5e559a58f0e7a757c5b6dcf870fdca004c9b8d6aabd00fa64c890709efe77e82

Sharing

Copy URL Twitter E-mail

General

Target

5e559a58f0e7a757c5b6dcf870fdca004c9b8d6aabd00fa64c890709efe77e82
Size

860KB
MD5

7bee308fc00a5b7a2e2b51ff0bebef50
SHA1

894c14f203d62524b59586d0577c3c3ff64b5820
SHA256

5e559a58f0e7a757c5b6dcf870fdca004c9b8d6aabd00fa64c890709efe77e82
SHA512

e5dfa10876aa65c865fcdef8a4d22b9c7eaec33912b2665240ca6aea07dab7988f4f3eb3394dc95c9c5e9e81a25f597caf37e004ecf30219469ace332a8c7298
SSDEEP

12288:BnwmAm1qiPWlj7A5b0JQVifPgiyOcvPLJUaTjxTYUJrSrh9raixioD8:CmAmDPWlj7rJt3g/ZPLvTmgSHu/48

Score

N/A

Malware Config

Signatures

Files

5e559a58f0e7a757c5b6dcf870fdca004c9b8d6aabd00fa64c890709efe77e82
.exe windows x86

91afcbe11805ea35110f90108860d74c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
InterlockedExchangeAdd
ConvertDefaultLocale
HeapDestroy
OutputDebugStringA
GetSystemPowerStatus
CreateFileA
OutputDebugStringW
lstrlenA
GetProcessWorkingSetSize
GetProcessTimes
LoadLibraryA
GetExitCodeThread
SetEndOfFile
WriteFile
CreateMutexA
GlobalFree
SetThreadExecutionState
TlsFree
ExpandEnvironmentStringsA
InitializeCriticalSection
CreateSemaphoreA
FileTimeToSystemTime
FreeLibrary
CopyFileA
LocalFileTimeToFileTime
FindNextFileA
GetUserDefaultLCID
GetFileTime
SizeofResource
GetFileAttributesExA
GlobalAlloc
GetStdHandle
LocalFree
MapViewOfFile
GetCPInfo
AreFileApisANSI
InterlockedDecrement
GetTempPathW
TerminateThread
TerminateProcess
LockResource
GetThreadLocale
GetLocaleInfoA
TlsSetValue
GetModuleFileNameA
ReadFile
SetFileTime
TlsGetValue
GetExitCodeProcess
UnlockFileEx
FormatMessageA
SetThreadLocale
GetLastError
FindFirstFileA
SetThreadPriority
ReleaseSemaphore
WaitForSingleObject
GetProcAddress
GetSystemTime
GetCurrentProcess
OpenFileMappingA
GetCurrentThreadId
UnlockFile
LocalAlloc
TlsAlloc
GetCurrentThread
IsValidCodePage
InterlockedIncrement
SetNamedPipeHandleState
GetTickCount
InterlockedCompareExchange
CloseHandle
GetProcessAffinityMask
GetProcessHeap
HeapSize
DeleteFileW
MultiByteToWideChar
GetTempFileNameA
IsDBCSLeadByteEx
DeleteCriticalSection
GetThreadTimes
GetLogicalDriveStringsA
DeleteFileA
PeekNamedPipe
OpenProcess
GetComputerNameA
GetStartupInfoA
VirtualProtect
GetDriveTypeA
CreateThread
ResumeThread
GetCommandLineA
GetSystemInfo
GetACP
LeaveCriticalSection
CreateFileMappingA
FindClose
GetTempPathA
SetErrorMode
SetLastError
GetVolumeInformationA
InterlockedExchange
LoadResource
ReleaseMutex
GetFileAttributesA
GlobalUnlock
GlobalLock
GetVersionExA
SetEnvironmentVariableA
FlushFileBuffers
FindResourceA
CreateProcessA
RemoveDirectoryA
LockFileEx
GetProfileStringA
GetFullPathNameA
LockFile
GetCurrentProcessId
GetSystemTimeAsFileTime
IsValidLocale
ExitProcess
SetFilePointer
GetFileSizeEx
Sleep
GetShortPathNameA
DuplicateHandle
DeviceIoControl
SystemTimeToFileTime
LoadLibraryW
GetEnvironmentVariableA
GlobalMemoryStatusEx
SetUnhandledExceptionFilter
GetFileType
CreateDirectoryA
GetFileSize
GlobalMemoryStatus
EnterCriticalSection
WideCharToMultiByte
GetDiskFreeSpaceA
SetCurrentDirectoryA
GlobalSize
GetWindowsDirectoryA
QueryPerformanceCounter
SuspendThread
FindFirstFileExA
UnmapViewOfFile
MoveFileExW
CreatePipe
GetModuleHandleA

