171048adc9b4b0d21921946f472c106850e6866032558048754bf12887b1c32f

Sharing

Copy URL Twitter E-mail

General

Target

171048adc9b4b0d21921946f472c106850e6866032558048754bf12887b1c32f
Size

840KB
MD5

78ebd064311b878084ee5b09faed7680
SHA1

f3b5fcc13dc44687b629f6a08af1990f29444126
SHA256

171048adc9b4b0d21921946f472c106850e6866032558048754bf12887b1c32f
SHA512

c45e69f6b21c3c2411784415a5e4c78471fb6eb894367732cbaffad565099f8c0d752a280479d8d19b741cdcc57ac3bab8c035fe9f2b84d43950c25c53630491
SSDEEP

12288:r3z7sJtEEk47ccrZxQra4YbFrPz8Tagn1ki+CfEeAHO+b5EmU9fawdSXNoM/P+kG:r3z7sTFVZxla5KCMeR+KmUhdrM/h31Z

Score

N/A

Malware Config

Signatures

Files

171048adc9b4b0d21921946f472c106850e6866032558048754bf12887b1c32f
.exe windows x86

cec52be0659354e08372e5186e089929

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
IsDebuggerPresent
CreateThread
GlobalFindAtomW
GetCPInfo
RaiseException
CopyFileW
InterlockedDecrement
WideCharToMultiByte
lstrcmpiW
FlushFileBuffers
LocalAlloc
IsValidCodePage
CloseHandle
GlobalDeleteAtom
CreateEventW
VirtualProtectEx
LocalFree
FreeEnvironmentStringsW
FormatMessageW
Sleep
LocalReAlloc
WaitForMultipleObjects
SetEnvironmentVariableA
CompareStringW
GlobalUnlock
LoadLibraryExW
GetStartupInfoW
GetOEMCP
CreateMutexW
SetUnhandledExceptionFilter
GetTempPathW
FindResourceExW
GetVersionExW
SetHandleCount
QueryPerformanceCounter
GetFileAttributesExW
FileTimeToLocalFileTime
TerminateThread
SetFilePointer
CreateFileW
HeapDestroy
GetUserDefaultUILanguage
SetLastError
EnterCriticalSection
HeapCreate
LoadLibraryW
SetStdHandle
GlobalAddAtomW
TlsGetValue
HeapFree
GetTimeZoneInformation
GetStdHandle
GetLocaleInfoW
lstrlenA
GetCurrentThreadId
IsProcessorFeaturePresent
MultiByteToWideChar
lstrcmpA
GetCurrentThread
GetFileSizeEx
GetTempFileNameW
FindClose
lstrlenW
UnhandledExceptionFilter
VirtualAlloc
TlsAlloc
GetCurrentDirectoryW
HeapAlloc
FindFirstFileW
GetNumberFormatW
GetSystemTimeAsFileTime
GetSystemDirectoryW
InitializeCriticalSection
LeaveCriticalSection
VirtualQuery
lstrcpyW
GetCommandLineW
TlsSetValue
MulDiv
GetACP
WaitForSingleObject
HeapSetInformation
GlobalAlloc
LCMapStringW
FindResourceW
SetEvent
GetVolumeInformationW
WriteConsoleW
GetConsoleMode
GlobalHandle
LockResource
SizeofResource
ReadFile
LoadResource
GlobalSize
FileTimeToSystemTime
GlobalFlags
GetEnvironmentStringsW
InterlockedExchange
DeleteCriticalSection
GetSystemInfo
FreeResource
GetCurrentProcess
ExitThread
HeapReAlloc
SetThreadPriority
FreeLibrary
GetFileType
DuplicateHandle
SetEndOfFile
HeapQueryInformation
lstrcmpW
GetFileAttributesW
TlsFree
InterlockedIncrement
GetFullPathNameW
UnlockFile
LockFile
CreateNamedPipeW
GetStringTypeW
GetConsoleCP
GetFileTime
GlobalFree
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCurrentProcessId
WriteFile
GetModuleHandleW
ResumeThread
GlobalGetAtomNameW
GetProcAddress
GlobalReAlloc
GetProcessHeap
HeapSize
GetFileSize
GetTickCount
GetModuleFileNameW
GetLastError

