2a031efc177964dc8ca55980d9f071868935d10819fecf1270477c9dd7cd4c6b

Sharing

Copy URL Twitter E-mail

General

Target

2a031efc177964dc8ca55980d9f071868935d10819fecf1270477c9dd7cd4c6b
Size

1.8MB
MD5

de5026c75c568a91c5753bd091f9337e
SHA1

0f3b7ba3a3a8e8305d9a1d4b49d91ad344a37f3a
SHA256

2a031efc177964dc8ca55980d9f071868935d10819fecf1270477c9dd7cd4c6b
SHA512

4b867eeab0409a4155b9ba89c64f04ba2bd44c45a7102811475b78eeaf49a2e55c3120df81726877a0e2e32e9e4c2e6bebf5d666ad46b6cbb100cee4310b2c5d
SSDEEP

49152:4IxzLHIIaGZ+EJTkQiona22xxa5+lSW6OkG3V4LUuWKkAZT:OIaW+YTkQiona22bplSW6wl4YuWKkAF

Score

N/A

Malware Config

Signatures

Files

2a031efc177964dc8ca55980d9f071868935d10819fecf1270477c9dd7cd4c6b
.exe windows x86

f681f9b757723d08f967039b7babe1fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
GetTimeZoneInformation
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
GetFileType
SetStdHandle
GetTickCount
HeapSize
HeapQueryInformation
VirtualQuery
GetSystemInfo
RaiseException
HeapReAlloc
CreateThread
ExitThread
ExitProcess
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
GetCommandLineW
FindResourceExW
GetNumberFormatW
GetWindowsDirectoryW
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
GetFileAttributesExW
SetErrorMode
Sleep
GetProfileIntW
SearchPathW
GetTempPathW
GetTempFileNameW
FileTimeToSystemTime
lstrlenA
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
GetConsoleMode
RtlUnwind
GetConsoleCP
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
DeleteFileW
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
TlsGetValue
LocalAlloc
GetSystemDirectoryW
GetCurrentDirectoryW
GlobalFlags
InitializeCriticalSection
CreateFileW
GetFileSize
GetFileAttributesW
GlobalReAlloc
GlobalGetAtomNameW
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
lstrcpyW
FreeResource
GlobalFindAtomW
GetVersionExW
CompareStringW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GlobalFree
CopyFileW
GlobalSize
GlobalUnlock
FormatMessageW
LocalFree
MulDiv
GetCurrentProcessId
GlobalAddAtomW
GetPrivateProfileStringW
lstrlenW
WritePrivateProfileStringW
GetPrivateProfileIntW
WaitForSingleObject
ResumeThread
SetThreadPriority
CloseHandle
lstrcmpA
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
GetModuleFileNameW
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
CompareStringA
ActivateActCtx
LoadLibraryW
GetLastError
DeactivateActCtx
SetLastError
MultiByteToWideChar
WideCharToMultiByte
GlobalLock
lstrcmpW
GlobalAlloc
FreeLibrary
GetLocaleInfoW
LoadLibraryExW
InterlockedExchange
GetProcessHeap
HeapFree
HeapAlloc
GetModuleHandleW
LoadLibraryA
VirtualAlloc
VirtualProtect
GetProcAddress
LockResource
LoadResource
SizeofResource
FindResourceW
SetEnvironmentVariableA

