ff8bbb7ac6f668befbb9b91ef9e3b5b792a1459436423a12996771df2982b630

Sharing

Copy URL

Twitter E-mail

General

Target

ff8bbb7ac6f668befbb9b91ef9e3b5b792a1459436423a12996771df2982b630
Size

863KB
MD5

2aefe26eba53a75ca3b663545549f020
SHA1

9be4c98aaaf9669138a98fbd1008c82d35dbefb9
SHA256

ff8bbb7ac6f668befbb9b91ef9e3b5b792a1459436423a12996771df2982b630
SHA512

e6c82853bf943325ba49e767058750c5e5164ea38623d917f2fa46853df3425df3dc2dd96fb225349b87203855491361f5611c533f316117244900cd3fa85bd1
SSDEEP

12288:ti7TnKAB6uTsseXay+oD02kJvIqYXQ/byNZj6CGtp4juSl0I1whVIMHclz0/3Cgb:4xo2eKIFUIlXQ/sZ+alN1qd8B0/31

Score

N/A

Malware Config

Signatures

Files

ff8bbb7ac6f668befbb9b91ef9e3b5b792a1459436423a12996771df2982b630
.exe windows x86

6a64ce4bf0e469a95f1b3416342da0cf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
VirtualProtectEx
HeapCreate
HeapDestroy
VirtualFree
lstrlenA
UnlockFile
FindResourceA
DeleteFileA
GetProcessWorkingSetSize
SetUnhandledExceptionFilter
GetTempPathA
HeapSize
IsValidLocale
InterlockedDecrement
GetCurrentProcess
GetStartupInfoA
ReleaseSemaphore
SetEndOfFile
LoadLibraryA
FlushFileBuffers
GetSystemInfo
GetTickCount
WideCharToMultiByte
GetDriveTypeA
InterlockedIncrement
LocalFree
EnterCriticalSection
GetFileTime
GetThreadTimes
FindNextFileA
InitializeCriticalSection
FormatMessageA
GetEnvironmentVariableA
GlobalUnlock
CreateSemaphoreA
GetExitCodeThread
PeekNamedPipe
GetComputerNameA
GetCurrentThreadId
TlsFree
GetProfileStringA
LocalAlloc
GetSystemTimeAsFileTime
QueryPerformanceCounter
LoadLibraryW
SetFileTime
GetFileType
SuspendThread
GetFileSizeEx
CreateProcessA
CloseHandle
LeaveCriticalSection
GetModuleFileNameA
GetProcessHeap
UnlockFileEx
WriteFile
RemoveDirectoryA
LockFileEx
GlobalAlloc
GetFullPathNameA
LocalFileTimeToFileTime
IsDBCSLeadByteEx
GlobalLock
SetEnvironmentVariableA
FindFirstFileExA
GlobalSize
GetProcessAffinityMask
SetCurrentDirectoryA
GlobalFree
GetCPInfo
GetVersionExA
DuplicateHandle
CreateFileMappingA
MoveFileExW
SetThreadExecutionState
TlsGetValue
SetFilePointer
GlobalMemoryStatusEx
GetLogicalDriveStringsA
CopyFileA
TlsAlloc
CreatePipe
CreateThread
SetLastError
TlsSetValue
GetSystemTime
ReleaseMutex
GetLastError
GetCommandLineA
CreateDirectoryA
InterlockedCompareExchange
DeleteCriticalSection
SizeofResource
GetLocaleInfoA
MultiByteToWideChar
SetThreadPriority
FindFirstFileA
GetACP
LockFile
GetExitCodeProcess
DeleteFileW
InterlockedExchange
GetStdHandle
GetFileAttributesA
SetNamedPipeHandleState
GetWindowsDirectoryA
UnmapViewOfFile
LoadResource
GlobalMemoryStatus
CreateMutexA
GetCurrentProcessId
OpenFileMappingA
TerminateProcess
FindClose
GetDiskFreeSpaceA
GetCurrentThread
LockResource
CreateFileA
GetVolumeInformationA
SystemTimeToFileTime
SetErrorMode
GetProcessTimes
MapViewOfFile
FreeLibrary
ResumeThread
Sleep
VirtualProtect
GetProcAddress
GetShortPathNameA
IsValidCodePage
TerminateThread
SetThreadLocale
GetFileSize
GetTempFileNameA
GetThreadLocale
GetTempPathW
WaitForSingleObject
GetUserDefaultLCID
ReadFile
ExitProcess
FileTimeToSystemTime
ExpandEnvironmentStringsA
GetFileAttributesExA
DeviceIoControl
OpenProcess
AreFileApisANSI
InterlockedExchangeAdd