user32

SetParent
GetKeyboardState
MonitorFromPoint
GetKeyNameTextW
CheckDlgButton
DestroyAcceleratorTable
SetWindowPlacement
ReleaseDC
GetMenuItemCount
GetClassLongW
IsWindowEnabled
LoadAcceleratorsW
WinHelpW
GetMenuStringW
DeleteMenu
SendDlgItemMessageW
SetWindowTextW
TranslateMDISysAccel
GetActiveWindow
DialogBoxParamW
RegisterClipboardFormatW
BeginDeferWindowPos
GetUpdateRect
RedrawWindow
PeekMessageW
OpenClipboard
WaitMessage
CreateDialogIndirectParamW
SetScrollRange
IsChild
GetSysColorBrush
ScrollWindow
UnionRect
PostQuitMessage
SetCapture
GetMenuCheckMarkDimensions
HideCaret
UpdateWindow
GetWindowThreadProcessId
GrayStringW
GetAsyncKeyState
InsertMenuItemW
LoadIconW
LoadCursorW
InvertRect
GetWindowTextW
GetMonitorInfoW
MapWindowPoints
SetWindowRgn
DestroyCursor
RegisterClassW
SetPropW
DefFrameProcW
SetLayeredWindowAttributes
CopyRect
LockWindowUpdate
SetCursorPos
GetMenuItemID
ReleaseCapture
AppendMenuW
SetRect
SetForegroundWindow
DestroyIcon
InvalidateRect
DestroyWindow
GetMenu
SetWindowsHookExW
CharUpperBuffW
SetWindowLongW
GetSysColor
ValidateRect
SetRectEmpty
GetKeyboardLayout
ShowWindow
AdjustWindowRectEx
CreateAcceleratorTableW
CreatePopupMenu
GetDoubleClickTime
NotifyWinEvent
CloseClipboard
DispatchMessageW
CopyImage
RemovePropW
GetMessagePos
ShowScrollBar
SetClassLongW
ModifyMenuW
SetMenuDefaultItem
DrawMenuBar
SystemParametersInfoW
TranslateAcceleratorW
WindowFromPoint
GetSubMenu
GetScrollInfo
ReuseDDElParam
GetCursorPos
GetMenuDefaultItem
UnhookWindowsHookEx
SendDlgItemMessageA
GetCapture
SetScrollPos
PtInRect
GetClassNameW
PostMessageW
GetMessageW
MessageBoxW
GetMenuItemInfoW
EndDialog
RemoveMenu
GetLastActivePopup
ShowOwnedPopups
CallNextHookEx
IsWindowVisible
ToUnicodeEx
CopyIcon
EndDeferWindowPos
GetClassInfoW
GetDlgCtrlID
SetMenuItemBitmaps
IsRectEmpty
LoadBitmapW
EnableMenuItem
DrawFocusRect
GetSystemMenu
IsCharLowerW
IsMenu
TranslateMessage
ScreenToClient
TabbedTextOutW
FrameRect
GetForegroundWindow
GetWindowRgn
FillRect
IntersectRect
RealChildWindowFromPoint
UpdateLayeredWindow
GetScrollPos
GetWindowPlacement
DefWindowProcW
LoadMenuW
PostThreadMessageW
SetScrollInfo
DrawIconEx
BringWindowToTop
GetKeyState
DrawTextExW
MoveWindow
GetMessageTime
BeginPaint
CheckMenuItem
MapVirtualKeyW
DestroyMenu
EqualRect
EnumDisplayMonitors
GetMenuState
OffsetRect
SetFocus
SubtractRect
MapVirtualKeyExW
InsertMenuW
CreateWindowExW
GetDC
EnableWindow
CallWindowProcW
GetPropW
GetSystemMetrics
GetClassInfoExW
SetCursor
DeferWindowPos
RegisterWindowMessageW
SetActiveWindow
GetWindow
GetFocus
GetTopWindow
IsClipboardFormatAvailable
EnableScrollBar
GetClientRect
GetNextDlgTabItem
UnpackDDElParam
EmptyClipboard
KillTimer
GetScrollRange
MapDialogRect
MonitorFromWindow
DrawFrameControl
CopyAcceleratorTableW
CharUpperW
EndPaint
TrackPopupMenu
DefMDIChildProcW
IsWindow
GetNextDlgGroupItem
LoadImageW
GetIconInfo
SetMenu
DrawIcon
DrawEdge
GetWindowTextLengthW
ClientToScreen
GetDesktopWindow
IsIconic
GetWindowDC
CreateMenu
InflateRect
GetDlgItem
EnumWindows
SetClipboardData
GetWindowRect
DrawStateW
GetWindowLongW
DrawTextW
SetTimer
IsDialogMessageW
IsZoomed
SetWindowPos
MessageBeep
SendMessageW

