e25c84a8ccf24ddde4fb537bbf19f54529d29fd4947bbf64b955b5fd0e034f15

Sharing

Copy URL Twitter E-mail

General

Target

e25c84a8ccf24ddde4fb537bbf19f54529d29fd4947bbf64b955b5fd0e034f15
Size

5.9MB
MD5

5c52dd8f858f0287c7e50d7fd258ee16
SHA1

1067ea01962f812ba658047ee0d02b55023e9735
SHA256

e25c84a8ccf24ddde4fb537bbf19f54529d29fd4947bbf64b955b5fd0e034f15
SHA512

320eef34a3d13111ce8f0773de55a563bf27b65c88d031935eb563eae13dccc98de6c543184c389d849c3ae863522589a1aab0fd5a77ed299cf809ce69832a48
SSDEEP

98304:q461yd7rRZsTFFLOAkGkzdnEVomFHKnP:q461yZrRZmFFLOyomFHKnP

Score

N/A

Malware Config

Signatures

Files

e25c84a8ccf24ddde4fb537bbf19f54529d29fd4947bbf64b955b5fd0e034f15
.exe windows x86

dd79329164b9141c14ef34d3766aed54

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceW
LoadResource
LockResource
SizeofResource
GetLocalTime
FreeLibrary
DeleteFileA
Process32First
Process32Next
CloseHandle
Sleep
GetCurrentProcess
GetLastError
WinExec
VirtualFree
LoadLibraryA
CreateToolhelp32Snapshot
VirtualAlloc
OpenEventW
InitializeCriticalSectionEx
FileTimeToLocalFileTime
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
CreateDirectoryA
GetModuleFileNameA
CreateFileW
SetEnvironmentVariableA
GetTimeZoneInformation
EnumSystemLocalesEx
IsValidLocaleName
LCMapStringEx
GetUserDefaultLocaleName
CompareStringEx
CreateProcessA
GetExitCodeProcess
GetStringTypeW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
lstrlenA
HeapAlloc
HeapQueryInformation
HeapSize
HeapReAlloc
HeapFree
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount64
QueryPerformanceCounter
InitOnceExecuteOnce
GetProcessHeap
GetFileAttributesExW
GetStartupInfoW
TerminateProcess
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsValidCodePage
WaitForSingleObjectEx
WriteConsoleW
OutputDebugStringW
GetStdHandle
ExitThread
CreateThread
AreFileApisANSI
ExitProcess
GetFileType
SetStdHandle
RaiseException
VirtualQuery
SetThreadStackGuarantee
RtlUnwind
GetSystemInfo
HeapValidate
GetCommandLineA
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
DecodePointer
EncodePointer
IsDebuggerPresent
GetModuleHandleExW
GetUserDefaultUILanguage
FindResourceExW
GetTickCount
SearchPathA
GetWindowsDirectoryA
GetTempFileNameA
GetTempPathA
VirtualProtect
GetProfileIntA
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
GetVolumeInformationA
lstrcmpiA
GetHandleInformation
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
CreateFileA
GetCPInfo
GetOEMCP
InitializeCriticalSectionAndSpinCount
GetCurrentDirectoryA
GlobalFlags
GetACP
GetThreadLocale
FileTimeToSystemTime
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
GetAtomNameA
WaitForSingleObject
SetEvent
VerifyVersionInfoA
lstrcpyA
VerSetConditionMask
SetErrorMode
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetLocaleInfoEx
GetThreadPreferredUILanguages
ApplicationRecoveryFinished
ApplicationRecoveryInProgress
RegisterApplicationRestart
RegisterApplicationRecoveryCallback
lstrcmpA
GetVersionExA
GetCurrentThread
InterlockedExchange
GetCurrentProcessId
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
ResumeThread
SetThreadPriority
GetCurrentThreadId
FindResourceA
LoadLibraryW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
FreeResource
GetVersion
OutputDebugStringA
GetFileAttributesW
SetLastError
MultiByteToWideChar
FormatMessageA
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
GetProcAddress
CopyFileA
WideCharToMultiByte

