9a936eb7ba0d87bf8ec2b708b6ed4164eadc508659bbbb82b90c4b7a308f2a6f

Sharing

Copy URL Twitter E-mail

General

Target

9a936eb7ba0d87bf8ec2b708b6ed4164eadc508659bbbb82b90c4b7a308f2a6f
Size

388KB
MD5

6ea0254d5a1ff83085c6094d54fc0106
SHA1

4a6c2a9a4acd44f4d3bb51cacb5b3089eb407440
SHA256

9a936eb7ba0d87bf8ec2b708b6ed4164eadc508659bbbb82b90c4b7a308f2a6f
SHA512

4335f35c6b7d8bb6b8e8a1491474e6b7704a2f18831b33037c789abc62839fae6212ccd39e72dac17c5aded8b5045b1108d5b4038099d5e4319855306ff7dff8
SSDEEP

6144:rnkxM16D1xH1LXI4Fc0LrIqk2r1Lznay6g7wFUTWKpf95H3zo0naG4:wOUDT1LXPm+M2r1LzV7wOWKdPaG4

Score

N/A

Malware Config

Signatures

Files

9a936eb7ba0d87bf8ec2b708b6ed4164eadc508659bbbb82b90c4b7a308f2a6f
.exe windows x86

de599c36b2c3d5e030f0710d7edb8007

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
GetOEMCP
GetACP
GetCPInfo
ReadFile
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
CompareStringA
WideCharToMultiByte
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
SetUnhandledExceptionFilter
FlushFileBuffers
WriteFile
HeapSize
GetCurrentProcess
TerminateProcess
HeapReAlloc
HeapAlloc
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapFree
RaiseException
RtlUnwind
CompareStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
GetLocaleInfoW
CreateDirectoryA
GetTempFileNameA
GetShortPathNameA
OpenFile
GetWindowsDirectoryA
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
SetFilePointer
SetEndOfFile
GetVersion
OpenMutexA
CreateMutexA
GetTempPathA
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
lstrlenA
RemoveDirectoryA
GetModuleFileNameA
GetTickCount
Sleep
DeleteFileA
GetFileAttributesA
LoadLibraryA
GetProcAddress
FreeLibrary
GetSystemDirectoryA
GetDiskFreeSpaceExA
GetCurrentThreadId
InterlockedDecrement
GlobalAlloc
GlobalLock
GlobalUnlock
CreateThread
WaitForSingleObject
EnterCriticalSection
SetEvent
LeaveCriticalSection
CloseHandle
CreateEventA
FindFirstFileA
WritePrivateProfileStringA
FindNextFileA
FindClose
lstrcpyA
GetVersionExA
GetLastError
GetPrivateProfileStringA
MultiByteToWideChar
SetEnvironmentVariableA

user32

IsDlgButtonChecked
SetDlgItemTextA
EndDialog
GetDlgItemTextA
CheckRadioButton
FillRect
SetWindowRgn
IsZoomed
GetSystemMetrics
SetFocus
LoadStringA
GetScrollInfo
GetScrollRange
GetScrollPos
SetTimer
SetCapture
ReleaseCapture
GetDlgItem
KillTimer
LoadImageA
IsWindow
GetWindowRect
GetDlgCtrlID
LoadAcceleratorsA
RegisterClassExA
LoadCursorA
LoadIconA
GetClassInfoExA
IsWindowEnabled
SetCursor
DrawStateA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
PostQuitMessage
SetForegroundWindow
IsIconic
DialogBoxParamA
CheckMenuItem
GetSystemMenu
InsertMenuA
RegisterWindowMessageA
IsMenu
GetMenuItemInfoA
SetMenuItemInfoA
SetRectEmpty
IntersectRect
GetKeyState
SetWindowsHookExA
UnhookWindowsHookEx
WindowFromPoint
CallNextHookEx
DefWindowProcA
GetWindowLongA
SetWindowLongA
CreateWindowExA
DestroyWindow
SetWindowPos
CreatePopupMenu
AppendMenuA
CreateMenu
GetMenuState
ModifyMenuA
FindWindowA
GetDesktopWindow
PtInRect
SystemParametersInfoA
LoadMenuA
GetMenuItemCount
GetMenuStringA
GetMenuItemID
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
GetSubMenu
GetCursorPos
TrackPopupMenu
DestroyMenu
GetDC
EnableWindow
MoveWindow
CopyRect
SetWindowTextA
GetWindowDC
OffsetRect
GetFocus
ReleaseDC
InvalidateRect
BeginPaint
GetClientRect
DrawTextA
EndPaint
CallWindowProcA
GetParent
wsprintfA
MessageBoxA
ClientToScreen
ScreenToClient
ShowWindow
UpdateWindow
PostMessageA
SendMessageA

gdi32

Rectangle
SetROP2
CreateSolidBrush
GetClipBox
GetTextExtentPoint32A
CreateFontIndirectA
ExtTextOutA
StretchBlt
SetTextColor
CreatePen
MoveToEx
LineTo
SetBkMode
GetStockObject
GetObjectA
SetBkColor
CombineRgn
CreateRectRgn
GetPixel
DeleteDC
BitBlt
CreateCompatibleBitmap
SelectObject
DeleteObject
CreateCompatibleDC

comctl32

ImageList_GetImageCount
_TrackMouseEvent
ImageList_Draw
ImageList_Create
ImageList_AddMasked
ImageList_Destroy
InitCommonControlsEx
FlatSB_EnableScrollBar
InitializeFlatSB

shell32

DragFinish
Shell_NotifyIconA
DragAcceptFiles
SHFileOperationA
ShellExecuteA
SHGetFileInfoA
SHBrowseForFolderA
SHGetPathFromIDListA
DragQueryFileA

comdlg32

GetOpenFileNameA

ws2_32

ntohl
closesocket
connect
setsockopt
socket
WSAStartup
WSACleanup
inet_ntoa
ntohs
htonl
send
recv
inet_addr
htons

advapi32

OpenServiceA
OpenSCManagerA
RegCloseKey
DeleteService
ControlService
CreateServiceA
StartServiceA
QueryServiceStatus
CloseServiceHandle
ChangeServiceConfigA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA

ole32

CoInitialize
StringFromCLSID
CoInitializeSecurity
CoCreateInstance
CoUninitialize

oleaut32

SysAllocString
SysStringByteLen
SysAllocStringByteLen
SysFreeString
VariantInit
VariantClear
GetErrorInfo

atl

ord39
ord42
ord47

Sections

.text
Size: 256KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

de599c36b2c3d5e030f0710d7edb8007

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comctl32

shell32

comdlg32

ws2_32

advapi32

ole32

oleaut32

atl

Sections

.text Size: 256KB - Virtual size: 252KB

.rdata Size: 32KB - Virtual size: 28KB

.data Size: 24KB - Virtual size: 33KB

.rsrc Size: 72KB - Virtual size: 71KB

.text
Size: 256KB - Virtual size: 252KB

.rdata
Size: 32KB - Virtual size: 28KB

.data
Size: 24KB - Virtual size: 33KB

.rsrc
Size: 72KB - Virtual size: 71KB