089feead0d6a879042c7662de2fb0f864d06261c74d2dbc720ac4c6436717f5c

Sharing

Copy URL Twitter E-mail

General

Target

089feead0d6a879042c7662de2fb0f864d06261c74d2dbc720ac4c6436717f5c
Size

1.3MB
MD5

47a36ed1ec770831e30a57a4b64b7013
SHA1

bd3ce8c0acd48e43fa3f3ffc050c5f2808035218
SHA256

089feead0d6a879042c7662de2fb0f864d06261c74d2dbc720ac4c6436717f5c
SHA512

2dd59a982085fa6a0dd430a2e427c5d4213d98ce3429c5867519046be33535a2b26a149eb4d5fb4f1de1506e03f3a60d9fa4551dbc4a16dd3ffdbdc4184fc1b0
SSDEEP

24576:qFpxcFx9/cp+bh6ufiezGRTE5YuY8icQDLCQTouWhhpUam8Z96:qaFx/VieYTEvuoyam8a

Score

N/A

Malware Config

Signatures

Files

089feead0d6a879042c7662de2fb0f864d06261c74d2dbc720ac4c6436717f5c
.exe windows x86

507b3358130ccdae8a22788d6f360b8a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

shlwapi

StrCmpIW
PathIsNetworkPathW
PathStripPathA
PathAddBackslashA
PathFindFileNameA
PathFileExistsA
PathAddBackslashW
PathCommonPrefixW
StrCmpNW
PathRemoveBackslashW
PathRemoveBackslashA
PathCombineW
PathCombineA
PathFileExistsW
PathRemoveBlanksA
PathRemoveBlanksW
PathIsFileSpecA
PathAppendW
PathFindFileNameW
PathFindExtensionW
PathStripPathW
PathRemoveFileSpecW
StrToIntW
StrCmpNIW
StrToIntExW
PathIsSameRootW
StrChrW
PathIsUNCW
PathIsURLW
PathAppendA
PathRemoveFileSpecA

kernel32

GetTempPathA
lstrcpyA
FindClose
GetPrivateProfileStructA
WritePrivateProfileStructA
FindFirstFileA
LoadLibraryA
FreeLibrary
FindNextFileA
WriteFile
CreateFileA
SetThreadPriority
EnterCriticalSection
LeaveCriticalSection
DeleteFileA
lstrcatA
GlobalLock
GlobalUnlock
GetEnvironmentVariableA
SetPriorityClass
GetCurrentProcess
SetEvent
CreateEventA
GetLastError
RemoveDirectoryA
GetVersion
MulDiv
lstrcmpA
SystemTimeToFileTime
GetStringTypeExA
GetSystemTime
SetFilePointer
GetFileSize
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
LocalAlloc
LocalFree
SetEndOfFile
ReadFile
MoveFileA
GetCurrentThread
ResetEvent
WaitForMultipleObjects
LoadLibraryExA
GetCommandLineW
CreateSemaphoreA
ReleaseSemaphore
DuplicateHandle
GetLogicalDrives
GetDriveTypeA
GetShortPathNameA
GetLocaleInfoA
InterlockedIncrement
GetACP
QueryPerformanceCounter
GetCurrentDirectoryA
CompareStringA
InterlockedExchange
GetWindowsDirectoryA
GetSystemDirectoryA
SetLastError
GetStartupInfoA
RaiseException
HeapAlloc
GetProcessHeap
GetLocalTime
LoadResource
FindResourceA
LockResource
GlobalAlloc
GlobalFree
GetModuleFileNameA
Sleep
CreateThread
WaitForSingleObject
CloseHandle
GetTickCount
OpenEventA
ExitProcess
lstrlenA
OpenProcess
TerminateProcess
lstrcpynA
GetPrivateProfileIntA
GetSystemTimeAsFileTime
CreateProcessA
CreateDirectoryA
SetCurrentDirectoryA
lstrcmpiA
GetTempFileNameA
GetPrivateProfileStringA
WritePrivateProfileStringA
SetEnvironmentVariableA

