2a2e25d0a19cfef3d0654cd1a0f63f3af22ed607dd638272f441e2a811c06018

Sharing

Copy URL Twitter E-mail

General

Target

2a2e25d0a19cfef3d0654cd1a0f63f3af22ed607dd638272f441e2a811c06018
Size

761KB
MD5

230680e4e88a89bcee05a1d47cf6f3d0
SHA1

f98126ca7375620e142c94bad89e8e6c2cc124f5
SHA256

2a2e25d0a19cfef3d0654cd1a0f63f3af22ed607dd638272f441e2a811c06018
SHA512

db6f29231fa8ec9200f781c31fd29f9bf7f72bc2c32f9a4c9e7a1f5fbc0487df15afb337afab88e4680e2603db0567e793a776a998b95b098c1462ff38d6dae5
SSDEEP

12288:80Ro9KybfK9rkUGX+tLP5SHj9yZ3jx/wmDfzXi/Nd1:8NBO/tLPXZ3j53Y

Score

N/A

Malware Config

Signatures

Files

2a2e25d0a19cfef3d0654cd1a0f63f3af22ed607dd638272f441e2a811c06018
.exe windows x86

8f266fb567fd75fea3139ba41efae947

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipCreateFont
GdipDeleteFont
GdipCreateSolidFill
GdipDeleteBrush
GdipFree
GdipAlloc
GdipCloneBrush
GdipDrawString
GdipDisposeImage
GdipCloneImage
GdipReleaseDC
GdipLoadImageFromStream
GdipDrawImageRectI
GdipGraphicsClear
GdipDeleteGraphics
GdipSetTextRenderingHint
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromFile
GdipGetImageHeight
GdipGetImageWidth
GdipCreateFromHDC
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipCreateTexture2I
GdipDrawImagePointRectI
GdipDrawImageRectRectI
GdipFillRectangleI
GdipFillRectangle
GdipTranslateTextureTransform
GdipCreateTexture2
GdipDrawImageRectRect
GdipSetSmoothingMode

kernel32

SetThreadPriority
SuspendThread
InterlockedExchange
CompareStringA
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
InterlockedIncrement
GlobalGetAtomNameW
lstrlenA
GetFileTime
SetErrorMode
GetFileSizeEx
GetTickCount
GetStartupInfoW
ExitThread
CreateThread
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
RaiseException
HeapReAlloc
Sleep
ExitProcess
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
GetCurrentProcessId
InterlockedDecrement
LocalFree
GetModuleHandleA
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
HeapAlloc
SetLastError
HeapFree
GetModuleHandleW
AreFileApisANSI
CreateDirectoryW
GetPrivateProfileIntW
OutputDebugStringW
WritePrivateProfileStringW
GetModuleFileNameW
CreateSemaphoreW
WriteFile
SetFilePointer
ReadFile
CreateFileW
GetFileSize
CreateFileA
FreeLibrary
GetProcAddress
LoadLibraryW
GlobalReAlloc
ResetEvent
SetEvent
WaitForSingleObject
ResumeThread
GlobalFree
MulDiv
CloseHandle
CreateEventW
GetLastError
MultiByteToWideChar
FormatMessageW
WideCharToMultiByte
lstrlenW
GetPrivateProfileStringW
FreeResource
GlobalUnlock
GlobalLock
GlobalAlloc
FindResourceW
LoadResource
LockResource
SizeofResource
GetFileAttributesW

