6269eca5b4410affdbd3dc22382bbe623057b2b1795496efd05b8bfcb5d64ba0

Sharing

Copy URL

Twitter E-mail

General

Target

6269eca5b4410affdbd3dc22382bbe623057b2b1795496efd05b8bfcb5d64ba0
Size

808KB
MD5

20557470f51c8be8515064ffcfdf9370
SHA1

9b9ed9e8bcfa3d1315427a99ee0624fb6697a824
SHA256

6269eca5b4410affdbd3dc22382bbe623057b2b1795496efd05b8bfcb5d64ba0
SHA512

3f398cd6dec9e95eb96b0e3b24e18a89844423a8424fea2da9f1bc85f054e6a0d7da0d4fcaa9b3b95638e4903612e8e20c693b8baaac380c2e0594a7de1bc551
SSDEEP

12288:TlBHytd7C5+KRdHVlMj0iNZR4rsgpI2wFCzYEeGjPjHT6nnOwYKM/Qg31u:PNdH76R4wFIfeGjjTcnOFdJ31u

Score

N/A

Malware Config

Signatures

Files

6269eca5b4410affdbd3dc22382bbe623057b2b1795496efd05b8bfcb5d64ba0
.exe windows x86

f562a6ca167c2fe64be64d6736a7267d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
HeapReAlloc
SetStdHandle
HeapSize
Sleep
ExitProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
GetStartupInfoA
GetConsoleCP
GetConsoleMode
GetCPInfo
GetOEMCP
IsValidCodePage
GetStartupInfoW
ExitThread
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetCurrentDirectoryA
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetDriveTypeA
CreateFileA
GetProcessHeap
SetEnvironmentVariableA
IsDebuggerPresent
SetUnhandledExceptionFilter
GetModuleFileNameA
HeapAlloc
UnhandledExceptionFilter
HeapFree
GetTickCount
CompareStringA
InterlockedExchange
GlobalFlags
lstrcmpA
GlobalGetAtomNameW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
TlsGetValue
GetFileTime
GetFileSizeEx
GetFullPathNameW
GetVolumeInformationW
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
SetErrorMode
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
GetCurrentProcessId
GetModuleHandleA
FreeResource
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalFree
FormatMessageW
SetFileTime
DosDateTimeToFileTime
GetCurrentDirectoryW
SystemTimeToFileTime
SetFilePointer
GetFileType
GetCurrentProcess
DuplicateHandle
ReadFile
ReleaseMutex
MapViewOfFile
WaitForSingleObject
CreateFileMappingW
OpenFileMappingW
OpenMutexW
LocalAlloc
UnmapViewOfFile
GetACP
GetLocaleInfoW
CreateMutexW
WriteFile
QueryPerformanceCounter
FindClose
FindNextFileW
FindFirstFileW
GetFileAttributesW
GlobalReAlloc
MulDiv
GetVersionExW
SetLastError
lstrlenA
WideCharToMultiByte
lstrlenW
GetLastError
GetCurrentThreadId
CreateFileW
LeaveCriticalSection
EnterCriticalSection
GetPrivateProfileStringW
TerminateProcess
OpenProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
RemoveDirectoryW
WinExec
OpenEventW
GetCommandLineW
LocalFree
LoadLibraryW
FreeLibrary
GetModuleFileNameW
GetProcAddress
GetModuleHandleW
SetEvent
CloseHandle
WritePrivateProfileStringW
GlobalUnlock
GlobalLock
GlobalAlloc
CreateDirectoryW
DeleteFileW
CopyFileW
MoveFileExW
LockResource
MultiByteToWideChar
SizeofResource
LoadResource
LCMapStringW
FindResourceW

