2b7b46cdc78e44e2bdc4d3a12b70f3d77ef7bcef2a5ce218a2c971e261d22739

Sharing

Copy URL Twitter E-mail

General

Target

2b7b46cdc78e44e2bdc4d3a12b70f3d77ef7bcef2a5ce218a2c971e261d22739
Size

410KB
MD5

04a6ddcdd7be888f8872b1c64251e380
SHA1

c9a77c5760911d405a935ce20610398c17077bc0
SHA256

2b7b46cdc78e44e2bdc4d3a12b70f3d77ef7bcef2a5ce218a2c971e261d22739
SHA512

ff2eff593126f3850b6ff07eb24db8b63046f23476eca2640ec5aa259d68a015113f36891b7dc8d71eaa59fdb1b97368d2099587f7d7bfd34826d414e2f2dd78
SSDEEP

6144:iLCmJBZIlmAMcohrUC5Dj6bxqzreJajd0Zd797jj0mZpYOk:iWmJBAMxrN5Dj6FqPe77jjDwOk

Score

N/A

Malware Config

Signatures

Files

2b7b46cdc78e44e2bdc4d3a12b70f3d77ef7bcef2a5ce218a2c971e261d22739
.exe windows x86

1140570d6a52c076179925c7ab87f10f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
FlushInstructionCache
VirtualAlloc
GetCurrentThreadId
GetFileSize
SetFilePointer
FreeLibrary
InitializeCriticalSection
GetLocalTime
lstrlenW
LeaveCriticalSection
LoadLibraryW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
EnterCriticalSection
ReadFile
GetModuleFileNameA
GlobalFree
GlobalAlloc
GlobalUnlock
RaiseException
GlobalLock
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
CreateFileA
GetConsoleMode
GetConsoleCP
InterlockedCompareExchange
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapCreate
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
Sleep
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetCPInfo
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
RtlUnwind
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
LoadLibraryA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
DeleteCriticalSection
GetCurrentProcess
CreateProcessW
GetEnvironmentVariableW
ExitProcess
ResumeThread
WriteProcessMemory
VirtualAllocEx
VirtualProtectEx
SetLastError
TerminateProcess
GetExitCodeProcess
ReadProcessMemory
VirtualQueryEx
WaitForSingleObject
CopyFileW
FindResourceExW
GetTempPathW
FreeResource
WriteFile
CreateFileW
CloseHandle
GetProcAddress
GetModuleHandleW
GetVersionExW
DeleteFileW
GetLastError
FindClose
GetFileAttributesW
CreateDirectoryW
FindFirstFileW
GetModuleFileNameW
LockResource
FindResourceW
SizeofResource
LoadResource

user32

AttachThreadInput
SendMessageW
DefWindowProcW
SetRectEmpty
SetWindowLongW
SetCapture
GetMessageW
GetFocus
GetForegroundWindow
DrawIconEx
ReleaseCapture
DrawTextW
GetClientRect
CallWindowProcW
GetMonitorInfoW
IsWindow
GetWindowRect
EndPaint
GetScrollPos
CopyRect
FindWindowW
EqualRect
MapWindowPoints
PostThreadMessageW
OffsetRect
InvalidateRect
GetDC
PostMessageW
SetCursor
GetWindow
GetParent
GetKeyState
GetDlgItem
IsWindowEnabled
ReleaseDC
SetRect
LoadImageW
SetWindowPos
PtInRect
WindowFromPoint
SystemParametersInfoW
DrawFrameControl
MoveWindow
SetFocus
GetNextDlgTabItem
GetWindowLongW
UnregisterClassA
LoadCursorW
RegisterClassExW
GetActiveWindow
CreateWindowExW
EnableWindow
IsDialogMessageW
IsChild
SetForegroundWindow
GetWindowThreadProcessId
PeekMessageW
TranslateMessage
LoadBitmapW
SetActiveWindow
GetClassInfoExW
DispatchMessageW
MonitorFromWindow
GetDesktopWindow
ShowWindow
DestroyIcon
LoadIconW
BeginPaint
GetSystemMetrics
GetDlgCtrlID
UpdateLayeredWindow
InflateRect
IsWindowVisible
DestroyWindow

gdi32

RoundRect
SetBkColor
GetClipRgn
GetObjectW
CombineRgn
MoveToEx
LineTo
SetBkMode
StretchBlt
CreateBitmap
CreatePen
SelectClipRgn
SetTextColor
DeleteObject
CreateRectRgnIndirect
RestoreDC
TextOutW
RectInRegion
GetCurrentObject
CreateCompatibleDC
ExtTextOutW
SaveDC
GetStockObject
BitBlt
CreateRectRgn
GetTextExtentPoint32W
CreateDIBSection
GetTextColor
CreateFontIndirectW
SelectObject
SetStretchBltMode
Rectangle
DeleteDC
CreateCompatibleBitmap

advapi32

RegOpenKeyExW
RegSetValueExW
RegOpenKeyW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegQueryInfoKeyW
RegEnumValueW

shell32

SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation
ShellExecuteW
SHGetSpecialFolderPathW

ole32

CoUninitialize
CoInitialize
CoCreateInstance
CreateStreamOnHGlobal

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime

shlwapi

SHEnumKeyExW
PathAppendA
PathRemoveFileSpecA
PathFileExistsA
StrToIntW
PathAddBackslashW
PathAppendW
PathFileExistsW
PathRemoveFileSpecW
StrToIntA

comctl32

_TrackMouseEvent

msimg32

AlphaBlend

gdiplus

GdipCreateImageAttributes
GdipSetImageAttributesColorMatrix
GdipLoadImageFromStream
GdipImageRotateFlip
GdipDrawImageRectI
GdipDisposeImageAttributes
GdipCreateBitmapFromStream
GdipDrawImagePointsRectI
GdipCreateHBITMAPFromBitmap
GdipDrawImageRectRectI
GdipGetImageHeight
GdipAlloc
GdipFree
GdipCreateFontFromDC
GdipCreateFromHDC
GdipDeleteBrush
GdipCloneImage
GdipCreateFontFromLogfontW
GdipResetWorldTransform
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipDeleteGraphics
GdipSetStringFormatLineAlign
GdipCreateSolidFill
GdipDeleteFont
GdipDeleteStringFormat
GdipDrawString
GdipCloneBrush
GdipGetImageWidth
GdipSetStringFormatTrimming
GdipDisposeImage
GdipSetStringFormatAlign
GdipCreateStringFormat
GdipLoadImageFromFile
GdiplusStartup
GdiplusShutdown

Sections

.text
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 123KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1140570d6a52c076179925c7ab87f10f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

gdiplus

Sections

.text Size: 220KB - Virtual size: 219KB

.rdata Size: 50KB - Virtual size: 49KB

.data Size: 9KB - Virtual size: 17KB

.rsrc Size: 123KB - Virtual size: 124KB

.text
Size: 220KB - Virtual size: 219KB

.rdata
Size: 50KB - Virtual size: 49KB

.data
Size: 9KB - Virtual size: 17KB

.rsrc
Size: 123KB - Virtual size: 124KB