user32

GetMenuItemCount
IsZoomed
CreateMenu
GetFocus
AppendMenuW
WaitForInputIdle
SetScrollInfo
MsgWaitForMultipleObjects
ChangeDisplaySettingsW
CreatePopupMenu
EnumClipboardFormats
EnumThreadWindows
DeferWindowPos
GetUpdateRect
IsIconic
DrawEdge
SetForegroundWindow
ReleaseDC
DrawStateW
SetCursor
DestroyAcceleratorTable
DdeInitializeW
EndDialog
LoadBitmapW
CreateAcceleratorTableW
DdeGetLastError
CopyRect
TrackPopupMenu
BeginPaint
DdeFreeStringHandle
CloseClipboard
OffsetRect
DrawIconEx
ShowWindow
PostQuitMessage
LoadImageW
RegisterClassW
GetDoubleClickTime
SetClipboardData
InvalidateRect
DdeQueryStringW
ToUnicode
TranslateAcceleratorW
EndPaint
GetOpenClipboardWindow
SetWindowPos
EndDeferWindowPos
ValidateRect
GetDlgItem
MessageBeep
DdeCreateStringHandleW
GetClipboardOwner
GetActiveWindow
GetCapture
AdjustWindowRectEx
DdeGetData
GetDesktopWindow
EndMenu
DrawIcon
ChildWindowFromPoint
SetWindowRgn
GetQueueStatus
ReleaseCapture
LoadAcceleratorsW
GetWindowDC
ShowCursor
ShowCaret
UnhookWindowsHookEx
ScrollWindow
DestroyWindow
SetWindowsHookExW
EnableWindow
GetAsyncKeyState
DdeCreateDataHandle
GetMessagePos
DrawFocusRect
GetWindowTextLengthW
CreateDialogParamW
CallNextHookEx
GetClientRect
BeginDeferWindowPos
GetClassNameW
GetProcessWindowStation
GetMenuState
GetSystemMenu
GetSysColor
InsertMenuW
GetSystemMetrics
GetClipboardFormatNameW
SetFocus
GetWindowTextW
PeekMessageW
IsWindowVisible
EnableMenuItem
DefWindowProcW
GetMessageW
GetKeyboardState
DispatchMessageW
HideCaret
CreateIconIndirect
IsDialogMessageW
GetDC
MapWindowPoints
OpenClipboard
SetCapture
RegisterWindowMessageW
SetCursorPos
GetWindow
SetWindowTextW
RegisterClipboardFormatW
ScreenToClient
PostMessageW
DdeConnect
GetClipboardData
MoveWindow
IsWindowEnabled
FindWindowExW
TranslateMessage
DestroyMenu
CreateDialogIndirectParamW
DrawTextW
GetMessageTime
DrawFrameControl
GetWindowRect
FillRect
GetClassInfoW
DdeFreeDataHandle
ExitWindowsEx
RemoveMenu
FlashWindow
WindowFromPoint
PtInRect
UpdateWindow
LoadIconW
CheckMenuItem
GetMenu
GetCursorPos
GetInputState
KillTimer
IsClipboardFormatAvailable
UnionRect
GetParent
InflateRect
keybd_event
GetSubMenu
DdePostAdvise
InsertMenuItemW
SetWindowLongW
PostThreadMessageW
IsWindow
SetTimer
EmptyClipboard
DdeDisconnect
DrawMenuBar
VkKeyScanW
DdeNameService
SetParent
LoadCursorW
BringWindowToTop
CheckMenuRadioItem
GetScrollInfo
CallWindowProcW
DestroyCursor
GetKeyState
GetCaretPos
EnumDisplaySettingsW
ModifyMenuW
SetMenu
MessageBoxW
SystemParametersInfoW
ClientToScreen
RedrawWindow
SetMenuItemInfoW
LoadCursorFromFileW
GetWindowThreadProcessId
GetIconInfo
GetUpdateRgn
DestroyIcon
GetMenuItemInfoW
DdeClientTransaction
GetForegroundWindow
DdeUninitialize
GetClipboardViewer
UnregisterClassW
EnumWindows
GetWindowLongW

