caf7c117e1c9dd7acd816aac3e588db1d5a4e0c198e4b09fb6c36294f9d4151e

Sharing

Copy URL Twitter E-mail

General

Target

caf7c117e1c9dd7acd816aac3e588db1d5a4e0c198e4b09fb6c36294f9d4151e
Size

4.4MB
MD5

a1e89c7820fe83e8309f627744934711
SHA1

21565d63134cc005f3f0f6249886e354de1a05d9
SHA256

caf7c117e1c9dd7acd816aac3e588db1d5a4e0c198e4b09fb6c36294f9d4151e
SHA512

e1aabdc302edd44ba523dae2742c8b6fe3b90ad2a233ae1fcdb113827c6b0717685e2df7435949e1d2fef8d58c43623a1e3053e2b04dffb1253022cb0e0c07f4
SSDEEP

49152:ymvOJ6xbE6x2OhROeVmLtp1IKKK3Or58HoxhT5EtyFMmYTbXfgxQdpdZh+Vf:yCOJajLVmLtpeKKKsx1OoamOgxQPd

Score

N/A

Malware Config

Signatures

Files

caf7c117e1c9dd7acd816aac3e588db1d5a4e0c198e4b09fb6c36294f9d4151e
.exe windows x86

d2c1d05b8819c4ecc81cbce18dba78f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
GlobalAlloc
GlobalFree
HeapSetInformation
LoadResource
FindResourceW
SetCurrentDirectoryW
GetProcessHeap
GlobalMemoryStatusEx
GetSystemTime
IsBadReadPtr
VirtualQuery
CreateMutexW
HeapWalk
GetNativeSystemInfo
GetProcessHeaps
HeapCompact
HeapQueryInformation
GetConsoleMode
FreeConsole
GetLocalTime
WriteConsoleW
SetConsoleTitleW
SetThreadAffinityMask
GetProcessAffinityMask
TerminateProcess
GlobalMemoryStatus
SetThreadPriority
GetCurrentThread
GlobalDeleteAtom
GlobalAddAtomW
MulDiv
FormatMessageW
OutputDebugStringW
WaitForMultipleObjects
WaitForSingleObject
SetEvent
CreateThread
ResetEvent
InitializeCriticalSectionEx
RaiseException
DecodePointer
MultiByteToWideChar
GetVersionExA
LoadLibraryExW
SearchPathW
GetSystemDirectoryW
GetWindowsDirectoryW
GlobalLock
GlobalUnlock
SuspendThread
ResumeThread
ExitThread
CreateEventW
GetThreadPriority
GetSystemInfo
SetThreadIdealProcessor
HeapCreate
HeapFree
HeapAlloc
HeapDestroy
LocalSize
FindClose
GetCurrentDirectoryW
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindFirstFileExW
Sleep
HeapSize
GetTickCount
ReadConsoleW
SetFilePointerEx
GetTimeZoneInformation
GetFileAttributesExW
GetExitCodeProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetFileType
GetACP
HeapReAlloc
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
RtlUnwind
FreeLibraryAndExitThread
GetThreadTimes
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
QueryPerformanceCounter
EncodePointer
WaitForSingleObjectEx
WideCharToMultiByte
GetStringTypeW
lstrcmpW
VirtualFree
VirtualAlloc
ReleaseSemaphore
CreateSemaphoreW
ExitProcess
OpenProcess
GetVersionExW
GetCurrentThreadId
SetProcessAffinityMask
GetFullPathNameW
SizeofResource
LocalUnlock
LocalFree
LocalLock
FindNextFileW
GetDriveTypeW
FindFirstFileW
GetModuleHandleW
GetLastError
DeleteCriticalSection
GetCurrentProcessId
GetFileSize
DeleteFileW
GetFileAttributesW
CreateFileW
GetTempPathW
SetEndOfFile
SetFilePointer
RemoveDirectoryW
GetVolumeInformationW
CreateDirectoryW
FlushFileBuffers
CreateProcessW
SetStdHandle
CloseHandle
DuplicateHandle
CreatePipe
GetModuleFileNameW
WriteFile
GetStdHandle
GetCurrentProcess
ReadFile
FreeLibrary
GetProcAddress
GetConsoleCP
LoadLibraryW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection

user32

SetWindowLongW
RegisterClassExW
PostMessageW
DestroyWindow
GetSysColor
GetDC
ReleaseDC
SetTimer
KillTimer
GetPriorityClipboardFormat
OpenClipboard
CloseClipboard
GetClipboardData
SetClipboardData
IsClipboardFormatAvailable
DefWindowProcW
GetWindowLongW
GetClassInfoExW
GetWindowRect
SetWindowPos
GetParent
MessageBoxW
RegisterWindowMessageW
PostThreadMessageW
GetQueueStatus
MsgWaitForMultipleObjects
PostQuitMessage
SystemParametersInfoW
LoadCursorFromFileW
EnumDisplaySettingsW
CreateWindowExW
LoadStringW
MoveWindow
GetFocus
MonitorFromWindow
SetWindowRgn
SetCaretPos
GetMonitorInfoW
ClientToScreen
EnumDisplaySettingsExW
CreateCaret
GetKeyboardLayout
GetForegroundWindow
SetFocus
DestroyCaret
SetCapture
SetCursorPos
GetWindowTextLengthW
GetSystemMenu
AdjustWindowRectEx
GetKeyState
GetMessageExtraInfo
GetMenu
IsWindowVisible
SetActiveWindow
GetMenuItemCount
ScreenToClient
SetWindowTextW
GetCapture
TrackMouseEvent
IsWindowEnabled
SetPropW
LoadIconW
GetClientRect
SetRect
UpdateWindow
ReleaseCapture
InvalidateRect
BeginPaint
EndPaint
GetWindowTextW
GetCursor
WindowFromPoint
LoadCursorW
SetCursor
EndDialog
SetDlgItemTextW
GetDlgItem
DialogBoxParamW
EnableWindow
WaitMessage
LoadAcceleratorsW
ShowWindow
DispatchMessageW
DestroyAcceleratorTable
PeekMessageW
CreateAcceleratorTableW
TranslateAcceleratorW
TranslateMessage
IsIconic
GetSystemMetrics
GetAsyncKeyState
GetWindowThreadProcessId
SendMessageW
EnumWindows
GetCursorPos
ChangeDisplaySettingsW

gdi32

SetPixel
GetPixel
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
EnumFontFamiliesExW
EnumFontsW
GetStockObject
DeleteDC
GetObjectW
SelectObject
GetTextMetricsW
GetFontData
CreateFontIndirectW
ExtCreateRegion
CreateRectRgn
DeleteObject
CombineRgn
GetTextExtentPoint32W
GetGlyphOutlineW
GetOutlineTextMetricsW
GetDeviceCaps
CreateCompatibleBitmap

comdlg32

GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW
SystemFunction036

shell32

DragQueryFileW
DragFinish
SHBrowseForFolderW
DragAcceptFiles
ShellExecuteW
SHGetSpecialFolderPathW
SHGetKnownFolderPath
SHGetPathFromIDListW

ole32

GetRunningObjectTable
CreateItemMoniker
CoInitialize
CoFreeUnusedLibraries
CoInitializeEx
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoCreateGuid
CoTaskMemAlloc
StringFromGUID2
PropVariantClear

oleaut32

VariantClear

winmm

timeKillEvent
timeGetTime
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
timeSetEvent

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

mpr

WNetGetUniversalNameW

shlwapi

PathIsDirectoryW
PathFileExistsW

imm32

ImmGetOpenStatus
ImmGetContext
ImmIsIME
ImmSetConversionStatus
ImmSetOpenStatus
ImmAssociateContext
ImmSetCompositionWindow
ImmSetCompositionFontW
ImmGetConversionStatus
ImmReleaseContext

dbghelp

MiniDumpWriteDump

quartz

AMGetErrorTextW

propsys

PropVariantToDouble

mfplat

MFShutdown
MFStartup
MFFrameRateToAverageTimePerFrame

mf

MFCreateMediaSession
MFCreateSourceResolver
MFCreateTopology
MFCreateVideoRendererActivate
MFCreateAudioRendererActivate
MFCreateTopologyNode

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1012KB - Virtual size: 1012KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 683KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 370KB - Virtual size: 369KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d2c1d05b8819c4ecc81cbce18dba78f8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

winmm

version

mpr

shlwapi

imm32

dbghelp

quartz

propsys

mfplat

mf

Sections

.text Size: 2.9MB - Virtual size: 2.9MB

.adata Size: 512B - Virtual size: 80B

.rdata Size: 1012KB - Virtual size: 1012KB

.data Size: 42KB - Virtual size: 683KB

.gfids Size: 1024B - Virtual size: 808B

.tls Size: 512B - Virtual size: 9B

_RDATA Size: 2KB - Virtual size: 2KB

.rsrc Size: 370KB - Virtual size: 369KB

.reloc Size: 149KB - Virtual size: 149KB

.text
Size: 2.9MB - Virtual size: 2.9MB

.adata
Size: 512B - Virtual size: 80B

.rdata
Size: 1012KB - Virtual size: 1012KB

.data
Size: 42KB - Virtual size: 683KB

.gfids
Size: 1024B - Virtual size: 808B

.tls
Size: 512B - Virtual size: 9B

_RDATA
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 370KB - Virtual size: 369KB

.reloc
Size: 149KB - Virtual size: 149KB