04f8a177ecf414b89eeb0e9da3f04ab79e52594bf120c822949ba13fcf21ba80

Sharing

Copy URL Twitter E-mail

General

Target

04f8a177ecf414b89eeb0e9da3f04ab79e52594bf120c822949ba13fcf21ba80
Size

329KB
MD5

03cb4249e216176def1e34a08c468190
SHA1

4600cf3102a56a71d63d729fba9ef0ffdf3e64de
SHA256

04f8a177ecf414b89eeb0e9da3f04ab79e52594bf120c822949ba13fcf21ba80
SHA512

3cf6fd37ed5c3eece063fdc927756ccd050f924d330d194f781f9b13f4746cd898fc0c910f0e39b0eaa26a45eaae99425d4109fc56d9f0a512d28cae309cedd8
SSDEEP

3072:fO14g+z3JepQMEE6Q+1rqfvJqxEm4x1ESuQG+3SeyRS6CSfKVu1xgCAWUMs8/iKQ:Gj+rJes5x1rqfvoxEvTEPp/F9zj3od

Score

N/A

Malware Config

Signatures

Files

04f8a177ecf414b89eeb0e9da3f04ab79e52594bf120c822949ba13fcf21ba80
.exe windows x86

e1aabb7768b8db0c3fe007c5c07a8244

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
EventWrite
EventRegister
EventUnregister
RegCreateKeyExW
RegSetValueExW

kernel32

GetCurrentProcess
IsWow64Process
GetProcessHeap
HeapAlloc
HeapFree
CreateMutexW
InterlockedExchange
LocalFree
InterlockedCompareExchange
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
CloseHandle
VerSetConditionMask
VerifyVersionInfoW
MulDiv
GetTickCount64
GetLastError
Sleep

gdi32

CreateCompatibleDC
SetBkColor
CreatePen
Polyline
CreateCompatibleBitmap
SetStretchBltMode
StretchBlt
CreateFontIndirectW
DeleteObject
GetObjectW
GetDeviceCaps
DeleteDC
BitBlt
GdiAlphaBlend
SelectObject
GetStockObject
GdiSetBatchLimit
SetTextColor
PatBlt
CreateSolidBrush
GetTextMetricsW
SetBkMode

user32

IsDlgButtonChecked
CheckRadioButton
EnumDisplaySettingsW
ChangeDisplaySettingsExW
EnumDisplayDevicesW
GetSysColor
DestroyWindow
CreateWindowExW
CopyImage
LoadBitmapW
DrawTextW
CheckDlgButton
MapWindowPoints
FillRect
RedrawWindow
SystemParametersInfoW
SetDlgItemTextW
MapDialogRect
GetClientRect
GetDlgItem
SetFocus
IsCharAlphaNumericW
EnableWindow
ShowWindow
DialogBoxParamW
EndDialog
SetTimer
MessageBoxW
FindWindowW
SetForegroundWindow
LoadCursorW
RegisterClassExW
DrawFocusRect
BeginPaint
GetSysColorBrush
FrameRect
EndPaint
TrackMouseEvent
DefWindowProcW
SendMessageW
InvalidateRect
GetFocus
SetWindowTextW
SetWindowLongW
GetParent
PostMessageW
SendDlgItemMessageW
GetDC
LoadStringW
ReleaseDC
GetProcessDefaultLayout
SendMessageTimeoutW
SetWindowPos
GetWindowRect
PtInRect
GetSystemMetrics
GetWindowLongW
KillTimer

msvcrt

__set_app_type
__p__fmode
memset
_wtoi
_vsnwprintf
_unlock
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
__dllonexit
_lock
_onexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler4_common
_controlfp
__p__commode
_ismbblead
_XcptFilter
_exit
_purecall
realloc
free
_ftol2
wcschr
_CxxThrowException
??0exception@@QAE@XZ
?what@exception@@UBEPBDXZ
_cexit
__getmainargs
malloc
_callnewh
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
_ftol2_sse

ntdll

WinSqmAddToStream
WinSqmIncrementDWORD

setupapi

SetupDiGetClassDevsW
SetupDiOpenDeviceInterfaceW
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW

uxtheme

IsThemeActive
GetThemeSysColor
OpenThemeData
GetThemeFont
GetThemeColor
GetThemeSysFont
CloseThemeData
DrawThemeParentBackground

oleacc

CreateStdAccessibleObject
LresultFromObject

ole32

StringFromGUID2
CoUninitialize
CoCreateInstance
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoGetObject

oleaut32

SafeArrayGetElement
SysAllocString
SysFreeString
SafeArrayGetUBound
SafeArrayGetLBound
VariantInit
VariantClear

comctl32

PropertySheetW
ord381
InitCommonControlsEx

dwrite

DWriteCreateFactory

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e1aabb7768b8db0c3fe007c5c07a8244

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

ntdll

setupapi

uxtheme

oleacc

ole32

oleaut32

comctl32

dwrite

Sections

.text Size: 60KB - Virtual size: 59KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 236KB - Virtual size: 236KB

.reloc Size: 31KB - Virtual size: 32KB

.text
Size: 60KB - Virtual size: 59KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 236KB - Virtual size: 236KB

.reloc
Size: 31KB - Virtual size: 32KB