5ba7ea0272d33b6d31f4e43206602073f573b74ae6c8e6dba09bb7b57f4a6010

Sharing

Copy URL Twitter E-mail

General

Target

5ba7ea0272d33b6d31f4e43206602073f573b74ae6c8e6dba09bb7b57f4a6010
Size

864KB
MD5

6aa9b997c848276854c1392683314210
SHA1

d2b50b6a5efa005d9c390832905e7bac23e865ba
SHA256

5ba7ea0272d33b6d31f4e43206602073f573b74ae6c8e6dba09bb7b57f4a6010
SHA512

84d242c848506b0b46a774ae808b388d1123c1f03fffff1ac37dc05bd7898141942adfc320cb290e116f8baa608aeb2aa8c0a9230422c33b98e014a1874c1da7
SSDEEP

24576:2RW851/ZuGHhT4Zj7lfDsG44dRfbT/w7XCu:2QK1BNtwj7lf/48X/P

Score

N/A

Malware Config

Signatures

Files

5ba7ea0272d33b6d31f4e43206602073f573b74ae6c8e6dba09bb7b57f4a6010
.exe windows x86

3a736e0f2a5e599acafd205c30f0a55c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsValidLocale
CreateDirectoryA
FlushFileBuffers
GetFileAttributesExA
WriteFile
SetErrorMode
GetProcessHeap
SetUnhandledExceptionFilter
OpenProcess
GetTempPathW
InitializeCriticalSection
GetThreadTimes
LocalFileTimeToFileTime
GetExitCodeProcess
InterlockedCompareExchange
GetExitCodeThread
GetDriveTypeA
WideCharToMultiByte
lstrlenA
GetSystemPowerStatus
HeapDestroy
HeapCreate
InterlockedExchangeAdd
GetModuleHandleA
InterlockedExchange
SystemTimeToFileTime
SetEndOfFile
LeaveCriticalSection
IsValidCodePage
LoadResource
SizeofResource
GetProcessAffinityMask
FindClose
HeapSize
GetFileSize
GetStdHandle
FindNextFileA
GetTickCount
GetTempPathA
TlsAlloc
InterlockedIncrement
GetTempFileNameA
TlsSetValue
GetCommandLineA
LoadLibraryW
GlobalLock
GetProcAddress
GetWindowsDirectoryA
GlobalMemoryStatusEx
CreateProcessA
LocalAlloc
FindFirstFileA
GetCurrentProcess
ExpandEnvironmentStringsA
ReadFile
FindFirstFileExA
GetThreadLocale
GetFileSizeEx
GetCurrentProcessId
GetModuleFileNameA
GetSystemInfo
WaitForSingleObject
TlsFree
ExitProcess
CopyFileA
CreateFileMappingA
LockFileEx
GetProfileStringA
GetLocaleInfoA
ReleaseMutex
CreateThread
GlobalSize
GlobalAlloc
GetUserDefaultLCID
LocalFree
GetVersionExA
IsDBCSLeadByteEx
UnmapViewOfFile
GetLastError
DeleteFileW
SetCurrentDirectoryA
SetLastError
MultiByteToWideChar
GetSystemTime
GetDiskFreeSpaceA
MoveFileExW
GetEnvironmentVariableA
FileTimeToSystemTime
PeekNamedPipe
SetThreadPriority
GetFileType
SetNamedPipeHandleState
ReleaseSemaphore
InterlockedDecrement
QueryPerformanceCounter
CloseHandle
GetSystemTimeAsFileTime
GetFileAttributesA
SetFilePointer
CreateFileA
GetStartupInfoA
DeviceIoControl
GlobalMemoryStatus
FreeLibrary
UnlockFile
TerminateThread
OpenFileMappingA
SetThreadLocale
CreateSemaphoreA
MapViewOfFile
GetShortPathNameA
DuplicateHandle
LockResource
GetCPInfo
ResumeThread
SetThreadExecutionState
DeleteFileA
LockFile
GlobalUnlock
GetLogicalDriveStringsA
CreatePipe
CreateMutexA
VirtualProtect
DeleteCriticalSection
GetACP
SuspendThread
TlsGetValue
AreFileApisANSI
GetVolumeInformationA
GetFileTime
GetCurrentThreadId
GetProcessWorkingSetSize
SetFileTime
FormatMessageA
RemoveDirectoryA
GetCurrentThread
LoadLibraryA
FindResourceA
GetFullPathNameA
SetEnvironmentVariableA
EnterCriticalSection
Sleep
GetProcessTimes
GetComputerNameA
UnlockFileEx
GlobalFree
TerminateProcess

