298a63e98237c4f667d9d833062880467a807f95109c678c758b026b8c437080

Sharing

Copy URL Twitter E-mail

General

Target

298a63e98237c4f667d9d833062880467a807f95109c678c758b026b8c437080
Size

328KB
MD5

6a979af3e3a7de53d2af145671a34adf
SHA1

796b994c244c5c8012365fe73b843f3ce05d9f44
SHA256

298a63e98237c4f667d9d833062880467a807f95109c678c758b026b8c437080
SHA512

9396bd51c4bd4346029edf9f6a1ae84d8ffca9de79c126e2dd6104b7c10c32f7118a2f8061095a1171195b5bbbf81bf3255fb313511184a8789c3e05b77909df
SSDEEP

3072:GO+O14g+z3JepQMEE6Q+1rqfvJqxEm4x1ESuQG+3SeyRS6CSfKVu1xgCAWUMs8hl:GONj+rJes5x1rqfvoxEvTEPp/F9hxX

Score

N/A

Malware Config

Signatures

Files

298a63e98237c4f667d9d833062880467a807f95109c678c758b026b8c437080
.exe windows x86

e1aabb7768b8db0c3fe007c5c07a8244

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
EventWrite
EventRegister
EventUnregister
RegCreateKeyExW
RegSetValueExW

kernel32

GetCurrentProcess
IsWow64Process
GetProcessHeap
HeapAlloc
HeapFree
CreateMutexW
InterlockedExchange
LocalFree
InterlockedCompareExchange
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
CloseHandle
VerSetConditionMask
VerifyVersionInfoW
MulDiv
GetTickCount64
GetLastError
Sleep

gdi32

CreateCompatibleDC
SetBkColor
CreatePen
Polyline
CreateCompatibleBitmap
SetStretchBltMode
StretchBlt
CreateFontIndirectW
DeleteObject
GetObjectW
GetDeviceCaps
DeleteDC
BitBlt
GdiAlphaBlend
SelectObject
GetStockObject
GdiSetBatchLimit
SetTextColor
PatBlt
CreateSolidBrush
GetTextMetricsW
SetBkMode

user32

IsDlgButtonChecked
CheckRadioButton
EnumDisplaySettingsW
ChangeDisplaySettingsExW
EnumDisplayDevicesW
GetSysColor
DestroyWindow
CreateWindowExW
CopyImage
LoadBitmapW
DrawTextW
CheckDlgButton
MapWindowPoints
FillRect
RedrawWindow
SystemParametersInfoW
SetDlgItemTextW
MapDialogRect
GetClientRect
GetDlgItem
SetFocus
IsCharAlphaNumericW
EnableWindow
ShowWindow
DialogBoxParamW
EndDialog
SetTimer
MessageBoxW
FindWindowW
SetForegroundWindow
LoadCursorW
RegisterClassExW
DrawFocusRect
BeginPaint
GetSysColorBrush
FrameRect
EndPaint
TrackMouseEvent
DefWindowProcW
SendMessageW
InvalidateRect
GetFocus
SetWindowTextW
SetWindowLongW
GetParent
PostMessageW
SendDlgItemMessageW
GetDC
LoadStringW
ReleaseDC
GetProcessDefaultLayout
SendMessageTimeoutW
SetWindowPos
GetWindowRect
PtInRect
GetSystemMetrics
GetWindowLongW
KillTimer

msvcrt

__set_app_type
__p__fmode
memset
_wtoi
_vsnwprintf
_unlock
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
__dllonexit
_lock
_onexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler4_common
_controlfp
__p__commode
_ismbblead
_XcptFilter
_exit
_purecall
realloc
free
_ftol2
wcschr
_CxxThrowException
??0exception@@QAE@XZ
?what@exception@@UBEPBDXZ
_cexit
__getmainargs
malloc
_callnewh
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
_ftol2_sse

ntdll

WinSqmAddToStream
WinSqmIncrementDWORD

setupapi

SetupDiGetClassDevsW
SetupDiOpenDeviceInterfaceW
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW

uxtheme

IsThemeActive
GetThemeSysColor
OpenThemeData
GetThemeFont
GetThemeColor
GetThemeSysFont
CloseThemeData
DrawThemeParentBackground

oleacc

CreateStdAccessibleObject
LresultFromObject

ole32

StringFromGUID2
CoUninitialize
CoCreateInstance
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoGetObject

oleaut32

SafeArrayGetElement
SysAllocString
SysFreeString
SafeArrayGetUBound
SafeArrayGetLBound
VariantInit
VariantClear

comctl32

PropertySheetW
ord381
InitCommonControlsEx

dwrite

DWriteCreateFactory

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fbnredh
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e1aabb7768b8db0c3fe007c5c07a8244

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

ntdll

setupapi

uxtheme

oleacc

ole32

oleaut32

comctl32

dwrite

Sections

.text Size: 60KB - Virtual size: 59KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 236KB - Virtual size: 236KB

.reloc Size: 30KB - Virtual size: 32KB

fbnredh Size: - Virtual size: 4KB

.text
Size: 60KB - Virtual size: 59KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 236KB - Virtual size: 236KB

.reloc
Size: 30KB - Virtual size: 32KB

fbnredh
Size: - Virtual size: 4KB