6ed3aea8dac3f0928e935d38d679af8d7ac0a076ba7100b9bef9e17bb1fe3c79

Sharing

Copy URL Twitter E-mail

General

Target

6ed3aea8dac3f0928e935d38d679af8d7ac0a076ba7100b9bef9e17bb1fe3c79
Size

765KB
MD5

3bbe519659166e615c9714aa284aca80
SHA1

d3e61055f318ba4e4c71f261ea160480b2903a8b
SHA256

6ed3aea8dac3f0928e935d38d679af8d7ac0a076ba7100b9bef9e17bb1fe3c79
SHA512

f278678cfc7f41ce05e96c72e7c7bf282368d658e596569d100c7827f1f738cf0fd34f68ec51cba639e81a58284ea4dcfd0551c3c51ef0689d475893469768b6
SSDEEP

12288:PCArsdrWPHi1FT/uGjteCvbTQIF/o5k+/XY:PCAyrWPHqTVjU0TyD

Score

N/A

Malware Config

Signatures

Files

6ed3aea8dac3f0928e935d38d679af8d7ac0a076ba7100b9bef9e17bb1fe3c79
.exe windows x86

348c3e56cefa37b155de22d1c030fd3d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

DeleteUrlCacheEntry

kernel32

SetErrorMode
GetTickCount
HeapFree
HeapAlloc
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoA
HeapReAlloc
RtlUnwind
RaiseException
ExitThread
CreateThread
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapSize
SetHandleCount
GetStdHandle
GetFileType
HeapCreate
VirtualFree
GetConsoleCP
GetConsoleMode
GetOEMCP
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
LCMapStringA
LCMapStringW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GetCPInfo
GetFileSizeEx
GetFileAttributesA
FileTimeToLocalFileTime
GetModuleHandleW
GetVolumeInformationA
FindFirstFileA
FindClose
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
WritePrivateProfileStringA
FileTimeToSystemTime
GetThreadLocale
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
InterlockedDecrement
GetModuleFileNameW
FormatMessageA
LocalFree
lstrlenA
MulDiv
GlobalUnlock
CreateEventA
SuspendThread
WaitForSingleObject
SetThreadPriority
GlobalFree
GlobalAddAtomA
GetCurrentProcessId
SetLastError
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
CompareStringA
InterlockedExchange
GlobalLock
lstrcmpA
GlobalAlloc
FreeLibrary
GetProcAddress
MultiByteToWideChar
GetLastError
WriteFile
SetFilePointer
FreeResource
LocalFileTimeToFileTime
DeleteFileA
ResumeThread
CloseHandle
GetFileTime
GetCurrentDirectoryA
GetModuleHandleA
GetModuleFileNameA
LockResource
LoadLibraryA
SetCurrentDirectoryA
ReadFile
TerminateProcess
SizeofResource
Sleep
WideCharToMultiByte
GetCommandLineA
SetFileTime
SetEvent
GetCurrentProcess
LoadResource
FindResourceA
GetFileSize
CreateFileA
DosDateTimeToFileTime
GetFullPathNameA
CreateDirectoryA

user32

DestroyMenu
RegisterClipboardFormatA
PostThreadMessageA
ReleaseCapture
SetCapture
LoadCursorA
GetSysColorBrush
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
UpdateWindow
CreateWindowExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
IntersectRect
SystemParametersInfoA
IsIconic
GetSystemMetrics
UnhookWindowsHookEx
GetWindowTextLengthA
GetWindowTextA
SetFocus
GetMenuItemID
GetMenuItemCount
GetSubMenu
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
UnregisterClassA
MessageBeep
GetNextDlgGroupItem
GetNextDlgTabItem
EndDialog
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableA
CharNextA
GetWindow
SetWindowContextHelpId
MapDialogRect
CharUpperA
GetClassInfoExA
SetWindowPos
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
PostMessageA
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
GetParent
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
MessageBoxA
ClientToScreen
SetCursor
FillRect
WindowFromPoint
DrawFocusRect
InflateRect
DrawStateA
OffsetRect
DestroyCursor
GetSysColor
LoadImageA
CopyRect
SetTimer
GetWindowRect
LoadBitmapA
LoadIconA
wsprintfA
GetClientRect
SendMessageA
GetDC
SetWindowLongA
InvalidateRect
GetWindowLongA
GetDesktopWindow
SetLayeredWindowAttributes
EnableWindow
GetWindowPlacement

gdi32

GetDeviceCaps
CreateRectRgnIndirect
RectVisible
GetMapMode
DPtoLP
GetBkColor
GetTextColor
GetRgnBox
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
CreateCompatibleDC
PtVisible
GetWindowExtEx
GetViewportExtEx
GetClipBox
SetMapMode
SetTextColor
SetBkMode
RestoreDC
SaveDC
CreateBitmap
DeleteDC
SetBkColor
DeleteObject
SelectObject
CreateCompatibleBitmap
GetObjectA
GetStockObject
BitBlt
CreateFontIndirectA
TextOutA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA

comctl32

InitCommonControlsEx
_TrackMouseEvent

oledlg

ord8

ole32

CoTaskMemFree
CoRevokeClassObject
OleInitialize
CoTaskMemAlloc
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleIsCurrentClipboard
CLSIDFromProgID
OleFlushClipboard
CoRegisterMessageFilter
CLSIDFromString

oleaut32

SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysStringLen
SysFreeString
SysAllocStringByteLen
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit

urlmon

URLDownloadToFileA

wsock32

WSAStartup
WSACleanup
WSASetLastError

winmm

PlaySoundA

shlwapi

PathFindFileNameA
PathFindExtensionA
PathStripToRootA
PathIsUNCA

Sections

.text
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 297KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�d��A�
Size: 97KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

348c3e56cefa37b155de22d1c030fd3d

Headers

DLL Characteristics

File Characteristics

Imports

wininet

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

oleaut32

urlmon

wsock32

winmm

shlwapi

Sections

.text Size: 283KB - Virtual size: 283KB

.rdata Size: 74KB - Virtual size: 74KB

.data Size: 12KB - Virtual size: 27KB

.rsrc Size: 297KB - Virtual size: 296KB

�d��A� Size: 97KB - Virtual size: 100KB

.text
Size: 283KB - Virtual size: 283KB

.rdata
Size: 74KB - Virtual size: 74KB

.data
Size: 12KB - Virtual size: 27KB

.rsrc
Size: 297KB - Virtual size: 296KB

�d��A�
Size: 97KB - Virtual size: 100KB