9136d3be0bee13431aa778d6479d866d3944583aee666dce9b8cd3ec8b35451a

Sharing

Copy URL Twitter E-mail

General

Target

9136d3be0bee13431aa778d6479d866d3944583aee666dce9b8cd3ec8b35451a
Size

287KB
MD5

681e93e231a4bd392653b288906cdacb
SHA1

6aceea5085ef6ed35ea3d20dea08173948ea60f4
SHA256

9136d3be0bee13431aa778d6479d866d3944583aee666dce9b8cd3ec8b35451a
SHA512

988af8695d8e8f5cacdef0c554148f86c9352ee32ffc04c674feaa87e86e949900f40afc0ca870bdebabf0d7e22da9a268589dccd3fbdb7ea5aa8ab5cd8cbe91
SSDEEP

6144:2twxm2tOHRMdTBUnUBK2MflHHiezy85dEJkMsOD:zAHRBU6HHiemwEJb

Score

N/A

Malware Config

Signatures

Files

9136d3be0bee13431aa778d6479d866d3944583aee666dce9b8cd3ec8b35451a
.exe windows x86

b3f3781dff9137e502d8d7dff04790ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
CreateFileMappingA
GetFileType
InterlockedPushEntrySList
GlobalUnlock
SetFilePointer
FlushFileBuffers
MulDiv
GetACP
HeapDestroy
GetFileSize
IsDebuggerPresent
GlobalAlloc
FindNextFileW
LoadResource
lstrlenW
FindResourceW
SwitchToThread
CreateFileW
CloseHandle
FlushInstructionCache
MapViewOfFile
LocalFree
ExpandEnvironmentStringsW
FindFirstFileW
FindResourceExW
VirtualAlloc
SetUnhandledExceptionFilter
SizeofResource
DeleteCriticalSection
WideCharToMultiByte
RaiseException
GetFileAttributesExW
TlsAlloc
GetModuleHandleW
LeaveCriticalSection
InterlockedPopEntrySList
DeleteFileW
IsValidCodePage
GetProcessHeap
FormatMessageW
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
LockResource
UnhandledExceptionFilter
HeapSize
UnmapViewOfFile
GlobalLock
GetCurrentThreadId
TlsGetValue
ReadFile
IsProcessorFeaturePresent
HeapAlloc
FindClose
WriteFile
EnterCriticalSection
CreateDirectoryW
lstrcmpiW
SetEndOfFile
TlsFree
SetLastError
FreeLibrary
lstrcmpW
TlsSetValue
HeapReAlloc
GetFullPathNameW
CreateFileA
HeapFree
VirtualFree
QueryPerformanceCounter

shell32

SHGetFolderPathW

gdi32

CreateFontIndirectW
GetDeviceCaps
BitBlt
DeleteDC
GetStockObject
LineTo
CreatePen
CreateSolidBrush
GetObjectW
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
MoveToEx
CreateDCA
CreateDIBSection
CreateFontIndirectExA
CreateMetaFileW
CreateICA
UpdateICMRegKeyA
CreatePalette
CreateColorSpaceA
TranslateCharsetInfo

crypt32

PFXImportCertStore
CryptMemFree
PFXExportCertStoreEx
CertCreateSelfSignCertificate
CertOpenStore
CryptAcquireCertificatePrivateKey
CertAddCertificateContextToStore
CertFreeCertificateContext
CryptMemAlloc
CertStrToNameW
CertEnumCertificatesInStore
CertCloseStore

ole32

CoGetClassObject
CoCreateFreeThreadedMarshaler
CoCreateGuid
OleUninitialize
StringFromGUID2
CreateStreamOnHGlobal
OleInitialize
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
OleLockRunning
CLSIDFromString
CLSIDFromProgID

wininet

InternetCanonicalizeUrlW
InternetCrackUrlW

comctl32

ImageList_Destroy
ImageList_LoadImageW

user32

SetCursorPos
MonitorFromWindow
SendDlgItemMessageW
IntersectRect
ScreenToClient
GetWindow
CreateAcceleratorTableW
MoveWindow
IsWindow
GetWindowRect
ClientToScreen
IsDlgButtonChecked
SetCursor
SendMessageW
SetWindowPos
ShowWindow
GetDlgItem
CreateWindowExW
GetWindowTextLengthW
GetActiveWindow
UnhookWindowsHookEx
DialogBoxIndirectParamW
IsChild
CallWindowProcW
SetTimer
CharNextW
EnableWindow
PtInRect
GetDlgItemTextW
RegisterWindowMessageW
ReleaseDC
GetClassInfoExW
RegisterClassExW
DestroyWindow
GetClientRect
SetFocus
GetFocus
UpdateWindow
LoadCursorW
wsprintfW
SetWindowLongW
IsWindowEnabled
RedrawWindow
SendMessageA
DrawTextExW
GetSysColor
GetWindowInfo
CheckDlgButton
InvalidateRect
GetCursorPos
GetDesktopWindow
SetDlgItemTextW
GetClassNameW
EndPaint
CallNextHookEx
MessageBoxW
EndDialog
DefWindowProcW
KillTimer
MapWindowPoints
DestroyAcceleratorTable
SetWindowTextW
SetWindowsHookExW
DialogBoxParamW
GetMonitorInfoW
GetSystemMetrics
LoadStringW
InvalidateRgn
GetParent
SetCapture
FillRect
GetDC
ReleaseCapture
GetDlgCtrlID
PostMessageW
UnregisterClassA
GetWindowLongW
GetWindowTextW
BeginPaint

advapi32

RegDeleteKeyW
CryptGenKey
CryptExportKey
RegEnumKeyW
RegOpenKeyExW
CryptAcquireContextW
CryptGetProvParam
RegSetValueExW
RegQueryValueExW
CryptEnumProvidersW
CryptGetUserKey
CryptReleaseContext
RegQueryInfoKeyW
RegDeleteValueW
RegCreateKeyExW
RegEnumKeyExW
RegCloseKey
CryptDestroyKey

secur32

GetUserNameExW

oleaut32

OleCreateFontIndirect
SysAllocString
VariantChangeType
SafeArrayGetElement
SysFreeString
VariantInit
UnRegisterTypeLi
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayDestroy
SafeArrayLock
VarUI4FromStr
VariantClear
CreateErrorInfo
RegisterTypeLi
VarBstrCat
SysAllocStringLen
DispCallFunc
GetErrorInfo
SetErrorInfo
SafeArrayGetVartype
LoadTypeLi
SysStringByteLen
SafeArrayGetDim
SysAllocStringByteLen
LoadRegTypeLi
SysStringLen
SafeArrayUnlock

mprdim

ServiceMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 254KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b3f3781dff9137e502d8d7dff04790ad

Headers

File Characteristics

Imports

kernel32

shell32

gdi32

crypt32

ole32

wininet

comctl32

user32

advapi32

secur32

oleaut32

mprdim

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 254KB - Virtual size: 1.2MB

.rsrc Size: 8KB - Virtual size: 21KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 254KB - Virtual size: 1.2MB

.rsrc
Size: 8KB - Virtual size: 21KB