7e1c8120ea036568f3df412592cbbd9db609027badcf24afbab662c36f6dd7c5

Sharing

Copy URL Twitter E-mail

General

Target

7e1c8120ea036568f3df412592cbbd9db609027badcf24afbab662c36f6dd7c5
Size

1.3MB
MD5

17ec38069c0135a33f4fabe00e05f5b4
SHA1

6e6c3dc525620260df18670e9197e96b97dee0ee
SHA256

7e1c8120ea036568f3df412592cbbd9db609027badcf24afbab662c36f6dd7c5
SHA512

122c35df864989f5841680b1d7260361eac8479df4dc61b5a7a1977d927c39e64515744881bd6db3d8469f88c02041200b666c70308ff0e71fb7bf95a8e0cbbf
SSDEEP

24576:wX7Mt8Udqwzi4//UJl2dgXBEAooRgJop0HkbTrZcjsiRrVnsjLB3yFB8:Bt8AitJLqAooRGU0EbTfiRraIFe

Score

N/A

Malware Config

Signatures

Files

7e1c8120ea036568f3df412592cbbd9db609027badcf24afbab662c36f6dd7c5
.exe windows x86

2664199609dfb02350833bb70e6569d6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt
GradientFill

kernel32

SetFilePointer
VirtualQuery
CreateProcessW
SetUnhandledExceptionFilter
GetCurrentProcess
OutputDebugStringW
GetModuleHandleW
WriteFile
FormatMessageW
CreateFileW
lstrlenW
GetLocalTime
lstrcatW
IsDebuggerPresent
GetCurrentThreadId
GetCurrentProcessId
lstrcpyW
SetLastError
CreateMutexW
InterlockedIncrement
InterlockedDecrement
WaitForSingleObject
InterlockedCompareExchange
SetEvent
GetTickCount
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CreateEventW
DeleteCriticalSection
ReleaseMutex
WideCharToMultiByte
ConnectNamedPipe
WaitForSingleObjectEx
CreateNamedPipeW
GetOverlappedResult
DisconnectNamedPipe
ReadFileEx
WriteFileEx
MoveFileExW
GlobalAlloc
CopyFileW
GetExitCodeProcess
FileTimeToSystemTime
GlobalFree
GetFileTime
GetWindowsDirectoryW
ExitThread
LocalFree
CreateThread
OpenEventW
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
GetTempPathW
OpenMutexW
FindResourceW
LoadResource
SizeofResource
LockResource
GetFileSize
ReadFile
FlushFileBuffers
GetSystemDirectoryW
RemoveDirectoryW
LocalAlloc
QueryPerformanceFrequency
GetVersionExW
GlobalLock
GlobalUnlock
GlobalReAlloc
CreateFileA
CreateFileMappingA
OpenFileMappingA
GetWindowsDirectoryA
CompareStringW
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
ExitProcess
FileTimeToLocalFileTime
GetDriveTypeW
GetStartupInfoW
UnhandledExceptionFilter
RtlUnwind
TerminateProcess
ResumeThread
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetDriveTypeA
FindFirstFileA
RaiseException
GetCPInfo
GetACP
GetOEMCP
WaitNamedPipeW
HeapCreate
VirtualFree
VirtualAlloc
GetStdHandle
GetModuleFileNameA
HeapSize
LoadLibraryA
GetFullPathNameW
GetCurrentDirectoryA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetModuleHandleA
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetTimeFormatA
GetDateFormatA
GetFullPathNameA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
CompareStringA
SetEnvironmentVariableA
QueryDosDeviceW
GetProcAddress
GetLastError
LoadLibraryW
OpenProcess
GetLogicalDriveStringsW
FreeLibrary
CreateDirectoryW
FindNextFileW
FindClose
FindFirstFileW
DeleteFileW
MultiByteToWideChar
CloseHandle
WaitForMultipleObjects
GetModuleFileNameW
Sleep
SetFileAttributesW
IsValidCodePage

