6542f105a417dbc5f9368b174d036a8f95bafa04bf43403ded5ef0e70a27e6d1

Sharing

Copy URL Twitter E-mail

General

Target

6542f105a417dbc5f9368b174d036a8f95bafa04bf43403ded5ef0e70a27e6d1
Size

266KB
MD5

a1a2019bfbe8a1558a6f625c6c223580
SHA1

1e0e7a5e73b47104c2f49bf2f997a7cdb92233fc
SHA256

6542f105a417dbc5f9368b174d036a8f95bafa04bf43403ded5ef0e70a27e6d1
SHA512

3c38bca63591255bdf2f13b50ba6497d2f97dc8af60182883e7f312d6d1c2473ad1dfcba64f915c525fcc450e04fb242366033b06ab9a37c8c6760f88ea7fe19
SSDEEP

6144:UXtW3PhCyc/BAnkAsgtv0ogX2475K+pQ9yf2+GMHxbnuhKeibq3OM:UX4x8ekMvVgX2Q5ZpQ9+371uhM

Score

N/A

Malware Config

Signatures

Files

6542f105a417dbc5f9368b174d036a8f95bafa04bf43403ded5ef0e70a27e6d1
.exe windows x86

a673a2fbcda60a47296bab9ebc1578cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupIterateCabinetW

user32

GetKeyboardType
SetWindowLongW
ScreenToClient
DialogBoxParamW
InvalidateRgn
EndPaint
ShowWindow
RedrawWindow
ReleaseCapture
GetDlgItemTextW
SetForegroundWindow
SetScrollPos
SetScrollInfo
GetFocus
CharNextW
UnregisterClassA
GetWindowLongW
DestroyWindow
GetSysColor
PeekMessageW
GetActiveWindow
GetParent
GetWindow
BeginPaint
DispatchMessageW
SetWindowPos
GetWindowThreadProcessId
SetCapture
GetWindowRect
GetDlgItem
InvalidateRect
FillRect
GetDC
SendMessageW
GetWindowTextLengthW
SetWindowTextW
GetWindowTextW
TranslateMessage
SystemParametersInfoW
GetClassInfoExW
EndDialog
EnumWindows
RegisterClassExW
GetDesktopWindow
LoadIconW
DestroyAcceleratorTable
DefWindowProcW
CreateCaret
FindWindowW
MapWindowPoints
MessageBoxW
IsWindow
GetClassNameW
SetDlgItemTextW
SetWindowContextHelpId
GetMonitorInfoW
IsChild
MonitorFromWindow
GetClientRect
GetSystemMetrics
ReleaseDC
CallWindowProcW
MsgWaitForMultipleObjects
SetFocus
CreateWindowExW
IsWindowVisible
CreateDialogIndirectParamW
LoadCursorW
RegisterWindowMessageW
MapDialogRect
ClientToScreen
MoveWindow
CreateAcceleratorTableW

shell32

ShellExecuteW
CommandLineToArgvW

kernel32

ReleaseMutex
SetUnhandledExceptionFilter
DeviceIoControl
VirtualFree
GlobalHandle
GetFileInformationByHandle
LocalFree
GetStdHandle
GetFileType
GetCommandLineA
TlsGetValue
InterlockedPushEntrySList
GetConsoleMode
CreateThread
IsValidCodePage
SetStdHandle
GlobalAlloc
GetSystemInfo
GetWindowsDirectoryW
SetEndOfFile
FindFirstFileExW
RaiseException
HeapReAlloc
lstrlenW
GlobalUnlock
SizeofResource
GetProcessHeap
GetShortPathNameW
CreateFileW
FileTimeToSystemTime
GetConsoleCP
SetLastError
GetFullPathNameW
GetLogicalDriveStringsW
MulDiv
GetCommandLineW
lstrcmpiW
IsDebuggerPresent
SetEnvironmentVariableA
GlobalFree
GetLocalTime
GetUserDefaultLCID
FormatMessageW
EnterCriticalSection
EnumSystemLocalesA
WriteConsoleW
CreateFileMappingW
WideCharToMultiByte
FlushFileBuffers
CreateEventW
UnmapViewOfFile
GetCurrentThreadId
IsProcessorFeaturePresent
TlsFree
GetPrivateProfileSectionW
VirtualAlloc
lstrlenA
GetTimeZoneInformation
GetDriveTypeW
IsValidLocale
FreeResource
HeapAlloc
FlushInstructionCache
DeleteFileW
GetCurrentDirectoryW
GetPrivateProfileStringW
TlsAlloc
WriteFile
GlobalMemoryStatusEx
SetFilePointer
GetTempFileNameW
GetOEMCP
PeekNamedPipe
GetModuleHandleW
LocalAlloc
SetHandleCount
RtlUnwind
InterlockedPopEntrySList
GetSystemDirectoryW
DeleteCriticalSection
IsWow64Process
FindResourceExW
GetACP
GetTempPathW
CreateMutexW
FreeEnvironmentStringsW
EnumUILanguagesW
FindClose
TlsSetValue
ReadFile
CompareStringW
LCMapStringW
LoadLibraryExW
GetFileSize
MapViewOfFile
HeapDestroy
InitializeCriticalSectionAndSpinCount
CloseHandle
FindResourceW
GetSystemTimeAsFileTime
LockResource
LeaveCriticalSection
lstrcmpW
HeapSize
GlobalLock
FreeLibrary
LoadResource
ExpandEnvironmentStringsW
HeapFree
UnhandledExceptionFilter
GetStartupInfoA

