41e9779f16388ac65c3f018dc0106ed1392711cb37e87198761e70dc5952a892

Sharing

Copy URL Twitter E-mail

General

Target

41e9779f16388ac65c3f018dc0106ed1392711cb37e87198761e70dc5952a892
Size

296KB
MD5

738863ca153b74675b7d5dc3d4523fa0
SHA1

08e45a214a6c6a4c079b93fed14df0eaf7f513a5
SHA256

41e9779f16388ac65c3f018dc0106ed1392711cb37e87198761e70dc5952a892
SHA512

1fd62e0456c8123bf1a8fe45c157908b32ef12df93d154a00f923f173c90009e7c8fc2b6f6aefdc0d4bc15aa428ecbf90111e43349165255eb60b71e97f8acd6
SSDEEP

6144:7PK1aPchfi7Dw0LS9mlz92v359+7hkICF7EtXXM+bNRcepnFGsvg0:7QaUK71cg92f547LCF4XXM+JRcKF5g0

Score

N/A

Malware Config

Signatures

Files

41e9779f16388ac65c3f018dc0106ed1392711cb37e87198761e70dc5952a892
.exe windows x86

0522d7e70abc4cfda8d1986cd08651d6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

netapi32

NetQueryDisplayInformation
NetApiBufferFree

user32

SetClipboardData
IsWindow
TranslateMessage
SetFocus
GetWindowTextLengthW
MessageBoxW
TrackPopupMenuEx
WindowFromDC
IsClipboardFormatAvailable
SetWindowLongW
DrawFocusRect
MonitorFromPoint
IsWindowEnabled
MoveWindow
TrackPopupMenu
SetCursorPos
ScrollWindowEx
SetWindowsHookExW
ScreenToClient
SetDlgItemTextW
IsIconic
SetMenuDefaultItem
GetWindowPlacement
DestroyMenu
GetKeyState
GetSysColorBrush
LoadCursorW
UpdateWindow
EnableWindow
GetWindowRect
LoadImageW
SetMenuItemInfoW
ShowWindow
CharUpperBuffW
WindowFromPoint
OpenClipboard
LoadMenuW
CallNextHookEx
ReleaseDC
IsCharAlphaW
GetGUIThreadInfo
GetWindow
GetMonitorInfoW
IsRectEmpty
IsChild
LoadBitmapW
BeginPaint
GetParent
MsgWaitForMultipleObjects
DrawTextW
EnableMenuItem
DrawEdge
RegisterClassExW
CharLowerW
PeekMessageW
AppendMenuW
DeleteMenu
FindWindowW
DrawAnimatedRects
DrawFrameControl
MapDialogRect
CreateDialogParamW
LoadIconW
DefWindowProcW
DrawIconEx
MessageBeep
LoadAcceleratorsW
LockWindowUpdate
GetNextDlgTabItem
KillTimer
DialogBoxParamW
GetTabbedTextExtentW
RegisterWindowMessageW
EndPaint
DestroyIcon
GetClassNameW
SetRectEmpty
SetScrollPos
SetMenu
wsprintfW
GetCursorPos
IsDialogMessageW
GetMenuItemInfoW
ReleaseCapture
CharNextW
GetDlgCtrlID
SetWindowPlacement
RedrawWindow
GetClassInfoExW
IsMenu
CharUpperW
GetTopWindow
DestroyWindow
CreatePopupMenu
SetCapture
GetWindowTextW
LoadStringA
SetWindowTextW
EqualRect
TranslateAcceleratorW
GetCapture
GetScrollInfo
CreateWindowExW
OffsetRect
FillRect
TabbedTextOutW
EndDialog
SetForegroundWindow
UnregisterClassA
CloseClipboard
FrameRect
GetMessageW
RemoveMenu
GetDesktopWindow
SetScrollInfo
ModifyMenuW
GetDC
EmptyClipboard
PostQuitMessage
GetWindowLongW
InflateRect
UnhookWindowsHookEx
GetWindowDC
SendMessageW
ClientToScreen
GetForegroundWindow
EndDeferWindowPos
GetMessagePos
CallWindowProcW
GetDlgItem
GetClipboardData
BeginDeferWindowPos
GetClientRect
PtInRect
AnimateWindow
SystemParametersInfoW
CopyRect
GetFocus
GetMenu
PostMessageW
GetMenuItemCount
IntersectRect
MapWindowPoints
IsCharLowerW
DrawStateW
ExitWindowsEx
GetCursor
DeferWindowPos
GetScrollPos
SetCursor
SetWindowPos
InvalidateRect
GetActiveWindow
GetSubMenu
LoadStringW
IsCharAlphaNumericW
GetSystemMetrics
AttachThreadInput
GetSysColor
IsWindowVisible
GetSystemMenu
SetTimer
DispatchMessageW
GetWindowThreadProcessId

