53a644323eddd25fed2e816d8922c5f9f19a9642d3a1063bfa1dba5c35dc19a6

Sharing

Copy URL Twitter E-mail

General

Target

53a644323eddd25fed2e816d8922c5f9f19a9642d3a1063bfa1dba5c35dc19a6
Size

3.5MB
MD5

0ed440968b3ccc697f6760448acefb80
SHA1

2c356e4f067d977a3e4fe837bf081ed3fb7a2cb3
SHA256

53a644323eddd25fed2e816d8922c5f9f19a9642d3a1063bfa1dba5c35dc19a6
SHA512

30d9d985d2843123caf412e4796043979f727b707bdd683e7b74e61fe6f4c3bdfcb034d9370d32af3bd870935098bedcc16f52dc89d95f22ecb16489c7b1e00e
SSDEEP

98304:H2WDTVxWZfmVZP3df6C54OsGAHAA3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1:ecJTAHAA3AAAAAAAAAAAAAAAAAAAAAA0

Score

N/A

Malware Config

Signatures

Files

53a644323eddd25fed2e816d8922c5f9f19a9642d3a1063bfa1dba5c35dc19a6
.exe windows x86

eba02191c5ede5467cb206203856d604

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SearchPathW
LockResource
DeleteFileA
SetEnvironmentVariableA
GetProcessHeap
WriteConsoleW
LoadResource
FindResourceW
GetModuleFileNameW
CreateDirectoryW
CopyFileW
GetPrivateProfileStringW
WritePrivateProfileStringW
MultiByteToWideChar
SetLastError
GetLastError
LoadLibraryW
GetModuleHandleW
GetProcAddress
GetTempPathW
lstrlenW
WideCharToMultiByte
lstrlenA
GetConsoleOutputCP
MulDiv
lstrcpynW
InterlockedDecrement
InterlockedIncrement
GetSystemDefaultLangID
GetSystemDefaultLCID
GetLocaleInfoW
GetACP
FreeLibrary
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GlobalFree
GetTickCount
CloseHandle
WaitForSingleObject
ResumeThread
ExitProcess
GetThreadLocale
GetVersionExA
lstrcmpW
LoadLibraryA
CompareStringW
WriteConsoleA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCurrentDirectoryA
InitializeCriticalSectionAndSpinCount
CreateFileA
GetFileAttributesA
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetCPInfo
QueryPerformanceCounter
VirtualFree
HeapCreate
GetStartupInfoA
SetHandleCount
GetVersionExW
GlobalDeleteAtom
GlobalFindAtomW
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapSize
GetFileType
SetStdHandle
CreateThread
ExitThread
GetFullPathNameA
GetDriveTypeA
HeapReAlloc
HeapAlloc
HeapFree
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
FindResourceExW
VirtualProtect
Sleep
GetProfileIntW
SizeofResource
GetTempFileNameW
SetErrorMode
lstrcpyW
GetCurrentDirectoryW
GetPrivateProfileIntW
GlobalGetAtomNameW
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetFileTime
GetFileSizeEx
GetFileAttributesW
CreateFileW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
FindFirstFileW
FindNextFileW
FindClose
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
CompareStringA
InterlockedExchange
lstrcmpA
GetCurrentProcessId
GetModuleHandleA
FormatMessageW
LocalFree
FreeResource
GetCurrentThreadId
GlobalAddAtomW

user32

EnableScrollBar
UnionRect
SetCursorPos
DrawFocusRect
DrawEdge
DrawIconEx
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
GetNextDlgGroupItem
EmptyClipboard
CloseClipboard
SetClipboardData
DestroyIcon
CopyImage
OpenClipboard
DrawStateW
RegisterClipboardFormatW
EnumChildWindows
SetClassLongW
SetParent
CreatePopupMenu
NotifyWinEvent
SetWindowRgn
CreateAcceleratorTableW
LoadAcceleratorsW
DestroyAcceleratorTable
GetAsyncKeyState
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
PostThreadMessageW
DeleteMenu
WaitMessage
UnregisterClassW
GetSysColorBrush
InvalidateRgn
CopyAcceleratorTableW
CharUpperW
DestroyMenu
GetMenuItemInfoW
ShowOwnedPopups
GetMessageW
TranslateMessage
ValidateRect
SetRectEmpty
SetWindowContextHelpId
MapDialogRect
IsZoomed
PostQuitMessage
MapVirtualKeyW
GetKeyNameTextW
WindowFromPoint
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
GetMenuStringW
InsertMenuW
LoadMenuW
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
IsWindowEnabled
ShowWindow
MoveWindow
IsDialogMessageW
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetMenuState
UpdateLayeredWindow
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
GetScrollPos
IsWindowVisible
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
CallWindowProcW
GetMenu
SetWindowLongW
IntersectRect
SystemParametersInfoA
EnableWindow
SendMessageW
CopyRect
GetWindowRect
InflateRect
GetWindowPlacement
GetDlgItem
OffsetRect
CharNextW
GetIconInfo
SetForegroundWindow
ShowScrollBar
ClientToScreen
SetRect
SetScrollPos
SetCapture
ReleaseCapture
GrayStringW
DrawTextExW
DrawTextW
SetMenuDefaultItem
GetMenuDefaultItem
IsCharLowerW
MapVirtualKeyExW
IsClipboardFormatAvailable
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
GetUpdateRect
CharUpperBuffW
SubtractRect
TabbedTextOutW
GetWindowLongW
SystemParametersInfoW
GetClassInfoW
DefWindowProcW
GetDesktopWindow
PostMessageW
RegisterWindowMessageW
IsWindow
LockWindowUpdate
UpdateWindow
BringWindowToTop
GetDoubleClickTime
CreateMenu
GetWindowRgn
DestroyCursor
EnableMenuItem
GetParent
InvalidateRect
GetClientRect
DrawFrameControl
GetCursorPos
ScreenToClient
PtInRect
FillRect
GetSystemMetrics
LoadBitmapW
SetTimer
LoadImageW
KillTimer
LoadIconW
GetSystemMenu
AppendMenuW
RemoveMenu
GetSubMenu
GetDC
ReleaseDC
SetWindowPos
IsIconic
DrawIcon
GetDlgCtrlID
RedrawWindow
CheckMenuItem
GetKeyState
GetFocus
MessageBoxW
IsMenu
GetMenuItemCount
GetMenuItemID
ModifyMenuW
GetWindow
GetWindowTextW
SetWindowTextW
GetClassNameW
DrawMenuBar
MessageBeep
CopyIcon
LoadCursorW
SetCursor
IsRectEmpty
GetSysColor
FrameRect