user32

MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
GetClassLongA
SetWindowLongA
EqualRect
CopyRect
GetSysColor
AdjustWindowRectEx
RemovePropA
GetPropA
SetPropA
ScrollWindow
TrackPopupMenu
SetMenu
GetMenu
GetKeyState
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
RegisterWindowMessageA
GetWindowTextLengthA
GetWindowTextA
SetFocus
NotifyWinEvent
MapDialogRect
LoadIconW
LoadIconA
LoadCursorW
LoadCursorA
GetWindow
GetLastActivePopup
GetTopWindow
SetParent
GetParent
WindowFromPoint
MapWindowPoints
ScreenToClient
ClientToScreen
HideCaret
SetWindowContextHelpId
GetWindowRect
GetClientRect
EnableScrollBar
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
LockWindowUpdate
RedrawWindow
InvalidateRgn
ValidateRect
InvalidateRect
GetWindowRgn
SetWindowRgn
GetUpdateRect
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
SetForegroundWindow
GetForegroundWindow
UpdateWindow
GetMonitorInfoA
GetSystemMenu
DrawMenuBar
KillTimer
DestroyMenu
SetCapture
GetFocus
OpenClipboard
GetNextDlgTabItem
GetNextDlgGroupItem
IsZoomed
BringWindowToTop
IsIconic
IsWindowVisible
ShowOwnedPopups
IsChild
PostThreadMessageA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetCursorPos
InvertRect
FrameRect
FillRect
DrawFocusRect
GetSysColorBrush
TabbedTextOutA
DrawStateA
GrayStringA
DrawTextExA
DrawTextA
DrawIcon
SetMenuDefaultItem
GetMenuDefaultItem
SetMenuItemInfoA
GetMenuItemInfoA
InsertMenuItemA
SetMenuItemBitmaps
DeleteMenu
ModifyMenuA
EnableMenuItem
CheckMenuItem
CreatePopupMenu
CreateMenu
LoadMenuW
TrackMouseEvent
CharUpperA
GetAsyncKeyState
ReleaseCapture
SetWindowPos
FindWindowA
SubtractRect
UnionRect
IntersectRect
LoadMenuA
DrawFrameControl
DrawEdge
GetDesktopWindow
GetWindowLongA
SetActiveWindow
IsWindowEnabled
EnableWindow
GetActiveWindow
EndDialog
CreateDialogIndirectParamA
DestroyWindow
IsWindow
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
ShowWindow
MoveWindow
CheckDlgButton
SendDlgItemMessageA
SetWindowTextA
IsDialogMessageA
GetWindowThreadProcessId
GetMenuCheckMarkDimensions
GetKeyNameTextA
MapVirtualKeyA
PostQuitMessage
GetMenuState
GetMenuStringA
DrawIconEx
SetLayeredWindowAttributes
SystemParametersInfoA
EnumDisplayMonitors
GetMessageA
TranslateMessage
SetCursor
InflateRect
SetRect
FindWindowExA
SendMessageA
PostMessageA
GetClassNameA
EnumChildWindows
FindWindowW
GetDlgItem
MessageBoxA
GetSystemMetrics
LoadBitmapW
IsMenu
GetCapture
RealChildWindowFromPoint
MessageBeep
UpdateLayeredWindow
MonitorFromPoint
CopyImage
GetClipboardFormatNameA
UnpackDDElParam
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
DestroyIcon
LoadImageA
ReuseDDElParam
WaitMessage
LoadAcceleratorsW
CharNextA
CopyAcceleratorTableA
CloseClipboard
SetClipboardData
PtInRect
DestroyCursor
GetComboBoxInfo
EmptyClipboard
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
MapVirtualKeyExA
IsCharLowerA
IsClipboardFormatAvailable
IsRectEmpty
CharUpperBuffA
RegisterClipboardFormatA
UnregisterClassA
CreateAcceleratorTableA
ToAsciiEx
GetKeyboardState
GetKeyboardLayout
ChangeWindowMessageFilter
SetClassLongA
DestroyAcceleratorTable
OffsetRect
CopyIcon
GetIconInfo
GetDoubleClickTime
SetCursorPos
SetTimer
LoadImageW

gdi32

CopyMetaFileA
CreateDCA
GetDeviceCaps
BitBlt
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateEllipticRgn
CreateFontIndirectA
CreateHatchBrush
CreatePalette
CreatePen
CreatePatternBrush
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
Ellipse
Escape
ExtFloodFill
FillRgn
FrameRgn
GetBkColor
GetBoundsRect
GetMapMode
GetNearestPaletteIndex
GetObjectType
GetPaletteEntries
GetPixel
GetRgnBox
GetTextColor
GetTextExtentPoint32A
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
OffsetRgn
PatBlt
PtInRegion
PtVisible
RectVisible
Rectangle
RealizePalette
RoundRect
SelectObject
SetPaletteEntries
GetObjectA
SetPixelV
StretchBlt
SetRectRgn
GetTextMetricsA
TextOutA
ExtTextOutA
CreatePolygonRgn
DPtoLP
LPtoDP
Polygon
Polyline
GetTextFaceA
SetBkColor
SetTextColor
DeleteDC
ExcludeClipRect
GetClipBox
IntersectClipRect
LineTo
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
DeleteObject
CreateDIBSection
SetDIBColorTable
EnumFontFamiliesExA
GetSystemPaletteEntries
GetStockObject

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RevertToSelf
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegEnumKeyExA
SetThreadToken
OpenThreadToken

shell32

SHGetKnownFolderPath
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetDesktopFolder
ShellExecuteA
SHAppBarMessage
DragFinish
DragQueryFileA
SHGetFileInfoA
SHCreateItemFromParsingName

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameA
PathIsUNCA
PathStripToRootA
PathRemoveFileSpecW
PathFindExtensionA
StrFormatKBSizeA

uxtheme

GetThemeColor
GetCurrentThemeName
DrawThemeParentBackground
DrawThemeTextEx
BufferedPaintInit
BufferedPaintUnInit
BeginBufferedPaint
EndBufferedPaint
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetWindowTheme
CloseThemeData
OpenThemeData
IsAppThemed
DrawThemeBackground

dwmapi

DwmIsCompositionEnabled
DwmSetWindowAttribute
DwmDefWindowProc

ole32

StgCreateDocfileOnILockBytes
CoGetClassObject
CoInitializeEx
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
ReleaseStgMedium
StgOpenStorageOnILockBytes
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoUninitialize
CoCreateInstance
CoInitialize
CoRegisterMessageFilter
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleLockRunning
OleDuplicateData

oleaut32

SafeArrayDestroy
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
SysStringLen
VariantChangeType
VariantInit
VariantClear
SysAllocStringLen
SysAllocStringByteLen
SysFreeString

oledlg

ord8

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipDrawImageRectI

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 536KB - Virtual size: 535KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 306KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 613KB - Virtual size: 612KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd79329164b9141c14ef34d3766aed54

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

dwmapi

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.rdata Size: 536KB - Virtual size: 535KB

.data Size: 306KB - Virtual size: 2.2MB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 613KB - Virtual size: 612KB

.text
Size: 3.1MB - Virtual size: 3.1MB

.rdata
Size: 536KB - Virtual size: 535KB

.data
Size: 306KB - Virtual size: 2.2MB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 613KB - Virtual size: 612KB