4819f6332cf9fa94bfe96f1e15d59a934e72e9bbf488886c6ac16d7ab970cdd0

Sharing

Copy URL

Twitter E-mail

General

Target

4819f6332cf9fa94bfe96f1e15d59a934e72e9bbf488886c6ac16d7ab970cdd0
Size

6.5MB
MD5

96505bd520404a618d031e85c93fda3d
SHA1

a86acdda62ebbed04272be254462e1984e6aa9aa
SHA256

4819f6332cf9fa94bfe96f1e15d59a934e72e9bbf488886c6ac16d7ab970cdd0
SHA512

379a891c56f6b0a8f7842ace8fb1413d1c1153f015ec1ac0f7164506bda06a034a0354858244a9be4714b560310be34bf652c3e6c179d4e1e6c41305a43fbf6c
SSDEEP

49152:rlAPdgcjlkg/GMwv7ncmDWySIkDP9eQy0i67UnUJyroYkrUq94ChbRmvTfpEcXaM:gLlqDcEk79+A7UUJy9XaAnfNWhC3p

Score

N/A

Malware Config

Signatures

Files

4819f6332cf9fa94bfe96f1e15d59a934e72e9bbf488886c6ac16d7ab970cdd0
.exe windows x86

5493e94b44115047c7881deca06e9016

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_SetDragCursorImage
ImageList_DragLeave
ImageList_DragEnter
ImageList_DragMove
ImageList_EndDrag
ord6
ord16
ImageList_Add
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Create
ImageList_GetImageCount
ImageList_Draw
ImageList_GetIconSize
ImageList_BeginDrag
ord17

wsock32

WSAStartup
WSAGetLastError
gethostbyname
ioctlsocket
__WSAFDIsSet
select
accept
closesocket
shutdown
inet_ntoa
WSASetLastError
recvfrom
sendto
send
connect
getsockopt
ntohl
recv
socket
setsockopt
htons

kernel32

TlsGetValue
TlsFree
TlsSetValue
TlsAlloc
GetExitCodeThread
ExitProcess
ExpandEnvironmentStringsA
RaiseException
GetVersion
GetTickCount
TerminateThread
FlushConsoleInputBuffer
SetConsoleMode
ReadConsoleInputA
SetConsoleCtrlHandler
SetFilePointer
ExitThread
GetFullPathNameA
CreateDirectoryA
SetStdHandle
HeapReAlloc
GetModuleFileNameW
WriteConsoleW
GetStartupInfoA
MoveFileA
FlushFileBuffers
DeleteFileA
SetFileAttributesA
GetCurrentDirectoryA
GetModuleHandleW
GetSystemTimeAsFileTime
GetConsoleMode
GetConsoleCP
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetDateFormatA
GetTimeFormatA
HeapAlloc
HeapFree
RtlUnwind
SetThreadPriority
InterlockedDecrement
InterlockedIncrement
ReleaseMutex
IsValidLocale
GetUserDefaultLCID
GetACP
InterlockedExchange
DuplicateHandle
CreateProcessA
CreateThread
ResumeThread
SetNamedPipeHandleState
PeekNamedPipe
CreatePipe
WriteFile
ReadFile
CreateMutexA
TerminateProcess
WaitForSingleObject
GetExitCodeProcess
GlobalMemoryStatus
GetCurrentProcess
SetEnvironmentVariableA
GetModuleHandleA
IsValidCodePage
GetCPInfo
GetCurrentProcessId
GetEnvironmentVariableA
OutputDebugStringA
GetStdHandle
GetThreadLocale
GetLocaleInfoA
GetTimeZoneInformation
FindNextFileA
GetModuleFileNameA
GetWindowsDirectoryA
CopyFileA
GetFileAttributesA
GetFileType
GetTempFileNameA
GetFileTime
FindFirstFileA
FindClose
GetTempPathA
FileTimeToLocalFileTime
FileTimeToSystemTime
CloseHandle
CreateFileA
WideCharToMultiByte
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetLogicalDriveStringsA
GetDriveTypeA
SetCurrentDirectoryA
GetProcessHeap
HeapSize
GlobalLock
GlobalSize
GlobalUnlock
LocalAlloc
LocalFree
FreeLibrary
GetCurrentThreadId
MultiByteToWideChar
GetCommandLineA
SetErrorMode
GetVersionExA
GetProcAddress
LoadLibraryA
Sleep
GlobalFree
_lclose
GlobalAlloc
_hread
_hwrite
_lcreat
_lopen
_lread
_llseek
_lwrite
FormatMessageA
SetLastError
GetLastError
HeapCreate
VirtualFree
VirtualAlloc
GetOEMCP
SetHandleCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
InitializeCriticalSectionAndSpinCount
CreateFileW
EnumSystemLocalesA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
LoadLibraryW
GetFileInformationByHandle
GetLocaleInfoW
SetEndOfFile
CompareStringA
CompareStringW
QueryPerformanceCounter

