87e6a68bacac1378ed8adbc382ab998e88a0fc3d36ed6431bf72bbc4cdc85c5b

Sharing

Copy URL Twitter E-mail

General

Target

87e6a68bacac1378ed8adbc382ab998e88a0fc3d36ed6431bf72bbc4cdc85c5b
Size

818KB
MD5

65d7590e0495984893c33e66366501d0
SHA1

8ddedc68b13639005a6c5258d86f4d194b5b0edf
SHA256

87e6a68bacac1378ed8adbc382ab998e88a0fc3d36ed6431bf72bbc4cdc85c5b
SHA512

55eb48eccff36828311b46471554fe1f0c36a9ac78305ebf01b7c19603e7bbf05d94e4c2004484a0985306f07d4577e4d0f0a60be40ead3d566dc449032b44d1
SSDEEP

24576:+ADaJXsTZHqO+DfPesr1WG26Wxd9mL2D:vOKt+esr1Wp

Score

N/A

Malware Config

Signatures

Files

87e6a68bacac1378ed8adbc382ab998e88a0fc3d36ed6431bf72bbc4cdc85c5b
.exe windows x86

9831ddfc67a5e6bf58f9c8c4a8431784

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResumeThread
GlobalSize
HeapFree
TlsFree
SetStdHandle
SetThreadPriority
InterlockedCompareExchange
GlobalLock
OutputDebugStringW
TlsSetValue
IsProcessorFeaturePresent
FreeLibrary
UnhandledExceptionFilter
CloseHandle
CreateFileW
HeapAlloc
RaiseException
GetCurrentThreadId
RemoveDirectoryW
CreateEventW
LockResource
GetFileTime
WriteFile
GetProcessAffinityMask
LeaveCriticalSection
GetCommandLineA
ReadFile
Sleep
DuplicateHandle
FindFirstFileW
GetFileAttributesExW
GetLastError
HeapSize
GetCurrentProcess
EnterCriticalSection
VirtualQuery
SetUnhandledExceptionFilter
GlobalUnlock
GetFileType
WideCharToMultiByte
DeleteFileW
GetFileAttributesW
HeapSetInformation
GetSystemTimeAsFileTime
GetACP
MulDiv
GetModuleFileNameA
CancelIo
InitializeCriticalSectionAndSpinCount
GetVersion
IsValidCodePage
FindClose
GetSystemDirectoryW
LCMapStringW
GetModuleFileNameW
GetConsoleCP
GetProcessVersion
SetEndOfFile
GetCurrentThread
ExitProcess
SleepEx
GetCommandLineW
MoveFileExW
ExitThread
GetConsoleMode
LoadLibraryW
SetFilePointer
ReadDirectoryChangesW
MultiByteToWideChar
SetErrorMode
TerminateProcess
LoadLibraryA
SetHandleCount
HeapCreate
SetConsoleCtrlHandler
QueryPerformanceFrequency
WriteConsoleW
RtlUnwind
WaitForSingleObject
GetCurrentProcessId
InterlockedIncrement
GetEnvironmentStringsW
CopyFileW
LocalFileTimeToFileTime
GetOverlappedResult
FileTimeToSystemTime
SetLastError
CreateThread
GetExitCodeThread
VirtualAlloc
GetProcessHeap
GetOEMCP
FileTimeToLocalFileTime
ResetEvent
GetVersionExW
GetCPInfo
FlushFileBuffers
LocalFree
HeapDestroy
FindNextFileW
GetSystemInfo
GetThreadPriority
GetStdHandle
VirtualFree
InterlockedDecrement
SizeofResource
GetProcessTimes
SetThreadExecutionState
SetEvent
LoadResource
GetFileInformationByHandle
FreeEnvironmentStringsW
GetStringTypeW
GlobalAlloc
FindResourceExW
GlobalFree
HeapReAlloc
lstrlenW
LocalAlloc
GetModuleHandleW
QueryPerformanceCounter
CreateMutexW
FlushInstructionCache
InitializeCriticalSection
InterlockedExchange
GetStartupInfoA
OutputDebugStringA
DeleteCriticalSection
GetProcAddress
WaitForMultipleObjects
HeapQueryInformation
GetFileSize
FindResourceW
VirtualProtect
TlsGetValue
TlsAlloc
GetTickCount
SystemTimeToFileTime
IsDebuggerPresent