user32

GetWindowThreadProcessId
GetProcessWindowStation
IsWindowEnabled
ExitWindowsEx
SetClipboardData
GetClientRect
CheckMenuItem
GetFocus
RegisterClipboardFormatW
EndMenu
FindWindowExW
ChangeDisplaySettingsW
DestroyAcceleratorTable
PeekMessageW
CheckMenuRadioItem
SetWindowTextW
GetSubMenu
InsertMenuW
GetCursorPos
InvalidateRect
DestroyWindow
DrawEdge
GetClipboardData
MsgWaitForMultipleObjects
DdeGetData
FlashWindow
SetCursor
SetWindowPos
GetUpdateRect
CallNextHookEx
DdeCreateDataHandle
GetMenuState
DispatchMessageW
ReleaseCapture
GetScrollInfo
CreatePopupMenu
EnumDisplaySettingsW
GetWindowRect
GetClipboardOwner
GetSysColor
SetFocus
DdeQueryStringW
DrawStateW
OpenClipboard
DrawIconEx
GetWindowLongW
GetWindowDC
GetDlgItem
DrawFrameControl
CreateDialogParamW
GetWindow
GetDesktopWindow
RemoveMenu
GetClassInfoW
IsDialogMessageW
InsertMenuItemW
DdeFreeDataHandle
EnumThreadWindows
GetIconInfo
UpdateWindow
EnableWindow
GetSystemMenu
GetDC
GetMenuItemInfoW
DdeInitializeW
BeginDeferWindowPos
GetClipboardViewer
IsIconic
CreateAcceleratorTableW
SetCapture
GetQueueStatus
UnregisterClassW
DestroyCursor
EndPaint
GetKeyboardState
EmptyClipboard
RegisterClassW
IsZoomed
BeginPaint
CreateIconIndirect
GetOpenClipboardWindow
GetParent
GetActiveWindow
EnableMenuItem
AppendMenuW
TranslateMessage
BringWindowToTop
GetClassNameW
ToUnicode
KillTimer
PostQuitMessage
DeferWindowPos
GetDoubleClickTime
SetTimer
LoadIconW
ReleaseDC
RegisterWindowMessageW
PostThreadMessageW
UnhookWindowsHookEx
GetSystemMetrics
GetMessageTime
GetAsyncKeyState
SetScrollInfo
TranslateAcceleratorW
PtInRect
SystemParametersInfoW
EndDeferWindowPos
MessageBoxW
EndDialog
AdjustWindowRectEx
EnumWindows
DestroyIcon
MapWindowPoints
MessageBeep
DdeCreateStringHandleW
GetInputState
ScrollWindow
CallWindowProcW
SetMenuItemInfoW
LoadAcceleratorsW
TrackPopupMenu
ChildWindowFromPoint
OffsetRect
GetForegroundWindow
CreateMenu
ClientToScreen
GetMessageW
LoadBitmapW
ShowWindow
SetWindowLongW
GetMenuItemCount
DestroyMenu
HideCaret
DdeUninitialize
WindowFromPoint
DrawMenuBar
SetForegroundWindow
MoveWindow
CopyRect
GetCaretPos
DdeDisconnect
EnumClipboardFormats
InflateRect
IsWindow
PostMessageW
DdeConnect
SetCursorPos
DdePostAdvise
GetMenu
GetWindowTextLengthW
ModifyMenuW
WaitForInputIdle
ShowCaret
RedrawWindow
LoadImageW
GetUpdateRgn
DefWindowProcW
DdeGetLastError
UnionRect
ShowCursor
ScreenToClient
VkKeyScanW
DdeFreeStringHandle
SetParent
SetWindowRgn
SetWindowsHookExW
DdeClientTransaction
DdeNameService
GetMessagePos
CloseClipboard
FillRect
DrawIcon
LoadCursorW
GetCapture
CreateDialogIndirectParamW
SetMenu
DrawFocusRect
keybd_event
DrawTextW
GetKeyState
IsWindowVisible
GetWindowTextW

