70ea8f13011165aa97b51f89af61c45f0893782b33514ee1d612a3a15c27b782

Sharing

Copy URL Twitter E-mail

General

Target

70ea8f13011165aa97b51f89af61c45f0893782b33514ee1d612a3a15c27b782
Size

1.4MB
MD5

7a492e65f7bbd4b426873515be97b0a0
SHA1

4beb3e0a140d4fc413fc49dbf4edf3f98985001a
SHA256

70ea8f13011165aa97b51f89af61c45f0893782b33514ee1d612a3a15c27b782
SHA512

6c7a034a577b3c5ec1caab9021bb244a7208d36ea0da9f569d21f0f2f138efa73f8156102f0da2f0a2c1a9d8a8760d966dac7526334d037e38182b64efbf08a2
SSDEEP

12288:AFiy9zmNIsHa/ldv7Dd4ffjFQdHj4PaRM90zwuMP:AFiy9zmNId/SXjFQdHjRijuMP

Score

N/A

Malware Config

Signatures

Files

70ea8f13011165aa97b51f89af61c45f0893782b33514ee1d612a3a15c27b782
.exe windows x86

9a2f68e4faa26597a6f5b32beffb9c81

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNativeSystemInfo
FindResourceA
LoadResource
LockResource
SizeofResource
FreeResource
RtlMoveMemory
lstrlenW
GlobalSize
LocalSize
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
IsBadReadPtr
GetPrivateProfileStringA
GetProcessHeap
WriteFile
CreateFileA
ReadFile
GetFileSize
GetModuleFileNameA
GetUserDefaultLCID
FormatMessageA
Sleep
SetFilePointer
WaitForSingleObject
CreateProcessA
GetStartupInfoA
FreeLibrary
LoadLibraryA
LCMapStringA
CreateThread
OpenThread
TerminateThread
GetModuleHandleW
CloseHandle
SetWaitableTimer
CreateWaitableTimerW
HeapFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
MultiByteToWideChar
WideCharToMultiByte
VirtualFree
VirtualAlloc
GetProcAddress
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateProcess
DeleteFileA
OpenProcess

user32

LoadCursorW
LookupIconIdFromDirectoryEx
ReleaseDC
PtInRect
SetTimer
LoadCursorFromFileW
GetPropA
IsIconic
IsZoomed
CreateIconFromResourceEx
PostMessageW
CopyImage
MsgWaitForMultipleObjects
SetForegroundWindow
DefWindowProcW
CreateWindowExW
SendMessageW
SystemParametersInfoA
SetWindowPos
SetCaretPos
GetCursorPos
GetWindowRect
DispatchMessageW
TrackMouseEvent
ShowWindow
BeginPaint
EndPaint
SetCapture
GetFocus
SetFocus
SetWindowLongW
SetPropA
GetDC
GetDesktopWindow
PeekMessageA
GetMessageA
DispatchMessageA
wsprintfA
MessageBoxA
RemovePropA
GetSystemMetrics
MoveWindow
SetWindowRgn
GetParent
TranslateMessage
GetMessageW
CallWindowProcW
IsWindow
SetCursor
SendMessageA
KillTimer
GetAsyncKeyState
IntersectRect
InvalidateRect
UpdateLayeredWindow
ReleaseCapture
GetClassNameW
GetWindowTextW
RegisterClassExW
GetClassLongW

gdi32

CreateDIBSection
BitBlt
SelectObject
CreateCompatibleBitmap
StretchBlt
GetObjectA
GetDIBits
CreateRectRgn
CreateRoundRectRgn
DeleteDC
DeleteObject
CreateCompatibleDC

wininet

InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle

advapi32

CryptDestroyHash
CryptCreateHash
CryptReleaseContext
CryptGetHashParam
CryptAcquireContextA
CryptHashData

ole32

CLSIDFromProgID
CoCreateInstance
OleRun
StringFromGUID2
CLSIDFromString
CreateStreamOnHGlobal
CoInitialize
CoUninitialize

olepro32

ord251

oleaut32

SafeArrayGetElemsize
VariantClear
VariantChangeType
VariantInit
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysFreeString
VarR8FromCy
VarR8FromBool
LoadTypeLi
LHashValOfNameSys
RegisterTypeLi
SafeArrayCreate
SafeArrayDestroy

shlwapi

PathFindExtensionA
PathFindFileNameA
PathFileExistsA

gdiplus

GdipSetPenDashStyle
GdipDrawPath
GdipDeletePen
GdiplusStartup
GdipCreateImageAttributes
GdipSetClipRegion
GdipSetClipRect
GdipDrawRectangle
GdipResetClip
GdipGetTextRenderingHint
GdipSetTextRenderingHint
GdipDeleteGraphics
GdipCreateFromHDC
GdipGetSmoothingMode
GdipSetSmoothingMode
GdipGetImagePixelFormat
GdipCloneBitmapArea
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageRect
GdipCreateStringFormat
GdipSetStringFormatHotkeyPrefix
GdipDeleteStringFormat
GdipCreateLineBrushFromRect
GdipFillRectangle
GdipMeasureString
GdipGetFontHeight
GdipDrawString
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipSetCompositingQuality
GdipSetInterpolationMode
GdipSetStringFormatAlign
GdipSetStringFormatTrimming
GdipCreateSolidFill
GdipGetStringFormatAlign
GdipGetStringFormatTrimming
GdipGetStringFormatFlags
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipSaveImageToStream
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipSetStringFormatMeasurableCharacterRanges
GdipCreateRegion
GdipMeasureCharacterRanges
GdipGetRegionBounds
GdipDeleteRegion
GdipCreateRegionHrgn
GdipCreateLineBrush
GdipCreatePen2
GdipFillPolygon
GdipDrawPolygon
GdipCreatePathGradientFromPath
GdipGetCompositingQuality
GdipCreateHBITMAPFromBitmap
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectRect
GdipGraphicsClear
GdipDeleteFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipCreateFont
GdipGetFontStyle
GdipGetFontSize
GdipGetFamilyName
GdipClosePathFigure
GdipAddPathArc
GdipCreatePath
GdipDeletePath
GdipDeleteBrush
GdipFillPath
GdipSetStringFormatFlags
GdipDisposeImage
GdipLoadImageFromStream

shell32

ShellExecuteA
Shell_NotifyIconW

imm32

ImmAssociateContext
ImmGetContext

msvcrt

??2@YAPAXI@Z
sprintf
_stricmp
atoi
_ftol
tolower
_CIfmod
toupper
strncmp
strchr
strncpy
modf
floor
_CIpow
free
__CxxFrameHandler
strtod
malloc
memmove
realloc
_strnicmp
??3@YAXPAX@Z

Sections

.text
Size: 596KB - Virtual size: 596KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 282KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9a2f68e4faa26597a6f5b32beffb9c81

Headers

File Characteristics

Imports

kernel32

user32

gdi32

wininet

advapi32

ole32

olepro32

oleaut32

shlwapi

gdiplus

shell32

imm32

msvcrt

Sections

.text Size: 596KB - Virtual size: 596KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 282KB - Virtual size: 330KB

.text
Size: 596KB - Virtual size: 596KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 282KB - Virtual size: 330KB