d00ac42018b35593e2359305fd279d6ed2d9b0a17a1cd7b70699e106458c322f

Sharing

Copy URL Twitter E-mail

General

Target

d00ac42018b35593e2359305fd279d6ed2d9b0a17a1cd7b70699e106458c322f
Size

778KB
MD5

7a06921ac99ebf0be87c54dd850a9fa0
SHA1

c8dbcceb679ac658b1b37c80a784904995edd5f6
SHA256

d00ac42018b35593e2359305fd279d6ed2d9b0a17a1cd7b70699e106458c322f
SHA512

892eda6063ef34fb0e17c2cbd20dd69637878388a85a9d249664795cdd5875a72f20e3844fa5082cebaa67d8dbe54398d9b083ba48887dc45b9befda73ce80af
SSDEEP

12288:7DjtFbGL0fGG6HYbRifb5RhClPixPqaqsjTBMj4Eq3rmpwdwHpTA:7DpFeL4Ab3hClPixPXSXqb0JT

Score

N/A

Malware Config

Signatures

Files

d00ac42018b35593e2359305fd279d6ed2d9b0a17a1cd7b70699e106458c322f
.exe windows x86

132e214239212a47e69f48e5e26f6f7c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

urlmon

URLDownloadToCacheFileW

wininet

InternetCrackUrlW
InternetOpenW
InternetCloseHandle
InternetConnectW
InternetReadFile
InternetSetOptionW
HttpOpenRequestW
HttpSendRequestW
HttpQueryInfoA
HttpQueryInfoW

kernel32

MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
GetModuleHandleW
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentProcessId
SetLastError
GetVersionExW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetFileSize
GetFileSizeEx
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
FindClose
GetFileTime
SetFileTime
GetSystemTimeAsFileTime
GetTickCount
CreateDirectoryW
CreateFileW
GetFileAttributesW
FindFirstFileW
LocalFree
GetCurrentProcess
GetVersion
FreeLibrary
LockFile
UnlockFile
LockFileEx
GetSystemTime
TlsAlloc
TlsGetValue
TlsSetValue
LoadLibraryA
LoadLibraryW
GetTempPathA
GetFullPathNameA
GetFullPathNameW
CreateFileA
GetFileAttributesA
DeleteFileA
DeleteFileW
AreFileApisANSI
InterlockedIncrement
InterlockedDecrement
GlobalAlloc
GlobalLock
GlobalUnlock
GetTempPathW
RaiseException
GetCurrentThreadId
GetExitCodeThread
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WaitForSingleObject
MulDiv
lstrcmpW
OpenMutexW
FormatMessageW
FileTimeToSystemTime
DosDateTimeToFileTime
FindNextFileW
GlobalHandle
GlobalFree
lstrcmpiW
LoadLibraryExW
ExitThread
CreateThread
GetModuleHandleExW
ExitProcess
IsDebuggerPresent
GetCPInfo
RtlUnwind
EncodePointer
GetStringTypeW
DecodePointer
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
InterlockedCompareExchange
HeapSize
HeapReAlloc
HeapDestroy
FindResourceExW
GetStartupInfoW
FindResourceW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
IsValidCodePage
GetACP
GetOEMCP
GetTimeZoneInformation
GetConsoleCP
GetModuleFileNameW
CreateMutexW
CloseHandle
SizeofResource
LoadResource
Sleep
GetLastError
OpenProcess
LockResource
GetConsoleMode
GetFileType
SetFilePointerEx
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
SetStdHandle
WriteConsoleW
ReadConsoleW
SetEnvironmentVariableA
GetCommandLineW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsFree
FlushInstructionCache

user32

ClientToScreen
SetWindowContextHelpId
GetClientRect
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
RedrawWindow
InvalidateRgn
InvalidateRect
EndPaint
BeginPaint
GetClassNameW
GetWindow
LoadCursorW
MapDialogRect
LoadStringW
DialogBoxIndirectParamW
GetActiveWindow
ScreenToClient
GetSysColor
FillRect
ReleaseDC
DestroyAcceleratorTable
GetWindowLongW
SetWindowLongW
GetDesktopWindow
CreateAcceleratorTableW
SetTimer
ReleaseCapture
SetCapture
GetFocus
SetFocus
CharNextW
SendDlgItemMessageW
GetDlgItem
EndDialog
SetWindowPos
MoveWindow
DestroyWindow
IsChild
IsWindow
CreateWindowExW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
DefWindowProcW
SendMessageW
RegisterWindowMessageW
PostMessageW
UnregisterClassW
GetParent
GetDC

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
DeleteDC
DeleteObject
GetDeviceCaps
GetStockObject
GetObjectW
SelectObject

advapi32

RegSetValueExW
RegQueryInfoKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegEnumValueW
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW
RegDeleteKeyW

shell32

ShellExecuteExW
SHGetFolderPathW
SHFileOperationW

ole32

CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
StringFromGUID2
CoTaskMemAlloc
OleInitialize
OleUninitialize
OleLockRunning
CoTaskMemRealloc
CreateStreamOnHGlobal

oleaut32

LoadTypeLi
VarUI4FromStr
OleCreateFontIndirect
LoadRegTypeLi
VariantClear
VariantInit
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocString

shlwapi

UrlEscapeW

comctl32

InitCommonControlsEx

Sections

.text
Size: 635KB - Virtual size: 635KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

132e214239212a47e69f48e5e26f6f7c

Headers

DLL Characteristics

File Characteristics

Imports

version

urlmon

wininet

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

Sections

.text Size: 635KB - Virtual size: 635KB

.rdata Size: 126KB - Virtual size: 125KB

.data Size: 13KB - Virtual size: 23KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 635KB - Virtual size: 635KB

.rdata
Size: 126KB - Virtual size: 125KB

.data
Size: 13KB - Virtual size: 23KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 2KB - Virtual size: 1KB