0680aac3dd466648d7a4b0c5e04fd7f97b04b764f29a41fbcaf7fefd10ed1f6f

Sharing

Copy URL Twitter E-mail

General

Target

0680aac3dd466648d7a4b0c5e04fd7f97b04b764f29a41fbcaf7fefd10ed1f6f
Size

1.8MB
MD5

49ebe6ba7d6a34b04799d1c41122cf65
SHA1

be850758c9b385eb6fd21ebd617250383504948b
SHA256

0680aac3dd466648d7a4b0c5e04fd7f97b04b764f29a41fbcaf7fefd10ed1f6f
SHA512

77c9dd86bfb6b0ab7dfea87b43417d78eceb6928e660ec4a3e13a902861f8cb2a4f8f29cbf023c07d13a24a376f2abbb91a18f877b274b30c9563b5bafe63b29
SSDEEP

49152:J3qQfIlYdl4WH5FfmlxBZB+VZE84z5hYiENAb:J3tI+dSWH5QLBZhnz1

Score

N/A

Malware Config

Signatures

Files

0680aac3dd466648d7a4b0c5e04fd7f97b04b764f29a41fbcaf7fefd10ed1f6f
.exe windows x86

d9481a90be8ee083c5ea5572ed181202

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsW
PathRemoveFileSpecW

wininet

InternetCloseHandle
HttpQueryInfoW
InternetOpenUrlW
InternetReadFile
InternetOpenW

kernel32

MultiByteToWideChar
EnterCriticalSection
GetDiskFreeSpaceW
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
DeleteCriticalSection
SetFilePointer
FileTimeToSystemTime
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileSectionW
PeekNamedPipe
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
GetModuleFileNameW
CreateEventW
CreatePipe
DuplicateHandle
GetCurrentDirectoryW
FormatMessageW
LocalFree
FindResourceExW
FindResourceW
LoadResource
SizeofResource
LockResource
GetProcAddress
GetModuleHandleW
OpenProcess
InitializeCriticalSection
SystemTimeToFileTime
CreateMutexW
GetVolumeInformationW
GetDiskFreeSpaceExW
VirtualAlloc
VirtualFree
GetCurrentProcessId
GetCurrentThreadId
LoadLibraryW
GetCurrentProcess
SetUnhandledExceptionFilter
FreeLibrary
CreateFileA
GetFileTime
FindNextFileW
FindClose
MoveFileW
GetModuleHandleA
FindFirstFileW
GetFileSize
FlushFileBuffers
DeleteFileW
GetLocalTime
GetFileAttributesW
WideCharToMultiByte
CreateDirectoryW
SetFileTime
DosDateTimeToFileTime
MulDiv
TerminateProcess
GetProcessHeap
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
SetStdHandle
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetFileSizeEx
CreateThread
GlobalFree
Sleep
GlobalAlloc
CloseHandle
DeviceIoControl
GetLastError
CreateFileW
ReadFile
WriteFile
GetTickCount
SetFilePointerEx
GetStringTypeW
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetCPInfo
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
ExitThread
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
IsDebuggerPresent
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
UnhandledExceptionFilter
HeapReAlloc
HeapDestroy
HeapCreate
FreeResource
LeaveCriticalSection
ExitProcess
HeapSize
SetLastError
TlsFree
TlsSetValue
TlsAlloc
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
TlsGetValue

user32

SetCursor
MessageBoxW
ShowWindow
FindWindowW
CharLowerA
GetSystemMetrics
SendMessageW
RegisterDeviceNotificationW
CharUpperW
GetClientRect
IsZoomed
PostQuitMessage
ScreenToClient
ClientToScreen
SetWindowPos
GetWindowTextW
PtInRect
GetWindowTextLengthW
PostMessageW
MoveWindow
GetMonitorInfoW
MapWindowPoints
SetWindowLongW
MonitorFromWindow
wsprintfW
DestroyWindow
LoadCursorW
RegisterClassExW
GetWindowRgn
CreateWindowExW
DefWindowProcW
GetDC
InflateRect
OffsetRect
ReleaseDC
SetWindowRgn
GetWindowRect
IsIconic
SetForegroundWindow
GetParent
IntersectRect
IsWindow
DispatchMessageW
TranslateMessage
SetFocus
GetMessageW
EnableWindow
GetWindow
LoadImageW
CallWindowProcW
GetPropW
SetPropW
RegisterClassW
GetClassInfoExW
GetKeyState
InvalidateRect
SetTimer
KillTimer
SetCapture
ReleaseCapture
CharNextW
GetFocus
GetCursorPos
UpdateLayeredWindow
IsRectEmpty
EndPaint
BeginPaint
GetUpdateRect
GetWindowLongW
wvsprintfW
DrawIconEx
CreateCaret
HideCaret
ShowCaret
SetCaretPos
GetSysColor
FillRect
DrawTextW
CharPrevW
SetRect
InvalidateRgn
CreateAcceleratorTableW
SetWindowTextW
CharLowerW

gdi32

SaveDC
CreateDIBSection
PtInRegion
CreateRectRgn
DeleteObject
CreateRoundRectRgn
BitBlt
DeleteDC
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
SetStretchBltMode
GetTextMetricsW
CreateFontIndirectW
GetObjectW
GetStockObject
CreatePen
SetWindowOrgEx
Rectangle
RestoreDC
GetDeviceCaps
GetObjectA
SelectClipRgn
ExtSelectClipRgn
CreateRectRgnIndirect
GetClipBox
CombineRgn
StretchBlt
ExtTextOutW
SetBkColor
CreateSolidBrush
LineTo
MoveToEx
CreatePenIndirect
RoundRect
SetTextColor
SetBkMode
TextOutW
GetTextExtentPoint32W
GetCharABCWidthsW

comdlg32

GetOpenFileNameW
GetSaveFileNameW

shell32

SHGetPathFromIDListW
SHFileOperationW
SHGetSpecialFolderPathW
ord165
SHBrowseForFolderW
ShellExecuteW

ole32

OleSetContainedObject
CoCreateInstance
CoInitialize
OleUninitialize
OleLockRunning
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoUninitialize

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

ws2_32

WSACleanup
htons
htonl
closesocket
WSAStartup

gdiplus

GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipDrawString
GdipSetTextRenderingHint
GdipCreateFromHDC
GdipSetStringFormatLineAlign
GdipCloneBrush
GdipCreateLineBrushI
GdiplusShutdown
GdiplusStartup
GdipSetStringFormatAlign
GdipDeleteBrush
GdipFree
GdipAlloc
GdipCreateStringFormat
GdipDeleteStringFormat
GdipDeleteGraphics
GdipDeleteFont

dbghelp

MiniDumpWriteDump

winmm

timeEndPeriod
timeSetEvent
timeKillEvent

comctl32

ord17
_TrackMouseEvent

Sections

.text
Size: 937KB - Virtual size: 937KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 662KB - Virtual size: 661KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9481a90be8ee083c5ea5572ed181202

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

wininet

kernel32

user32

gdi32

comdlg32

shell32

ole32

oleaut32

ws2_32

gdiplus

dbghelp

winmm

comctl32

Sections

.text Size: 937KB - Virtual size: 937KB

.rdata Size: 153KB - Virtual size: 153KB

.data Size: 13KB - Virtual size: 25KB

.rsrc Size: 662KB - Virtual size: 661KB

.reloc Size: 51KB - Virtual size: 51KB

.text
Size: 937KB - Virtual size: 937KB

.rdata
Size: 153KB - Virtual size: 153KB

.data
Size: 13KB - Virtual size: 25KB

.rsrc
Size: 662KB - Virtual size: 661KB

.reloc
Size: 51KB - Virtual size: 51KB