a7818a820021e5dea2f3375d11c951ad3ed6845b89c7a0252cea0e5b5236dad7

Sharing

Copy URL Twitter E-mail

General

Target

a7818a820021e5dea2f3375d11c951ad3ed6845b89c7a0252cea0e5b5236dad7
Size

49KB
MD5

78a0f080bd887229bf53eec97ec04ed9
SHA1

902ab1d19fbd104b6408a767bd9aabd7408b74f6
SHA256

a7818a820021e5dea2f3375d11c951ad3ed6845b89c7a0252cea0e5b5236dad7
SHA512

7bc1edf9f8d18d0bd074e5f89770def9ad30b69d1176f0dab4805b0caeec0a2ac4baece8f694b28239917217aa86808a5dcc1610403d88c80b1022e19d3eda40
SSDEEP

1536:GCzhnDKOz8JThOD9laq2jfsybcP4adrVkxEmqJd:PtDKOY7UOhjsacP4adrVkxEmS

Score

N/A

Malware Config

Signatures

Files

a7818a820021e5dea2f3375d11c951ad3ed6845b89c7a0252cea0e5b5236dad7
.exe windows x86

d3b1f78bcc0c478c46f45ceaa260ee64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatW
GlobalAddAtomW
FlushInstructionCache
LoadLibraryW
LoadLibraryExA
SetEvent
RaiseException
GetThreadLocale
FindNextChangeNotification
GetWindowsDirectoryW
GetPrivateProfileStringW
EnumResourceNamesA
ReleaseSemaphore
SizeofResource
CompareFileTime
InterlockedIncrement
CreateEventA
lstrcmpiW
WritePrivateProfileStringW
GetLocalTime
OpenProcess
DeleteFileW
GetCurrentProcessId
FormatMessageW
GlobalAddAtomA
GetCurrentProcess
WideCharToMultiByte
GetLogicalDriveStringsW
lstrcpynW
OpenEventW
FreeLibraryAndExitThread
WriteFile
GetDriveTypeW
GetWindowsDirectoryA
FindResourceExW
lstrcmpW
LCMapStringA
lstrcmpA
GetVersionExW
GetSystemTimeAsFileTime
CreateFileA
GetExitCodeProcess
GetVersion
FindClose
QueryDosDeviceW
RemoveDirectoryA
GlobalUnlock
GetLastError
FindResourceA
LocalAlloc
GetUserDefaultLangID
GetCurrentDirectoryW
GetSystemDirectoryA
GetCurrentThread
GetVersionExA
GetFileType
IsBadWritePtr
WaitForSingleObjectEx
FileTimeToLocalFileTime
CompareStringA
IsBadReadPtr
GetTempFileNameW
WaitForSingleObject
UnmapViewOfFile
GetFullPathNameA
GetDriveTypeA
OutputDebugStringA
MapViewOfFile
GetDiskFreeSpaceA
CreateFileW
SystemTimeToFileTime
FindFirstFileA
FreeEnvironmentStringsW
HeapAlloc
QueryDosDeviceA
DeleteFileA
GetFileAttributesA
GetFileAttributesExW
SetFilePointer
GetPrivateProfileStringA
GlobalSize
SetFileAttributesA
DuplicateHandle
InterlockedExchange
HeapFree
IsValidLocale
GetFileAttributesW
GetEnvironmentStrings
GetVolumeInformationW
CreateFileMappingW
FindNextFileA
WriteProfileStringW
lstrcpynA
WaitForMultipleObjects
GetModuleHandleW
SetErrorMode
CreateMutexA
WritePrivateProfileStringA
lstrcmpiA
FlushFileBuffers
GetTimeFormatW
WriteProfileStringA
CreateEventW
EnumResourceNamesW
EnterCriticalSection
CreateMutexW
GetShortPathNameW
GetSystemDefaultLCID
GetNumberFormatA
ResetEvent
QueryPerformanceCounter
GetLogicalDriveStringsA
LeaveCriticalSection
VirtualFree
FindResourceW
GetSystemDirectoryW
CreateFileMappingA
DeleteCriticalSection
GetFileSize
CreateThread
GetShortPathNameA
GetFullPathNameW
FreeLibrary
CloseHandle
OpenEventA
SetFileAttributesW
MultiByteToWideChar
lstrlenA
FindResourceExA
FindNextFileW
GetCurrentDirectoryA
ReadDirectoryChangesW
GetTempFileNameA
lstrcpyW
GetTempPathA
FindFirstChangeNotificationW
GetFileAttributesExA
RemoveDirectoryW
FreeEnvironmentStringsA
CopyFileExW
GlobalMemoryStatus
GetFileTime
GetProcessHeap
ReleaseMutex
InterlockedDecrement
LoadResource
lstrlenW
LocalFree
HeapDestroy
GetDateFormatA
GetUserDefaultLCID
GetNumberFormatW
LCMapStringW
GetLocaleInfoW
LocalFileTimeToFileTime
GlobalAlloc
FindAtomW
GlobalDeleteAtom
GetLocaleInfoA
GetExitCodeThread
CompareStringW
GetTimeZoneInformation
SetEndOfFile
GetModuleFileNameA
GlobalLock
GetProfileStringW
LockResource
ExpandEnvironmentStringsW
CreateDirectoryA
DeviceIoControl
GlobalFree
FormatMessageA
ReadFile
FileTimeToSystemTime
SetUnhandledExceptionFilter
SetLastError
GetDateFormatW
GetSystemTime
GetTimeFormatA
InitializeCriticalSection
GetModuleFileNameW
CreateDirectoryW
GetSystemPowerStatus
GetSystemInfo
FindFirstFileW
FindCloseChangeNotification
ExpandEnvironmentStringsA
FreeResource
SetThreadPriority
GetLongPathNameA
GetLongPathNameW
GetThreadPriority
MulDiv
GetProfileStringA
OutputDebugStringW
GetVolumeInformationA

