b05e41cfe94a652069fea76768c1a8490c0d77ff6746721c7dbe48ea7653a4b9

Sharing

Copy URL Twitter E-mail

General

Target

b05e41cfe94a652069fea76768c1a8490c0d77ff6746721c7dbe48ea7653a4b9
Size

1.4MB
MD5

5227c504f7e4f3dbf5a40196183f7690
SHA1

9758ed59d7cb308215ec30f39db6fd959dc438c2
SHA256

b05e41cfe94a652069fea76768c1a8490c0d77ff6746721c7dbe48ea7653a4b9
SHA512

3e7894b78e3966f4958596fed81d0c5724c4a09286d824340878f1decd36559257146875b6984ea2e993b4e608762eedd401eb9c54b38765daaa1fa72b9f9c77
SSDEEP

24576:Gu7mimixGYKUbctkExyKKPxowTedgjaOUMaTmAaDIcFRYeLgJHYnd6ss67Y6RNtA:GCm1ixqtkEyKKPxowTedgjaOUjTmAaDq

Score

N/A

Malware Config

Signatures

Files

b05e41cfe94a652069fea76768c1a8490c0d77ff6746721c7dbe48ea7653a4b9
.exe windows x86

1c6a3c4a588d0d0fab55d1d1fba9047c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RaiseException
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
ExitProcess
Sleep
RtlUnwind
HeapAlloc
HeapFree
GetStartupInfoW
GetTickCount
GetFileSizeEx
FileTimeToLocalFileTime
SetErrorMode
GetFileTime
GetFileAttributesW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
FileTimeToSystemTime
GetThreadLocale
lstrlenA
GlobalGetAtomNameW
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
WritePrivateProfileStringW
GetModuleHandleA
InterlockedDecrement
GetCurrentProcessId
FreeResource
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GlobalFree
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
MulDiv
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
CompareStringA
InterlockedExchange
GlobalLock
lstrcmpW
GlobalAlloc
GetModuleHandleW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
SetLastError
GetLastError
ReadFile
WideCharToMultiByte
SetFilePointer
WriteFile
DeleteFileW
LoadLibraryW
CreateFileW
FreeLibrary
GetProcAddress
CloseHandle
GetModuleFileNameW
FindClose
FindFirstFileW
SetCurrentDirectoryW
GetCurrentDirectoryW
MultiByteToWideChar
GetVersionExW
GetLocaleInfoW
GetUserDefaultLangID
LockResource
SizeofResource
LoadResource
FindResourceW

user32

CreatePopupMenu
InsertMenuItemW
LoadAcceleratorsW
ReuseDDElParam
UnpackDDElParam
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatW
GetNextDlgGroupItem
MessageBeep
PostThreadMessageW
ReleaseCapture
LoadCursorW
SetCapture
KillTimer
SetTimer
SetWindowRgn
IsRectEmpty
LoadMenuW
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowThreadProcessId
ShowOwnedPopups
SetCursor
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
IsWindowEnabled
GetNextDlgTabItem
EndDialog
RegisterWindowMessageW
BringWindowToTop
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
IsWindow
LoadIconW
GetDC
ReleaseDC
GetScrollInfo
SetScrollInfo
PtInRect
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowPos
OffsetRect
SystemParametersInfoA
GetWindowPlacement
GetMenuState
GetMenuItemID
TranslateAcceleratorW
InvalidateRgn
CopyAcceleratorTableW
SetRectEmpty
UnregisterClassW
CharUpperW
GetSysColorBrush
SendDlgItemMessageW
GetProcessDefaultLayout
GetWindowLongW
SetProcessDefaultLayout
SetWindowLongW
SendMessageW
InvalidateRect
GetSystemMenu
DeleteMenu
GetWindowRect
GetClientRect
IsIconic
GetSystemMetrics
DrawIcon
IntersectRect
WindowFromDC
SetRect
FillRect
EnableWindow
GetParent
CopyRect
UpdateWindow
CheckRadioButton
GetDlgCtrlID
PostMessageW
MapWindowPoints
GetClassNameW
GetWindow
CharNextW
CharPrevW
IsCharAlphaW
CharNextExA
PostQuitMessage
GetSubMenu
GetMenuItemCount
LoadBitmapW

gdi32

ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateCompatibleDC
ScaleWindowExtEx
CreateFontIndirectW
CreateRectRgnIndirect
GetMapMode
DPtoLP
CreateEllipticRgn
LPtoDP
Ellipse
CreateCompatibleBitmap
GetRgnBox
GetBkColor
GetTextColor
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetPixel
BitBlt
DeleteObject
GetViewportExtEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
SetLayout
GetLayout
GetStockObject
GetTextExtentPoint32W
GetTextMetricsW
GetCurrentObject
CreateSolidBrush
CreateBrushIndirect
GetObjectW
GetWindowExtEx

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

DragFinish
DragQueryFileW

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW

oledlg

OleUIBusyW

ole32

CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromProgID
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CoTaskMemAlloc
CoTaskMemFree
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysFreeString
VariantClear
SysAllocStringLen
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayCreate
SafeArrayDestroy
SysStringLen
VariantChangeType
VariantInit
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayGetDim
VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString

Sections

.text
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1c6a3c4a588d0d0fab55d1d1fba9047c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 288KB - Virtual size: 287KB

.rdata Size: 76KB - Virtual size: 76KB

.data Size: 15KB - Virtual size: 30KB

.rsrc Size: 1.0MB - Virtual size: 1.0MB

.text
Size: 288KB - Virtual size: 287KB

.rdata
Size: 76KB - Virtual size: 76KB

.data
Size: 15KB - Virtual size: 30KB

.rsrc
Size: 1.0MB - Virtual size: 1.0MB