878ed5f69f4eca49e677d141d62c5c769b74f9682af8ed036968170a746504bc

Sharing

Copy URL

Twitter E-mail

General

Target

878ed5f69f4eca49e677d141d62c5c769b74f9682af8ed036968170a746504bc
Size

470KB
MD5

805a7567ca6ad07ea9430bb8d6f39b60
SHA1

38fe7f443a3e49baf97aca7f7f29fc1570fe167c
SHA256

878ed5f69f4eca49e677d141d62c5c769b74f9682af8ed036968170a746504bc
SHA512

5d7ece58a3bbe6ff4a6df9b0578efe72fbba7b45c6cef02abb191a9955b179387983c74654db080178b76c302260e5c3c350e86c8baffac3ce47ca3f21ac8d70
SSDEEP

6144:z4g3DsKV7NS06kBKvC383ncYBaZb+QINSGkk3s4FQUxyR/bTvIZckbF2rU2zo0nF:Eg34e6C38QQQINSGkhFbTebiU2PaGb

Score

N/A

Malware Config

Signatures

Files

878ed5f69f4eca49e677d141d62c5c769b74f9682af8ed036968170a746504bc
.exe windows x86

f5a841addfb083cc0fca20ea6e9678f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

d3d9

Direct3DCreate9

kernel32

GetFileAttributesA
GetFileSizeEx
GetFileTime
GetTickCount
RtlUnwind
HeapAlloc
HeapFree
GetCommandLineA
GetStartupInfoA
RaiseException
HeapSize
HeapReAlloc
VirtualProtect
VirtualAlloc
VirtualQuery
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualFree
HeapCreate
GetStdHandle
GetACP
IsValidCodePage
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetModuleHandleW
SetErrorMode
GetOEMCP
GetCPInfo
GetFullPathNameA
GetVolumeInformationA
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetThreadLocale
InterlockedIncrement
FormatMessageA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalFree
LocalAlloc
GlobalFlags
MulDiv
InterlockedDecrement
GetModuleFileNameW
GlobalUnlock
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
lstrlenA
FreeResource
GlobalFree
GetCurrentProcessId
SetLastError
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetLocaleInfoA
WideCharToMultiByte
CompareStringA
FindResourceA
LoadResource
LockResource
SizeofResource
InterlockedExchange
GlobalLock
lstrcmpA
GlobalAlloc
Sleep
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
MultiByteToWideChar
LoadLibraryA
FreeLibrary
GetSystemInfo
GlobalMemoryStatusEx
GetLastError
GetModuleHandleA
GetProcAddress
GetCurrentProcess
WriteFile
GetVersionExA
WritePrivateProfileStringA
GetPrivateProfileStringA
DeleteFileA
ExitProcess
CreateFileA
ReadFile
CloseHandle
GetPrivateProfileIntA
GetCurrentDirectoryA
FindFirstFileA
FindNextFileA
CreateDirectoryA
CopyFileA
FindClose
FreeEnvironmentStringsA

user32

RegisterClipboardFormatA
PostThreadMessageA
IsRectEmpty
CopyAcceleratorTableA
CharNextA
CharUpperA
GetSysColorBrush
ReleaseCapture
LoadCursorA
SetCapture
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
RegisterWindowMessageA
LoadIconA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
SetActiveWindow
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
CopyRect
DefWindowProcA
CallWindowProcA
PtInRect
GetMenu
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindowTextA
SetFocus
ShowWindow
MoveWindow
SetWindowLongA
GetDlgCtrlID
IsWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
GetDlgItem
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
UnregisterClassA
DestroyMenu
GetWindowThreadProcessId
GetWindowLongA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
GetMessageTime
SetRect
GetLastActivePopup
IsWindowEnabled
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
PostMessageA
PostQuitMessage
GetDC
ReleaseDC
MessageBoxA
GetDesktopWindow
EnumDisplaySettingsA
ChangeDisplaySettingsExA
EnableWindow
UpdateWindow
GetWindowRect
SendMessageA
GetSubMenu

gdi32

ExtSelectClipRgn
DeleteDC
TextOutA
GetStockObject
GetTextColor
GetRgnBox
GetMapMode
RectVisible
PtVisible
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
GetDeviceCaps
GetBkColor
SetBkColor
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
RestoreDC
SaveDC
CreateRectRgnIndirect
GetObjectA
SetTextColor
GetClipBox
CreateBitmap
ExtTextOutA

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegQueryValueExA
RegEnumKeyA
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyA

shell32

ShellExecuteA

comctl32

ord17

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA

oledlg

ord8

ole32

CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoGetClassObject

oleaut32

SysFreeString
VariantCopy
SysAllocString
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SysAllocStringByteLen
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen

Sections

.text
Size: 303KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f5a841addfb083cc0fca20ea6e9678f6

Headers

DLL Characteristics

File Characteristics

Imports

d3d9

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 303KB - Virtual size: 302KB

.rdata Size: 56KB - Virtual size: 55KB

.data Size: 10KB - Virtual size: 27KB

.rsrc Size: 100KB - Virtual size: 99KB

.text
Size: 303KB - Virtual size: 302KB

.rdata
Size: 56KB - Virtual size: 55KB

.data
Size: 10KB - Virtual size: 27KB

.rsrc
Size: 100KB - Virtual size: 99KB