17f8c19672164b03d137678ac9df0b2eab09dc3bdc34b83011413eac18efeef2

Sharing

Copy URL

Twitter E-mail

General

Target

17f8c19672164b03d137678ac9df0b2eab09dc3bdc34b83011413eac18efeef2
Size

624KB
MD5

537c86f68beee199e9023627d0f2a5f0
SHA1

79c7a4c7b672c17d437bb3740c025e56c7f7ff39
SHA256

17f8c19672164b03d137678ac9df0b2eab09dc3bdc34b83011413eac18efeef2
SHA512

51ec2760ff368106bceb4371b9fe436dae8e13837fd63dc851cf76f086e82c47c709c8ef347dc0b752ba7ccdb4b355cb5df39546c5e774741a852b9665e6c9ef
SSDEEP

12288:6DEIbFDK9mihCxU4hQUUDg62T5OHtfOtPx7jKXA+Cvt+hkHf1deC:6pbE9MxU4wDcTgQtPZjKXA1HfyC

Score

N/A

Malware Config

Signatures

Files

17f8c19672164b03d137678ac9df0b2eab09dc3bdc34b83011413eac18efeef2
.exe windows x86

cc854564d28b0f4636233f530b5fdda0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

kernel32

RtlUnwind
RaiseException
ExitProcess
SetStdHandle
GetFileType
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
Sleep
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetSystemTimeAsFileTime
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetModuleFileNameW
GetTempPathW
CreateDirectoryW
CopyFileW
CreateFileW
WriteFile
CloseHandle
GetLastError
lstrlenW
WideCharToMultiByte
GetCommandLineW
FindResourceW
LoadResource
SizeofResource
FindFirstFileW
FindNextFileW
FindClose
LockResource
WaitForSingleObject
RemoveDirectoryW
DeleteFileW
MoveFileExW
GetModuleHandleW
GetCurrentProcess
MulDiv
GetFileAttributesW
QueryPerformanceCounter
GetCurrentThreadId
MultiByteToWideChar
lstrlenA
LoadLibraryW
GetProcAddress
DeviceIoControl
LocalFree
FormatMessageW
GlobalUnlock
CreateThread
ExitThread
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
GetTickCount
SetErrorMode
GetFileTime
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetThreadLocale
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
InterlockedIncrement
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GlobalLock
GetModuleHandleA
InterlockedDecrement
GetCurrentProcessId
GlobalAddAtomW
WritePrivateProfileStringW
FreeResource
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
lstrcmpW
FreeLibrary
GlobalDeleteAtom
SetLastError
GlobalFree
GlobalAlloc
WriteConsoleA

user32

SetRect
IsRectEmpty
CopyAcceleratorTableW
CharNextW
ReleaseCapture
SetCapture
LoadCursorW
GetSysColorBrush
DestroyMenu
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
InvalidateRgn
CallWindowProcW
OffsetRect
IntersectRect
GetWindowPlacement
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
GetWindowTextW
SetFocus
ShowWindow
MoveWindow
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
UnhookWindowsHookEx
GetWindowThreadProcessId
GetLastActivePopup
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
ModifyMenuW
CheckMenuItem
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetNextDlgGroupItem
MessageBeep
CharUpperW
UnregisterClassW
GetWindowLongW
GetDlgItem
PostThreadMessageW
RegisterClipboardFormatW
DefWindowProcW
IsWindowEnabled
UnregisterClassA
GetNextDlgTabItem
EndDialog
SetWindowContextHelpId
GetParent
MapDialogRect
SetWindowPos
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindow
DrawTextW
ReleaseDC
GetDC
IsWindowVisible
IsWindow
GetWindowRect
UpdateWindow
InvalidateRect
LoadBitmapW
FillRect
EnableMenuItem
GetSystemMenu
EnableWindow
TranslateAcceleratorW
PostMessageW
DrawIcon
GetSystemMetrics
SendMessageW
IsIconic
GetClientRect
LoadAcceleratorsW
LoadIconW
MessageBoxW
SystemParametersInfoA

gdi32

PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
GetBkColor
GetTextColor
GetRgnBox
GetMapMode
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
CreateBitmap
GetDeviceCaps
DeleteObject
SelectObject
GetViewportExtEx
GetWindowExtEx
CreateFontIndirectW
GetObjectW
GetStockObject
BitBlt
CreateCompatibleDC

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegOpenKeyExW
RegSetValueExW
RegCloseKey
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegQueryValueExW
RegCreateKeyExW

shell32

ShellExecuteExW
ShellExecuteW
SHGetFolderPathW
SHGetSpecialFolderPathW
CommandLineToArgvW

comctl32

InitCommonControlsEx

shlwapi

PathRemoveFileSpecW
PathIsDirectoryW
SHDeleteKeyW
PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoTaskMemAlloc
CLSIDFromString
CoGetClassObject
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StringFromGUID2
CoCreateGuid
CoTaskMemFree
CLSIDFromProgID
StgOpenStorageOnILockBytes

oleaut32

VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SysStringLen
SysAllocString
VariantClear
SysFreeString
SysAllocStringLen
VariantChangeType
VariantInit

iphlpapi

GetAdaptersInfo

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

wininet

InternetGetCookieW

Sections

.text
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc854564d28b0f4636233f530b5fdda0

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

iphlpapi

version

wininet

Sections

.text Size: 272KB - Virtual size: 271KB

.rdata Size: 80KB - Virtual size: 78KB

.data Size: 12KB - Virtual size: 28KB

.rsrc Size: 256KB - Virtual size: 255KB

.text
Size: 272KB - Virtual size: 271KB

.rdata
Size: 80KB - Virtual size: 78KB

.data
Size: 12KB - Virtual size: 28KB

.rsrc
Size: 256KB - Virtual size: 255KB