user32

wsprintfA
DialogBoxParamA
InsertMenuItemA
GetMenuItemID
GetSubMenu
LoadMenuA
GetMenuItemRect
GetMenuState
GetMenuItemInfoA
GetMenuStringA
IsCharAlphaA
WindowFromPoint
RegisterClipboardFormatA
CreatePopupMenu
AppendMenuA
GetMenuItemCount
RemoveMenu
SystemParametersInfoA
InsertMenuA
DestroyMenu
SetMenuItemInfoA
ModifyMenuA
CheckMenuItem
PeekMessageA
CharNextA
CharPrevA
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
SetWindowRgn
DestroyCursor
DestroyIcon
TranslateAcceleratorA
LoadStringA
SetFocus
IsIconic
BringWindowToTop
CreateDialogIndirectParamA
GetKeyState
InflateRect
MessageBeep
SetRect
FillRect
BeginPaint
EndPaint
GetCapture
LoadAcceleratorsA
GetWindowRgn
CopyRect
EnumDisplaySettingsA
GetMessageA
GetForegroundWindow
DispatchMessageA
GetSystemMetrics
SetTimer
KillTimer
IsWindow
RegisterClassA
GetClassInfoA
IsWindowVisible
CreateWindowExA
DefWindowProcA
LoadCursorA
SetCursor
IsChild
SetCapture
ReleaseCapture
TrackPopupMenu
GetCursorPos
ClientToScreen
IsDlgButtonChecked
CheckDlgButton
FindWindowA
GetWindowThreadProcessId
MessageBoxA
FindWindowExA
SetParent
PostMessageA
SetWindowTextA
GetWindowTextA
GetParent
EndDialog
SetDlgItemTextA
GetDC
LoadImageA
ReleaseDC
GetWindowDC
GetClientRect
GetAsyncKeyState
SendDlgItemMessageA
DrawTextA
GetDlgItemTextA
InvalidateRect
SetWindowPos
ScreenToClient
GetDlgItem
GetWindowRect
CreateDialogParamA
DestroyWindow
SendMessageA
ShowWindow
SetForegroundWindow
GetClassLongA
TranslateMessage
IsDialogMessageA
ValidateRect
GetFocus
UpdateWindow
DeleteMenu
SetCursorPos
SetDlgItemInt
GetDlgItemInt
DrawIconEx
GetUpdateRect
GetMessagePos
GetSystemMenu
SetClassLongA
PostQuitMessage
LoadIconA
RegisterWindowMessageA
CharUpperBuffA
SendMessageTimeoutA
GetSysColorBrush
EnableMenuItem

gdi32

CreatePalette
CreateDIBSection
SelectPalette
RealizePalette
BitBlt
UpdateColors
CreateFontIndirectA
GetTextExtentPoint32A
CreateRectRgn
CreatePolyPolygonRgn
CreatePen
CreateSolidBrush
CreateFontA
GetTextColor
GetBkColor
SetBkColor
CreateCompatibleBitmap
DeleteObject
Rectangle
GetStockObject
GetObjectA
CreateRectRgnIndirect
FillRgn
StretchBlt
GetPixel
SetPixel
CreateBrushIndirect
SetStretchBltMode
GetNearestColor
CombineRgn
EnumFontsA
GetTextMetricsA
IntersectClipRect
ExtSelectClipRgn
GetFontLanguageInfo
DeleteDC
GetDIBColorTable
GetDIBits
RectVisible
SelectObject
CreateCompatibleDC
GetDeviceCaps
SetBkMode
SetTextColor
LineTo
RoundRect
MoveToEx

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyA
RegDeleteKeyA
RegSetValueExA

shell32

SHAppBarMessage
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
DragQueryPoint
SHBrowseForFolderA
DragFinish

ole32

OleUninitialize
CoRevokeClassObject
RevokeDragDrop
CoCreateInstance
RegisterDragDrop
OleInitialize
CoInitialize
CoCreateGuid
CoUninitialize
CoRegisterClassObject

oleaut32

SafeArrayCreateVector
VariantInit
SysAllocString
SafeArrayAccessData
SafeArrayUnaccessData

nscrt

cos
??2@YAPAXI@Z
strchr
??3@YAXPAX@Z
strcmp
wcsstr
_wtoi
free
malloc
_vsnprintf
memset
fclose
fread
fopen
memcpy
strstr
sqrt
sin
pow
fputc
_wfopen
fprintf
atoi
fgets
memcmp
memmove
_vsnwprintf
toupper
_wcsdup
_purecall
calloc
strcpy
fwrite
ftell
fseek
wcscmp
fabs
strncmp
realloc
log
abs
strlen
??_V@YAXPAX@Z
??_U@YAPAXI@Z
_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
__CxxFrameHandler
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
fputs
wcschr
_wchmod
_waccess
_i64tow
__dllonexit
_wcsnicmp
_wcsicmp
_stricmp
_strdup
_strnicmp
_CIpow
strtol

Sections

.text
Size: 383KB - Virtual size: 383KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 736KB - Virtual size: 736KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 127KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

507b3358130ccdae8a22788d6f360b8a

Headers

File Characteristics

Imports

comctl32

shlwapi

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

nscrt

Sections

.text Size: 383KB - Virtual size: 383KB

.rdata Size: 62KB - Virtual size: 61KB

.data Size: 8KB - Virtual size: 73KB

.rsrc Size: 736KB - Virtual size: 736KB

.reloc Size: 127KB - Virtual size: 128KB

.text
Size: 383KB - Virtual size: 383KB

.rdata
Size: 62KB - Virtual size: 61KB

.data
Size: 8KB - Virtual size: 73KB

.rsrc
Size: 736KB - Virtual size: 736KB

.reloc
Size: 127KB - Virtual size: 128KB