user32

GetProcessWindowStation
PostThreadMessageA
WaitForInputIdle
MessageBeep
EnumDisplaySettingsA
ChangeDisplaySettingsA
ShowCursor
GetMenuStringA
DefMDIChildProcA
TranslateMDISysAccel
DefFrameProcA
SetClipboardData
DrawStateA
DrawEdge
ChildWindowFromPoint
GetMessagePos
MapWindowPoints
InsertMenuItemA
GetSubMenu
CreateMenu
AppendMenuA
InsertMenuA
RemoveMenu
DestroyMenu
CreatePopupMenu
SetMenuItemInfoA
UnionRect
TranslateAcceleratorA
CreateAcceleratorTableA
DestroyAcceleratorTable
ValidateRect
GetMessageA
GetUpdateRect
DrawIcon
SetMenu
SetTimer
KillTimer
SetForegroundWindow
GetForegroundWindow
CreateDialogIndirectParamA
FlashWindow
AdjustWindowRectEx
GetSystemMenu
DrawMenuBar
IsIconic
IsZoomed
GetDesktopWindow
RegisterClipboardFormatA
ModifyMenuA
CheckMenuRadioItem
CheckMenuItem
EnableMenuItem
GetMenuState
GetWindowTextA
GetClassNameA
GetUserObjectInformationW
OffsetRect
DrawIconEx
DrawFrameControl
CreateIconIndirect
LoadImageA
DdeQueryStringA
GetIconInfo
LoadBitmapA
LoadIconA
CopyRect
BeginPaint
GetWindowDC
EndPaint
GetDlgItem
CreateDialogParamA
GetWindowTextLengthA
HideCaret
OpenClipboard
IsClipboardFormatAvailable
CloseClipboard
keybd_event
InflateRect
GetUpdateRgn
CreateWindowExA
SetWindowsHookExA
IsDialogMessageA
TrackPopupMenu
IsWindow
PtInRect
SetCursor
GetCapture
DestroyWindow
UnhookWindowsHookEx
UnregisterHotKey
RegisterHotKey
CallNextHookEx
GetActiveWindow
GetMenuItemCount
GetMenuItemInfoA
GetMessageTime
GetWindow
BeginDeferWindowPos
EndDeferWindowPos
InvalidateRect
SetWindowTextA
GetFocus
IsWindowEnabled
IsWindowVisible
CallWindowProcA
DefWindowProcA
DeferWindowPos
MoveWindow
ClientToScreen
ScreenToClient
UpdateWindow
RedrawWindow
SetParent
GetCursorPos
WindowFromPoint
GetParent
ScrollWindow
SetScrollInfo
GetScrollInfo
SetCursorPos
ReleaseCapture
DdePostAdvise
DdeConnect
DdeNameService
DdeCreateStringHandleA
DdeClientTransaction
DdeDisconnect
DdeInitializeA
DdeGetLastError
DdeCreateDataHandle
DdeGetData
DdeFreeDataHandle
DestroyCursor
DdeUninitialize
DrawTextA
DrawFocusRect
GetSysColor
SendMessageA
FindWindowA
BringWindowToTop
ShowWindow
GetAsyncKeyState
GetKeyState
MessageBoxA
RegisterClassA
LoadCursorA
DdeFreeStringHandle
DestroyIcon
MsgWaitForMultipleObjects
SetCapture
EnableWindow
SetFocus
SetWindowPos
SetWindowLongA
GetWindowLongA
FillRect
GetClientRect
GetWindowRect
VkKeyScanA
GetDC
ReleaseDC
DispatchMessageA
TranslateMessage
PostQuitMessage
SystemParametersInfoA
GetSystemMetrics
PeekMessageA
PostMessageA
UnregisterClassA
SetWindowRgn