gdi32

ExtCreateRegion
PlayEnhMetaFile
GetClipBox
MaskBlt
SetBrushOrgEx
GetCharABCWidthsW
CreateCompatibleDC
EqualRgn
GetObjectW
GetRgnBox
GetWinMetaFileBits
SetPixel
Polyline
CreateHatchBrush
Ellipse
OffsetRgn
CloseEnhMetaFile
PolyPolygon
CombineRgn
GetStockObject
CreatePalette
CreateRectRgn
SetROP2
SetWindowOrgEx
GetNearestPaletteIndex
RectInRegion
SetStretchBltMode
CopyEnhMetaFileW
StretchDIBits
PatBlt
GetDIBits
BitBlt
SetBkMode
GetTextMetricsW
GetTextColor
SetBkColor
SetViewportExtEx
GetMetaFileBitsEx
SetWindowExtEx
GdiFlush
SelectPalette
GetTextExtentPoint32W
SetViewportOrgEx
CreateDIBSection
PtInRegion
GetPaletteEntries
CreateCompatibleBitmap
StretchBlt
SetPolyFillMode
CreateDIBitmap
SetMapMode
GetBkColor
Pie
GetDIBColorTable
ExtCreatePen
SetWinMetaFileBits
CreateSolidBrush
EnumFontFamiliesExW
LineTo
ExcludeClipRect
SaveDC
GetPixel
SetTextAlign
GetDeviceCaps
RoundRect
GetSystemPaletteEntries
CreatePen
Arc
GetEnhMetaFileW
Rectangle
DeleteEnhMetaFile
TextOutW
CreatePatternBrush
CreateBitmap
SelectClipRgn
RestoreDC
SetMetaFileBitsEx
Polygon
CreateBitmapIndirect
MoveToEx
ExtSelectClipRgn
CreatePolygonRgn
CreateICW
GetRegionData
DeleteDC
SelectObject
CreateEnhMetaFileW
CreateFontIndirectW
RealizePalette
GetTextExtentExPointW
SetTextColor
GetEnhMetaFileHeader
CreateRectRgnIndirect
DeleteObject
ExtFloodFill

comdlg32

CommDlgExtendedError
GetOpenFileNameW
GetSaveFileNameW
ChooseColorW
ChooseFontW

advapi32

RegOpenKeyExA
RegQueryValueExW
OpenProcessToken
CloseServiceHandle
RegSetValueExW
RegOpenKeyExW
RegCloseKey
OpenServiceW
AdjustTokenPrivileges
RegEnumValueW
RegCreateKeyW
GetUserNameW
OpenSCManagerW
RegEnumKeyW
ControlService
RegDeleteKeyW
RegQueryInfoKeyW
RegQueryValueExA
LookupPrivilegeValueW
RegDeleteValueW

shell32

ExtractIconExW
ExtractIconW
DragFinish
SHGetFolderPathW
DragQueryPoint
SHBrowseForFolderW
SHGetPathFromIDListW
SHFileOperationW
DragAcceptFiles
SHGetFileInfoW
SHGetMalloc
SHGetIconOverlayIndexW
ShellExecuteExW
Shell_NotifyIconW
DragQueryFileW
SHGetSpecialFolderLocation

oleaut32

SysAllocString
SysStringLen

winmm

PlaySoundW

wsock32

sendto
getsockopt
ioctlsocket
gethostbyaddr
recvfrom
select
shutdown
htonl
ntohl
__WSAFDIsSet
getservbyname

mpr

WNetGetConnectionW

secur32

QuerySecurityPackageInfoA

oledlg

ord3

Sections

.text
Size: 405KB - Virtual size: 405KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 385KB - Virtual size: 463KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3a736e0f2a5e599acafd205c30f0a55c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

oleaut32

winmm

wsock32

mpr

secur32

oledlg

Sections

.text Size: 405KB - Virtual size: 405KB

.rdata Size: 45KB - Virtual size: 44KB

.data Size: 385KB - Virtual size: 463KB

.rsrc Size: 23KB - Virtual size: 22KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 405KB - Virtual size: 405KB

.rdata
Size: 45KB - Virtual size: 44KB

.data
Size: 385KB - Virtual size: 463KB

.rsrc
Size: 23KB - Virtual size: 22KB

.reloc
Size: 4KB - Virtual size: 4KB