ed168c4f866ff630b04e5b481fedcfdea10d9783bccf6a3962dd239a4aa43e3b

Sharing

Copy URL Twitter E-mail

General

Target

ed168c4f866ff630b04e5b481fedcfdea10d9783bccf6a3962dd239a4aa43e3b
Size

1.5MB
MD5

9693c49028a9a7e9e5b0ea3201a5a725
SHA1

90e3c6bf3872c9d9ca16ca87b36f38a224ae75e3
SHA256

ed168c4f866ff630b04e5b481fedcfdea10d9783bccf6a3962dd239a4aa43e3b
SHA512

aa96e28d467cb0d2b0d19d2943b351d886be2f6629d3d28f6224e508677892fbb66ed4b600983b6e433b3b719f9128598b7d1015e2261b2b8b3ce1d9df1dbabc
SSDEEP

24576:Hy0KxNs1PB5O9rUpgsI8THXxWw/6ydTHGcC/RAtEzqR/Fun0W/4vg1qyTBcjY+US:HyPxNyZUgzxWw/6ydDGc+zqmn0Y4qTDS

Score

N/A

Malware Config

Signatures

Files

ed168c4f866ff630b04e5b481fedcfdea10d9783bccf6a3962dd239a4aa43e3b
.exe windows x86

ba503842a5425f47036e4645cba5ed08

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceFrequency
SetFilePointer
WriteFile
GlobalAlloc
FormatMessageW
GetModuleFileNameW
CreateFileW
ExitThread
GetLastError
SetLastError
GlobalFree
CreateEventW
WaitForMultipleObjects
DuplicateHandle
LocalFree
CreateThread
WideCharToMultiByte
MultiByteToWideChar
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
LoadLibraryW
GetTempPathW
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
GetCurrentProcessId
InterlockedIncrement
InterlockedCompareExchange
SystemTimeToFileTime
MoveFileExW
WaitForSingleObject
SetFileTime
GetExitCodeProcess
FileTimeToSystemTime
GetFileTime
DeleteFileW
SetFileAttributesW
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetQueuedCompletionStatus
FindFirstFileW
FindClose
LocalAlloc
FindNextFileW
GetSystemDirectoryW
RemoveDirectoryW
CreateMutexW
OpenMutexW
ReleaseMutex
GetFileSize
ReadFile
FlushFileBuffers
GetTickCount
VirtualQuery
SetUnhandledExceptionFilter
GetCurrentThread
IsBadWritePtr
GetLocalTime
GlobalLock
GlobalUnlock
GlobalReAlloc
CreateFileA
CreateFileMappingA
OpenFileMappingA
GetWindowsDirectoryA
DeleteFileA
SetEvent
ResetEvent
HeapAlloc
HeapFree
GetProcessHeap
GetTimeZoneInformation
HeapReAlloc
GetStartupInfoW
FileTimeToLocalFileTime
GetDriveTypeW
ResumeThread
RtlUnwind
UnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetDriveTypeA
FindFirstFileA
GetFileType
RaiseException
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapSize
ExitProcess
HeapCreate
VirtualFree
VirtualAlloc
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetFullPathNameW
GetCurrentDirectoryA
LCMapStringA
LCMapStringW
GetFullPathNameA
SetStdHandle
GetConsoleCP
GetConsoleMode
SetEndOfFile
InterlockedExchange
GetModuleHandleA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetLocaleInfoA
FreeLibrary
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
SetEnvironmentVariableA
WaitNamedPipeW
FindResourceW
LoadResource
LoadLibraryExW
SizeofResource
LockResource
InitializeCriticalSection
Module32FirstW
Module32NextW
OpenEventW
GetSystemTimeAsFileTime
CreateDirectoryW
GetCurrentProcess
GetSystemInfo
GetProcAddress
GetModuleHandleW
CloseHandle
GetCurrentThreadId
CopyFileW
Sleep
CreateProcessW
DeleteCriticalSection
GetStartupInfoA