user32

GetDesktopWindow
ActivateKeyboardLayout
GetKeyboardLayoutList
GetLastInputInfo
SetMenuItemInfoW
DestroyMenu
IsWindow
CreatePopupMenu
AppendMenuW
TrackPopupMenu
SetCaretPos
CreateCaret
SetForegroundWindow
SetCursorPos
GetClientRect
BeginPaint
RegisterClassExW
UnionRect
SetWindowPos
GetCursorPos
CreateWindowExW
ReleaseCapture
IsWindowVisible
TranslateMessage
PeekMessageW
RedrawWindow
DispatchMessageW
wvsprintfW
LoadCursorW
DestroyWindow
SetWindowRgn
GetKeyState
GetCursor
FillRect
DrawTextW
InflateRect
EndPaint
SetCursor
WindowFromPoint
SystemParametersInfoW
GetWindowThreadProcessId
GetParent
TrackMouseEvent
IsWindowEnabled
OffsetRect
GetWindowLongW
SetWindowLongW
ShowWindow
SendMessageW
EnableWindow
CallWindowProcW
DefWindowProcW
MoveWindow
GetWindowRect
MonitorFromPoint
SubtractRect
FindWindowW
GetDC
IntersectRect
ReleaseDC
GetSystemMetrics
GetMonitorInfoW
PostMessageW
UpdateLayeredWindow
PtInRect
GetAsyncKeyState
SetRect
LoadImageW
SetTimer
SetCapture
KillTimer
MsgWaitForMultipleObjectsEx

gdi32

GetTextExtentExPointW
CreatePen
CreateRectRgn
MoveToEx
BitBlt
LineTo
CombineRgn
GetPixel
GetStockObject
SetTextColor
CreateFontIndirectW
Rectangle
CreateSolidBrush
SelectObject
DeleteObject
GetObjectW
CreateCompatibleDC
CreateDIBSection
DeleteDC
GetDeviceCaps
CreateCompatibleBitmap
StretchDIBits
StretchBlt
GetTextExtentPoint32W
SelectClipRgn
GetTextMetricsW
GetCharABCWidthsFloatW
OffsetRgn
ExtCreateRegion
SetBkMode

imm32

ImmDisableIME

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

urlmon

CreateURLMoniker

psapi

GetModuleFileNameExW

shlwapi

StrStrIW

advapi32

GetSecurityDescriptorSacl
RegCreateKeyExW
RegQueryValueExW
RegQueryInfoKeyW
RegDeleteKeyW
RegEnumValueW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
OpenProcessToken
GetTokenInformation
LookupAccountSidW
AddAccessAllowedAceEx
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetNamedSecurityInfoW
GetNamedSecurityInfoW
InitializeAcl
SetSecurityDescriptorSacl
BuildExplicitAccessWithNameW
GetSidLengthRequired
SetEntriesInAclW
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorW

shell32

ShellExecuteExW
SHFileOperationW
ShellExecuteW
SHGetFolderPathW

ole32

CoCreateInstance
CoTaskMemAlloc
CreateStreamOnHGlobal
CoInitialize
OleDraw

oleaut32

GetErrorInfo
SysFreeString
SysAllocString

Sections

.text
Size: 947KB - Virtual size: 946KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 29KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2664199609dfb02350833bb70e6569d6

Headers

DLL Characteristics

File Characteristics

Imports

msimg32

kernel32

user32

gdi32

imm32

version

urlmon

psapi

shlwapi

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 947KB - Virtual size: 946KB

.rdata Size: 228KB - Virtual size: 228KB

.data Size: 29KB - Virtual size: 62KB

.rsrc Size: 35KB - Virtual size: 35KB

.reloc Size: 132KB - Virtual size: 132KB

.text
Size: 947KB - Virtual size: 946KB

.rdata
Size: 228KB - Virtual size: 228KB

.data
Size: 29KB - Virtual size: 62KB

.rsrc
Size: 35KB - Virtual size: 35KB

.reloc
Size: 132KB - Virtual size: 132KB