gdi32

CreateHatchBrush
CreatePatternBrush
GetNearestPaletteIndex
CreatePalette
SetStretchBltMode
GetClipBox
ExtSelectClipRgn
ExtFloodFill
GetPixel
SetPixel
Polyline
PolyBezier
TextOutA
SetROP2
GetCharABCWidthsA
GetTextExtentExPointA
SetWindowOrgEx
SetViewportOrgEx
SetWindowExtEx
SetViewportExtEx
SetMapMode
GetBkColor
GetTextColor
SelectClipRgn
Arc
Pie
Polygon
CreatePen
PolyPolygon
Rectangle
RoundRect
Ellipse
SetBrushOrgEx
MaskBlt
StretchBlt
StretchDIBits
LineTo
ExtCreatePen
OffsetRgn
ExtCreateRegion
GetRegionData
GetRgnBox
EqualRgn
PtInRegion
RectInRegion
CombineRgn
CreateRectRgnIndirect
SetTextAlign
CreateICA
CreateDIBSection
GetDIBits
CreateDIBitmap
GetDIBColorTable
SetAbortProc
EndDoc
StartPage
EndPage
StartDocA
CreateDCA
EnumFontFamiliesExA
GetSystemPaletteEntries
GetEnhMetaFileA
CopyEnhMetaFileA
DeleteEnhMetaFile
CreateBitmap
CreateCompatibleBitmap
BitBlt
DeleteDC
CreateCompatibleDC
GetPaletteEntries
MoveToEx
PatBlt
CreateSolidBrush
SaveDC
RestoreDC
GetDeviceCaps
DeleteObject
CreateFontIndirectA
SetBkColor
ExcludeClipRect
CreateRectRgn
GetTextExtentPoint32A
RealizePalette
GdiFlush
SelectObject
GetTextMetricsA
GetStockObject
GetObjectA
SelectPalette
SetTextColor
SetPolyFillMode
SetBkMode

comdlg32

GetOpenFileNameA
CommDlgExtendedError
PageSetupDlgA
PrintDlgA
ChooseColorA
ChooseFontA
GetSaveFileNameA

advapi32

RegQueryValueExA
RegOpenKeyA
GetUserNameA
RegOpenKeyExA
DeregisterEventSource
ReportEventA
RegisterEventSourceA
RegCloseKey

shell32

SHGetSpecialFolderLocation
SHGetFileInfoA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
ExtractIconExA
ExtractIconA
DragQueryFileA
DragFinish
DragQueryPoint
DragAcceptFiles
ShellExecuteExA

ole32

OleUninitialize
OleInitialize
ReleaseStgMedium
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
CoCreateInstance

Exports

Exports

errno

Sections

.text
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 159KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 682KB - Virtual size: 684KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5493e94b44115047c7881deca06e9016

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

wsock32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

Exports

Exports

Sections

.text Size: 4.6MB - Virtual size: 4.6MB

.rdata Size: 1.1MB - Virtual size: 1.1MB

.data Size: 159KB - Virtual size: 280KB

.rsrc Size: 682KB - Virtual size: 684KB

.text
Size: 4.6MB - Virtual size: 4.6MB

.rdata
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 159KB - Virtual size: 280KB

.rsrc
Size: 682KB - Virtual size: 684KB