bda6e73cbb972aaca6ff50361a4e3dd8f2658f2ab3933f53beda377ec6269160

Sharing

Copy URL Twitter E-mail

General

Target

bda6e73cbb972aaca6ff50361a4e3dd8f2658f2ab3933f53beda377ec6269160
Size

418KB
MD5

05deb0f4168d49fc7409eed822eba3d0
SHA1

be3ea3a27269a92f46ab17c0fe35a77e33d97698
SHA256

bda6e73cbb972aaca6ff50361a4e3dd8f2658f2ab3933f53beda377ec6269160
SHA512

44b8dff2ee68706408a75b46be2898282f8ca6b95d7b5ab7d43ba4ca944c041d209279be4d96c0ff8eb9a18b16877980b75cdf18fcdbdf0232b50d6e87f8f944
SSDEEP

6144:7LCmJBZIlmAMcohrUC5lj6bxqzreJajd0Zd797jrUaG6AgWGcbvheiX5:7WmJBAMxrN5lj6FqPe77jwaGOcb4ip

Score

N/A

Malware Config

Signatures

Files

bda6e73cbb972aaca6ff50361a4e3dd8f2658f2ab3933f53beda377ec6269160
.exe windows x86

1140570d6a52c076179925c7ab87f10f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
FlushInstructionCache
VirtualAlloc
GetCurrentThreadId
GetFileSize
SetFilePointer
FreeLibrary
InitializeCriticalSection
GetLocalTime
lstrlenW
LeaveCriticalSection
LoadLibraryW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
EnterCriticalSection
ReadFile
GetModuleFileNameA
GlobalFree
GlobalAlloc
GlobalUnlock
RaiseException
GlobalLock
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
CreateFileA
GetConsoleMode
GetConsoleCP
InterlockedCompareExchange
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapCreate
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
Sleep
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetCPInfo
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
RtlUnwind
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
LoadLibraryA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
DeleteCriticalSection
GetCurrentProcess
CreateProcessW
GetEnvironmentVariableW
ExitProcess
ResumeThread
WriteProcessMemory
VirtualAllocEx
VirtualProtectEx
SetLastError
TerminateProcess
GetExitCodeProcess
ReadProcessMemory
VirtualQueryEx
WaitForSingleObject
CopyFileW
FindResourceExW
GetTempPathW
FreeResource
WriteFile
CreateFileW
CloseHandle
GetProcAddress
GetModuleHandleW
GetVersionExW
DeleteFileW
GetLastError
FindClose
GetFileAttributesW
CreateDirectoryW
FindFirstFileW
GetModuleFileNameW
LockResource
FindResourceW
SizeofResource
LoadResource

user32

AttachThreadInput
SendMessageW
DefWindowProcW
SetRectEmpty
SetWindowLongW
SetCapture
GetMessageW
GetFocus
GetForegroundWindow
DrawIconEx
ReleaseCapture
DrawTextW
GetClientRect
CallWindowProcW
GetMonitorInfoW
IsWindow
GetWindowRect
EndPaint
GetScrollPos
CopyRect
FindWindowW
EqualRect
MapWindowPoints
PostThreadMessageW
OffsetRect
InvalidateRect
GetDC
PostMessageW
SetCursor
GetWindow
GetParent
GetKeyState
GetDlgItem
IsWindowEnabled
ReleaseDC
SetRect
LoadImageW
SetWindowPos
PtInRect
WindowFromPoint
SystemParametersInfoW
DrawFrameControl
MoveWindow
SetFocus
GetNextDlgTabItem
GetWindowLongW
UnregisterClassA
LoadCursorW
RegisterClassExW
GetActiveWindow
CreateWindowExW
EnableWindow
IsDialogMessageW
IsChild
SetForegroundWindow
GetWindowThreadProcessId
PeekMessageW
TranslateMessage
LoadBitmapW
SetActiveWindow
GetClassInfoExW
DispatchMessageW
MonitorFromWindow
GetDesktopWindow
ShowWindow
DestroyIcon
LoadIconW
BeginPaint
GetSystemMetrics
GetDlgCtrlID
UpdateLayeredWindow
InflateRect
IsWindowVisible
DestroyWindow

gdi32

RoundRect
SetBkColor
GetClipRgn
GetObjectW
CombineRgn
MoveToEx
LineTo
SetBkMode
StretchBlt
CreateBitmap
CreatePen
SelectClipRgn
SetTextColor
DeleteObject
CreateRectRgnIndirect
RestoreDC
TextOutW
RectInRegion
GetCurrentObject
CreateCompatibleDC
ExtTextOutW
SaveDC
GetStockObject
BitBlt
CreateRectRgn
GetTextExtentPoint32W
CreateDIBSection
GetTextColor
CreateFontIndirectW
SelectObject
SetStretchBltMode
Rectangle
DeleteDC
CreateCompatibleBitmap

advapi32

RegOpenKeyExW
RegSetValueExW
RegOpenKeyW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegQueryInfoKeyW
RegEnumValueW

shell32

SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation
ShellExecuteW
SHGetSpecialFolderPathW

ole32

CoUninitialize
CoInitialize
CoCreateInstance
CreateStreamOnHGlobal

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime

shlwapi

SHEnumKeyExW
PathAppendA
PathRemoveFileSpecA
PathFileExistsA
StrToIntW
PathAddBackslashW
PathAppendW
PathFileExistsW
PathRemoveFileSpecW
StrToIntA

comctl32

_TrackMouseEvent

msimg32

AlphaBlend

gdiplus

GdipCreateImageAttributes
GdipSetImageAttributesColorMatrix
GdipLoadImageFromStream
GdipImageRotateFlip
GdipDrawImageRectI
GdipDisposeImageAttributes
GdipCreateBitmapFromStream
GdipDrawImagePointsRectI
GdipCreateHBITMAPFromBitmap
GdipDrawImageRectRectI
GdipGetImageHeight
GdipAlloc
GdipFree
GdipCreateFontFromDC
GdipCreateFromHDC
GdipDeleteBrush
GdipCloneImage
GdipCreateFontFromLogfontW
GdipResetWorldTransform
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipDeleteGraphics
GdipSetStringFormatLineAlign
GdipCreateSolidFill
GdipDeleteFont
GdipDeleteStringFormat
GdipDrawString
GdipCloneBrush
GdipGetImageWidth
GdipSetStringFormatTrimming
GdipDisposeImage
GdipSetStringFormatAlign
GdipCreateStringFormat
GdipLoadImageFromFile
GdiplusStartup
GdiplusShutdown

Sections

.text
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 131KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1140570d6a52c076179925c7ab87f10f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

gdiplus

Sections

.text Size: 220KB - Virtual size: 219KB

.rdata Size: 50KB - Virtual size: 49KB

.data Size: 9KB - Virtual size: 17KB

.rsrc Size: 131KB - Virtual size: 132KB

.text
Size: 220KB - Virtual size: 219KB

.rdata
Size: 50KB - Virtual size: 49KB

.data
Size: 9KB - Virtual size: 17KB

.rsrc
Size: 131KB - Virtual size: 132KB