419d227e7fbf206bbefc797daf4f3669bb340afbda4fc65f2b0350a0aab16909

Sharing

Copy URL Twitter E-mail

General

Target

419d227e7fbf206bbefc797daf4f3669bb340afbda4fc65f2b0350a0aab16909
Size

279KB
MD5

697008d1de3d050b4985effbffceeba0
SHA1

cad80b3d0cc0b407bc2160c59242bce079564abe
SHA256

419d227e7fbf206bbefc797daf4f3669bb340afbda4fc65f2b0350a0aab16909
SHA512

154d0952c984ca1d9dde378d21e7dcc83407ec56d94cf33e1d1e52f1b219df7e6f09c127979ba9c3a4cbc412c871314baeb9001d25b5922a9ab799af432057e3
SSDEEP

6144:8ddU78SO6oy0BPuu+R2vQDGwhXtfAyKllZkpT:8XizZ0BPqD1XWZk

Score

N/A

Malware Config

Signatures

Files

419d227e7fbf206bbefc797daf4f3669bb340afbda4fc65f2b0350a0aab16909
.exe windows x86

4c0b8be7ea5d44097f271fe2d47e1709

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

Polygon
CreatePen
GetObjectW
SetROP2
SelectObject
GetStockObject
CreateFontIndirectW
GetClipRgn
ExtTextOutW
PtInRegion
CreateSolidBrush
DeleteDC
SetBkMode
SetTextColor
GetObjectType
DeleteObject
SetBkColor
BitBlt
CreateCompatibleDC
RoundRect
SelectClipRgn
SetTextAlign
CombineRgn
TextOutW
SetViewportOrgEx
GetTextMetricsW
CreateRectRgn
CreateCompatibleBitmap
GetTextExtentPoint32W
GetBkColor
GetTextExtentExPointW
ExtCreatePen
CreateRectRgnIndirect

shlwapi

ColorAdjustLuma
StrChrW

kernel32

LoadResource
lstrcpyW
lstrcpynW
GetLongPathNameW
GlobalFree
GlobalAlloc
lstrcmpiW
HeapSize
OpenEventW
FindResourceExW
IsDebuggerPresent
GlobalUnlock
FatalAppExitW
LockResource
OutputDebugStringA
lstrcpynA
SetLastError
GetModuleHandleA
FindClose
LocalFree
IsProcessorFeaturePresent
WideCharToMultiByte
DeleteCriticalSection
GetACP
VirtualFree
LeaveCriticalSection
VirtualAlloc
GlobalLock
GetProcessHeap
FindNextFileW
LocalAlloc
SetUnhandledExceptionFilter
lstrcmpW
DeleteFileW
lstrlenW
HeapFree
FindResourceW
FindFirstFileW
HeapDestroy
WaitForSingleObject
SizeofResource
GetSystemTimeAsFileTime
HeapAlloc
CloseHandle
RaiseException
GetThreadLocale
GetModuleHandleW
FreeLibrary
HeapReAlloc
EnterCriticalSection
CreateThread
GetCurrentThreadId
UnhandledExceptionFilter
FlushInstructionCache
FormatMessageW
GetLocalTime

userenv

UnloadUserProfile

oleaut32

SafeArrayRedim
SysStringByteLen
VarBstrCmp
DispCallFunc
SafeArrayUnlock
SafeArrayCreate
SafeArrayCopy
SafeArrayGetLBound
SysStringLen
SysFreeString
SafeArrayDestroy
VariantCopyInd
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayLock
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayGetVartype
VariantInit
LoadTypeLi
VariantClear
SysAllocStringByteLen
SysAllocString

shell32

SHGetMalloc
SHGetFolderLocation
DragQueryFileW
SHGetPathFromIDListW
ShellExecuteExW
SHGetDesktopFolder

user32

CreateWindowExW
GetClassNameW
GetDC
GetWindowTextW
GetWindowDC
DefWindowProcW
InvalidateRect
IsWindowEnabled
DrawFocusRect
DestroyWindow
IsWindow
MessageBoxW
SetForegroundWindow
DestroyIcon
OffsetRect
GetWindowLongW
ShowWindow
EmptyClipboard
GetSystemMetrics
SetFocus
CallNextHookEx
SetTimer
MapDialogRect
GetWindow
SetWindowPlacement
BeginPaint
PtInRect
GetKeyState
SetClipboardData
GetFocus
GetNextDlgTabItem
DrawTextW
GetClientRect
SetCapture
DialogBoxParamW
SendMessageW
CloseClipboard
CallWindowProcW
GetCapture
GetGUIThreadInfo
IsRectEmpty
EndPaint
RedrawWindow
GetActiveWindow
GetWindowPlacement
GetSysColor
GetWindowRect
InsertMenuW
GetTabbedTextExtentW
SetCursor
CopyRect
SetRectEmpty
GetDlgItem
SystemParametersInfoW
UnhookWindowsHookEx
SetWindowTextW
SetWindowPos
KillTimer
IsCharAlphaNumericW
SetWindowLongW
RegisterClipboardFormatW
GetWindowTextLengthW
PostMessageW
EndDialog
GetDlgCtrlID
ScreenToClient
ReleaseDC
LoadImageW
MoveWindow
DrawStateW
GetWindowThreadProcessId
ReleaseCapture
SetWindowsHookExW
UnregisterClassA
OpenClipboard
GetCursorPos
MapWindowPoints
LoadCursorW
DrawIconEx
InflateRect
GetParent
GetTopWindow
TabbedTextOutW
SetDlgItemTextW

ole32

CoGetObject
CreateStreamOnHGlobal
CoCreateInstance
ReleaseStgMedium
StringFromGUID2

advapi32

RegDeleteKeyW
GetSidSubAuthority
OpenThreadToken
RevertToSelf
EqualSid
CopySid
InitializeSid
RegCreateKeyExW
ImpersonateSelf
GetSidSubAuthorityCount
RegSetValueExW
RegDeleteValueW
GetLengthSid
RegCloseKey
GetSidLengthRequired
GetTokenInformation
IsValidSid
RegOpenKeyExW
RegQueryValueExW

msimg32

GradientFill

esent

JetCreateTable
JetGetTableColumnInfo
JetBeginExternalBackup
JetCloseDatabase
JetGetTableInfo
JetRetrieveTaggedColumnList
JetCreateTableColumnIndex2
JetOpenDatabase
JetReadFileInstance
JetRestore2
JetSetCurrentIndex3

wship6

WSHJoinLeaf

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 246KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4c0b8be7ea5d44097f271fe2d47e1709

Headers

File Characteristics

Imports

gdi32

shlwapi

kernel32

userenv

oleaut32

shell32

user32

ole32

advapi32

msimg32

esent

wship6

Sections

.text Size: 18KB - Virtual size: 18KB

.data Size: 246KB - Virtual size: 266KB

.rdata Size: 6KB - Virtual size: 6KB

.rsrc Size: 7KB - Virtual size: 12KB

.text
Size: 18KB - Virtual size: 18KB

.data
Size: 246KB - Virtual size: 266KB

.rdata
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 7KB - Virtual size: 12KB