53d6c803d689a962cea73d3fd3997f832df47eb0836cf9f81c036801abd4b659

Sharing

Copy URL Twitter E-mail

General

Target

53d6c803d689a962cea73d3fd3997f832df47eb0836cf9f81c036801abd4b659
Size

310KB
MD5

a2350780e8284bf3d502dc40f19d5700
SHA1

587a58bbfffa6333e95d87010b1332548c2ee4fc
SHA256

53d6c803d689a962cea73d3fd3997f832df47eb0836cf9f81c036801abd4b659
SHA512

bb458dfcaffe7f27fb29112fdb7db093c40fe9b064957c0dcc2e09ace9d4f09fe5cb1619c08e28961e965ea928a87970e12faec8828258c098aa53154214647a
SSDEEP

6144:RhDGwTgVFhAUClRNYgzWC+UrxVw0o7tTMoUkKxFyNStNe672hK:Rh6w4umoWKGnTMoUkVctNsc

Score

N/A

Malware Config

Signatures

Files

53d6c803d689a962cea73d3fd3997f832df47eb0836cf9f81c036801abd4b659
.exe windows x86

17a3798c38d2df395bc52d8d379ecd88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VarUI4FromStr
GetErrorInfo
LoadRegTypeLi
SysStringByteLen
SysAllocString
VariantInit
LoadTypeLi
SysFreeString
SysStringLen
SysAllocStringByteLen
VariantCopy
UnRegisterTypeLi
DispCallFunc
RegisterTypeLi
VariantClear

user32

OpenClipboard
EmptyClipboard
RegisterWindowMessageA
SetClipboardData
LoadImageA
TranslateAcceleratorA
LoadMenuA
TrackPopupMenu
IsZoomed
CallNextHookEx
EnableMenuItem
GetCursorPos
GetWindowThreadProcessId
SetMenuDefaultItem
PostMessageA
GetSubMenu
SetWindowRgn
DrawIconEx
LoadAcceleratorsA
CopyRect
SetFocus
GetParent
EnableWindow
GetWindowRect
SetForegroundWindow
ReleaseDC
RedrawWindow
InflateRect
GetSystemMetrics
SendMessageA
PostQuitMessage
RemoveMenu
SetWindowsHookExA
UpdateWindow
IsWindow
MapDialogRect
SetWindowPos
GetDC
GetClientRect
CloseClipboard
DrawTextA
DestroyIcon
CharNextA
GetForegroundWindow
AttachThreadInput
FindWindowA
GetDesktopWindow
UnhookWindowsHookEx
LoadIconA
IsRectEmpty

advapi32

CopySid
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetSidLengthRequired
RegDeleteValueA
RegNotifyChangeKeyValue
InitializeSid
MakeSelfRelativeSD
GetSecurityDescriptorControl
RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyA
GetSecurityDescriptorGroup
OpenProcessToken
GetSecurityDescriptorOwner
GetSecurityDescriptorLength
RegEnumKeyExA
RegQueryValueExA
GetSecurityDescriptorSacl
GetLengthSid
MakeAbsoluteSD
GetSidSubAuthority
EqualSid
IsValidSid
RegCreateKeyExA
GetTokenInformation
SetSecurityDescriptorDacl
RegDeleteKeyA
RegCloseKey

ole32

CLSIDFromProgID
CoTaskMemRealloc
CoRegisterClassObject
CoTaskMemAlloc
CoFreeUnusedLibraries
StringFromCLSID
CoUninitialize
CoInitializeSecurity
CoRevokeClassObject
CoCreateInstance
StringFromGUID2
OleRun
OleUninitialize
CoTaskMemFree
CoInitializeEx
CoInitialize
CLSIDFromString

gdi32

CreateRectRgnIndirect
CombineRgn
CreateRectRgn
GetTextExtentExPointA
GetObjectA
SetRectRgn
CreateFontIndirectA

shlwapi

PathFindExtensionA

kernel32

lstrcpyA
GetModuleHandleA
GetProcessHeap
HeapReAlloc
GetTimeFormatA
lstrcatA
lstrcmpiA
HeapAlloc
lstrlenA
FindClose
LocalFree
SetPriorityClass
FindNextFileA
OpenProcess
IsDBCSLeadByte
WaitForMultipleObjects
HeapSize
FindResourceExA
ResetEvent
lstrlenW
GetSystemTimeAsFileTime
LockResource
DeleteFileA
GetThreadLocale
lstrcmpA
DeleteCriticalSection
GetACP
FileTimeToSystemTime
CreateThread
GlobalAlloc
FindResourceA
FormatMessageA
RemoveDirectoryA
HeapDestroy
WaitForSingleObject
LoadLibraryExA
CloseHandle
SystemTimeToFileTime
WideCharToMultiByte
FreeLibrary
GetUserDefaultLangID
SizeofResource
LocalAlloc
lstrcpynA
LeaveCriticalSection
SetLastError
RaiseException
CreateMutexA
EnterCriticalSection
OpenEventA
ReleaseMutex
HeapFree
CreateEventA
GlobalUnlock
FindFirstFileA
SetProcessWorkingSetSize
GlobalLock
GetCurrentThreadId
GetDateFormatA
LoadResource
IsValidCodePage
VirtualAllocEx

shell32

ShellExecuteA
Shell_NotifyIconA

userenv

GetProfileType
UnloadUserProfile
GetDefaultUserProfileDirectoryW
GetProfilesDirectoryA
DestroyEnvironmentBlock
GetAppliedGPOListA

ddrawex

DllUnregisterServer
DllCanUnloadNow

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 263KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

17a3798c38d2df395bc52d8d379ecd88

Headers

File Characteristics

Imports

oleaut32

user32

advapi32

ole32

gdi32

shlwapi

kernel32

shell32

userenv

ddrawex

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 263KB - Virtual size: 265KB

.rsrc Size: 18KB - Virtual size: 18KB

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 263KB - Virtual size: 265KB

.rsrc
Size: 18KB - Virtual size: 18KB