user32

GetNextDlgTabItem
CreateDialogIndirectParamW
GetActiveWindow
GetDesktopWindow
WindowFromPoint
CharUpperW
ValidateRect
GetMessageW
PostQuitMessage
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
GetSysColorBrush
UnregisterClassW
SetRectEmpty
CopyAcceleratorTableW
InvalidateRgn
TranslateAcceleratorW
BringWindowToTop
CreatePopupMenu
InsertMenuItemW
LoadAcceleratorsW
ReuseDDElParam
UnpackDDElParam
CharNextW
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatW
PostThreadMessageW
ClientToScreen
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
IsWindowEnabled
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
EndDialog
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
IsWindowVisible
CreateWindowExW
GetClassInfoExW
RegisterClassW
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetDlgCtrlID
DefWindowProcW
GetMenu
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
LoadMenuW
GetSubMenu
CallWindowProcW
DrawIcon
AppendMenuW
GetClassInfoW
SetForegroundWindow
IsIconic
FindWindowW
SetCapture
MsgWaitForMultipleObjects
ReleaseCapture
DispatchMessageW
TranslateMessage
PeekMessageW
OffsetRect
GetSysColor
FillRect
SetRect
InvalidateRect
LoadImageW
SetCursor
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
DestroyCursor
PostMessageW
GetParent
AdjustWindowRectEx
GetClientRect
UpdateWindow
MoveWindow
SystemParametersInfoW
DestroyIcon
DrawIconEx
CopyImage
LoadIconW
GetWindowDC
GetSystemMetrics
PtInRect
CopyRect
ReleaseDC
SetWindowRgn
GetDC
GetMenuItemID
GetMenuItemCount
GetSystemMenu
ShowWindow
SetWindowLongW
GetWindowLongW
GetCursorPos
LoadCursorW
KillTimer
SetTimer
IsRectEmpty
GetWindowThreadProcessId
DestroyMenu
SetWindowPos
IsWindow
SendMessageW
GetMenuItemInfoW
InflateRect
EndPaint
UnhookWindowsHookEx
BeginPaint
GetWindowRect
EnableWindow
MessageBoxW

gdi32

CreateFontW
SelectObject
Rectangle
GetObjectW
CreateICW
GetDIBits
DeleteDC
ExtCreateRegion
GetDeviceCaps
SetStretchBltMode
StretchBlt
GetTextExtentPoint32W
CreateRoundRectRgn
GetStockObject
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
SaveDC
SelectClipRgn
GetPixel
PtVisible
OffsetViewportOrgEx
TextOutW
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
CreatePen
CreateFontIndirectW
CreateRectRgnIndirect
CreateEllipticRgn
Ellipse
GetRgnBox
GetTextColor
SetViewportOrgEx
RectVisible
ExtTextOutW
Escape
LPtoDP
GetMapMode
GetWindowExtEx
GetViewportExtEx
DPtoLP
GetBkColor
FrameRgn
FillRgn
CreateSolidBrush
DeleteObject
CombineRgn
CreatePolygonRgn
BitBlt
CreateRectRgn
CreateCompatibleBitmap
SetViewportExtEx
CreateCompatibleDC
SetBkMode
RestoreDC
SetMapMode

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExW

shell32

ShellExecuteExW
DragFinish
DragQueryFileW
ShellExecuteW

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathRemoveFileSpecW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathFileExistsW
PathFindFileNameW

oledlg

OleUIBusyW

ole32

StgOpenStorageOnILockBytes
CoTaskMemFree
CreateStreamOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoCreateGuid
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc

oleaut32

SysAllocStringLen
SysFreeString
SysAllocString
VariantClear
VariantChangeType
VariantInit
SysStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
OleLoadPicture

urlmon

FindMimeFromData

wininet

InternetOpenUrlW
InternetReadFile
InternetSetOptionW
HttpQueryInfoW
HttpSendRequestExW
HttpSendRequestW
InternetConnectW
InternetOpenW
HttpEndRequestW
InternetWriteFile
HttpAddRequestHeadersA
HttpOpenRequestA
InternetCloseHandle

Sections

.text
Size: 398KB - Virtual size: 397KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.tc
Size: 55KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vbqdmnu
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8f266fb567fd75fea3139ba41efae947

Headers

DLL Characteristics

File Characteristics

Imports

gdiplus

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

wininet

Sections

.text Size: 398KB - Virtual size: 397KB

.rdata Size: 120KB - Virtual size: 119KB

.data Size: 14KB - Virtual size: 158KB

.rsrc Size: 122KB - Virtual size: 121KB

.reloc Size: 51KB - Virtual size: 50KB

.tc Size: 55KB - Virtual size: 56KB

vbqdmnu Size: - Virtual size: 4KB

.text
Size: 398KB - Virtual size: 397KB

.rdata
Size: 120KB - Virtual size: 119KB

.data
Size: 14KB - Virtual size: 158KB

.rsrc
Size: 122KB - Virtual size: 121KB

.reloc
Size: 51KB - Virtual size: 50KB

.tc
Size: 55KB - Virtual size: 56KB

vbqdmnu
Size: - Virtual size: 4KB