user32

GetCursorPos
MessageBeep
FlashWindow
ReleaseCapture
ShowWindow
VkKeyScanW
DrawFocusRect
MapWindowPoints
RegisterWindowMessageW
SetWindowsHookExW
OffsetRect
OpenClipboard
GetQueueStatus
DdeGetLastError
DestroyAcceleratorTable
EnableWindow
CloseClipboard
EndDeferWindowPos
IsDialogMessageW
SystemParametersInfoW
CreatePopupMenu
DrawMenuBar
UnionRect
GetMenuState
GetDlgItem
KillTimer
DefWindowProcW
DdeClientTransaction
DdeFreeDataHandle
EnableMenuItem
DdeInitializeW
keybd_event
CallWindowProcW
ToUnicode
PostQuitMessage
CheckMenuRadioItem
ShowCaret
LoadIconW
GetWindowRect
GetDesktopWindow
TranslateMessage
SetFocus
BeginDeferWindowPos
ReleaseDC
UnregisterClassW
GetSubMenu
GetKeyboardState
SendMessageW
DdeUninitialize
GetWindowLongW
EnumWindows
DrawIcon
GetClientRect
GetMenu
AdjustWindowRectEx
SetWindowRgn
MessageBoxW
GetClassInfoW
GetWindowThreadProcessId
GetProcessWindowStation
CallNextHookEx
DeferWindowPos
ScreenToClient
GetClipboardData
EndMenu
DrawFrameControl
UpdateWindow
GetMessageW
GetCaretPos
SetWindowLongW
GetClipboardOwner
DdeDisconnect
FillRect
RemoveMenu
RegisterClassW
DdeNameService
CreateWindowExW
HideCaret
LoadCursorFromFileW
GetFocus
ValidateRect
DrawStateW
MoveWindow
GetClipboardFormatNameW
SetWindowPos
IsWindow
DestroyWindow
ClientToScreen
BringWindowToTop
GetUpdateRgn
CreateMenu
PtInRect
GetClassNameW
WindowFromPoint
BeginPaint
ChildWindowFromPoint
PostMessageW
IsIconic
GetDoubleClickTime
DestroyIcon
CreateAcceleratorTableW
InsertMenuItemW
CreateDialogIndirectParamW
GetAsyncKeyState
PostThreadMessageW
SetMenu
SetParent
DdeQueryStringW
GetWindowTextLengthW
GetSystemMetrics
GetOpenClipboardWindow
ExitWindowsEx
SetScrollInfo
GetUpdateRect
SetCapture
GetParent
GetActiveWindow
DrawTextW
EnumDisplaySettingsW
GetMenuItemInfoW
GetKeyState
CreateDialogParamW
EnumClipboardFormats
GetForegroundWindow
ScrollWindow
InvalidateRect
DrawIconEx
CopyRect
GetIconInfo
DdePostAdvise
LoadImageW
DispatchMessageW
IsWindowVisible
TrackPopupMenu
GetWindowTextW
SetClipboardData
DdeCreateStringHandleW
CreateIconIndirect
SetWindowTextW
GetClipboardViewer
DdeGetData
UnhookWindowsHookEx
ShowCursor
LoadAcceleratorsW
IsClipboardFormatAvailable
DdeConnect
WaitForInputIdle
InflateRect
AppendMenuW
GetDC
GetMenuItemCount
EndPaint
CheckMenuItem
GetSysColor
GetCapture
DdeFreeStringHandle
RegisterClipboardFormatW
DestroyMenu
FindWindowExW
EndDialog
SetForegroundWindow
LoadCursorW
MsgWaitForMultipleObjects
EmptyClipboard
GetMessageTime
ChangeDisplaySettingsW
GetMessagePos
GetWindowDC
IsZoomed
SetMenuItemInfoW
GetSystemMenu
EnumThreadWindows
ModifyMenuW
PeekMessageW
DrawEdge
SetCursorPos
InsertMenuW
LoadBitmapW
IsWindowEnabled
SetTimer
RedrawWindow
GetInputState
TranslateAcceleratorW
GetScrollInfo
DdeCreateDataHandle
GetWindow
SetCursor
DestroyCursor

