

RegQueryValueExW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegEnumKeyExW
RegQueryInfoKeyW
RegQueryValueExA

shell32

SHFileOperationW
ExtractIconW
ShellExecuteW
SHGetFileInfoW
ShellExecuteExW

ole32

CoTaskMemRealloc
CoInitialize
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc

oleaut32

GetErrorInfo
VariantChangeType
SetErrorInfo
VarUI4FromStr
SysAllocString
SysStringLen
SysFreeString
VariantInit
VariantClear
SysAllocStringByteLen
SysStringByteLen
CreateErrorInfo

shlwapi

StrCmpIW
PathFindFileNameW
PathRemoveFileSpecW
PathFileExistsW
StrCmpNW
StrRChrW
StrCmpW
PathAppendW
PathIsRelativeW
SHGetValueW
PathCombineW
SHSetValueW

comctl32

ImageList_Create
_TrackMouseEvent
ImageList_Draw
ImageList_GetIconSize
ImageList_ReplaceIcon
InitCommonControlsEx

msimg32

GradientFill

psapi

GetModuleFileNameExW
EnumProcessModules

Sections

.text
Size: 449KB - Virtual size: 449KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 21KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a45c99ed4fd4e29f3fba198ebae60288

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

psapi

Sections

.text Size: 449KB - Virtual size: 449KB

.rdata Size: 66KB - Virtual size: 65KB

.data Size: 21KB - Virtual size: 29KB

.rsrc Size: 88KB - Virtual size: 88KB

.text
Size: 449KB - Virtual size: 449KB

.rdata
Size: 66KB - Virtual size: 65KB

.data
Size: 21KB - Virtual size: 29KB

.rsrc
Size: 88KB - Virtual size: 88KB