gdi32

DeleteDC
CreateDIBSection
GetDIBits
RealizePalette
RestoreDC
StretchDIBits
SetStretchBltMode
ExtSelectClipRgn
CreateRectRgnIndirect
GetClipBox
SaveDC
SetBkColor
CreateBitmap
SetBkMode
SetTextColor
CombineRgn
SetWinMetaFileBits
DeleteEnhMetaFile
GetEnhMetaFileHeader
SetEnhMetaFileBits
PlayEnhMetaFile
SelectPalette
CreatePalette
GetEnhMetaFilePaletteEntries
GetTextColor
GetDCOrgEx
CopyMetaFileW
SetPolyFillMode
SetROP2
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
CreatePatternBrush
GetObjectType
CreateHatchBrush
GetCharWidthW
SetRectRgn
DPtoLP
GetRgnBox
OffsetRgn
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateRoundRectRgn
SetDIBColorTable
SetPixel
CreateEllipticRgn
CreatePolygonRgn
Polyline
Ellipse
Polygon
GetPaletteEntries
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
LPtoDP
ExtFloodFill
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
GetTextFaceW
SetPixelV
DeleteObject
PatBlt
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetBkColor
GetTextExtentPoint32W
GetTextMetricsW
GetCurrentObject
CreateRectRgn
CreateFontIndirectW
GetDeviceCaps
GetObjectW
StretchBlt
RoundRect
BitBlt
ExtCreatePen
SelectObject
Rectangle
CreatePen
CreateSolidBrush
CreateCompatibleBitmap
GetMapMode
CreateCompatibleDC
CreateFontW
OffsetWindowOrgEx
GetStockObject

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegOpenKeyW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW

shell32

DragQueryFileW
ShellExecuteW
SHGetFileInfoW
SHAppBarMessage
SHGetPathFromIDListW
SHGetSpecialFolderPathW
DragFinish
SHBrowseForFolderW

comctl32

_TrackMouseEvent
InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathRemoveFileSpecW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathFileExistsW

oledlg

OleUIBusyW

ole32

CoTaskMemFree
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoUninitialize
CoCreateInstance
CoInitializeEx
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleLockRunning
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
OleGetClipboard
CoRevokeClassObject
CoRegisterMessageFilter
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor

oleaut32

SafeArrayDestroy
SafeArrayCreate
SafeArrayPutElement
SysFreeString
SysStringLen
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringLen
OleCreateFontIndirect
VariantClear
VariantChangeType
VariantInit
VariantCopy

gdiplus

GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCreateHBITMAPFromBitmap
GdipGetImageThumbnail
GdipCreateBitmapFromFile
GdipDrawImageRectI
GdipDeleteGraphics
GdipCreateFromHDC
GdipDisposeImage
GdiplusStartup
GdipLoadImageFromFile
GdipFree
GdipAlloc
GdipCloneImage

ws2_32

ntohl
htonl
ntohs
htons

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 604KB - Virtual size: 603KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 499KB - Virtual size: 499KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eba02191c5ede5467cb206203856d604

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

ws2_32

imm32

winmm

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 604KB - Virtual size: 603KB

.data Size: 37KB - Virtual size: 107KB

.rsrc Size: 499KB - Virtual size: 499KB

.reloc Size: 188KB - Virtual size: 188KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 604KB - Virtual size: 603KB

.data
Size: 37KB - Virtual size: 107KB

.rsrc
Size: 499KB - Virtual size: 499KB

.reloc
Size: 188KB - Virtual size: 188KB