656af1a5e8ad36bd464a266552ac1757d01fb74d259ead92fd2392f302289213

Sharing

Copy URL Twitter E-mail

General

Target

656af1a5e8ad36bd464a266552ac1757d01fb74d259ead92fd2392f302289213
Size

422KB
MD5

49cfbda38d07e9a1749a29c1f57286f0
SHA1

346d3467503a2ec3f14a5ebcc8b18087dfe0417d
SHA256

656af1a5e8ad36bd464a266552ac1757d01fb74d259ead92fd2392f302289213
SHA512

0353861ab01c3b323cc18bffb2720681394109b233713886582b938a08869a77d289faffd28ffaa19ced3cad7c41085b024203757cb2c9c5f337518ccb689cc7
SSDEEP

6144:xLCmJBZIlmAMcohrUC5Kj6bxqzreJajd0Zd797j2jxQyXM:xWmJBAMxrN5Kj6FqPe77jExQyXM

Score

N/A

Malware Config

Signatures

Files

656af1a5e8ad36bd464a266552ac1757d01fb74d259ead92fd2392f302289213
.exe windows x86

1140570d6a52c076179925c7ab87f10f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
FlushInstructionCache
VirtualAlloc
GetCurrentThreadId
GetFileSize
SetFilePointer
FreeLibrary
InitializeCriticalSection
GetLocalTime
lstrlenW
LeaveCriticalSection
LoadLibraryW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
EnterCriticalSection
ReadFile
GetModuleFileNameA
GlobalFree
GlobalAlloc
GlobalUnlock
RaiseException
GlobalLock
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
CreateFileA
GetConsoleMode
GetConsoleCP
InterlockedCompareExchange
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapCreate
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
Sleep
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetCPInfo
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
RtlUnwind
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
LoadLibraryA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
DeleteCriticalSection
GetCurrentProcess
CreateProcessW
GetEnvironmentVariableW
ExitProcess
ResumeThread
WriteProcessMemory
VirtualAllocEx
VirtualProtectEx
SetLastError
TerminateProcess
GetExitCodeProcess
ReadProcessMemory
VirtualQueryEx
WaitForSingleObject
CopyFileW
FindResourceExW
GetTempPathW
FreeResource
WriteFile
CreateFileW
CloseHandle
GetProcAddress
GetModuleHandleW
GetVersionExW
DeleteFileW
GetLastError
FindClose
GetFileAttributesW
CreateDirectoryW
FindFirstFileW
GetModuleFileNameW
LockResource
FindResourceW
SizeofResource
LoadResource

user32

AttachThreadInput
SendMessageW
DefWindowProcW
SetRectEmpty
SetWindowLongW
SetCapture
GetMessageW
GetFocus
GetForegroundWindow
DrawIconEx
ReleaseCapture
DrawTextW
GetClientRect
CallWindowProcW
GetMonitorInfoW
IsWindow
GetWindowRect
EndPaint
GetScrollPos
CopyRect
FindWindowW
EqualRect
MapWindowPoints
PostThreadMessageW
OffsetRect
InvalidateRect
GetDC
PostMessageW
SetCursor
GetWindow
GetParent
GetKeyState
GetDlgItem
IsWindowEnabled
ReleaseDC
SetRect
LoadImageW
SetWindowPos
PtInRect
WindowFromPoint
SystemParametersInfoW
DrawFrameControl
MoveWindow
SetFocus
GetNextDlgTabItem
GetWindowLongW
UnregisterClassA
LoadCursorW
RegisterClassExW
GetActiveWindow
CreateWindowExW
EnableWindow
IsDialogMessageW
IsChild
SetForegroundWindow
GetWindowThreadProcessId
PeekMessageW
TranslateMessage
LoadBitmapW
SetActiveWindow
GetClassInfoExW
DispatchMessageW
MonitorFromWindow
GetDesktopWindow
ShowWindow
DestroyIcon
LoadIconW
BeginPaint
GetSystemMetrics
GetDlgCtrlID
UpdateLayeredWindow
InflateRect
IsWindowVisible
DestroyWindow

gdi32

RoundRect
SetBkColor
GetClipRgn
GetObjectW
CombineRgn
MoveToEx
LineTo
SetBkMode
StretchBlt
CreateBitmap
CreatePen
SelectClipRgn
SetTextColor
DeleteObject
CreateRectRgnIndirect
RestoreDC
TextOutW
RectInRegion
GetCurrentObject
CreateCompatibleDC
ExtTextOutW
SaveDC
GetStockObject
BitBlt
CreateRectRgn
GetTextExtentPoint32W
CreateDIBSection
GetTextColor
CreateFontIndirectW
SelectObject
SetStretchBltMode
Rectangle
DeleteDC
CreateCompatibleBitmap

advapi32

RegOpenKeyExW
RegSetValueExW
RegOpenKeyW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegQueryInfoKeyW
RegEnumValueW

shell32

SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation
ShellExecuteW
SHGetSpecialFolderPathW

ole32

CoUninitialize
CoInitialize
CoCreateInstance
CreateStreamOnHGlobal

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime

shlwapi

SHEnumKeyExW
PathAppendA
PathRemoveFileSpecA
PathFileExistsA
StrToIntW
PathAddBackslashW
PathAppendW
PathFileExistsW
PathRemoveFileSpecW
StrToIntA

comctl32

_TrackMouseEvent

msimg32

AlphaBlend

gdiplus

GdipCreateImageAttributes
GdipSetImageAttributesColorMatrix
GdipLoadImageFromStream
GdipImageRotateFlip
GdipDrawImageRectI
GdipDisposeImageAttributes
GdipCreateBitmapFromStream
GdipDrawImagePointsRectI
GdipCreateHBITMAPFromBitmap
GdipDrawImageRectRectI
GdipGetImageHeight
GdipAlloc
GdipFree
GdipCreateFontFromDC
GdipCreateFromHDC
GdipDeleteBrush
GdipCloneImage
GdipCreateFontFromLogfontW
GdipResetWorldTransform
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipDeleteGraphics
GdipSetStringFormatLineAlign
GdipCreateSolidFill
GdipDeleteFont
GdipDeleteStringFormat
GdipDrawString
GdipCloneBrush
GdipGetImageWidth
GdipSetStringFormatTrimming
GdipDisposeImage
GdipSetStringFormatAlign
GdipCreateStringFormat
GdipLoadImageFromFile
GdiplusStartup
GdiplusShutdown

Sections

.text
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 135KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1140570d6a52c076179925c7ab87f10f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

gdiplus

Sections

.text Size: 220KB - Virtual size: 219KB

.rdata Size: 50KB - Virtual size: 49KB

.data Size: 9KB - Virtual size: 17KB

.rsrc Size: 135KB - Virtual size: 136KB

.text
Size: 220KB - Virtual size: 219KB

.rdata
Size: 50KB - Virtual size: 49KB

.data
Size: 9KB - Virtual size: 17KB

.rsrc
Size: 135KB - Virtual size: 136KB