216868f383768eaae3ced9e3314fb1f6a04dd0ff2e4a522b0377fae5ea8feed3

Sharing

Copy URL Twitter E-mail

General

Target

216868f383768eaae3ced9e3314fb1f6a04dd0ff2e4a522b0377fae5ea8feed3
Size

642KB
MD5

5d7e4c85d61d737efefd3fb04ef5b580
SHA1

e84cb32ee2d3ac347a4ed9693ceb26236259bf9a
SHA256

216868f383768eaae3ced9e3314fb1f6a04dd0ff2e4a522b0377fae5ea8feed3
SHA512

190c29b5ffe3c054501472a902225c48be6b3f6628dd70b841e94134f11c69669d6c5a3a133a06feee4d763159472e01c089ac105f4d5c25c2690e5252496dcc
SSDEEP

12288:6bo4W4kWNHcM1KRKQdUI45QE5qM6UHrbGUUYTPGlse8bB:6bocLtKRKQdUI45QE5qPOrbGUUYTPcG

Score

N/A

Malware Config

Signatures

Files

216868f383768eaae3ced9e3314fb1f6a04dd0ff2e4a522b0377fae5ea8feed3
.exe windows x86

5855842c34820bfbff3b6bb558e67025

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreW
SizeofResource
FreeResource
GlobalUnlock
LockResource
GlobalLock
GlobalFree
GlobalAlloc
FindResourceW
LoadResource
MulDiv
InterlockedDecrement
InterlockedIncrement
GetFileSize
WriteFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
CreateFileA
SetStdHandle
GetStringTypeW
GetStringTypeA
GetConsoleMode
SetEndOfFile
GetLocaleInfoA
LoadLibraryA
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
VirtualAlloc
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
RtlUnwind
RaiseException
HeapReAlloc
CreateThread
ExitThread
GetStartupInfoA
GetProcessHeap
HeapAlloc
GetVersionExA
HeapFree
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
lstrlenW
GetLongPathNameW
GetTempFileNameW
SetFileTime
GetFullPathNameW
GetTempPathW
MultiByteToWideChar
WideCharToMultiByte
ResumeThread
GetCurrentThreadId
WaitForSingleObject
GetLastError
GetTickCount
CreateDirectoryW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
lstrcmpW
CreateFileW
ReadFile
SetFilePointer
ResetEvent
SetEvent
CreateEventW
CloseHandle
GetModuleHandleW
WinExec
CreateProcessW
Sleep
GetConsoleCP
GetModuleFileNameW

user32

GetSysColor
ClientToScreen
ShowCaret
CreateCaret
CreateAcceleratorTableW
SetCaretPos
HideCaret
InvalidateRgn
PostQuitMessage
SetWindowLongW
GetWindowLongW
SetWindowPos
DestroyAcceleratorTable
KillTimer
ShowWindow
RedrawWindow
MoveWindow
OffsetRect
FillRect
DrawTextW
GetParent
GetActiveWindow
GetWindowRect
SystemParametersInfoW
IsZoomed
GetWindowTextW
GetWindowTextLengthW
SetTimer
DrawIconEx
CharPrevW
CharNextW
SetCursor
IntersectRect
IsRectEmpty
CallWindowProcW
DefWindowProcW
LoadImageW
RegisterClassW
SetPropW
EnableWindow
DestroyIcon
RegisterClassExW
GetPropW
LoadCursorW
GetClassInfoExW
LoadBitmapW
CharNextA
LoadStringW
GetMessageW
InvalidateRect
MonitorFromWindow
DispatchMessageW
UpdateLayeredWindow
GetUpdateRect
SetWindowRgn
IsIconic
GetDC
TranslateMessage
IsWindow
SendMessageW
GetFocus
SetFocus
IsChild
SetCapture
ScreenToClient
GetMonitorInfoW
PostMessageW
BeginPaint
CreateWindowExW
PtInRect
EndPaint
GetCursorPos
DestroyWindow
GetKeyState
ReleaseDC
ReleaseCapture
GetClientRect
GetWindow
MapWindowPoints
SetWindowTextW

gdi32

DeleteDC
CreateCompatibleDC
CreateDIBSection
CreateFontIndirectW
CreateRectRgnIndirect
GetObjectW
GetStockObject
CreatePen
SelectObject
CombineRgn
BitBlt
GetTextMetricsW
CreateRectRgn
DeleteObject
SetBitmapBits
SelectClipRgn
SetTextColor
RoundRect
GetCharABCWidthsW
SetBkMode
ExtTextOutW
GetTextExtentPoint32W
CreateSolidBrush
GetClipBox
CreateRoundRectRgn
ExtSelectClipRgn
SetBkColor
StretchBlt
TextOutW
SetStretchBltMode
GetDeviceCaps
CreateCompatibleBitmap
GetBitmapBits
Rectangle

advapi32

RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

shell32

SHGetPathFromIDListW
ShellExecuteExW
ShellExecuteW
SHBrowseForFolderW

ole32

OleLockRunning
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleUninitialize
OleInitialize

oleaut32

SysAllocString
OleLoadPicture
SysFreeString

wininet

InternetReadFile
InternetOpenUrlW
HttpQueryInfoW
InternetOpenW
InternetSetOptionW
InternetCloseHandle

riched20

ord4

comctl32

_TrackMouseEvent

msimg32

AlphaBlend

Sections

.text
Size: 468KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5855842c34820bfbff3b6bb558e67025

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

wininet

riched20

comctl32

msimg32

Sections

.text Size: 468KB - Virtual size: 466KB

.rdata Size: 92KB - Virtual size: 88KB

.data Size: 12KB - Virtual size: 19KB

.rsrc Size: 64KB - Virtual size: 60KB

.text
Size: 468KB - Virtual size: 466KB

.rdata
Size: 92KB - Virtual size: 88KB

.data
Size: 12KB - Virtual size: 19KB

.rsrc
Size: 64KB - Virtual size: 60KB