user32

GetClientRect
CreateDialogParamW
CheckDlgButton
EndDialog
DialogBoxParamW
SetWindowRgn
MonitorFromPoint
FillRect
SetCapture
PostMessageW
SubtractRect
BeginPaint
GetAsyncKeyState
IntersectRect
RedrawWindow
GetCursorPos
ShowWindow
GetCursor
ReleaseCapture
IsWindowVisible
GetMonitorInfoW
MoveWindow
OffsetRect
SetRect
SetCursorPos
UpdateLayeredWindow
SetTimer
ScreenToClient
GetMessageW
PostQuitMessage
KillTimer
LoadCursorW
PtInRect
TranslateMessage
ReleaseDC
SetWindowPos
DispatchMessageW
wvsprintfW
GetSystemMetrics
EndPaint
InflateRect
EnumThreadWindows
DefWindowProcW
MessageBoxW
CreateWindowExW
SetWindowLongW
InvalidateRect
GetSysColorBrush
GetClassNameW
GetWindowLongW
RegisterClassExW
FindWindowW
SetCursor
DrawIconEx
SetFocus
CallWindowProcW
GetDesktopWindow
LoadImageW
DrawTextW
SetLayeredWindowAttributes
AdjustWindowRectEx
CloseWindow
EnableWindow
MonitorFromRect
GetParent
SetForegroundWindow
DestroyWindow
SetWindowTextW
SendMessageW
IsDlgButtonChecked
GetForegroundWindow
LoadKeyboardLayoutW
SystemParametersInfoW
GetKeyboardLayoutList
GetWindowRect
GetDC
GetDlgItem

gdi32

OffsetRgn
MoveToEx
GetFontData
RestoreDC
GetCharABCWidthsFloatW
FillPath
GetTextExtentPointW
SelectObject
DeleteDC
GetTextExtentPoint32W
GetTextMetricsW
EndPath
SaveDC
AngleArc
SetViewportOrgEx
BeginPath
Rectangle
ExtCreateRegion
StretchBlt
GetPixel
SetTextColor
CreateDIBSection
CreateFontIndirectW
CombineRgn
SetBkMode
SelectClipRgn
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectW
GetTextExtentExPointW
LineTo
BitBlt
CreateRectRgn
CreatePen
GetStockObject
CreateSolidBrush
DeleteObject

comdlg32

GetSaveFileNameW

advapi32

InitializeSecurityDescriptor
SetNamedSecurityInfoW
GetNamedSecurityInfoW
InitializeAcl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
AddAccessAllowedAceEx
SetEntriesInAclW
GetSidLengthRequired
GetSecurityDescriptorSacl
LookupAccountSidW
BuildExplicitAccessWithNameW
RegQueryValueW
RegOpenKeyW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegEnumValueW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
OpenProcessToken
SetSecurityDescriptorDacl
RegQueryInfoKeyW
RegQueryValueExW

ole32

CoInitializeEx
OleInitialize
CoInitializeSecurity
CoInitialize
OleSetContainedObject
OleCreate
CoUninitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocString
VariantClear
VariantInit

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

msimg32

GradientFill
TransparentBlt
AlphaBlend

wininet

InternetConnectW
InternetQueryOptionW
InternetCanonicalizeUrlW
InternetCloseHandle
HttpQueryInfoW
InternetSetOptionW
InternetReadFile
HttpSendRequestW
HttpOpenRequestW
InternetOpenW
InternetOpenUrlW

shell32

SHGetSpecialFolderPathW
SHFileOperationW
ShellExecuteW
ShellExecuteExW

comctl32

InitCommonControlsEx

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 293KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SogouIn
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 95KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ba503842a5425f47036e4645cba5ed08

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

oleaut32

version

msimg32

wininet

shell32

comctl32

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 293KB - Virtual size: 293KB

.data Size: 23KB - Virtual size: 54KB

.SogouIn Size: 12KB - Virtual size: 11KB

.rsrc Size: 95KB - Virtual size: 96KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 293KB - Virtual size: 293KB

.data
Size: 23KB - Virtual size: 54KB

.SogouIn
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 95KB - Virtual size: 96KB