gdi32

DeleteEnhMetaFile
GetCharABCWidthsW
SetPolyFillMode
SetBkColor
RealizePalette
PlayEnhMetaFile
GetDIBColorTable
CreateFontIndirectW
CreateHatchBrush
SetMetaFileBitsEx
GetTextColor
PatBlt
Rectangle
CreateBitmapIndirect
GetWinMetaFileBits
BitBlt
CloseEnhMetaFile
CreatePalette
ExtCreatePen
SelectObject
GetTextExtentExPointW
ExtSelectClipRgn
SetWindowExtEx
GetDIBits
CreateBitmap
Pie
GetMetaFileBitsEx
CreatePatternBrush
SetWinMetaFileBits
CreateICW
CreateDIBSection
GetClipBox
SaveDC
Arc
GetNearestPaletteIndex
CombineRgn
GetDeviceCaps
GetRegionData
RectInRegion
SetBrushOrgEx
GetPaletteEntries
SetStretchBltMode
SetROP2
GetRgnBox
ExtCreateRegion
GetTextExtentPoint32W
SetWindowOrgEx
StretchDIBits
CreatePen
SetViewportOrgEx
GetStockObject
DeleteDC
EqualRgn
CopyEnhMetaFileW
CreateDIBitmap
SelectClipRgn
GetPixel
EnumFontFamiliesExW
CreateCompatibleBitmap
SetBkMode
Polyline
SetMapMode
GdiFlush
OffsetRgn
CreateRectRgn
CreateEnhMetaFileW
LineTo
GetObjectW
GetSystemPaletteEntries
CreateCompatibleDC
CreateSolidBrush
GetEnhMetaFileHeader
RoundRect
DeleteObject
MoveToEx
SelectPalette
StretchBlt
SetTextAlign
CreatePolygonRgn
PtInRegion
ExtFloodFill
SetPixel
GetTextMetricsW
CreateRectRgnIndirect
GetBkColor
MaskBlt
Polygon
PolyPolygon
SetViewportExtEx
GetEnhMetaFileW
TextOutW
SetTextColor
Ellipse
RestoreDC
ExcludeClipRect

comdlg32

GetSaveFileNameW
ChooseColorW
CommDlgExtendedError
ChooseFontW
GetOpenFileNameW

advapi32

AdjustTokenPrivileges
OpenServiceW
RegDeleteKeyW
LookupPrivilegeValueW
RegEnumKeyW
CloseServiceHandle
GetUserNameW
RegQueryInfoKeyW
RegQueryValueExW
RegEnumValueW
RegCloseKey
RegQueryValueExA
RegCreateKeyW
OpenProcessToken
ControlService
RegOpenKeyExA
RegDeleteValueW
OpenSCManagerW
RegOpenKeyExW
RegSetValueExW

shell32

SHGetPathFromIDListW
ExtractIconW
ExtractIconExW
SHFileOperationW
SHGetIconOverlayIndexW
SHGetSpecialFolderLocation
DragFinish
Shell_NotifyIconW
SHBrowseForFolderW
SHGetMalloc
SHGetFileInfoW
DragQueryPoint
SHGetFolderPathW
DragQueryFileW
ShellExecuteExW
DragAcceptFiles

ole32

CoTaskMemFree
OleSetClipboard
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
OleIsCurrentClipboard
DoDragDrop
ReleaseStgMedium
CoFreeUnusedLibraries
CoCreateInstance
RevokeDragDrop
OleInitialize
OleFlushClipboard
OleUninitialize

oleaut32

SysStringLen
SysAllocString

comctl32

ImageList_DragLeave
ImageList_Create
ImageList_Destroy
ImageList_Add
ImageList_GetIcon
ImageList_GetIconSize
ImageList_AddMasked
CreateStatusWindowW
ImageList_Replace
ImageList_SetDragCursorImage
ImageList_Draw
ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_Remove
ImageList_SetBkColor
ImageList_EndDrag
ImageList_DragEnter
ImageList_DragMove
ImageList_BeginDrag
ord16
ord17

winmm

PlaySoundW

mpr

WNetGetConnectionW

netapi32

NetApiBufferFree
NetShareEnum

secur32

QuerySecurityPackageInfoA

oledlg

ord6

Sections

.text
Size: 411KB - Virtual size: 410KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 381KB - Virtual size: 451KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

91afcbe11805ea35110f90108860d74c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

winmm

mpr

netapi32

secur32

oledlg

Sections

.text Size: 411KB - Virtual size: 410KB

.rdata Size: 41KB - Virtual size: 41KB

.data Size: 381KB - Virtual size: 451KB

.rsrc Size: 21KB - Virtual size: 20KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 411KB - Virtual size: 410KB

.rdata
Size: 41KB - Virtual size: 41KB

.data
Size: 381KB - Virtual size: 451KB

.rsrc
Size: 21KB - Virtual size: 20KB

.reloc
Size: 4KB - Virtual size: 4KB