user32

EndDialog
GetUpdateRect
FrameRect
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
SetRect
IsClipboardFormatAvailable
UnregisterClassW
MapVirtualKeyExW
GetKeyNameTextW
IsCharLowerW
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
UnionRect
DrawIconEx
DrawFocusRect
DrawFrameControl
DrawEdge
GetMenuItemInfoW
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetLayeredWindowAttributes
EnumDisplayMonitors
GetDC
ReleaseDC
GetSysColorBrush
RealChildWindowFromPoint
MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
EmptyClipboard
CloseClipboard
SetClipboardData
CopyImage
OpenClipboard
FillRect
DrawStateW
RegisterClipboardFormatW
EnumChildWindows
LockWindowUpdate
IsRectEmpty
LoadCursorW
KillTimer
InflateRect
IsMenu
SetCapture
GetSystemMenu
DeleteMenu
MonitorFromPoint
GetSystemMetrics
UnpackDDElParam
ReuseDDElParam
LoadImageW
DestroyIcon
ReleaseCapture
InvalidateRect
IsIconic
InsertMenuItemW
IntersectRect
BringWindowToTop
ShowWindow
TranslateAcceleratorW
SetClassLongW
GetNextDlgTabItem
SetParent
CreatePopupMenu
NotifyWinEvent
ClientToScreen
SetWindowRgn
CreateAcceleratorTableW
LoadAcceleratorsW
DestroyAcceleratorTable
GetAsyncKeyState
CharUpperW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyW
ToUnicodeEx
CopyAcceleratorTableW
DestroyMenu
GetDesktopWindow
WaitMessage
PostThreadMessageW
LoadMenuW
SetRectEmpty
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
IsWindow
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
GetClientRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CreateDialogIndirectParamW
CharUpperBuffW
SetCursorPos
CopyIcon
SubtractRect
InvertRect
HideCaret
DestroyCursor
GetWindowRgn
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
CopyRect
PtInRect
DrawIcon
CreateMenu
MapDialogRect
GetDoubleClickTime
GetNextDlgGroupItem
WindowFromPoint
GetIconInfo
GetWindow
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
ShowOwnedPopups
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
PostMessageW
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
SystemParametersInfoW
OffsetRect
MessageBeep
RedrawWindow
IsZoomed
SendMessageW
SetTimer

gdi32

OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetObjectType
CreateHatchBrush
CreateEllipticRgn
CreatePolygonRgn
GetBkColor
Polyline
Ellipse
Polygon
SetRectRgn
DPtoLP
Rectangle
SetViewportOrgEx
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
GetWindowOrgEx
LPtoDP
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
ExtFloodFill
SetPaletteEntries
EnumFontFamiliesExW
GetTextFaceW
SetPixelV
ExtTextOutW
Escape
TextOutW
RectVisible
SetMapMode
PtVisible
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
CreatePalette
CreateBitmap
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetTextCharsetInfo
EnumFontFamiliesW
CreateFontIndirectW
CreatePatternBrush
CreateSolidBrush
CreateDIBitmap
CreateDIBSection
SetPixel
GetPixel
StretchBlt
CombineRgn
CreateRectRgn
GetStockObject
SelectPalette
RealizePalette
GetDIBits
DeleteObject
PatBlt
BitBlt
SetDIBColorTable
SelectObject
DeleteDC
GetTextExtentPoint32W
GetTextMetricsW
GetTextColor
CreateRoundRectRgn
CreatePen
CreateCompatibleDC
CreateCompatibleBitmap
GetRgnBox
OffsetRgn
CreateRectRgnIndirect
GetObjectW
SetBkColor
SetTextColor
CreateDCW
CopyMetaFileW
GetDeviceCaps
GetClipBox

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegEnumValueW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegCloseKey
RegEnumKeyExW

shell32

SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
DragFinish
ShellExecuteW
SHGetFileInfoW
SHGetDesktopFolder
SHAppBarMessage
DragQueryFileW

comctl32

ImageList_GetIconSize

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathRemoveFileSpecW

ole32

OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CoInitializeEx
OleGetClipboard
DoDragDrop
OleLockRunning
CoUninitialize
CoInitialize
CoCreateInstance
CreateStreamOnHGlobal
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CoTaskMemFree
CoCreateGuid

oleaut32

SysFreeString
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysAllocString

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageRectI

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 267KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f681f9b757723d08f967039b7babe1fd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 267KB - Virtual size: 267KB

.data Size: 29KB - Virtual size: 59KB

.rsrc Size: 103KB - Virtual size: 103KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 267KB - Virtual size: 267KB

.data
Size: 29KB - Virtual size: 59KB

.rsrc
Size: 103KB - Virtual size: 103KB