comctl32

ord8
_TrackMouseEvent
PropertySheetW
ImageList_Draw
ImageList_ReplaceIcon
DestroyPropertySheetPage
ImageList_Create
ImageList_LoadImageW
CreatePropertySheetPageW
ImageList_GetIcon
InitCommonControlsEx
ImageList_Destroy
CreateStatusWindowW
ImageList_AddMasked
ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_DrawIndirect

gdi32

GetTextExtentExPointW
GetPixel
PtInRegion
GetObjectW
Rectangle
CreatePolygonRgn
CreatePen
SetTextAlign
GetDeviceCaps
CreateRectRgn
SetPixel
CreateSolidBrush
LineTo
CreateRectRgnIndirect
GetBkColor
GetCurrentObject
CreatePatternBrush
CreateCompatibleBitmap
TextOutW
GetTextExtentPoint32W
SetViewportOrgEx
SetBkMode
DeleteObject
Polygon
UnrealizeObject
SetROP2
GetObjectType
IntersectClipRect
CreateCompatibleDC
GetClipRgn
DeleteDC
CreateFontIndirectW
CreateBitmap
ExtTextOutW
SetBrushOrgEx
SetTextColor
SetBkColor
GetTextMetricsW
SelectClipRgn
CombineRgn
BitBlt
CreateDIBSection
RoundRect
MoveToEx
SelectObject
ExtCreatePen
PatBlt
GetStockObject

shell32

SHGetFileInfoW
ShellExecuteExW
SHGetDesktopFolder
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
DragQueryFileW
SHGetSpecialFolderPathW
SHGetFolderPathW
DragAcceptFiles
ShellExecuteW
SHAppBarMessage
SHGetMalloc

ole32

CoInitializeSecurity
CoTaskMemFree
CoInitialize
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CLSIDFromString
CoRevokeClassObject
CreateStreamOnHGlobal
CoRegisterClassObject
StringFromGUID2
StringFromCLSID
CoCreateInstance
CLSIDFromProgID
CoInitializeEx
CoResumeClassObjects
OleRun

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

userenv

UnloadUserProfile

activeds

ord7
ord3
ord9

msimg32

AlphaBlend
GradientFill

shlwapi

StrChrW
StrRetToStrW
StrRStrIW
PathAppendW
PathFileExistsW
PathStripPathW
PathIsDirectoryW
PathRemoveFileSpecW
PathCompactPathExW
PathCompactPathW
ColorAdjustLuma

secur32

GetUserNameExW
TranslateNameW

advapi32

GetSecurityDescriptorOwner
GetSidLengthRequired
MakeSelfRelativeSD
InitializeSecurityDescriptor
ConvertStringSidToSidW
GetLengthSid
AddAce
InitializeAcl
AllocateAndInitializeSid
RegOpenKeyExA
GetFileSecurityW
GetSecurityDescriptorControl
RegCreateKeyExW
InitializeSid
LookupAccountNameW
OpenProcessToken
RegQueryValueExA
CheckTokenMembership
StartServiceW
QueryServiceStatus
RegOpenKeyW
LookupPrivilegeValueW
SetFileSecurityW
AdjustTokenPrivileges
OpenSCManagerW
GetSidSubAuthority
GetAce
GetUserNameW
GetSecurityDescriptorGroup
ConvertSidToStringSidW
GetAclInformation
CopySid
RegOpenKeyExW
GetSecurityDescriptorSacl
LookupAccountSidW
RegQueryValueExW
SetSecurityDescriptorDacl
RegCloseKey
RegNotifyChangeKeyValue
GetSecurityDescriptorDacl
CloseServiceHandle
IsValidSid
FreeSid
RegSetValueExW
EqualSid
MakeAbsoluteSD
GetTokenInformation
OpenServiceW
GetSecurityDescriptorLength

