033794e76473e81f0407646e93b0741a90b54c688716275b848059c1b1fb0855

Sharing

Copy URL Twitter E-mail

General

Target

033794e76473e81f0407646e93b0741a90b54c688716275b848059c1b1fb0855
Size

656KB
MD5

7b6a3c7e4b9f2313be0602eeee65ce60
SHA1

ea5189e534de3a1ec2f72f3b0ddf0f06e444cffb
SHA256

033794e76473e81f0407646e93b0741a90b54c688716275b848059c1b1fb0855
SHA512

03b51713f75526f5c7109819546ede9be25e8ddbd2939b02c737c015e1d1bd2de6174e4262f511b7d659a8ba6e9fe190e24c6682a292bb16d99dbe152a1e46eb
SSDEEP

12288:E/qjxBVr5VV9ohwNxc1b76jZ58o5sBJQynEI+3z/QI6SacLP:Drj38oSB01UI6SXL

Score

N/A

Malware Config

Signatures

Files

033794e76473e81f0407646e93b0741a90b54c688716275b848059c1b1fb0855
.exe windows x86

40bba69786a46576fd8ea2fa82dd64f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
lstrlenA
GetLastError
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
InterlockedIncrement
lstrlenW
InterlockedDecrement
QueryPerformanceCounter
QueryPerformanceFrequency
SetThreadAffinityMask
Sleep
FileTimeToSystemTime
WaitForMultipleObjectsEx
ResetEvent
GetCurrentProcess
WriteFile
CopyFileW
SetEndOfFile
FreeLibrary
GetProcAddress
SetFilePointer
SystemTimeToTzSpecificLocalTime
CreateDirectoryW
FlushFileBuffers
GetFileAttributesExW
MoveFileW
LoadLibraryW
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
OutputDebugStringA
LocalFree
GetCommandLineA
GetModuleFileNameA
GetSystemDirectoryW
GetSystemDirectoryA
GetVolumeInformationA
FormatMessageA
GetExitCodeThread
RaiseException
GetLocalTime
CancelIo
WideCharToMultiByte
CreateFileA
VirtualAlloc
GetOEMCP
VirtualFree
GetUserDefaultLCID
GetModuleHandleW
GlobalAlloc
GlobalFree
DeviceIoControl
FlushViewOfFile
GetOverlappedResult
OpenMutexW
CreateMutexW
GetTempPathW
GetPrivateProfileIntW
SetCurrentDirectoryW
GetVersionExW
GetCurrentThread
GetThreadLocale
GetLocaleInfoA
GetACP
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
InterlockedExchange
UnhandledExceptionFilter
IsDebuggerPresent
GetFileAttributesW
Process32FirstW
CreateEventW
LoadResource
TerminateProcess
CreateFileW
LockResource
Process32NextW
FindResourceW
FindResourceExW
GetSystemTimeAsFileTime
ExitThread
CreateThread
GetTimeFormatA
GetDateFormatA
GetStartupInfoW
RtlUnwind
GetModuleHandleA
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
DeleteFileW
SetLastError
ReadFile
GetFileSize
WritePrivateProfileStringW
SizeofResource
GetTickCount
MulDiv
SetEvent
VirtualQuery
CreateFileMappingW
GetProcessHeap
IsBadWritePtr
CreateToolhelp32Snapshot
HeapFree
Thread32First
SetUnhandledExceptionFilter
UnmapViewOfFile
MapViewOfFile
HeapAlloc
GetCurrentThreadId
GetCommandLineW
CreateProcessW
GetCurrentProcessId
WaitForSingleObject
OpenThread
GetPrivateProfileStringW
ResumeThread
SuspendThread
GetModuleFileNameW
Thread32Next
CloseHandle
SetEnvironmentVariableA
ReadFileEx
HeapCreate
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetHandleCount
GetFileType
CompareStringW
CompareStringA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
LoadLibraryA
IsValidLocale
EnumSystemLocalesA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA

user32

PostThreadMessageW
GetClientRect
SetTimer
UnregisterClassA
KillTimer
DestroyWindow
SetWindowTextW
SetWindowPos
BringWindowToTop
SetCursor
RegisterClassExW
EndPaint
GetWindowLongW
LoadBitmapW
GetSystemMetrics
SendMessageW
CreateWindowExW
DefWindowProcW
LoadIconW
GetWindowThreadProcessId
PostQuitMessage
InvalidateRect
UpdateWindow
EnableWindow
AttachThreadInput
MoveWindow
BeginPaint
GetForegroundWindow
PostMessageW
SetForegroundWindow
LoadCursorW
FillRect
ShowWindow
GetMessageW
TranslateMessage
DispatchMessageW
SetWindowLongW

gdi32

DeleteObject
LineTo
CreateSolidBrush
MoveToEx
CreateFontW
DeleteDC
SelectObject
TextOutW
BitBlt
GetTextExtentPointW
SetBkMode
CreateCompatibleBitmap
SetTextColor
CreateCompatibleDC
CreatePen
GetTextColor
GetDeviceCaps

advapi32

GetNamedSecurityInfoW
SetEntriesInAclW
SetNamedSecurityInfoW
BuildExplicitAccessWithNameW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
RegOpenKeyExW
RegQueryValueExW
GetSecurityDescriptorSacl
SetSecurityDescriptorDacl
SetSecurityDescriptorSacl
InitializeSecurityDescriptor
ConvertStringSecurityDescriptorToSecurityDescriptorW

shell32

SHCreateDirectoryExW
ShellExecuteW
SHGetSpecialFolderPathW

oleaut32

OleLoadPicturePath

shlwapi

PathFileExistsW
PathIsDirectoryW
PathFileExistsA

ws2_32

WSAGetLastError
WSAStartup
WSAAsyncSelect
WSAAsyncGetHostByName
WSACancelAsyncRequest
WSAWaitForMultipleEvents
recvfrom
WSAEventSelect
WSAIoctl
getsockopt
recv
bind
WSACleanup
connect
ioctlsocket
select
send
__WSAFDIsSet
getsockname
socket
htons
setsockopt
sendto
closesocket
ntohs
inet_addr
inet_ntoa
gethostbyname
htonl
ntohl

msimg32

GradientFill

iphlpapi

GetAdaptersInfo

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

wintrust

WinVerifyTrust

Sections

.text
Size: 456KB - Virtual size: 455KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

40bba69786a46576fd8ea2fa82dd64f6

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

oleaut32

shlwapi

ws2_32

msimg32

iphlpapi

version

wintrust

Sections

.text Size: 456KB - Virtual size: 455KB

.rdata Size: 80KB - Virtual size: 76KB

.data Size: 36KB - Virtual size: 92KB

.rsrc Size: 80KB - Virtual size: 80KB

.text
Size: 456KB - Virtual size: 455KB

.rdata
Size: 80KB - Virtual size: 76KB

.data
Size: 36KB - Virtual size: 92KB

.rsrc
Size: 80KB - Virtual size: 80KB