50d3c57cda492b7c6b57178222fb550bd93474ac74e72240cdccfb1edf0ff791

Sharing

Copy URL

Twitter E-mail

General

Target

50d3c57cda492b7c6b57178222fb550bd93474ac74e72240cdccfb1edf0ff791
Size

672KB
MD5

968b2bef497fb7867ebb7792c54f3360
SHA1

06e0acfa3f450524f03b939471439e79825438f7
SHA256

50d3c57cda492b7c6b57178222fb550bd93474ac74e72240cdccfb1edf0ff791
SHA512

186c0f74b925e8e2257f5c8a9d53ad4686c9a8395163310a0bd920bd86ce40778770cd6cdf77d94d1a88abeaf705b16704cdb66235ce272720fa2c7722841667
SSDEEP

12288:kCu/f29SqXPeQQfdwdwdeTTr2EsNxDIBuOFe7/uT:HsuHXPV29tIoOFdT

Score

N/A

Malware Config

Signatures

Files

50d3c57cda492b7c6b57178222fb550bd93474ac74e72240cdccfb1edf0ff791
.exe windows x86

e7a54ddc9f749cdd2401d07d0e7b3e41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

zlib

inflateInit2_
inflate
inflateEnd

kernel32

GetModuleHandleW
GetModuleFileNameW
OutputDebugStringW
DebugBreak
lstrlenA
FreeResource
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
WaitForSingleObject
SetEvent
CreateProcessW
CreateEventW
LocalFree
GetCommandLineW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetSystemInfo
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
LoadLibraryExW
GetCurrentDirectoryA
GetCurrentProcess
GetStartupInfoA
SetHandleCount
SetFilePointer
ReadFile
Sleep
IsValidCodePage
GetOEMCP
GetCPInfo
ExitProcess
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
WriteFile
HeapSize
HeapCreate
HeapDestroy
GetModuleHandleA
GetStartupInfoW
FindFirstFileA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
GetFileType
SetStdHandle
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapReAlloc
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetProcAddress
FindResourceW
LoadResource
SizeofResource
FreeLibrary
SetLastError
WideCharToMultiByte
MultiByteToWideChar
lstrcmpiW
InterlockedIncrement
GetLastError
GetCurrentThreadId
CreateFileW
GetFileSize
CloseHandle
lstrlenW
FreeEnvironmentStringsA
InterlockedDecrement
FlushInstructionCache
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
CompareStringW
SetEnvironmentVariableA
CreateFileA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetVersionExA
GetFullPathNameA
SetEndOfFile
CompareStringA

user32

GetWindowLongW
SendMessageW
GetWindowTextW
GetWindowTextLengthW
MoveWindow
SetWindowPos
GetWindowRect
GetClientRect
ClientToScreen
ScreenToClient
InvalidateRect
ShowWindow
EnableWindow
ShowScrollBar
GetParent
SetWindowRgn
IsWindow
MapWindowPoints
SystemParametersInfoW
GetWindow
LoadStringW
SetScrollInfo
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
CharNextW
SetWindowLongW
DestroyWindow
CreateDialogParamW
SetTimer
KillTimer
CharUpperW
GetClassNameW
EnumChildWindows
GetDC
IsWindowEnabled
GetDlgItem
TrackMouseEvent
PostMessageW
WindowFromPoint
GetCursorPos
GetFocus
CallWindowProcW
IsMenu
DrawTextW
GetMonitorInfoW
MonitorFromPoint
TrackPopupMenuEx
ReleaseDC
PtInRect
GetSystemMetrics
BeginPaint
EndPaint
SetWindowTextW
GetScrollInfo
DefWindowProcW
GetActiveWindow
IsDialogMessageW
ScrollWindow
RemoveMenu
GetSystemMenu
FindWindowExW
CopyRect
GetDlgCtrlID
RegisterWindowMessageW
LoadImageW
UnregisterClassA
DialogBoxParamW
EndDialog
PostQuitMessage
SetFocus
GetNextDlgGroupItem

gdi32

StretchBlt
CreatePen
RoundRect
GetTextExtentPoint32W
BitBlt
SetTextColor
GetTextMetricsW
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
SetBkMode
DeleteObject
DeleteDC
GetObjectA
CreateFontIndirectW
CreateRoundRectRgn

advapi32

RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW

shell32

DragQueryFileW
DragFinish
DragAcceptFiles
CommandLineToArgvW

ole32

CoTaskMemRealloc
CoTaskMemFree
CoInitialize
CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemAlloc
CoUninitialize

oleaut32

VarUI4FromStr

shlwapi

PathRemoveFileSpecW

comctl32

InitCommonControlsEx

gdiplus

GdipCreateFontFromDC
GdipMeasureString
GdipCreateFromHDC
GdipSetStringFormatLineAlign
GdipSetSolidFillColor
GdipCreateFontFromLogfontA
GdipGetImageWidth
GdipCreateStringFormat
GdipDeleteStringFormat
GdipDeleteGraphics
GdipDeleteFont
GdiplusStartup
GdiplusShutdown
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipLoadImageFromStream
GdipDrawImageRectI
GdipDrawString
GdipFillRectangle
GdipGetSmoothingMode
GdipSetPenMode
GdipSetImageAttributesColorMatrix
GdipCreateFont
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipSetStringFormatAlign
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipCloneBrush
GdipFillRectangleI
GdipCreateSolidFill
GdipDeleteBrush
GdipDrawRectangleI
GdipDrawLineI
GdipDeletePen
GdipCreatePen1
GdipDrawImageRectRect
GdipDrawImageRect
GdipSetPageScale
GdipSetPageUnit
GdipSetSmoothingMode
GdipReleaseDC
GdipCloneImage
GdipCloneBitmapAreaI
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipDisposeImage
GdipFree
GdipAlloc
GdipDrawImageRectRectI
GdipGetImageHeight

libbase

?E@LOG@@SAXPBD0ZZ
?TryCreateProcess@@YA_NPB_W0_N@Z
?I@LOG@@SAXPB_W0ZZ
?I@LOG@@SAXPBD0ZZ

librapi

?DestroyDeviceHelper@@YAXAAPAVIDeviceHelper@@@Z
?CreateDeviceHelper@@YAPAVIDeviceHelper@@XZ

ws2_32

WSAStartup
WSACleanup

Sections

.text
Size: 172KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e7a54ddc9f749cdd2401d07d0e7b3e41

Headers

File Characteristics

Imports

zlib

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

gdiplus

libbase

librapi

ws2_32

Sections

.text Size: 172KB - Virtual size: 170KB

.rdata Size: 36KB - Virtual size: 33KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 204KB - Virtual size: 203KB

.tc Size: 244KB - Virtual size: 244KB

.text
Size: 172KB - Virtual size: 170KB

.rdata
Size: 36KB - Virtual size: 33KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 204KB - Virtual size: 203KB

.tc
Size: 244KB - Virtual size: 244KB