comdlg32

FindTextW
GetSaveFileNameW
GetOpenFileNameW

oleaut32

SysFreeString
GetRecordInfoFromGuids
LoadRegTypeLi
VariantTimeToSystemTime
VariantCopyInd
VarBstrCmp
SafeArrayRedim
SafeArrayDestroy
VariantInit
SafeArrayUnlock
VariantCopy
VarDateFromStr
SafeArrayCopy
SafeArrayGetElement
DispCallFunc
VarBstrFromDate
SysStringLen
SafeArrayAccessData
SafeArrayGetVartype
SysStringByteLen
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SysAllocString
SafeArrayCreate
GetErrorInfo
SafeArrayCreateVectorEx
SafeArrayUnaccessData
VariantClear
VariantChangeType
SystemTimeToVariantTime
SafeArrayGetDim
LoadTypeLi
SysAllocStringByteLen
SysAllocStringLen
VarDateFromUdate

kernel32

lstrcpyW
GetThreadLocale
RaiseException
LocalAlloc
GetModuleHandleW
SetWaitableTimer
lstrcatW
GetFileType
lstrcpynW
WideCharToMultiByte
HeapFree
HeapSize
lstrcpynA
GetFileInformationByHandle
WaitForMultipleObjects
LocalFree
WriteFile
lstrlenW
GetDateFormatW
GlobalAlloc
IsDebuggerPresent
GetFullPathNameW
GetUserDefaultLCID
CloseHandle
GetSystemTime
LoadLibraryExW
CreateEventW
FileTimeToSystemTime
GetCurrentThreadId
lstrcmpW
VirtualFree
FindResourceExW
LoadResource
GetSystemTimeAsFileTime
SetCurrentDirectoryW
OpenEventW
DeleteFileW
GetTempPathW
GlobalUnlock
GetProcessHeap
LockResource
GlobalFree
lstrlenA
GetACP
ExpandEnvironmentStringsA
GetExitCodeThread
SetLastError
SetThreadPriority
TerminateThread
SystemTimeToTzSpecificLocalTime
CreateThread
lstrcmpiW
SetUnhandledExceptionFilter
FindResourceW
SizeofResource
GetDriveTypeW
FormatMessageW
FindClose
GetCommandLineW
WaitForSingleObject
ResumeThread
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
CreateFileW
GetLogicalDriveStringsW
UnhandledExceptionFilter
GetWindowsDirectoryW
GetCurrentDirectoryW
DeleteCriticalSection
GetNumberFormatW
HeapDestroy
FindFirstFileW
CreateWaitableTimerW
GetLongPathNameW
MulDiv
GetFileSize
ResetEvent
FlushInstructionCache
SetFilePointer
ReadFile
GetSystemInfo
FatalAppExitW
DuplicateHandle
HeapAlloc
GetUserDefaultLangID
IsProcessorFeaturePresent
GlobalLock
GetTimeFormatW
VirtualAlloc
FreeLibrary
GetComputerNameW
VirtualAllocEx

esent

JetCreateIndex
JetDelete
JetRetrieveTaggedColumnList
JetGrowDatabase
JetRenameColumn
JetRestore2
JetGetDatabaseInfo
JetBackupInstance
JetDeleteColumn2
JetGetVersion
JetBeginExternalBackupInstance
JetDetachDatabase
JetRollback
JetSetSystemParameter

dsquery

DllInstall

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 263KB - Virtual size: 693KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0522d7e70abc4cfda8d1986cd08651d6

Headers

File Characteristics

Imports

netapi32

user32

comctl32

gdi32

shell32

ole32

version

userenv

activeds

msimg32

shlwapi

secur32

advapi32

comdlg32

oleaut32

kernel32

esent

dsquery

Sections

.text Size: 17KB - Virtual size: 16KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 263KB - Virtual size: 693KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 17KB - Virtual size: 16KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 263KB - Virtual size: 693KB

.rsrc
Size: 2KB - Virtual size: 2KB