7d3f224222845f8802334b9e07bbbd6e0da915bfd1c059a9129934057cd85fd4

Sharing

Copy URL Twitter E-mail

General

Target

7d3f224222845f8802334b9e07bbbd6e0da915bfd1c059a9129934057cd85fd4
Size

195KB
MD5

745fe1f45edc007e806b90b39ff6cfe0
SHA1

fc3346ce20bd0cd63aa16f3dc029e9e4e7c5c45d
SHA256

7d3f224222845f8802334b9e07bbbd6e0da915bfd1c059a9129934057cd85fd4
SHA512

ccfd15db65508320d935bdf4ba381a3d631d7cec4c6642c2afb69f4dac27c2e1572df74e5812d18ead125a64eb6a7389193975d37b0b8a4dc0f827be8a96d25c
SSDEEP

3072:0sb6vxmLSEM57D12wit2f+FuTx1D0A3ykUeWmzZzOK7E:0sbkD3w1Af+FuxxH3ae1ZOZ

Score

N/A

Malware Config

Signatures

Files

7d3f224222845f8802334b9e07bbbd6e0da915bfd1c059a9129934057cd85fd4
.exe windows x86

07d9e0d46199df70d93adff7afa0b3ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
GetModuleHandleA
GetModuleFileNameA
CreateProcessA
TerminateThread
OpenThread
CreateThread
GetLastError
FindClose
GetStdHandle
WriteFile
GetModuleHandleW
GetProcessHeap
SetEndOfFile
SetEnvironmentVariableA
CompareStringW
CreateFileW
CreateFileA
WaitForSingleObject
Sleep
GetTempPathA
LoadLibraryA
GetProcAddress
GetFileAttributesA
FreeLibrary
GetVersionExA
OpenProcess
TerminateProcess
GetModuleFileNameW
CloseHandle
InterlockedDecrement
CreateToolhelp32Snapshot
Process32Next
ExitProcess
ExpandEnvironmentStringsA
GetExitCodeProcess
SetStdHandle
WriteConsoleW
LoadLibraryW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsProcessorFeaturePresent
GetTimeZoneInformation
GetCurrentProcess
IsDebuggerPresent
HeapReAlloc
GetLocaleInfoW
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
SetFilePointer
ReadFile
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
SetUnhandledExceptionFilter
TlsGetValue
TlsAlloc
FindFirstFileExA
FindNextFileA
WideCharToMultiByte
InterlockedIncrement
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
lstrlenA
LocalFree
GetSystemTimeAsFileTime
DeleteFileA
HeapAlloc
HeapFree
RtlUnwind
RaiseException
MoveFileA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
LCMapStringW
GetCPInfo
UnhandledExceptionFilter
HeapCreate

user32

MessageBoxA
ExitWindowsEx
SetCursorPos
mouse_event
GetAsyncKeyState
GetForegroundWindow
GetWindowTextLengthA
GetWindowTextA

gdi32

CreateCompatibleDC
GetDeviceCaps
CreateDIBSection
DeleteDC
SaveDC
SelectObject
BitBlt
RestoreDC
DeleteObject
CreateDCA

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA
GetUserNameA

shell32

SHGetFolderPathA
SHGetSpecialFolderPathA

ole32

CoSetProxyBlanket
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
CoUninitialize

oleaut32

VariantClear
SysFreeString
SysAllocString

ws2_32

socket
gethostbyname
inet_ntoa
WSAStartup
ntohs
setsockopt
recv
closesocket
send
inet_addr
connect

wininet

InternetOpenUrlA
InternetOpenA
InternetCloseHandle
InternetReadFile

urlmon

URLDownloadToFileA

gdiplus

GdipFree
GdipAlloc
GdipDisposeImage
GdipSaveImageToFile
GdipCreateBitmapFromHBITMAP
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup
GdipCloneImage
GdiplusShutdown

crypt32

CryptUnprotectData

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

07d9e0d46199df70d93adff7afa0b3ff

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

ws2_32

wininet

urlmon

gdiplus

crypt32

Sections

.text Size: 146KB - Virtual size: 146KB

.rdata Size: 29KB - Virtual size: 28KB

.data Size: 7KB - Virtual size: 15KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 11KB - Virtual size: 10KB

.text
Size: 146KB - Virtual size: 146KB

.rdata
Size: 29KB - Virtual size: 28KB

.data
Size: 7KB - Virtual size: 15KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 11KB - Virtual size: 10KB