user32

PostQuitMessage
DestroyMenu
GetMenuItemInfoW
InflateRect
GetMessageW
TranslateMessage
ValidateRect
CharUpperW
GetCursorPos
ReleaseCapture
SetCursor
LoadCursorW
SetCapture
KillTimer
SetTimer
SetWindowRgn
DrawIcon
IsRectEmpty
SystemParametersInfoW
InvalidateRect
LoadMenuW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
CopyAcceleratorTableW
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
LoadIconW
SendMessageW
LoadImageW
OpenClipboard
PtInRect
DefWindowProcW
CallWindowProcW
GetMenu
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindowTextLengthW
GetWindowTextW
GetFocus
SetWindowPos
SetFocus
ShowWindow
MoveWindow
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxW
GetSysColor
EndPaint
InvalidateRgn
TranslateAcceleratorW
BringWindowToTop
SetRectEmpty
CreatePopupMenu
InsertMenuItemW
LoadAcceleratorsW
ReuseDDElParam
UnpackDDElParam
CharNextW
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
GetNextDlgGroupItem
MessageBeep
PostThreadMessageW
SetMenu
EmptyClipboard
SetClipboardData
CloseClipboard
EnableWindow
PostMessageW
FindWindowW
IsWindow
IsWindowVisible
GetClientRect
SetRect
GetDC
ReleaseDC
DrawTextW
GetWindow
RegisterClipboardFormatW
GetWindowRect
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
EndDialog
GetNextDlgTabItem
GetParent
IsWindowEnabled
GetDlgItem
GetWindowLongW
DestroyWindow
CreateDialogIndirectParamW
SetActiveWindow
GetActiveWindow
GetDesktopWindow
FillRect
TabbedTextOutW
DrawTextExW
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringW
GetSysColorBrush

gdi32

CreateEllipticRgn
LPtoDP
Ellipse
GetMapMode
CreateCompatibleBitmap
GetBkColor
GetTextColor
CreateRectRgnIndirect
CreateSolidBrush
GetStockObject
CreateBitmap
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetPixel
GetRgnBox
CreateFontW
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
GetTextExtentPoint32W
CreateFontIndirectW
DeleteDC
DeleteObject
BitBlt
SelectObject
GetObjectW
CreateCompatibleDC
GetViewportExtEx
GetWindowExtEx

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

SetSecurityInfo
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey

shell32

SHGetSpecialFolderPathW
ShellExecuteW
ShellExecuteExW
CommandLineToArgvW
SHChangeNotify
SHFileOperationW
ord680
DragFinish
DragQueryFileW
SHCreateDirectoryExW

shlwapi

PathAppendW
PathIsDirectoryW
StrCpyW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
UrlUnescapeW
PathFileExistsW

oledlg

OleUIBusyW

ole32

CoRegisterMessageFilter
CoInitialize
CoCreateInstance
CoCreateGuid
StringFromGUID2
CLSIDFromProgID
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard

oleaut32

SysAllocString
VariantInit
VariantClear
SysAllocStringByteLen
SysStringLen
SysAllocStringLen
VariantChangeType
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysFreeString

urlmon

UrlMkGetSessionOption

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

wininet

InternetCanonicalizeUrlW
InternetCrackUrlW
HttpOpenRequestW
InternetConnectW
InternetOpenW
InternetReadFile
InternetSetOptionW
HttpQueryInfoW
InternetCloseHandle
HttpAddRequestHeadersW
HttpSendRequestExW
InternetWriteFile
HttpSendRequestW
HttpEndRequestW

Sections

.text
Size: 509KB - Virtual size: 509KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

shared
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 127KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f562a6ca167c2fe64be64d6736a7267d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

urlmon

version

wininet

Sections

.text Size: 509KB - Virtual size: 509KB

.rdata Size: 123KB - Virtual size: 122KB

.data Size: 13KB - Virtual size: 30KB

shared Size: 3KB - Virtual size: 2KB

.rsrc Size: 27KB - Virtual size: 27KB

.reloc Size: 127KB - Virtual size: 128KB

.text
Size: 509KB - Virtual size: 509KB

.rdata
Size: 123KB - Virtual size: 122KB

.data
Size: 13KB - Virtual size: 30KB

shared
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 27KB - Virtual size: 27KB

.reloc
Size: 127KB - Virtual size: 128KB