fcdeebda6f3c4f6019f8068f9025abe2c6ce7cc641e59956897430fd30bc999a

Sharing

Copy URL Twitter E-mail

General

Target

fcdeebda6f3c4f6019f8068f9025abe2c6ce7cc641e59956897430fd30bc999a
Size

447KB
MD5

42fb5ebd3542a289585f344004610da0
SHA1

3364bd22932b0af03a3cd19541d6ac7e1a8186b5
SHA256

fcdeebda6f3c4f6019f8068f9025abe2c6ce7cc641e59956897430fd30bc999a
SHA512

0601b2d363259e41968b6a9d0ae704fa75d43e24af7c09b5c8082bdb612492b2b3f5e15aa14f0268f50b11dcb5241c064eba519099098ccdd2f1eb899b08fc67
SSDEEP

6144:jm8J+fWEJe1q0keAQzUSc6EdoaFLAr3jQsPj0P4:jmxfWEb0kjFLejQOw4

Score

N/A

Malware Config

Signatures

Files

fcdeebda6f3c4f6019f8068f9025abe2c6ce7cc641e59956897430fd30bc999a
.exe windows x86

5266868a5c0fda62f03da7ad84fa0941

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetLastActivePopup
GetGUIThreadInfo
GetClientRect
GetAncestor
DdeConnect
OemToCharW
TranslateMessage
GetDoubleClickTime
DdeFreeDataHandle
GetLayeredWindowAttributes
ShowCursor
LoadMenuA
CreateIconFromResource
PostMessageA
IsWindow
GetClipCursor
GetDlgItem
DestroyWindow
CreateDialogIndirectParamW
GetWindow
EndPaint
SetMenu
UnregisterClassW
DestroyMenu
LoadCursorW
GetSysColorBrush
BeginPaint
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowThreadProcessId
SetCursor
GetMessageW
GetCursorPos
ValidateRect
PostQuitMessage
ShowWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
CheckRadioButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
DispatchMessageW
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
AnyPopup
IsWindowVisible
UpdateWindow
EnableWindow
CheckMenuItem
OpenInputDesktop
CreateDesktopW
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
CopyRect
PtInRect
GetMenu
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
SendDlgItemMessageA
SetThreadDesktop
SwitchDesktop
CloseDesktop
SendMessageW
PostMessageW
GetSystemMetrics
IsIconic
GetFocus
GetTopWindow
GetWindowLongW
GetClassNameW
SetWindowLongW
SetWindowPos
SetForegroundWindow
EndDialog
GetNextDlgTabItem
GetParent
IsWindowEnabled
SetFocus
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetDesktopWindow
GetActiveWindow
SetActiveWindow

comdlg32

GetFileTitleW

shell32

SHGetFolderPathW
ShellExecuteW

oledlg

OleUIBusyW

ole32

CoRegisterMessageFilter
OleFlushClipboard
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
CoTaskMemAlloc
OleIsCurrentClipboard
CoRevokeClassObject
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoTaskMemFree
StgCreateDocfileOnILockBytes

advapi32

CheckTokenMembership
DuplicateTokenEx
OpenProcessToken
RegQueryValueExW
GetSidSubAuthorityCount
RegNotifyChangeKeyValue
RegCreateKeyW
RegReplaceKeyA
GetAce
RegSetValueA
GetSidLengthRequired
RegCloseKey
LookupPrivilegeValueW
RegOpenKeyExW
RegQueryValueW
RegEnumKeyW
RegOpenKeyW
AdjustTokenPrivileges
AllocateAndInitializeSid
RegDeleteValueW
FreeSid
RegSetValueExW
RegDeleteKeyW
RegEnumValueW
RegEnumKeyExW
RegCreateKeyExW

gdi32

AddFontResourceExA
CreateDCA
CreateDIBPatternBrush
CloseFigure
AbortPath
CopyEnhMetaFileA
ChoosePixelFormat
Arc
AnimatePalette
CreateBitmapIndirect
CreateDIBitmap

opengl32

glLightfv
glLightModelfv
glLightModelf
glHint
glGetString
glGenTextures
glEnd
glEnable
glDisable
glDepthFunc
glCopyTexImage2D
glColor4f
glColor3f
glClearDepth
glClearColor
glClear
glCallList
glBlendFunc
glBegin

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

kernel32

SetEvent
GetSystemDefaultLCID
GetEnvironmentVariableW
CreateDirectoryW
RemoveDirectoryW
GetSystemDirectoryW
GetTempPathW
GetSystemDefaultLangID
SetCurrentDirectoryW
CreateThread
WaitForSingleObject
HeapAlloc
HeapFree
RtlUnwind
RaiseException
HeapReAlloc
Sleep
ExitProcess
HeapSize
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
GetACP
IsValidCodePage
LCMapStringW
InitializeCriticalSectionAndSpinCount
LCMapStringA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateEventW
CreateFileA
SetErrorMode
FlushFileBuffers
SetFilePointer
lstrlenA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
GlobalFlags
GetModuleHandleA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryW
CompareStringW
GetExitCodeThread
LoadLibraryA
lstrcmpW
GetModuleHandleW
GetProcAddress
GetVersionExA
WideCharToMultiByte
SetLastError
GlobalAlloc
FormatMessageW
lstrlenW
MulDiv
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
MultiByteToWideChar
GetCurrentDirectoryW
MoveFileW
GetLastError
LocalFree
OpenProcess
CompareStringA
GetVersion
FileTimeToSystemTime
FileTimeToLocalFileTime
GetThreadLocale
FormatMessageA
ResetEvent
GetLogicalDriveStringsW
DeleteFileA
MoveFileA
CreateProcessA
GetFileAttributesA
CreatePipe
GetExitCodeProcess
GetDriveTypeA
GetCurrentDirectoryA
SetEnvironmentVariableW
SetEnvironmentVariableA
HeapDestroy
GetCommandLineA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemInfo
VirtualProtect
GetProcessHeap
GetFileTime
GetVolumeInformationW
DuplicateHandle
UnlockFile
LockFile
GetTimeFormatA
GetDateFormatA
InterlockedIncrement
InterlockedDecrement
GetTimeZoneInformation
WriteConsoleW
WritePrivateProfileStringW
GetPrivateProfileStringW
FindClose
FindNextFileW
DeleteFileW
FindFirstFileW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetCurrentProcessId
LocalAlloc
GetCommandLineW
GetTickCount
GetModuleFileNameW
FreeLibrary
LoadLibraryExW
GetPrivateProfileIntW
CloseHandle
WriteFile
ReadFile
CreateProcessW
GetDriveTypeW
GetWindowsDirectoryW
GetVersionExW
VirtualAlloc
VirtualLock
CreateNamedPipeA
VirtualQueryEx
FileTimeToDosDateTime
GetDiskFreeSpaceExA
GetOEMCP
GetCPInfo
SizeofResource
LockResource
LoadResource
FindResourceW
SetFileAttributesW
CreateFileW
GetFileSize
GetCurrentProcess

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 122KB - Virtual size: 274KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 205KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5266868a5c0fda62f03da7ad84fa0941

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

shell32

oledlg

ole32

advapi32

gdi32

opengl32

version

kernel32

Sections

.text Size: 97KB - Virtual size: 96KB

.rdata Size: 21KB - Virtual size: 21KB

.data Size: 122KB - Virtual size: 274KB

.rsrc Size: 205KB - Virtual size: 205KB

.text
Size: 97KB - Virtual size: 96KB

.rdata
Size: 21KB - Virtual size: 21KB

.data
Size: 122KB - Virtual size: 274KB

.rsrc
Size: 205KB - Virtual size: 205KB