46c28f09ead42440130514637bdd0784f9abeffbbb0c4e2921373c4bd904d978

Sharing

Copy URL

Twitter E-mail

General

Target

46c28f09ead42440130514637bdd0784f9abeffbbb0c4e2921373c4bd904d978
Size

729KB
MD5

641441094a0437b56e84d51db173e890
SHA1

205871b6e63439b0b5ac61fd55af59a99cd2779a
SHA256

46c28f09ead42440130514637bdd0784f9abeffbbb0c4e2921373c4bd904d978
SHA512

42218063127904f8e2d7a88bac84a01e0c166f93e400e33942f8e10d77526fb1b0b5c33d32816aa923f9bdb296a456f8c0dde9bbe7920c708a2b8f20985f3769
SSDEEP

12288:vSrE/5xiX9LPnP5xeplW8c+foWxbGkkO0+3B/0Xx3UT9Moki8PEKyY4hc20hE:a4/EbkkO1/LMoypyY4hc2/

Score

N/A

Malware Config

Signatures

Files

46c28f09ead42440130514637bdd0784f9abeffbbb0c4e2921373c4bd904d978
.exe windows x86

ffa0667aa1a6674f27a80ec2da98e675

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
lstrlenA
GetLastError
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrlenW
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
SetThreadAffinityMask
FileTimeToSystemTime
SetEvent
WaitForMultipleObjectsEx
ResetEvent
CreateEventW
SetFilePointer
SetEndOfFile
FreeLibrary
SystemTimeToTzSpecificLocalTime
GetCurrentProcess
CreateDirectoryW
WriteFile
LoadLibraryW
CopyFileW
FlushFileBuffers
GetProcAddress
MoveFileW
GetFileAttributesExW
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
FormatMessageA
GetCommandLineA
GetSystemDirectoryW
GetVolumeInformationA
GetSystemDirectoryA
GetModuleFileNameA
OutputDebugStringA
LocalFree
RaiseException
GetExitCodeThread
GetLocalTime
FindNextFileW
WideCharToMultiByte
CancelIo
GetUserDefaultLCID
VirtualFree
VirtualAlloc
GetOEMCP
GlobalAlloc
GlobalFree
DeviceIoControl
GetPrivateProfileStringW
FlushViewOfFile
GetOverlappedResult
lstrcmpA
LocalAlloc
FileTimeToLocalFileTime
lstrcpyW
CreateMutexW
OpenMutexW
GetVersionExW
GetTempPathW
GetPrivateProfileIntW
SetCurrentDirectoryW
GetCurrentThread
GetSystemTimeAsFileTime
GetThreadLocale
GetLocaleInfoA
GetACP
GetVersionExA
HeapSize
HeapReAlloc
HeapDestroy
InterlockedExchange
IsDebuggerPresent
ExitThread
Process32NextW
Process32FirstW
UnhandledExceptionFilter
FindClose
CreateFileW
ReadFile
TerminateProcess
MulDiv
GetFileAttributesW
OpenProcess
CreateThread
GetTimeFormatA
GetDateFormatA
GetStartupInfoW
RtlUnwind
GetModuleHandleA
ExitProcess
ReadFileEx
DeleteFileW
LCMapStringA
LCMapStringW
GetCPInfo
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetTickCount
FindFirstFileW
GetFileSize
ResumeThread
SuspendThread
GetCurrentProcessId
CloseHandle
GetCurrentThreadId
CreateToolhelp32Snapshot
LockResource
CreateFileMappingW
OpenThread
GetModuleFileNameW
Thread32Next
IsBadWritePtr
SizeofResource
Thread32First
GetProcessHeap
WaitForSingleObject
HeapFree
SetUnhandledExceptionFilter
HeapAlloc
CreateProcessW
LoadResource
FindResourceW
FindResourceExW
VirtualQuery
UnmapViewOfFile
MapViewOfFile
GetCommandLineW
GetModuleHandleW
SetEnvironmentVariableA
CreateFileA
SetLastError
GetStdHandle
HeapCreate
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
SetHandleCount
GetFileType
CompareStringW
CompareStringA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
LoadLibraryA
IsValidLocale
EnumSystemLocalesA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
GetStartupInfoA

user32

KillTimer
PostThreadMessageW
UnregisterClassA
DestroyWindow
EndPaint
SetCursor
SetTimer
PostQuitMessage
FillRect
PostMessageW
SetForegroundWindow
AttachThreadInput
LoadCursorW
GetClientRect
BeginPaint
GetForegroundWindow
RegisterClassExW
LoadIconW
InvalidateRect
BringWindowToTop
GetWindowLongW
SetWindowLongW
LoadBitmapW
CreateWindowExW
GetSystemMetrics
SendMessageW
UpdateWindow
EnableWindow
SetWindowTextW
DefWindowProcW
GetWindowThreadProcessId
MoveWindow
GetMessageW
TranslateMessage
DispatchMessageW
ShowWindow

gdi32

SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetTextExtentPointW
CreateFontW
CreatePen
TextOutW
GetTextColor
DeleteObject
SetBkMode
GetDeviceCaps
SetTextColor
LineTo
BitBlt
MoveToEx
DeleteDC
CreateSolidBrush

advapi32

BuildExplicitAccessWithNameW
SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
RegOpenKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW

shell32

SHCreateDirectoryExW
ShellExecuteW
SHGetSpecialFolderPathW

oleaut32

OleLoadPicturePath

shlwapi

PathIsDirectoryW
PathFileExistsW
PathFileExistsA

ws2_32

WSAAsyncSelect
WSACancelAsyncRequest
WSAAsyncGetHostByName
WSAIoctl
recvfrom
WSAEventSelect
WSAWaitForMultipleEvents
ioctlsocket
connect
select
WSAGetLastError
WSACleanup
bind
__WSAFDIsSet
send
getsockopt
getsockname
htons
setsockopt
sendto
socket
closesocket
ntohs
inet_addr
inet_ntoa
gethostbyname
ntohl
htonl
WSAStartup
recv

msimg32

GradientFill

iphlpapi

GetAdaptersInfo

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

crypt32

CryptMsgGetParam
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetNameStringW
CryptQueryObject
CryptDecodeObject
CryptMsgClose

Sections

.text
Size: 472KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 40KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ffa0667aa1a6674f27a80ec2da98e675

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

oleaut32

shlwapi

ws2_32

msimg32

iphlpapi

version

crypt32

Sections

.text Size: 472KB - Virtual size: 468KB

.rdata Size: 80KB - Virtual size: 78KB

.data Size: 40KB - Virtual size: 93KB

.rsrc Size: 128KB - Virtual size: 128KB

.text
Size: 472KB - Virtual size: 468KB

.rdata
Size: 80KB - Virtual size: 78KB

.data
Size: 40KB - Virtual size: 93KB

.rsrc
Size: 128KB - Virtual size: 128KB