gdi32

SetMetaFileBitsEx
CreateEnhMetaFileW
Rectangle
RestoreDC
SetMapMode
ExtCreatePen
GetStockObject
PatBlt
GetWinMetaFileBits
CreateDIBSection
Ellipse
CreateSolidBrush
GetRegionData
GetTextMetricsW
BitBlt
SetWindowExtEx
PolyPolygon
CombineRgn
EnumFontFamiliesExW
GetDIBColorTable
GetNearestPaletteIndex
ExtSelectClipRgn
DeleteEnhMetaFile
CreatePolygonRgn
Arc
SetBrushOrgEx
MaskBlt
GetTextColor
GetEnhMetaFileW
OffsetRgn
SelectClipRgn
GetTextExtentPoint32W
SetStretchBltMode
CopyEnhMetaFileW
CreateRectRgn
GetSystemPaletteEntries
DeleteDC
CreatePalette
GetClipBox
GetPaletteEntries
PtInRegion
CreateHatchBrush
SetBkColor
RectInRegion
ExtCreateRegion
CreateCompatibleDC
Polyline
SetWinMetaFileBits
StretchBlt
CreateBitmapIndirect
GetRgnBox
CreateICW
SelectPalette
StretchDIBits
Polygon
GdiFlush
SetPolyFillMode
SetTextColor
ExcludeClipRect
SelectObject
SetPixel
SetViewportExtEx
ExtFloodFill
MoveToEx
DeleteObject
GetPixel
CreateFontIndirectW
EqualRgn
GetDeviceCaps
SetViewportOrgEx
GetTextExtentExPointW
CreatePen
GetDIBits
CreatePatternBrush
PlayEnhMetaFile
CreateDIBitmap
LineTo
CreateCompatibleBitmap
SetBkMode
Pie
SetWindowOrgEx
GetObjectW
SetROP2
GetBkColor
SaveDC
RealizePalette
CreateBitmap
CreateRectRgnIndirect
TextOutW
CloseEnhMetaFile
GetEnhMetaFileHeader
GetCharABCWidthsW
GetMetaFileBitsEx
SetTextAlign
RoundRect

comdlg32

ChooseColorW
GetOpenFileNameW
CommDlgExtendedError
GetSaveFileNameW
ChooseFontW

advapi32

OpenSCManagerW
RegQueryValueExA
RegOpenKeyExW
CloseServiceHandle
RegOpenKeyExA
GetUserNameW
AdjustTokenPrivileges
ControlService
OpenProcessToken
LookupPrivilegeValueW
RegSetValueExW
RegDeleteValueW
RegCreateKeyW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueExW
RegCloseKey
OpenServiceW
RegEnumValueW
RegQueryInfoKeyW

shell32

Shell_NotifyIconW
SHGetPathFromIDListW
SHFileOperationW
SHGetSpecialFolderLocation
DragAcceptFiles
SHGetFolderPathW
ShellExecuteExW
DragFinish
SHBrowseForFolderW
ExtractIconExW
SHGetIconOverlayIndexW
DragQueryFileW
ExtractIconW
SHGetMalloc
SHGetFileInfoW
DragQueryPoint

ole32

CoCreateInstance
RevokeDragDrop
ReleaseStgMedium
CoLockObjectExternal
CoFreeUnusedLibraries
OleGetClipboard
OleSetClipboard
RegisterDragDrop
OleInitialize
OleFlushClipboard
CoTaskMemFree
OleIsCurrentClipboard
OleUninitialize
DoDragDrop