user32

SetFocus
wsprintfW
TrackPopupMenu
EnumChildWindows
EndDialog
wsprintfA
IsWindowVisible
GetActiveWindow
IsClipboardFormatAvailable
RegisterWindowMessageW
CopyRect
MonitorFromRect
PeekMessageW
BeginPaint
DrawTextW
RegisterClassW
EnumThreadWindows
IsChild
LoadIconW
LoadCursorW
RegisterClassExW
RegisterShellHookWindow
TranslateAcceleratorW
SetWindowsHookExW
MapWindowPoints
GetMessageW
GetSystemMetrics
OffsetRect
GetClientRect
BeginDeferWindowPos
GetWindowDC
MapDialogRect
CheckMenuRadioItem
GetParent
GetMenu
SetMenuItemInfoW
PostQuitMessage
MapVirtualKeyW
UpdateWindow
CallWindowProcW
TrackPopupMenuEx
IsCharAlphaW
GetMenuItemCount
DispatchMessageW
AdjustWindowRect
DrawIconEx
GetScrollInfo
DialogBoxParamW
MessageBoxW
DestroyWindow
CreatePopupMenu
SendDlgItemMessageW
SendMessageW
GetKeyState
GetWindowTextW
LoadAcceleratorsW
DrawEdge
GetMessagePos
SetDlgItemTextW
MsgWaitForMultipleObjects
UnregisterHotKey
SetClipboardData
GetFocus
CharUpperW
SetCapture
EndDeferWindowPos
SetCursor
EndPaint
CharLowerW
MessageBeep
GetClassNameW
SetWindowTextW
RegisterHotKey
AppendMenuW
GetClassInfoExW
GetMenuItemInfoW
AdjustWindowRectEx
GetWindowThreadProcessId
EnumWindows
RegisterClipboardFormatW
MonitorFromPoint
CallNextHookEx
SetLayeredWindowAttributes
SetWindowLongW
EmptyClipboard
CreateWindowExW
SetTimer
SetWindowPos
ShowWindow
GetDC
IsIconic
DestroyIcon
WindowFromPoint
IsDialogMessageW
GetClipboardData
GetWindowPlacement
InvalidateRect
DeferWindowPos
AllowSetForegroundWindow
GetSysColor
ClientToScreen
ScreenToClient
EnableWindow
IntersectRect
LoadImageW
ReleaseDC
PostMessageW
IsWindowEnabled
FillRect
KillTimer
DestroyAcceleratorTable
GetDlgItem
GetComboBoxInfo
DestroyMenu
SetActiveWindow
GetWindowRect
OpenClipboard
TranslateMessage
GetWindowLongW
UnhookWindowsHookEx
SetForegroundWindow
CloseClipboard
CreateDialogParamW
MoveWindow
GetMonitorInfoW
RedrawWindow
DefWindowProcW
UnregisterClassW
DeregisterShellHookWindow
UnregisterClassA
GetDlgCtrlID

gdi32

GetDeviceCaps
ExtTextOutW
DeleteObject
SetWindowOrgEx
SelectObject
CreateCompatibleBitmap
GetObjectW
CreateCompatibleDC
SetDCBrushColor
SetTextColor
GetStockObject
OffsetWindowOrgEx
DeleteDC
SetBkMode
CreateFontIndirectW
SetBkColor
GetTextExtentPoint32W

advapi32

CryptCreateHash
CryptAcquireContextW
RegCreateKeyExW
RegCloseKey
CryptGetHashParam
RegOpenKeyExW
CryptHashData
RegEnumKeyExW
RegQueryValueExW
RegCreateKeyW
CryptDestroyKey
RegOpenKeyW
CryptImportKey
RegSetValueExW
CryptVerifySignatureW
CryptDestroyHash
RegDeleteValueW
RegQueryInfoKeyW
RegEnumValueW
CryptReleaseContext

ole32

CoTaskMemAlloc
OleSetClipboard
CreateStreamOnHGlobal
OleInitialize
CoInitialize
OleUninitialize
CoUninitialize
CoCreateGuid
CoCreateInstance
OleGetClipboard
ReleaseStgMedium
CoTaskMemFree

shlwapi

ColorHLSToRGB
StrCmpLogicalW
SHDeleteKeyW
SHAutoComplete

iphlpapi

AddIPAddress

secur32

EncryptMessage
ApplyControlToken
InitializeSecurityContextW
FreeCredentialsHandle
AcquireCredentialsHandleW
FreeContextBuffer
QueryContextAttributesW
DeleteSecurityContext
DecryptMessage

oledlg

ord6

wldap32

ord44

psapi

GetProcessMemoryInfo

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ppex
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idat
Size: 673KB - Virtual size: 5.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9831ddfc67a5e6bf58f9c8c4a8431784

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

shlwapi

iphlpapi

secur32

oledlg

wldap32

psapi

Sections

.text Size: 28KB - Virtual size: 28KB

.ppex Size: 55KB - Virtual size: 54KB

.rdata Size: 33KB - Virtual size: 33KB

.idat Size: 673KB - Virtual size: 5.9MB

.tls Size: 512B - Virtual size: 101B

.rsrc Size: 17KB - Virtual size: 16KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 28KB - Virtual size: 28KB

.ppex
Size: 55KB - Virtual size: 54KB

.rdata
Size: 33KB - Virtual size: 33KB

.idat
Size: 673KB - Virtual size: 5.9MB

.tls
Size: 512B - Virtual size: 101B

.rsrc
Size: 17KB - Virtual size: 16KB

.reloc
Size: 9KB - Virtual size: 9KB