user32

CreateMenu
TranslateMessage
SetDlgItemInt
GetWindowRgn
EnumChildWindows
WinHelpA
DefWindowProcA
GetDC
DestroyWindow
AppendMenuA
GetMenuItemInfoW
GetForegroundWindow
LoadCursorW
GetTopWindow
GetClassInfoExW
PeekMessageW
GetWindow
DeleteMenu
DestroyIcon
IntersectRect
GetSysColor
WindowFromDC
CreateWindowExA
ClipCursor
SetForegroundWindow
SystemParametersInfoW
TrackPopupMenu
CallWindowProcA
BringWindowToTop
CallWindowProcW
GetClassLongA
GetClassNameW
GetFocus
SetFocus
MsgWaitForMultipleObjects
wvsprintfW
LoadCursorA
IsRectEmpty
LoadAcceleratorsA
VkKeyScanA
LoadMenuA
DrawTextW
OffsetRect
GetWindowTextW
SendMessageTimeoutA
LoadIconA
DestroyMenu
GetClientRect
BeginPaint
SetTimer
CopyAcceleratorTableW
RegisterClassExW
ModifyMenuA
MonitorFromRect
GetPropA
FillRect
GetMessagePos
SetMenu
EndPaint
GetNextDlgTabItem
SetClassLongA
IsDlgButtonChecked
GetSysColorBrush
SendMessageTimeoutW
GetDlgCtrlID
SetCursor
WaitMessage
GetParent
DialogBoxParamW
GetClassInfoW
GetAsyncKeyState
RemoveMenu
GetWindowLongW
CheckMenuItem
SetMenuItemInfoA
IsWindowUnicode
CharLowerW
UnionRect
GetDesktopWindow
ClientToScreen
SetWindowPos
SystemParametersInfoA
ScreenToClient
InsertMenuW
GetIconInfo
GetDlgItem
wsprintfW
GetWindowTextLengthW
DialogBoxParamA
SendDlgItemMessageW
SetParent
EnumWindows
CharNextW
CopyImage
DrawAnimatedRects
SetWindowPlacement
ModifyMenuW
PostThreadMessageA
CopyIcon
UpdateWindow
IsIconic
RegisterClassW
GetMenuItemID
UnregisterClassA
CallNextHookEx
CharUpperBuffW
GetDlgItemTextA
SetWindowTextW
GetDialogBaseUnits
EnableMenuItem
DestroyAcceleratorTable
PeekMessageA
FindWindowA
CreateDialogParamA
RegisterClassExA
SetPropA
WinHelpW
InvalidateRect
DrawIconEx
PostMessageA
RedrawWindow
KillTimer
IsWindowEnabled
GetWindowThreadProcessId
GetMenuItemInfoA
MessageBeep
PostThreadMessageW
CreatePopupMenu
DrawFocusRect
GetWindowTextA
PostMessageW
RegisterClassA
RegisterClipboardFormatA
GetMessageA
SetDlgItemTextW
IsMenu
GetWindowTextLengthA
EqualRect
NotifyWinEvent
CreateDialogParamW
IsDialogMessageA
LoadStringA
GetMessageW
GetMessageTime
RegisterClipboardFormatW
ShowWindow
LoadImageA
GetPropW
TrackPopupMenuEx
GetMenu
MessageBoxW
ReleaseCapture
ScrollWindowEx
GetClassNameA
SetWindowLongA
GetScrollInfo
InvalidateRgn
LoadImageW
GetQueueStatus
ReleaseDC
GetWindowDC
GetUpdateRect
DispatchMessageW
GetClassLongW
SetWindowsHookExW
UnregisterClassW
FindWindowExA
IsChild
MapWindowPoints
TranslateAcceleratorW
GetDoubleClickTime
UnhookWindowsHookEx
CreateWindowExW
RegisterWindowMessageA
GetSubMenu
CopyRect
IsWindowVisible
LoadIconW
PtInRect
GetMenuStringA
IsWindow
SetRect
GetMenuItemCount
InsertMenuItemA
DrawTextA
DestroyCursor
MoveWindow
DrawEdge
GetDlgItemTextW
GetMonitorInfoA
SetMenuItemInfoW
CheckMenuRadioItem
GetSystemMetrics
GetWindowLongA
SetDlgItemTextA
DefWindowProcW
SetClassLongW
PostQuitMessage
CheckDlgButton
GetAncestor
GetCapture
CopyAcceleratorTableA
FindWindowExW
GetCursorPos
GetWindowRect
TranslateAcceleratorA
InsertMenuItemW
GetActiveWindow
GetMonitorInfoW
IsDialogMessageW
GetWindowPlacement
SetWindowsHookExA
SetMenuInfo
AppendMenuW
LoadAcceleratorsW
GetClassInfoExA
SetWindowLongW
SendMessageW
LoadMenuW
SetPropW
GetClassInfoA
SetActiveWindow
GetMenuStringW
RegisterWindowMessageW
SendMessageA
FindWindowW
VkKeyScanW
MessageBoxA
SetWindowTextA
LoadStringW
GetKeyState
FrameRect
InsertMenuA
SetRectEmpty
SetScrollInfo
CloseWindow
MonitorFromPoint
AdjustWindowRectEx
CharNextA
MonitorFromWindow
EnableWindow
EndDialog
ValidateRect
DispatchMessageA
SetScrollPos
ShowCursor
CheckRadioButton
SetCapture
SetWindowRgn
InflateRect