gdi32

SetTextAlign
GetViewportExtEx
GetTextFaceW
GetBkColor
GetWindowOrgEx
SetPixel
CreateEllipticRgn
SetPixelV
CreateDIBitmap
DeleteDC
MoveToEx
PtInRegion
ExtTextOutW
CreateCompatibleDC
GetBitmapBits
CreatePatternBrush
GetViewportOrgEx
SetDIBColorTable
GetClipBox
CreateFontIndirectW
GetLayout
CombineRgn
FrameRgn
OffsetRgn
ScaleWindowExtEx
SaveDC
Polyline
GetTextCharsetInfo
RectVisible
CreatePen
CreateHatchBrush
OffsetViewportOrgEx
LPtoDP
GetTextColor
DeleteObject
IntersectClipRect
SetWindowExtEx
SetPolyFillMode
CreateCompatibleBitmap
GetPixel
OffsetWindowOrgEx
EnumFontFamiliesExW
GetSystemPaletteEntries
RestoreDC
SetROP2
SetBkMode
CreateRectRgnIndirect
GetRgnBox
SetViewportExtEx
CreatePalette
SetWindowOrgEx
SelectClipRgn
GetObjectType
StretchBlt
GetPaletteEntries
SetLayout
EnumFontFamiliesW
CopyMetaFileW
GetDeviceCaps
SetViewportOrgEx
SelectObject
SetPaletteEntries
FillRgn
LineTo
ScaleViewportExtEx
GetNearestPaletteIndex
SetTextColor
BitBlt
CreateRoundRectRgn
CreateRectRgn
Ellipse
GetTextExtentPoint32W
ExcludeClipRect
Escape
PatBlt
RealizePalette
CreateDCW
SetBkColor
ExtFloodFill
GetObjectW
SelectPalette
ExtSelectClipRgn
CreatePolygonRgn
CreateSolidBrush
GetTextMetricsW
GetBoundsRect
CreateDIBSection
SetMapMode
GetWindowExtEx
DPtoLP
TextOutW
SetRectRgn
Rectangle
Polygon
PtVisible
CreateBitmap

advapi32

RegQueryValueExW
SetSecurityDescriptorDacl
GetSecurityDescriptorSacl
RegDeleteKeyW
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenProcessToken
RegOpenKeyExW
RegDeleteValueW
GetTokenInformation
RegCreateKeyExW
OpenThreadToken
RegEnumKeyExW
SetSecurityDescriptorSacl
InitializeSecurityDescriptor
IsValidSid
RegSetValueExW
ConvertSidToStringSidW

shell32

DragQueryFileW
ShellExecuteExW
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetFileInfoW
SHGetFolderLocation
SHGetPathFromIDListW
SHGetDesktopFolder
DragFinish
ShellExecuteW
SHAppBarMessage

ole32

OleTranslateAccelerator
CoCreateInstance
CoInitialize
CoInitializeEx
IsAccelerator
RegisterDragDrop
DoDragDrop
OleLockRunning
ReleaseStgMedium
OleDestroyMenuDescriptor
CoTaskMemFree
CoTaskMemAlloc
OleGetClipboard
CreateStreamOnHGlobal
OleCreateMenuDescriptor
CLSIDFromString
CoUninitialize
OleDuplicateData
RevokeDragDrop
CoLockObjectExternal

oleaut32

VariantInit
VariantChangeType
SysStringByteLen
SysFreeString
VariantClear
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
SysStringLen
VarBstrFromDate
SysAllocStringByteLen
SysAllocString

comctl32

ImageList_GetIconSize

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
SHDeleteValueA
PathIsUNCW
SHGetThreadRef
SHDeleteEmptyKeyA
PathRemoveFileSpecW

gdiplus

GdipDisposeImage
GdipGetImagePalette
GdipCreateFromHDC
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipDrawImageI
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipGetImageHeight
GdipCreateBitmapFromHBITMAP
GdipFree
GdipSetInterpolationMode
GdipBitmapLockBits
GdipGetImagePixelFormat
GdipDeleteGraphics
GdipGetImageWidth
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipAlloc
GdipGetImagePaletteSize
GdipGetImageGraphicsContext

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.kpol
Size: - Virtual size: 5.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 278KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kupol
Size: 486KB - Virtual size: 486KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cec52be0659354e08372e5186e089929

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

gdiplus

oleacc

Sections

.text Size: 8KB - Virtual size: 8KB

.kpol Size: - Virtual size: 5.4MB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 278KB - Virtual size: 278KB

.kupol Size: 486KB - Virtual size: 486KB

.tls Size: 512B - Virtual size: 57B

.rsrc Size: 33KB - Virtual size: 33KB

.reloc Size: 14KB - Virtual size: 13KB

.text
Size: 8KB - Virtual size: 8KB

.kpol
Size: - Virtual size: 5.4MB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 278KB - Virtual size: 278KB

.kupol
Size: 486KB - Virtual size: 486KB

.tls
Size: 512B - Virtual size: 57B

.rsrc
Size: 33KB - Virtual size: 33KB

.reloc
Size: 14KB - Virtual size: 13KB