6ea94637817223a16bee7e5b2d898ad6c5a702183c1e613546e07c9f9bb06dc7

Sharing

Copy URL Twitter E-mail

General

Target

6ea94637817223a16bee7e5b2d898ad6c5a702183c1e613546e07c9f9bb06dc7
Size

288KB
MD5

13589f21cdd0ff836158e4ed50459b50
SHA1

004064cb6651b10b841685155066b14bef61418d
SHA256

6ea94637817223a16bee7e5b2d898ad6c5a702183c1e613546e07c9f9bb06dc7
SHA512

9f21ed8f784aa11b243fd415bcfd3717fa686bd112c9290d3878bf5fea3a8ec1abd552f431a4cbcee04fe9ffcadc91e25f91e1a120a178e0026e8423f9933600
SSDEEP

6144:TDuaNYE3eI7eEZQZzAOADGdSZaDOqViiC48bp:TDuaSE5tC1mDGI4ViiCzp

Score

N/A

Malware Config

Signatures

Files

6ea94637817223a16bee7e5b2d898ad6c5a702183c1e613546e07c9f9bb06dc7
.exe windows x86

1fdf8c5aa283714b99a1cdb92da85bdb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetActiveWindow
IsWindowVisible
LoadBitmapW
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetCapture
GetLastInputInfo
LoadImageA
OemToCharW
LoadMenuA
GetDoubleClickTime
LoadStringA
OpenWindowStationW
SetWindowTextA
DrawTextExW
GetDC
ReleaseDC
DispatchMessageW
SetActiveWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
UpdateWindow
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetClientRect
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
RegisterWindowMessageW
RegisterClipboardFormatW
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
MessageBoxW
GetDesktopWindow
GetSystemMetrics
RemoveMenu
GetSystemMenu
IsIconic
LoadIconW
PostMessageW
GetAsyncKeyState
ExitWindowsEx
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
EnableMenuItem
GetWindowRect
GetForegroundWindow
SetFocus
SetWindowPos
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
SetWindowTextW
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
PostQuitMessage
UnhookWindowsHookEx
CheckMenuItem
ModifyMenuW
GetParent
GetFocus

comdlg32

GetFileTitleW

shell32

ShellExecuteA
ShellAboutA
Shell_NotifyIconW
ExtractIconW
ExtractAssociatedIconW
DoEnvironmentSubstW
ShellExecuteExW
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
SHGetFolderPathW
SHGetPathFromIDListW
SHCreateDirectoryExW
SHGetFolderLocation
CommandLineToArgvW
SHGetFileInfoW
ShellExecuteW
SHBrowseForFolderW
ShellAboutW

oledlg

OleUIBusyW

ole32

CoGetClassObject
CoTaskMemAlloc
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CLSIDFromString
StgOpenStorageOnILockBytes
OleRun
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoCreateInstance
CoUninitialize
CoInitialize
CLSIDFromProgID
CoTaskMemFree
CoInitializeEx

advapi32

InitializeAcl
InitializeSecurityDescriptor
GetLengthSid
FreeSid
RevertToSelf
AccessCheck
IsValidSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
ObjectCloseAuditAlarmA
RegOpenKeyExA
RegFlushKey
GetSidLengthRequired
GetSidSubAuthority
GetSecurityDescriptorGroup
OpenProcessToken
AccessCheckByTypeResultList
SetSecurityDescriptorDacl
ImpersonateSelf
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegOpenKeyW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegCreateKeyExW
AddAccessAllowedAce
OpenThreadToken
AllocateAndInitializeSid

gdi32

ColorMatchToTarget
CreateCompatibleDC
CloseFigure
CreateDIBSection
CreateCompatibleBitmap
AnimatePalette
BeginPath
CreateDIBPatternBrushPt

kernel32

FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
HeapFree
HeapSize
HeapAlloc
GetTimeZoneInformation
RaiseException
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
GetModuleHandleW
Sleep
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
VirtualAlloc
GetUserDefaultLCID
FreeLibrary
FindFirstFileW
FindNextFileW
FindClose
GetEnvironmentStrings
GetCurrentProcessId
GetFileSize
ReadFile
GetTempPathW
GetCurrentDirectoryW
lstrcpyW
SetErrorMode
GetVolumeInformationW
SetCurrentDirectoryW
SetFileAttributesW
DeleteFileW
GetFileAttributesW
GetDriveTypeW
GetDiskFreeSpaceExW
lstrlenW
MultiByteToWideChar
GetACP
WideCharToMultiByte
CreateMutexW
GetLastError
FreeEnvironmentStringsW
GetEnvironmentStringsW
WaitForSingleObject
GetSystemTime
WriteFile
FlushFileBuffers
CopyFileW
CreateFileW
GetFileSizeEx
CloseHandle
GetShortPathNameW
CreateSemaphoreA
ReleaseSemaphore
SetEnvironmentVariableW
GetCurrentDirectoryA
GetProcessHeap
CreateThread
GetComputerNameW
ReadProcessMemory
SetConsoleScreenBufferSize
FindNextChangeNotification
EnumTimeFormatsA
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetLogicalDriveStringsA
GetTickCount
GetCPInfo
GetOEMCP
IsValidCodePage
RtlUnwind
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
SetFilePointer
CompareStringA
CompareStringW
SetEnvironmentVariableA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
GetDriveTypeA

Sections

.GOD2015
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 30.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fud1
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1fdf8c5aa283714b99a1cdb92da85bdb

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

shell32

oledlg

ole32

advapi32

gdi32

kernel32

Sections

.GOD2015 Size: 134KB - Virtual size: 133KB

.data Size: 21KB - Virtual size: 30.7MB

.fud1 Size: 39KB - Virtual size: 39KB

.rsrc Size: 93KB - Virtual size: 92KB

.GOD2015
Size: 134KB - Virtual size: 133KB

.data
Size: 21KB - Virtual size: 30.7MB

.fud1
Size: 39KB - Virtual size: 39KB

.rsrc
Size: 93KB - Virtual size: 92KB