gdi32

BitBlt
GetObjectW
GetStockObject
GetDeviceCaps
CreateSolidBrush
CreateCompatibleBitmap
DeleteObject
CreateFontIndirectW
GetTextExtentPoint32W
DeleteDC
SelectObject
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreatePolygonRgn
CreateBitmapIndirect
RemoveFontResourceA
CreateScalableFontResourceW
CreateFontW

advapi32

AllocateAndInitializeSid
RevertToSelf
SetSecurityDescriptorDacl
LsaFreeMemory
ImpersonateSelf
IsValidSecurityDescriptor
CloseServiceHandle
QueryServiceConfigW
OpenSCManagerW
InitializeSecurityDescriptor
QueryServiceStatus
AddAccessAllowedAce
AccessCheck
RegSetValueExW
SetSecurityDescriptorGroup
LsaClose
FreeSid
SetSecurityDescriptorOwner
RegCreateKeyW
OpenThreadToken
RegCloseKey
RegEnumKeyExW
GetLengthSid
RegQueryValueExW
RegCreateKeyExW
LsaQueryInformationPolicy
RegOpenKeyW
RegEnumValueW
InitializeAcl
RegDeleteValueW
RegQueryInfoKeyW
RegDeleteKeyW
RegOpenKeyExW
OpenProcessToken
OpenServiceW
LsaOpenPolicy

wininet

InternetOpenUrlW
InternetOpenW
InternetGetConnectedState
HttpQueryInfoW

oleaut32

SysAllocString
SysAllocStringByteLen
LoadTypeLi
SysStringLen
SafeArrayPutElement
SysAllocStringLen
GetErrorInfo
SafeArrayGetUBound
SafeArrayGetDim
SafeArrayCreate
OleCreateFontIndirect
SafeArrayDestroy
VarBstrCmp
SetErrorInfo
CreateErrorInfo
SysStringByteLen
VariantClear
VariantCopy
SafeArrayGetLBound
SafeArrayGetElement
VariantInit
LoadRegTypeLi
SysFreeString
VarUI4FromStr

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

ole32

CreateStreamOnHGlobal
CoTaskMemFree
StringFromCLSID
CLSIDFromProgID
CoCreateGuid
OleLockRunning
CoGetClassObject
OleRun
CLSIDFromString
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
OleUninitialize
OleInitialize
CoInitialize
StringFromGUID2
CoInitializeEx

mlang

DllGetClassObject

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 231KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a673a2fbcda60a47296bab9ebc1578cd

Headers

File Characteristics

Imports

setupapi

user32

shell32

kernel32

gdi32

advapi32

wininet

oleaut32

version

ole32

mlang

Sections

.text Size: 17KB - Virtual size: 16KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 231KB - Virtual size: 1.0MB

.rsrc Size: 9KB - Virtual size: 9KB

.text
Size: 17KB - Virtual size: 16KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 231KB - Virtual size: 1.0MB

.rsrc
Size: 9KB - Virtual size: 9KB