25522a1076d949ca71d39c722dce470a39c2d6d8b98212462226da55dc8849e1

Sharing

Copy URL Twitter E-mail

General

Target

25522a1076d949ca71d39c722dce470a39c2d6d8b98212462226da55dc8849e1
Size

979KB
MD5

16e4b586b5c3a009084f4e1dc01b630b
SHA1

18adef6ab2e755cf4b7d5ce000666445b18de14d
SHA256

25522a1076d949ca71d39c722dce470a39c2d6d8b98212462226da55dc8849e1
SHA512

b5e39872a445a6a7074edb4c7ea4774de57dad2d3315c57e330e29040c2e8a5f6050c242194a18cb02cc525d024292e6216a52f90d56098ea41675ef9390e6b1
SSDEEP

12288:7ve+AsjtJm6wQ76ZdxUwDOiVdNYadlmNo:t9Jm6wnZTnqadlmS

Score

N/A

Malware Config

Signatures

Files

25522a1076d949ca71d39c722dce470a39c2d6d8b98212462226da55dc8849e1
.exe windows x86

067738818becbeca92b51feb26ee2b70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA
RegCloseKey
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA

comctl32

ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_Draw
InitCommonControls
ImageList_Destroy
ImageList_Create
ImageList_DrawIndirect

gdi32

GetStockObject
CreateCompatibleDC
BitBlt
CreateCompatibleBitmap
SetTextColor
SetBkColor
DeleteDC
SetPixel
GetPixel
CreateBitmap
CreateSolidBrush
GetCurrentObject
GetObjectA
CreateRectRgn
CreatePolygonRgn
CombineRgn
StrokeAndFillPath
EndPath
GetTextExtentPoint32A
PtVisible
DeleteObject
BeginPath
TextOutA
ExtTextOutA
RectVisible
CreateFontIndirectA
GetTextMetricsA
Escape
GetClipBox
RestoreDC
SaveDC
SetBkMode
SetMapMode
SetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SelectClipRgn
ExcludeClipRect
ScaleWindowExtEx
MoveToEx
IntersectClipRect
LineTo
GetDeviceCaps
CreatePen
CreatePatternBrush
PatBlt
SetRectRgn
CreateRectRgnIndirect
CreateDIBitmap
SelectObject
GetTextExtentPointA

kernel32

HeapSize
HeapReAlloc
TerminateProcess
HeapDestroy
GetACP
VirtualFree
HeapCreate
IsBadWritePtr
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
VirtualAlloc
GetEnvironmentStringsW
LockResource
GetEnvironmentStrings
GetLastError
LCMapStringA
LCMapStringW
Sleep
IsBadCodePtr
SetStdHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetCommandLineA
SetEnvironmentVariableA
GetLocaleInfoW
GetFileSize
SetFilePointer
WideCharToMultiByte
CreateFileA
ReadFile
CloseHandle
GetModuleFileNameA
InterlockedDecrement
GetVersionExA
GetVersion
GetProcAddress
GetFileTime
FindFirstFileA
FindNextFileA
FindClose
lstrcat
lstrlen
WinExec
lstrcpy
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
lstrcmpi
MultiByteToWideChar
FormatMessageA
LocalFree
DeleteFileA
MoveFileA
InterlockedExchange
GetProfileStringA
GetTimeZoneInformation
GetStartupInfoA
GetSystemTimeAsFileTime
HeapFree
IsBadReadPtr
HeapAlloc
WritePrivateProfileStringA
RtlUnwind
SizeofResource
SetErrorMode
GetOEMCP
GlobalFlags
GetCPInfo
GetProcessVersion
TlsSetValue
TlsGetValue
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
EnterCriticalSection
TlsAlloc
LocalAlloc
InitializeCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetCurrentThread
GetVolumeInformationA
GetFullPathNameA
LockFile
SetEndOfFile
UnlockFile
DuplicateHandle
FlushFileBuffers
WriteFile
lstrcmp
GlobalFree
lstrlenW
FileTimeToLocalFileTime
FileTimeToSystemTime
MulDiv
LockResource
FindResourceA
LoadResource
GlobalFindAtomA
GlobalGetAtomNameA
GlobalAddAtomA
InterlockedIncrement
GlobalDeleteAtom
GetModuleHandleA
GlobalLock
SetCurrentDirectoryA
GlobalAlloc
CreateThread
GlobalUnlock
WaitForSingleObject
GetCurrentProcessId
CreateMutexA
GetCurrentThreadId
VerLanguageNameA
GetCurrentProcess
SetUnhandledExceptionFilter
GetFileAttributesA
SetLastError
RaiseException
GetTickCount
ExitProcess
lstrcpyn
CompareStringA
CopyFileA
CompareStringW
GetStdHandle
GetFileType

oleaut32

VariantChangeType
SysAllocStringLen
VariantInit
VariantCopy
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysFreeString
VariantClear
SysStringLen
GetErrorInfo

shell32

ShellExecuteA
ShellExecuteEx

user32

LockWindowUpdate
GetSysColorBrush
SetRect
IsZoomed
GetClassNameA
SetParent
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
GetDCEx
IsChild
WinHelpA
RegisterClassA
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
RegisterClipboardFormatA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetTopWindow
PostQuitMessage
DrawIcon
GetMenu
ModifyMenuA
IsRectEmpty
FindWindowA
CharUpperA
EndPaint
EmptyClipboard
SetClipboardData
CloseClipboard
GetWindow
SendNotifyMessageA
wsprintfA
MessageBoxA
LoadIconA
GetFocus
CopyIcon
GetMessagePos
SetTimer
MessageBeep
SetWindowLongA
KillTimer
GrayStringA
DrawTextA
TabbedTextOutA
PtInRect
SetCapture
GetCapture
ReleaseCapture
GetClipCursor
GetCursorPos
ClipCursor
GetSystemMetrics
ScreenToClient
InvertRect
SetRectEmpty
SetWindowRgn
GetClassInfoA
DefWindowProcA
LoadCursorA
IsWindow
SetWindowPos
LoadMenuA
LoadImageA
GetIconInfo
GetDC
CreateIconIndirect
LoadStringA
ReleaseDC
FillRect
DrawStateA
OffsetRect
GetClientRect
CopyRect
FrameRect
InflateRect
GetSysColor
DrawFocusRect
GetWindowRect
GetSubMenu
EndDialog
CreateDialogIndirectParamA
GetMenuStringA
IsIconic
BeginPaint
TrackPopupMenuEx
PostMessageA
ClientToScreen
WindowFromPoint
GetActiveWindow
InvalidateRect
SetCursor
GetParent
GetNextDlgTabItem
SendMessageA
GetWindowLongA
DestroyCursor
DestroyCursor
DestroyMenu
EnableWindow
IsWindowVisible
GetWindowDC
GetMessageA
TranslateMessage
ValidateRect
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessage
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
EqualRect
DispatchMessageA
SetActiveWindow
SetFocus
AdjustWindowRectEx
GetDesktopWindow
OpenClipboard
GetKeyState
PeekMessageA
DefDlgProcA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
CharNextA
IsWindowUnicode

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

wininet

InternetErrorDlg
InternetCloseHandle
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
HttpQueryInfoA
InternetReadFile
InternetConnectA

winmm

PlaySound

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA

ole32

OleRun
StgIsStorageFile
CoCreateInstance
CoUninitialize
StgOpenStorage
StringFromGUID2
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoTaskMemFree

Sections

.text
Size: 500KB - Virtual size: 500KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 284KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

067738818becbeca92b51feb26ee2b70

Headers

File Characteristics

Imports

advapi32

comctl32

gdi32

kernel32

oleaut32

shell32

user32

version

wininet

winmm

winspool.drv

comdlg32

ole32

Sections

.text Size: 500KB - Virtual size: 500KB

.rdata Size: 100KB - Virtual size: 100KB

.data Size: 284KB - Virtual size: 372KB

.idata Size: 12KB - Virtual size: 12KB

.rsrc Size: 82KB - Virtual size: 119KB

.text
Size: 500KB - Virtual size: 500KB

.rdata
Size: 100KB - Virtual size: 100KB

.data
Size: 284KB - Virtual size: 372KB

.idata
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 82KB - Virtual size: 119KB