318ee8f8706017be81dc8abdd03fcaad92eea9689c3e4f579c94a5be5c3f3edc

Sharing

Copy URL Twitter E-mail

General

Target

318ee8f8706017be81dc8abdd03fcaad92eea9689c3e4f579c94a5be5c3f3edc
Size

1.7MB
MD5

495a4b87ac453b7bf434ff81598cd3d6
SHA1

60f12e0722596a80b7f17ea781fb8a0233dbd215
SHA256

318ee8f8706017be81dc8abdd03fcaad92eea9689c3e4f579c94a5be5c3f3edc
SHA512

f2a5834b73152698d602307d9fadc73ea4bbf02678259d0ea27ad721d88d1b5d4ced047fa57ffff4d47ff5008a23c3c864cc47c58d795f448071af0cf6dcef96
SSDEEP

24576:IFzuo8CKUka6HZj/ZM7tYov1m32Cv/4CFcKOHKfTJfn4s:INmaGZj/ZR9bRKH8T1

Score

N/A

Malware Config

Signatures

Files

318ee8f8706017be81dc8abdd03fcaad92eea9689c3e4f579c94a5be5c3f3edc
.exe windows x64

e428eea44f90e7c13f31abcdc7951c8b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
RtlVirtualUnwind
GetCPInfo
FreeEnvironmentStringsW
GetOEMCP
Sleep
GetTimeZoneInformation
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
HeapSize
VirtualQuery
GetSystemInfo
RtlPcToFileHeader
RaiseException
GetSystemTimeAsFileTime
HeapReAlloc
RtlUnwindEx
RtlLookupFunctionEntry
GetStartupInfoW
GetTickCount
SetErrorMode
GetVersionExW
LocalFileTimeToFileTime
FileTimeToLocalFileTime
CreateFileW
GetShortPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
lstrcmpiW
GetStringTypeExW
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileW
MoveFileW
GetCurrentDirectoryW
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
SystemTimeToFileTime
FileTimeToSystemTime
lstrlenA
GlobalFlags
GetDiskFreeSpaceW
GetFullPathNameW
GetTempFileNameW
GetFileTime
SetFileTime
GetFileAttributesW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetModuleHandleA
CloseHandle
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
GetModuleFileNameW
GetVersion
GetCurrentProcessId
GlobalGetAtomNameW
GlobalAlloc
FormatMessageW
LocalFree
MulDiv
lstrlenW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryW
CompareStringW
GetLastError
lstrcmpW
GetModuleHandleW
GetVersionExA
WideCharToMultiByte
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceW
MultiByteToWideChar
ExitProcess
GetThreadLocale
VirtualProtect
LoadLibraryA
GetProcAddress
FreeLibrary
VirtualAlloc
GetNativeSystemInfo
HeapAlloc
SetLastError
VirtualFree
GetProcessHeap
GetACP
HeapFree

user32

CreateMenu
PostThreadMessageW
GetTabbedTextExtentA
GetDCEx
LockWindowUpdate
RegisterClipboardFormatW
UnregisterClassW
WindowFromPoint
SetParent
DeleteMenu
IsRectEmpty
GetSysColorBrush
LoadCursorW
DestroyCursor
SetRect
KillTimer
SetWindowContextHelpId
MapDialogRect
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
ShowOwnedPopups
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
SystemParametersInfoW
GetMenuItemInfoW
InflateRect
GetDC
ReleaseDC
IsZoomed
UnpackDDElParam
ReuseDDElParam
DestroyMenu
GetWindowThreadProcessId
SetCursor
ReleaseCapture
LoadAcceleratorsW
InvalidateRect
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorW
GetMenuStringW
AppendMenuW
InsertMenuW
RemoveMenu
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageA
SendDlgItemMessageW
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassNameW
GetClassLongPtrW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetWindowLongPtrW
SetWindowLongPtrW
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
GetMenu
PostMessageW
GetMenuItemID
GetMenuItemCount
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowRgn
DrawIcon
FindWindowW
MessageBeep
GetNextDlgGroupItem
SetCapture
InvalidateRgn
CopyAcceleratorTableW
CharNextW
CharUpperW
SetDlgItemTextW
DestroyIcon
SetWindowLongW
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
SetTimer
GetClientRect
FillRect
UpdateWindow
GetSystemMetrics
SetWindowPos
LoadBitmapW
MessageBoxA
SendMessageW
GetWindowRect
LoadMenuW
GetSubMenu
LoadIconW
EnableWindow
ModifyMenuW
UnregisterClassA

gdi32

TextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
SetTextAlign
ExtSelectClipRgn
CreatePatternBrush
GetStockObject
CreatePen
DPtoLP
StartPage
EndPage
SetAbortProc
RectVisible
EndDoc
GetViewportOrgEx
PatBlt
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
LPtoDP
Ellipse
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceW
GetTextExtentPoint32A
GetWindowOrgEx
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
PtVisible
StartDocW
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
AbortDoc
CreateSolidBrush
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
ExtTextOutW
CreateFontIndirectW
StretchDIBits
DeleteDC
CreateFontW
GetCharWidthW
DeleteObject
GetTextExtentPoint32W
GetTextMetricsW
CreateCompatibleBitmap
CreateDCW
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CreateEllipticRgn
PtInRegion
CreateCompatibleDC
SelectObject
Rectangle
GetObjectW
BitBlt

comdlg32

GetFileTitleW

winspool.drv

GetJobW
OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

GetFileSecurityW
SetFileSecurityW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW
RegSetValueW
RegCloseKey
RegCreateKeyW

shell32

DragFinish
DragQueryFileW
ExtractIconW
SHGetFileInfoW
Shell_NotifyIconW

shlwapi

PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

oledlg

OleUIBusyW

ole32

OleFlushClipboard
CoRegisterMessageFilter
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoRevokeClassObject
CoGetClassObject
OleIsCurrentClipboard
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
StgOpenStorageOnILockBytes

oleaut32

SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysFreeString
SysStringLen

ws2_32

WSACleanup
WSAStartup

Sections

.text
Size: 439KB - Virtual size: 438KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 534KB - Virtual size: 557KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 536KB - Virtual size: 536KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e428eea44f90e7c13f31abcdc7951c8b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

ws2_32

Sections

.text Size: 439KB - Virtual size: 438KB

.rdata Size: 165KB - Virtual size: 165KB

.data Size: 534KB - Virtual size: 557KB

.pdata Size: 33KB - Virtual size: 33KB

.rsrc Size: 536KB - Virtual size: 536KB

.text
Size: 439KB - Virtual size: 438KB

.rdata
Size: 165KB - Virtual size: 165KB

.data
Size: 534KB - Virtual size: 557KB

.pdata
Size: 33KB - Virtual size: 33KB

.rsrc
Size: 536KB - Virtual size: 536KB