oleaut32

SysStringLen
SysAllocString

comctl32

ImageList_Destroy
ord17
ImageList_DragEnter
ImageList_BeginDrag
ImageList_Create
ImageList_GetIconSize
ImageList_DragLeave
ImageList_GetImageCount
ImageList_AddMasked
ord16
ImageList_SetBkColor
ImageList_Add
ImageList_Draw
ImageList_Remove
ImageList_DragMove
ImageList_GetIcon
ImageList_EndDrag
ImageList_SetDragCursorImage
ImageList_Replace
ImageList_ReplaceIcon
CreateStatusWindowW

winmm

PlaySoundW

wsock32

closesocket
send
ntohl
gethostbyaddr
shutdown
connect
recvfrom
htonl
WSASetLastError
setsockopt
listen
ioctlsocket
bind
socket
getpeername
accept
getsockname
__WSAFDIsSet
inet_ntoa
ntohs
WSACleanup
WSAStartup
WSAGetLastError
sendto
gethostbyname
select
inet_addr
getservbyname
getsockopt
recv
htons

mpr

WNetGetConnectionW

netapi32

NetApiBufferFree
NetShareEnum

ws2_32

WSAWaitForMultipleEvents
WSACloseEvent
WSAEnumNetworkEvents
WSAEventSelect
WSASetEvent
WSACreateEvent

rasapi32

RasDeleteEntryA

msvcrt

_setmode
memchr
bsearch
strncmp
fseek
memcpy
gmtime
wcstoul
strstr
_stricmp
_wopen
fputws
frexp
strncat
_write
rand
iswctype
cosh
putwc
__mb_cur_max
ceil
_wmkdir
setlocale
calloc
modf
tan
_wrmdir
strncpy
atoi
_read
setvbuf
__set_app_type
_wsetlocale
_getcwd
wcscmp
fputc
_wtol
cos
wcsxfrm
wcsspn
swprintf
tanh
floor
_wcsnicmp
fgetpos
_flsbuf
__p__environ
memmove
difftime
_wtoi
strcpy
_wgetenv
_lseeki64
sqrt
realloc
sprintf
strlen
_beginthreadex
_wfopen
fread
fwrite
wcschr
fsetpos
_onexit
swscanf
strtod
_waccess
sscanf
puts
_cexit
localtime
srand
longjmp
sinh
atan
_pctype
tolower
exit
strftime
pow
_isctype
abort
_endthreadex
fmod
fclose
strtoul
clock
_setjmp
_get_osfhandle
getenv
_wrename
atan2
fputs
getwc
wcscpy
qsort
fflush
memset
time
ungetwc
ctime
_strnicmp
sin
strerror
fgets
strtol
_filbuf
wcscoll
_wcsdup
free
_wcsicmp
strrchr
_errno
strchr
fopen
ftell
wcsstr
towupper
mktime
clearerr
_filelengthi64
_assert
wcsftime
_close
wcstod
atexit
_open_osfhandle
acos
_wremove
atof
_iob
ungetc
wcslen
wcscat
fgetc
fprintf
signal
_open
wcsncmp
wcstol
mbstowcs
log
wcsncpy
_wstati64
__getmainargs
strcat
exp
strcmp
_telli64
ldexp
towlower
strcoll
strxfrm
toupper
__p__fmode
log10
wcspbrk
vfprintf
malloc
_commit
asin
_fdopen
fputwc

Sections

.text
Size: 493KB - Virtual size: 492KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 330KB - Virtual size: 406KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a64ce4bf0e469a95f1b3416342da0cf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

winmm

wsock32

mpr

netapi32

ws2_32

rasapi32

msvcrt

Sections

.text Size: 493KB - Virtual size: 492KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 330KB - Virtual size: 406KB

.rsrc Size: 16KB - Virtual size: 16KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 493KB - Virtual size: 492KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 330KB - Virtual size: 406KB

.rsrc
Size: 16KB - Virtual size: 16KB

.reloc
Size: 5KB - Virtual size: 5KB