6d88cea92bdda7d75fc7256acbb7e981d2091dc7eb13791a3659b9401f382dad

Sharing

Copy URL Twitter E-mail

General

Target

6d88cea92bdda7d75fc7256acbb7e981d2091dc7eb13791a3659b9401f382dad
Size

4.7MB
MD5

760fc6d8f3a9f67f8b83ad809c7d332b
SHA1

b1e4660c1b1d4d4455165b6a587549d71a03ef31
SHA256

6d88cea92bdda7d75fc7256acbb7e981d2091dc7eb13791a3659b9401f382dad
SHA512

a5d7651110e1880245f7c9f191dd084f529562661bc035f089962bb558bdba0ea8819a7a7873f31f535a04424944dd731e2b1ec32d89b30b505727e95951f714
SSDEEP

98304:3eCEcAnpRGowHPmVgtYXnj56dSXXahK9aZQ+3QuNR6RbXx7vI9PJc:3e8UIPA9sdSXXahKMZQ+3QuNR6h9KPJc

Score

N/A

Malware Config

Signatures

Files

6d88cea92bdda7d75fc7256acbb7e981d2091dc7eb13791a3659b9401f382dad
.exe windows x86

e33185d99fa9e383da36dbfece6e4d89

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrRetToBufW
SHDeleteKeyA
SHDeleteValueA
AssocQueryStringW

wininet

InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetCloseHandle
InternetSetStatusCallback
InternetCrackUrlA
DeleteUrlCacheEntry
InternetGoOnline
InternetGetConnectedStateEx
InternetQueryOptionA
HttpEndRequestA
InternetReadFile
InternetWriteFile
InternetErrorDlg
HttpQueryInfoA
HttpAddRequestHeadersA
HttpSendRequestExA
InternetGetConnectedState
InternetSetOptionA

kernel32

CreateDirectoryA
FindNextFileA
GetFileAttributesExW
CreateDirectoryExA
CopyFileW
GetDateFormatW
MoveFileW
GetTimeFormatW
MoveFileExW
RemoveDirectoryW
CopyFileA
QueryPerformanceFrequency
LockFileEx
UnlockFileEx
GetFileSize
SetFilePointerEx
GetFileSizeEx
SetFileAttributesW
FindFirstFileExA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
MulDiv
lstrcmpW
GetThreadLocale
FindFirstFileExW
FindFirstFileA
IsProcessorFeaturePresent
ExitThread
FormatMessageA
GlobalMemoryStatusEx
QueryPerformanceCounter
GetCommandLineW
ExitProcess
GetLastError
GetLongPathNameA
GetLongPathNameW
CreateMutexA
FindClose
ResetEvent
WaitForSingleObject
GetExitCodeProcess
TerminateProcess
OpenProcess
GetCurrentProcessId
GetProcAddress
GetModuleHandleA
Sleep
OpenMutexA
SetEvent
CloseHandle
CreateEventA
GetShortPathNameA
InterlockedCompareExchange
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
VirtualProtect
GlobalAlloc
GlobalLock
GlobalUnlock
FindNextFileW
lstrcmpA
lstrlenW
IsDBCSLeadByte
FlushInstructionCache
lstrcmpiA
DisableThreadLibraryCalls
lstrlenA
GetProcessTimes
Module32Next
Module32First
CreateToolhelp32Snapshot
GlobalFree
GetSystemDefaultLCID
GetSystemInfo
HeapFree
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
RtlUnwind
SetHandleCount
GetFileType
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetFilePointer
MultiByteToWideChar
ReadFile
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetSystemTimeAsFileTime
GetLocaleInfoA
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
SetEndOfFile
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
TerminateThread
SetThreadPriority
GetThreadPriority
WaitForMultipleObjects
VirtualQuery
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
DebugBreak
GetSystemDirectoryA
SearchPathA
GetVersion
OutputDebugStringA
LoadLibraryExA
SetErrorMode
LocalFree
GetModuleFileNameW
GetWindowsDirectoryA
GetDriveTypeA
SetFileTime
FindResourceA
SizeofResource
LoadResource
LockResource
GetShortPathNameW
CreateFileW
GetTempPathW
GetTempPathA
MoveFileA
CreateProcessW
MoveFileExA
FindFirstChangeNotificationW
FindFirstChangeNotificationA
CopyFileExW
MoveFileWithProgressW
CopyFileExA
MoveFileWithProgressA
GetModuleHandleW
LoadLibraryW
LoadLibraryExW
GetFileAttributesW
GetFileAttributesA
RemoveDirectoryA
CreateDirectoryW
SetFileAttributesA
DeleteFileW
CreateDirectoryExW
DeleteFileA
GetFileAttributesExA
FindFirstFileW
CreateProcessA
CreateThread

