4af9ef004ef427ee1741cbd93b75956ddb20f4b8a433d588ca230f6b74c2516b

Sharing

Copy URL Twitter E-mail

General

Target

4af9ef004ef427ee1741cbd93b75956ddb20f4b8a433d588ca230f6b74c2516b
Size

995KB
MD5

69e452a2133c4141f88290227aeb4b40
SHA1

5be300c49ef7a64fcb760c63d206246c08001af5
SHA256

4af9ef004ef427ee1741cbd93b75956ddb20f4b8a433d588ca230f6b74c2516b
SHA512

f9ee7d68cd359d90101f93d4c25972d11c0cca18fa9b6c0c2002b0662b78279d05343d83aa5b4ae24d8817a2bff1dbefd967f6b7f659b438f21d495250da2fcc
SSDEEP

24576:6bocLtKRKQdUI45QE5qPOrbGUUYTPc+qhTGNISPOp44SVF:xR/Unq23GUUYTJqu52pCH

Score

N/A

Malware Config

Signatures

Files

4af9ef004ef427ee1741cbd93b75956ddb20f4b8a433d588ca230f6b74c2516b
.exe windows x86

5855842c34820bfbff3b6bb558e67025

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreW
SizeofResource
FreeResource
GlobalUnlock
LockResource
GlobalLock
GlobalFree
GlobalAlloc
FindResourceW
LoadResource
MulDiv
InterlockedDecrement
InterlockedIncrement
GetFileSize
WriteFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
CreateFileA
SetStdHandle
GetStringTypeW
GetStringTypeA
GetConsoleMode
SetEndOfFile
GetLocaleInfoA
LoadLibraryA
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
VirtualAlloc
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
RtlUnwind
RaiseException
HeapReAlloc
CreateThread
ExitThread
GetStartupInfoA
GetProcessHeap
HeapAlloc
GetVersionExA
HeapFree
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
lstrlenW
GetLongPathNameW
GetTempFileNameW
SetFileTime
GetFullPathNameW
GetTempPathW
MultiByteToWideChar
WideCharToMultiByte
ResumeThread
GetCurrentThreadId
WaitForSingleObject
GetLastError
GetTickCount
CreateDirectoryW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
lstrcmpW
CreateFileW
ReadFile
SetFilePointer
ResetEvent
SetEvent
CreateEventW
CloseHandle
GetModuleHandleW
WinExec
CreateProcessW
Sleep
GetConsoleCP
GetModuleFileNameW

user32

GetSysColor
ClientToScreen
ShowCaret
CreateCaret
CreateAcceleratorTableW
SetCaretPos
HideCaret
InvalidateRgn
PostQuitMessage
SetWindowLongW
GetWindowLongW
SetWindowPos
DestroyAcceleratorTable
KillTimer
ShowWindow
RedrawWindow
MoveWindow
OffsetRect
FillRect
DrawTextW
GetParent
GetActiveWindow
GetWindowRect
SystemParametersInfoW
IsZoomed
GetWindowTextW
GetWindowTextLengthW
SetTimer
DrawIconEx
CharPrevW
CharNextW
SetCursor
IntersectRect
IsRectEmpty
CallWindowProcW
DefWindowProcW
LoadImageW
RegisterClassW
SetPropW
EnableWindow
DestroyIcon
RegisterClassExW
GetPropW
LoadCursorW
GetClassInfoExW
LoadBitmapW
CharNextA
LoadStringW
GetMessageW
InvalidateRect
MonitorFromWindow
DispatchMessageW
UpdateLayeredWindow
GetUpdateRect
SetWindowRgn
IsIconic
GetDC
TranslateMessage
IsWindow
SendMessageW
GetFocus
SetFocus
IsChild
SetCapture
ScreenToClient
GetMonitorInfoW
PostMessageW
BeginPaint
CreateWindowExW
PtInRect
EndPaint
GetCursorPos
DestroyWindow
GetKeyState
ReleaseDC
ReleaseCapture
GetClientRect
GetWindow
MapWindowPoints
SetWindowTextW

gdi32

DeleteDC
CreateCompatibleDC
CreateDIBSection
CreateFontIndirectW
CreateRectRgnIndirect
GetObjectW
GetStockObject
CreatePen
SelectObject
CombineRgn
BitBlt
GetTextMetricsW
CreateRectRgn
DeleteObject
SetBitmapBits
SelectClipRgn
SetTextColor
RoundRect
GetCharABCWidthsW
SetBkMode
ExtTextOutW
GetTextExtentPoint32W
CreateSolidBrush
GetClipBox
CreateRoundRectRgn
ExtSelectClipRgn
SetBkColor
StretchBlt
TextOutW
SetStretchBltMode
GetDeviceCaps
CreateCompatibleBitmap
GetBitmapBits
Rectangle

advapi32

RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

shell32

SHGetPathFromIDListW
ShellExecuteExW
ShellExecuteW
SHBrowseForFolderW

ole32

OleLockRunning
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleUninitialize
OleInitialize

oleaut32

SysAllocString
OleLoadPicture
SysFreeString

wininet

InternetReadFile
InternetOpenUrlW
HttpQueryInfoW
InternetOpenW
InternetSetOptionW
InternetCloseHandle

riched20

ord4

comctl32

_TrackMouseEvent

msimg32

AlphaBlend

Sections

.text
Size: 468KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5855842c34820bfbff3b6bb558e67025

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

wininet

riched20

comctl32

msimg32

Sections

.text Size: 468KB - Virtual size: 466KB

.rdata Size: 92KB - Virtual size: 88KB

.data Size: 12KB - Virtual size: 19KB

.rsrc Size: 64KB - Virtual size: 60KB

.text
Size: 468KB - Virtual size: 466KB

.rdata
Size: 92KB - Virtual size: 88KB

.data
Size: 12KB - Virtual size: 19KB

.rsrc
Size: 64KB - Virtual size: 60KB