58206ebc105a3e9fd020a34d96f3ae96d50d6a67bfd93ecf811c2fc751df552b

Sharing

Copy URL

Twitter E-mail

General

Target

58206ebc105a3e9fd020a34d96f3ae96d50d6a67bfd93ecf811c2fc751df552b
Size

234KB
MD5

8185a6ceee47c01a5eb34771651ebfa0
SHA1

24f928022d793c6ba355bfe379bc7ca96cc7b15b
SHA256

58206ebc105a3e9fd020a34d96f3ae96d50d6a67bfd93ecf811c2fc751df552b
SHA512

ba65967e3c6b6a7e2d4712e8a82eb586b19a7d7c967f37b2b1a8a452b7a1ef609d5c4c56fd24faa356e0953cb0c07f5e1f0699ffb90108bb90695047d14b6b0e
SSDEEP

3072:aSNFPJgA32Wrd8WfbrGXfpMZflpEgYWXV31Xt6NyCJllbAxRIwRS3Kueu:a2Rg3zwfgUXt1d6NyCJlhAxRIjveu

Score

N/A

Malware Config

Signatures

Files

58206ebc105a3e9fd020a34d96f3ae96d50d6a67bfd93ecf811c2fc751df552b
.exe windows x86

51e92a14f5b18b3dc7a0475e341a7381

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
RemoveDirectoryW
SearchPathW
SetCurrentDirectoryW
SetErrorMode
SetEvent
SetFileAttributesW
SetLastError
SetUnhandledExceptionFilter
OutputDebugStringA
UnhandledExceptionFilter
WaitForMultipleObjects
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
OpenEventW
MulDiv
LocalFree
LocalAlloc
LoadLibraryW
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
GlobalFree
GlobalAlloc
GetWindowsDirectoryW
GetVersionExW
GetTickCount
GetSystemWindowsDirectoryW
GetSystemTimeAsFileTime
GetSystemDirectoryW
GetStartupInfoA
GetProcAddress
GetPrivateProfileStringW
GetPrivateProfileIntW
GetNumberFormatW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLastError
GetFileAttributesW
GetExitCodeThread
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetCommandLineW
FreeLibrary
FormatMessageW
FindNextFileW
FindFirstFileW
FindClose
ExitProcess
DeleteFileW
CreateThread
CreateProcessW
CreateMutexW
CreateFileW
CreateFileMappingW
CreateEventW
CloseHandle
VirtualAlloc
GetWindowsDirectoryA
lstrcatA
TerminateProcess
CreateFileA

user32

GetUpdateRect
GetUserObjectInformationW
GetWindow
GetWindowLongW
GetWindowRect
GetWindowTextW
GetWindowThreadProcessId
InflateRect
InvalidateRect
IsChild
IsDlgButtonChecked
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
KillTimer
LoadAcceleratorsW
LoadCursorW
LoadImageW
LoadStringA
LoadStringW
MapVirtualKeyExW
MapVirtualKeyW
MapWindowPoints
MessageBeep
MessageBoxW
MoveWindow
MsgWaitForMultipleObjects
OffsetRect
OpenDesktopW
OpenInputDesktop
OpenWindowStationW
PeekMessageW
PostMessageW
PostQuitMessage
RedrawWindow
RegisterClassExW
RegisterClassW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
ScreenToClient
SendDlgItemMessageW
SendInput
SendMessageW
SetCapture
SetClassLongW
SetCursor
SetFocus
SetForegroundWindow
SetMessageQueue
SetProcessWindowStation
SetThreadDesktop
SetTimer
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowTextW
ShowWindow
ToUnicodeEx
TranslateAcceleratorW
TranslateMessage
UnregisterClassW
UpdateWindow
WaitMessage
WinHelpW
wsprintfA
wsprintfW
GetSysColorBrush
GetSysColor
GetProcessWindowStation
GetParent
GetNextDlgTabItem
GetMessageW
GetMenu
GetLastActivePopup
GetKeyboardType
GetKeyboardLayout
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassInfoW
GetAsyncKeyState
FindWindowW
FillRect
ExitWindowsEx
EnumThreadWindows
EnumChildWindows
EndPaint
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
DrawIconEx
DrawIcon
DrawFocusRect
DrawEdge
DispatchMessageW
DialogBoxParamW
DestroyWindow
DefWindowProcW
CreateWindowExW
CreateDialogParamW
CopyRect
CloseWindowStation
CloseDesktop
ChildWindowFromPointEx
CheckRadioButton
CheckMenuRadioItem
CheckMenuItem
CheckDlgButton
CharPrevW
CharNextW
CallWindowProcW
BringWindowToTop
BeginPaint
AllowSetForegroundWindow
ActivateKeyboardLayout
LoadIconW
LoadIconA
GetSystemMetrics
GetThreadDesktop

gdi32

TextOutW
StretchBlt
SetTextColor
SetMapMode
SetBkMode
SetBkColor
SelectPalette
SelectObject
RealizePalette
Polyline
GetTextMetricsW
GetObjectW
GetMapMode
GetDeviceCaps
DeleteObject
DeleteDC
DPtoLP
GetStockObject
CreateRoundRectRgn
CreatePenIndirect
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
BitBlt
CreateSolidBrush

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
RegSetValueExW
RegQueryValueW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyW
RegOpenKeyExA
RegDeleteValueW
RegCreateKeyW
RegCreateKeyExW
RegCloseKey
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
InitializeSecurityDescriptor
InitializeAcl
GetTokenInformation
RegOpenKeyExW
AddAccessAllowedAce
AdjustTokenPrivileges
CheckTokenMembership
FreeSid

shell32

SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation
ShellExecuteW

ole32

CoInitialize
CoUninitialize
CoCreateInstance

shlwapi

PathIsURLW
PathIsFileSpecW

msvcrt

_exit
wcscpy
swscanf
setlocale
_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_ftol
_initterm
_vsnwprintf
_wcsicmp
_wmakepath
_wsplitpath
_wtoi
exit
free
malloc
memmove

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

51e92a14f5b18b3dc7a0475e341a7381

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

msvcrt

Sections

.text Size: 42KB - Virtual size: 41KB

.rdata Size: 185KB - Virtual size: 184KB

.data Size: 3KB - Virtual size: 2KB

.data3 Size: 512B - Virtual size: 100B

.data2 Size: 512B - Virtual size: 100B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 42KB - Virtual size: 41KB

.rdata
Size: 185KB - Virtual size: 184KB

.data
Size: 3KB - Virtual size: 2KB

.data3
Size: 512B - Virtual size: 100B

.data2
Size: 512B - Virtual size: 100B

.reloc
Size: 2KB - Virtual size: 2KB