gdi32

DPtoLP
SetROP2
GetTextExtentPoint32W
GetDeviceCaps
CombineRgn
Rectangle
OffsetWindowOrgEx
CreateICA
OffsetViewportOrgEx
ExtTextOutW
CreatePenIndirect
SetWindowExtEx
GetTextExtentPointA
TextOutW
DeleteMetaFile
CreateFontIndirectW
SetPaletteEntries
BitBlt
SetViewportOrgEx
RectVisible
ExtSelectClipRgn
LineTo
MoveToEx
GetTextExtentPoint32A
SelectClipRgn
SetLayout
CreateMetaFileW
CreateSolidBrush
GetObjectW
GetBkColor
CreateCompatibleBitmap
RealizePalette
CreateRectRgnIndirect
SetDIBitsToDevice
CreateFontA
GetPaletteEntries
Polygon
GetTextExtentPointW
StretchDIBits
GetObjectA
DeleteDC
StretchBlt
CreateCompatibleDC
CreatePen
IntersectClipRect
GetDIBits
GetRegionData
SetWindowOrgEx
CreateDCA
GetSystemPaletteEntries
SelectPalette
GetClipBox
GetTextMetricsW
SetBkColor
RestoreDC
SetMapMode
GetLayout
ExcludeClipRect
MaskBlt
GetTextAlign
GetRgnBox
SaveDC
SelectObject
LPtoDP
CreatePalette
CreateICW
OffsetRgn
GetStockObject
SetRectRgn
CreateFontW
SetTextAlign
SetTextCharacterExtra
GetTextMetricsA
GetDIBColorTable
GetObjectType
CreateFontIndirectA
SetTextColor
CreateDIBSection
DeleteObject
CreateBrushIndirect
ExtCreateRegion
CreateDCW
PtInRegion
CreateRectRgn
SetBkMode
SetStretchBltMode
CreateMetaFileA
CloseMetaFile
PatBlt

rpcrt4

NdrCStdStubBuffer_Release
CStdStubBuffer_DebugServerQueryInterface
NdrDllCanUnloadNow
NdrDllRegisterProxy
CStdStubBuffer_Disconnect
NdrCStdStubBuffer2_Release
CStdStubBuffer_Invoke
NdrDllUnregisterProxy
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
UuidCreate
NdrOleFree
CStdStubBuffer_IsIIDSupported
NdrStubForwardingFunction
NdrOleAllocate
NdrClientCall2
CStdStubBuffer_CountRefs
NdrStubCall2
IUnknown_QueryInterface_Proxy