user32

PeekMessageA
GetCursorPos
IsDialogMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
GetAsyncKeyState
SetActiveWindow
LoadCursorA
SetCursor
GetWindow
GetCursor
UnregisterClassW
SetClassLongA
InsertMenuItemA
GetClassInfoA
GetMenuItemInfoA
SetClassLongW
SetWindowTextA
AppendMenuA
SetWindowTextW
DialogBoxParamW
MessageBoxA
DialogBoxParamA
SendMessageW
SetDlgItemTextW
SetDlgItemTextA
DefWindowProcW
CreateDialogParamW
DefWindowProcA
LoadStringA
CreateDialogParamA
CreateWindowExW
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
AppendMenuW
CreateWindowExA
MessageBoxW
RegisterClassA
SetWindowLongW
GetWindowLongW
UnregisterClassA
SetMenuItemInfoA
CallWindowProcW
RegisterClassW
SetMenu
ReleaseCapture
GetActiveWindow
PostQuitMessage
BeginPaint
EndPaint
IsWindowVisible
SetCapture
GetTopWindow
InvalidateRect
GetMenu
ScreenToClient
RedrawWindow
FindWindowExA
SetMenuInfo
TrackPopupMenu
CreatePopupMenu
EmptyClipboard
SetClipboardData
OpenClipboard
CloseClipboard
DialogBoxIndirectParamW
RemovePropA
InvalidateRgn
RegisterWindowMessageA
GetClassInfoExA
IsChild
DestroyAcceleratorTable
RegisterClassExA
CharNextA
CreateAcceleratorTableA
GetSysColor
SetPropA
DialogBoxIndirectParamA
SetTimer
KillTimer
GetPropA
LoadIconA
EndDialog
EnumThreadWindows
SetWindowsHookExA
IsWindow
FlashWindowEx
CallNextHookEx
UnhookWindowsHookEx
ShowCursor
GetWindowRect
GetWindowTextW
GetWindowTextLengthW
GetWindowTextA
SystemParametersInfoA
SetWindowPos
LoadImageA
GetDlgItem
IsIconic
ClientToScreen
GetDesktopWindow
GetDC
GetForegroundWindow
ReleaseDC
GetWindowPlacement
AdjustWindowRect
EnableMenuItem
CheckMenuItem
GetSystemMetrics
DrawIcon
DestroyIcon
GetClientRect
DestroyWindow
GetFocus
EnableWindow
GetClassLongA
SetFocus
GetWindowTextLengthA
SendMessageA
MessageBeep
CreateDialogIndirectParamA
GetParent
FindWindowA
EnumWindows
GetClassNameA
GetWindowLongA
DrawTextW
GetScrollBarInfo
IsWindowEnabled
ShowWindow
SetForegroundWindow
FillRect
UpdateWindow
AdjustWindowRectEx
CallWindowProcA
MoveWindow
EnumChildWindows
SetParent
GetKeyState
PostMessageA
SetWindowLongA
DestroyMenu

gdi32

GetTextExtentPoint32A
CreateCompatibleBitmap
GetICMProfileA
ExtTextOutA
TextOutA
GetTextExtentPoint32W
ExtTextOutW
TextOutW
GetObjectA
GetKerningPairsA
GetGlyphOutlineA
DeleteDC
SelectObject
CreateCompatibleDC
GetDeviceCaps
CreateDIBSection
BitBlt
Rectangle
CreatePen
GetStockObject
SetStretchBltMode
DeleteObject
GetOutlineTextMetricsA
GetTextMetricsA
CreateFontIndirectA
GetGlyphOutlineW
SetBkMode
CreateSolidBrush

shell32

ExtractIconExA
SHGetSpecialFolderPathW
SHGetFileInfoW
ShellExecuteW
SHGetPathFromIDListW
DragAcceptFiles
SHChangeNotify
SHFileOperationW
DragQueryFileA
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteExW
SHFileOperationA
SHGetFileInfoA
SHBrowseForFolderW
SHGetSpecialFolderPathA
DragQueryFileW
ShellExecuteA
ShellExecuteExA

ole32

CoCreateInstance
CoTaskMemFree
CoInitializeEx
CoUninitialize
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
StringFromGUID2
CoTaskMemRealloc
OleInitialize
CoTaskMemAlloc
OleUninitialize
CoResumeClassObjects
CoRegisterClassObject

oleaut32

SysFreeString
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
OleLoadPicturePath
SysStringByteLen
SysAllocStringLen
VariantInit
VarUI4FromStr
LoadRegTypeLi
OleCreateFontIndirect
SysStringLen
LoadTypeLi
VarBstrCat
VariantClear

comctl32

PropertySheetW
CreatePropertySheetPageW
PropertySheetA
CreatePropertySheetPageA
ord6
InitCommonControlsEx

mscms

GetColorDirectoryA

urlmon

CoInternetGetSession
URLDownloadToFileW
URLDownloadToFileA
FindMimeFromData

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

wintrust

WinVerifyTrust

ws2_32

htons
ntohl
ntohs
gethostbyname
htonl

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetOpenFileNameW
GetSaveFileNameW

advapi32

RegDeleteValueA
CryptGenRandom
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegDeleteKeyA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptEncrypt
CryptDecrypt
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegEnumValueW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
CryptAcquireContextA
RegCreateKeyExW
RegCloseKey
CryptReleaseContext

Exports

Exports

JSON_parser_char
JSON_parser_done
JSON_parser_is_legal_white_space_string
delete_JSON_parser
init_JSON_config
new_JSON_parser

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 496KB - Virtual size: 493KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 104KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e33185d99fa9e383da36dbfece6e4d89

Headers

File Characteristics

Imports

shlwapi

wininet

kernel32

user32

gdi32

shell32

ole32

oleaut32

comctl32

mscms

urlmon

version

wintrust

ws2_32

comdlg32

advapi32

Exports

Exports

Sections

.text Size: 2.9MB - Virtual size: 2.9MB

.rdata Size: 496KB - Virtual size: 493KB

.data Size: 104KB - Virtual size: 423KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 2.9MB - Virtual size: 2.9MB

.rdata
Size: 496KB - Virtual size: 493KB

.data
Size: 104KB - Virtual size: 423KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB