94eaee985b7b5e68c3f002066e4441a3dd5b418e537cbf58f305602df7ad559f

Sharing

Copy URL Twitter E-mail

General

Target

94eaee985b7b5e68c3f002066e4441a3dd5b418e537cbf58f305602df7ad559f
Size

2.9MB
MD5

434d172e6e986b7b9a7e9fa1baab371b
SHA1

c6d919d28cad76ac11a4d197fe6676f7b918f022
SHA256

94eaee985b7b5e68c3f002066e4441a3dd5b418e537cbf58f305602df7ad559f
SHA512

b183df27960c73a5c796ec5bde02063f45b32d5b2dd931a68c66397dc1f9d9d15fa9dd42f2c5f7adb10d03ee1166269aa2231463b8cb05a310356955fb876384
SSDEEP

49152:6zy8mp2sA55u8BxGTfa0s9o/ofoT7TYZQaTYfDL013IWsk/aLJv1fHtoY:6zy86G55gTs+/oevL0CvXfHto

Score

N/A

Malware Config

Signatures

Files

94eaee985b7b5e68c3f002066e4441a3dd5b418e537cbf58f305602df7ad559f
.exe windows x86

fb0974ed3e30e382c0a4caf464ff5ce8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mpr

WNetOpenEnumW
WNetCloseEnum
WNetEnumResourceW

ws2_32

ntohl
recvfrom
WSAStartup
WSACleanup
recv
ioctlsocket
select
send
shutdown
gethostbyname
socket
WSACloseEvent
WSAEventSelect
WSACreateEvent
htonl
bind
WSAIoctl
accept
__WSAFDIsSet
listen
gethostname
inet_ntoa
sendto
inet_addr
getpeername
ntohs
getsockname
WSAGetLastError
connect
htons
WSASetLastError
getsockopt
closesocket
setsockopt

winmm

timeGetDevCaps
timeSetEvent
timeKillEvent
PlaySoundA

rasapi32

RasEnumEntriesA

kernel32

LockResource
LoadResource
FindResourceExW
WaitForMultipleObjects
GetOverlappedResult
CancelIo
CreateNamedPipeW
FlushFileBuffers
DisconnectNamedPipe
ConnectNamedPipe
GetDateFormatW
GetTimeFormatW
FileTimeToSystemTime
GetShortPathNameW
FindNextFileW
CreateFileA
GetCommandLineW
GetCurrentProcessId
GetLocalTime
CreateMutexW
CreateSemaphoreW
ReleaseMutex
ReleaseSemaphore
GetStartupInfoA
GetModuleFileNameA
CreateProcessA
ExpandEnvironmentStringsW
GetFileAttributesA
MultiByteToWideChar
CreateDirectoryW
CreateFileW
InterlockedIncrement
InterlockedDecrement
CreateMutexA
SetEndOfFile
WritePrivateProfileStringA
GetPrivateProfileStringA
WritePrivateProfileSectionA
GetLogicalDriveStringsA
SetFileAttributesA
SetFilePointer
GetEnvironmentVariableW
GetSystemTime
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
OutputDebugStringW
HeapAlloc
HeapFree
GetProcessHeap
SuspendThread
ResumeThread
MulDiv
GlobalUnlock
GlobalAlloc
GlobalLock
WideCharToMultiByte
LoadLibraryW
CreateEventA
GetFileAttributesW
GetSystemInfo
DeviceIoControl
GetCurrentThread
SizeofResource
GetPriorityClass
GetProcessTimes
CompareFileTime
ReadProcessMemory
QueryPerformanceFrequency
QueryPerformanceCounter
GetFileTime
RemoveDirectoryW
SetFileAttributesW
GetLogicalDrives
VirtualQuery
GetCurrentDirectoryA
FileTimeToLocalFileTime
SetThreadPriority
OutputDebugStringA
GetComputerNameA
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
lstrcpyW
GetEnvironmentVariableA
GetSystemDirectoryA
GetVersionExA
SetUnhandledExceptionFilter
GetThreadContext
GetTempFileNameA
MapViewOfFile
UnmapViewOfFile
GetUserDefaultLangID
GetSystemTimeAsFileTime
SystemTimeToFileTime
lstrcmpiW
DuplicateHandle
CreateRemoteThread
GetVersionExW
lstrlenW
InterlockedExchange
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
GetExitCodeThread
LoadLibraryExW
GetFileInformationByHandle
CreateThread
FreeConsole
SetConsoleCtrlHandler
CreateFileMappingW
CreateFileMappingA
OpenFileMappingW
OpenFileMappingA
GlobalSize
GetStdHandle
GlobalMemoryStatus
GetFileType
GetCPInfo
HeapCreate
HeapDestroy
VirtualAlloc
VirtualFree
ExitProcess
GetStartupInfoW
HeapSize
ExitThread
HeapReAlloc
IsDebuggerPresent
UnhandledExceptionFilter
FindResourceW
ResetEvent
SetEvent
CreateEventW
GlobalFree
WaitForSingleObject
GetTickCount
DeleteCriticalSection
InitializeCriticalSection
GetExitCodeProcess
TerminateThread
TerminateProcess
ReadFile
SetFileTime
GetFileSize
WriteFile
GetVersion
FlushInstructionCache
SetLastError
RaiseException
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
SetErrorMode
OpenProcess
LocalAlloc
MoveFileExW
GetTempFileNameW
DeleteFileW
CopyFileW
LocalFree
CloseHandle
lstrcmpA
lstrcpyA
DeleteFileA
GetTempPathA
GetModuleHandleA
FindNextFileA
LoadLibraryA
FindClose
RemoveDirectoryA
GetProcAddress
GetLastError
FindFirstFileA
SetCurrentDirectoryA
CreateDirectoryA
lstrcatA
Sleep
GetWindowsDirectoryA
GetModuleHandleW
GetCurrentProcess
FreeLibrary
lstrcpynA
lstrlenA
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
RtlUnwind
SetHandleCount
CompareStringA
CompareStringW
GetConsoleCP
GetConsoleMode
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetStdHandle
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
InterlockedCompareExchange
IsProcessorFeaturePresent
GetThreadLocale
FlushConsoleInputBuffer
GetDriveTypeA
ReadConsoleInputA
SetConsoleMode
GetFullPathNameA

user32

EnumDesktopWindows
SetClipboardViewer
MessageBeep
PostQuitMessage
ChangeClipboardChain
UnionRect
OpenInputDesktop
mouse_event
keybd_event
SetKeyboardState
UpdateWindow
GetPriorityClipboardFormat
FindWindowW
GetGUIThreadInfo
GetKeyboardLayout
CharLowerW
CharUpperW
ToUnicodeEx
DrawIconEx
GetUserObjectInformationW
MessageBoxA
EmptyClipboard
EndMenu
UnregisterClassW
GetClassNameW
CopyRect
IsWindowEnabled
IsChild
IsDialogMessageW
SystemParametersInfoW
ClientToScreen
GetCapture
WaitMessage
PeekMessageW
SetCapture
GetDlgCtrlID
GetIconInfo
WindowFromPoint
GetDialogBaseUnits
GetActiveWindow
IsIconic
IntersectRect
GetAncestor
SetScrollInfo
GetScrollInfo
GetScrollBarInfo
GetKeyState
EqualRect
CloseClipboard
GetClipboardData
DestroyIcon
OpenClipboard
GetWindowTextLengthW
GetFocus
RegisterHotKey
SetActiveWindow
SetForegroundWindow
AttachThreadInput
SetWindowPlacement
ScreenToClient
LoadImageW
IsWindowVisible
GetMenu
LoadImageA
ExitWindowsEx
SystemParametersInfoA
RegisterWindowMessageW
SetCursorPos
GetCursorPos
GetKeyboardState
RegisterWindowMessageA
SetClassLongW
SetRectEmpty
DrawTextW
FillRect
PtInRect
IsRectEmpty
TrackMouseEvent
ReleaseCapture
InvalidateRect
RedrawWindow
SetRect
GetForegroundWindow
GetWindowPlacement
GetSysColor
SetCursor
GetCursor
EnumChildWindows
GetParent
CallNextHookEx
UnhookWindowsHookEx
GetDC
ReleaseDC
MoveWindow
EnableWindow
OffsetRect
GetDesktopWindow
MapWindowPoints
SendMessageW
SetFocus
GetDlgItem
GetClientRect
DialogBoxIndirectParamW
SetWindowPos
GetSystemMetrics
GetWindowRect
EndDialog
GetSysColorBrush
PostMessageW
SetWindowTextW
wsprintfW
GetWindowTextW
ShowWindow
CloseWindowStation
SetProcessWindowStation
OpenWindowStationW
GetProcessWindowStation
PostThreadMessageW
SendInput
UnregisterClassA
CloseDesktop
SetThreadDesktop
wsprintfA
SetWindowLongW
RegisterClassExW
GetWindowLongW
GetClassInfoExW
DefWindowProcW
GetThreadDesktop
EnumWindows
EndPaint
BeginPaint
SetWindowRgn
AdjustWindowRectEx
GetMessageTime
GetMessagePos
SetCaretPos
GetWindowDC
DispatchMessageW
TranslateMessage
IsWindowUnicode
GetWindow
DispatchMessageA
UnregisterHotKey
SetClipboardData
CallWindowProcW
LoadCursorW
IsWindow
DestroyWindow
SetTimer
KillTimer
CreateWindowExW
GetWindowThreadProcessId

gdi32

SetDIBits
GetClipRgn
GetWindowOrgEx
ExtSelectClipRgn
CreateFontW
OffsetWindowOrgEx
GetStockObject
CreateDCW
FrameRgn
ExtCreatePen
GetDIBits
CreateRectRgnIndirect
SetRectRgn
CreateDCA
GetSystemPaletteEntries
ExtEscape
SetDIBColorTable
GetRegionData
GetBitmapBits
SetWindowOrgEx
CreateEllipticRgn
PtInRegion
CreateBrushIndirect
GetRgnBox
CombineRgn
CreateRectRgn
ExtTextOutW
GetDeviceCaps
GetObjectA
StretchBlt
SetPixel
CreateDIBSection
GetTextExtentPoint32W
SelectClipRgn
DeleteDC
LineTo
MoveToEx
SetTextColor
SetBkMode
CreatePen
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetTextExtentExPointW
CreateRoundRectRgn
OffsetRgn
CreateFontIndirectW
CreateSolidBrush
SetBkColor
GetObjectW
DeleteObject
SelectObject

advapi32

ReportEventA
DeregisterEventSource
SetTokenInformation
GetTokenInformation
FreeSid
SetNamedSecurityInfoA
SetNamedSecurityInfoW
IsValidSid
CloseEventLog
RegOpenKeyExW
GetSidSubAuthority
GetSidSubAuthorityCount
EqualSid
RegQueryValueExW
LookupAccountSidW
RevertToSelf
ImpersonateLoggedOnUser
LookupAccountNameW
IsValidSecurityDescriptor
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
RegCloseKey
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegisterEventSourceA

shell32

SHChangeNotify

ole32

GetRunningObjectTable
CreateFileMoniker
CoRegisterClassObject
CoRevokeClassObject
CoInitializeSecurity
CoInitializeEx
CoUninitialize
CoCreateInstance
CoInitialize
CreateBindCtx
CoTaskMemFree

oleaut32

SafeArrayAccessData
VariantTimeToSystemTime
VariantClear
VariantInit
SysAllocString
SafeArrayDestroy
SafeArrayCreateVector
SafeArrayGetDim
SafeArrayRedim
SafeArrayUnaccessData
UnRegisterTypeLi
RegisterTypeLi
LoadTypeLi
SysFreeString

shlwapi

PathFileExistsW
StrCpyW

version

GetFileVersionInfoA
VerQueryValueA

wininet

DetectAutoProxyUrl
InternetQueryOptionA

urlmon

URLDownloadToFileA

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 762KB - Virtual size: 762KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 508KB - Virtual size: 1.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fb0974ed3e30e382c0a4caf464ff5ce8

Headers

File Characteristics

Imports

mpr

ws2_32

winmm

rasapi32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

version

wininet

urlmon

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 328KB - Virtual size: 328KB

.data Size: 39KB - Virtual size: 192KB

.tls Size: 1KB - Virtual size: 1KB

.rsrc Size: 762KB - Virtual size: 762KB

.vmp0 Size: 508KB - Virtual size: 1.6MB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 328KB - Virtual size: 328KB

.data
Size: 39KB - Virtual size: 192KB

.tls
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 762KB - Virtual size: 762KB

.vmp0
Size: 508KB - Virtual size: 1.6MB