advapi32

SetSecurityDescriptorOwner
RegCreateKeyExA
RegNotifyChangeKeyValue
AllocateAndInitializeSid
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
SetSecurityDescriptorDacl
RegSetValueExA
DuplicateTokenEx
RegDeleteKeyW
AddAccessAllowedAce
RegEnumValueA
SetFileSecurityW
AccessCheck
RegQueryInfoKeyW
SetSecurityDescriptorGroup
InitializeSecurityDescriptor
LogonUserW
RegEnumValueW
RegCloseKey
GetLengthSid
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW
CryptGenRandom
RegCreateKeyW
OpenThreadToken
FreeSid
GetFileSecurityW
RegSetValueA
CryptAcquireContextW
OpenProcessToken
InitializeAcl
RegEnumKeyExW
RegDeleteValueW
RegQueryInfoKeyA
RegQueryValueExA
RegSetValueW
RegCreateKeyA
RegOpenKeyExA
RegSetValueExW

ole32

CoMarshalInterface
RevokeDragDrop
PropVariantClear
HWND_UserFree
CoGetTreatAsClass
CoUnmarshalInterface
HWND_UserUnmarshal
CoCreateGuid
CoInitialize
CoTaskMemAlloc
CoCreateFreeThreadedMarshaler
CoFileTimeNow
CoTaskMemRealloc
HMENU_UserMarshal
IsAccelerator
DoDragDrop
StringFromIID
HMENU_UserUnmarshal
HWND_UserMarshal
StringFromCLSID
OleRegGetMiscStatus
CreateOleAdviseHolder
StringFromGUID2
CoDisconnectObject
GetRunningObjectTable
HBITMAP_UserFree
CoMarshalInterThreadInterfaceInStream
CoRegisterClassObject
CoTaskMemFree
HBITMAP_UserMarshal
HMENU_UserFree
OleLoadFromStream
GetHGlobalFromStream
CoReleaseMarshalData
OleSaveToStream
CreateDataAdviseHolder
HWND_UserSize
RegisterDragDrop
CreateStreamOnHGlobal
CoCreateInstance
HBITMAP_UserSize
CoRevokeClassObject
CLSIDFromProgID
HMENU_UserSize
CoInitializeEx
CLSIDFromString
CoFreeUnusedLibraries
OleRegGetUserType
CoGetInterfaceAndReleaseStream
ReleaseStgMedium
HBITMAP_UserUnmarshal
CoGetClassObject
CoGetMalloc
WriteClassStm
PropVariantCopy
CoUninitialize
OleRegEnumVerbs

msvcrt

time
abs
isxdigit
iswascii
abort
getenv
memcmp
_wcslwr
swprintf
wcstok
_adjust_fdiv
isdigit
_snwprintf
localtime
clock
atoi
wcschr
wcsspn
_ftol
towupper
wcscspn
_ui64tow
wcstombs
fwrite
bsearch
wcscoll
strcpy
_strnicmp
_mbslen
_ltow
iswspace
sscanf
_vsnprintf
ldexp
wcsncmp
memcpy
__CxxFrameHandler
wcstoul
fprintf
tolower
_wtol
wcsncat
_wcsnicmp
swscanf
_beginthread
realloc
_beginthreadex
strlen
_iob
_vsnwprintf
free
fflush
_wcsupr
_itoa
memmove
difftime
_wcsicmp
fopen
??3@YAXPAX@Z
_initterm
wcsstr
srand
_CIpow
wcstod
_setjmp3
iswdigit
strchr
wcsftime
wcsncpy
qsort
iswalnum
strncmp
_wfopen
towlower
fclose
_stricmp
_except_handler3
ceil
vswprintf
memset
isspace
_CIexp
_wcsicoll
iswalpha
longjmp
_wtoi
malloc
rand
wcsrchr
_ultow
__dllonexit
wcslen
_itow
toupper
wcscmp
wcstol
??2@YAPAXI@Z
wcspbrk
iswcntrl
_wtoi64
_endthread
wcscpy
floor
sprintf
iswprint
_memicmp
_onexit

version

GetFileVersionInfoSizeW
VerQueryValueA
GetFileVersionInfoA
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeA

comctl32

_TrackMouseEvent
DestroyPropertySheetPage
ImageList_Destroy
ImageList_Draw
PropertySheetA
ImageList_GetIconSize
ImageList_Add
CreatePropertySheetPageW
ImageList_ReplaceIcon
ImageList_LoadImageA
ImageList_Create
CreateStatusWindowW
CreatePropertySheetPageA
ImageList_LoadImageW
InitCommonControlsEx
ImageList_AddMasked
ImageList_GetImageCount
ImageList_Remove
PropertySheetW

msvfw32

ICInstall
ICInfo

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3b1f78bcc0c478c46f45ceaa260ee64

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

rpcrt4

advapi32

ole32

msvcrt

version

comctl32

msvfw32

Sections

.text Size: 21KB - Virtual size: 21KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 19KB - Virtual size: 18KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 21KB - Virtual size: 21KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 19KB - Virtual size: 18KB

.rsrc
Size: 2KB - Virtual size: 2KB