4b373042809dbc09043c9aa5d2ac7570b91327fc47c8caef918c72ba786f33b4

Sharing

Copy URL

Twitter E-mail

General

Target

4b373042809dbc09043c9aa5d2ac7570b91327fc47c8caef918c72ba786f33b4
Size

603KB
MD5

7e223a197b4fa1c64ea0b79efe0a9225
SHA1

8122818f2b63ba34faf0bc3c0fbe3184a91a67ab
SHA256

4b373042809dbc09043c9aa5d2ac7570b91327fc47c8caef918c72ba786f33b4
SHA512

9862e03d94791027d4c2bcde4da94bd273ab5ba10397c87897f62d219251c86ef5618e1fc21020979f853bb13cbda090c770ce0f27b7323cd71a4766e0c4708e
SSDEEP

12288:dkEkVwdpywnVtAxRgP8b1uHOJC60Jpd8dOgvpe59HAw:dkh6dpj8LgPiR0ndEtsGw

Score

N/A

Malware Config

Signatures

Files

4b373042809dbc09043c9aa5d2ac7570b91327fc47c8caef918c72ba786f33b4
.exe windows x86

62f0ffe3c78898c0b6004e9de039821c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
SetStdHandle
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetProcAddress
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
FlushFileBuffers
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
Sleep
GetModuleHandleW
HeapReAlloc
VirtualAlloc
DeleteCriticalSection
SetEndOfFile
LocalFree
CloseHandle
GetVersionExA
GetModuleHandleA
WTSGetActiveConsoleSessionId
DeviceIoControl
GetFileType
LoadLibraryA
lstrcmpiA
GetCurrentDirectoryW
GetLastError
GetSystemDirectoryA
CreateEventA
LoadLibraryW
GetUserDefaultLangID
EnumTimeFormatsA
GetProcessHeap
WaitForSingleObject
CreateFileA
VirtualFree
HeapCreate
LeaveCriticalSection
EnterCriticalSection
ReadFile
MultiByteToWideChar
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
HeapFree
GetCurrentProcess
HeapAlloc
LoadResource
FindResourceExW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess

user32

FindWindowA
DestroyMenu
UnregisterHotKey
UpdateWindow
LoadImageA
SetWindowTextA
LoadCursorA
GetSystemMetrics
RegisterHotKey
GetMessagePos
ReleaseCapture
SystemParametersInfoA
DispatchMessageA
AppendMenuA
CreatePopupMenu
SetMenu
RegisterClassA
GetWindow
InsertMenuA
EndPaint
DestroyWindow
keybd_event
GetMessageA
GetClassNameA
UpdateLayeredWindow
ScreenToClient
GetWindowRect
RegisterClassExA
PostQuitMessage
TrackPopupMenu
FillRect
GetMessageExtraInfo
GetTopWindow
SetForegroundWindow
ReplyMessage
LoadBitmapA
LoadIconA
GetClientRect
CreateMenu
SendMessageA
BeginPaint
DlgDirListA
GetDC
IsDialogMessageA
TranslateMessage
ChildWindowFromPoint
GetMenu
SetWindowLongA
MessageBoxA
InvalidateRect
SetCursorPos
AppendMenuW
UnregisterClassA
GetWindowLongA
CreateWindowExA
ReleaseDC
GetDlgItem
DefWindowProcA
GetDesktopWindow
GetCursorPos
ShowWindow

gdi32

BitBlt
LineTo
CreateEnhMetaFileA
DeleteDC
CreateDIBSection
DeleteObject
SelectObject
CreateCompatibleDC
Rectangle
SetStretchBltMode
GetStockObject
MoveToEx

advapi32

CloseServiceHandle
OpenProcessToken
SetEntriesInAclA
LookupPrivilegeValueA
SetNamedSecurityInfoW
AdjustTokenPrivileges
ControlService
FreeSid
AllocateAndInitializeSid
OpenServiceA

shell32

Shell_NotifyIconA
SHBrowseForFolderA

ole32

RegisterDragDrop
StringFromGUID2
RevokeDragDrop

userenv

GetAllUsersProfileDirectoryA

msvfw32

GetOpenFileNamePreviewA

comctl32

InitCommonControlsEx
ImageList_Create
CreateToolbarEx
ImageList_Add
ord17

pdh

PdhSetCounterScaleFactor
PdhReadRawLogRecord
PdhSelectDataSourceA

gdiplus

GdipAlloc
GdipCreateFromHDC

winhttp

WinHttpCreateUrl

wtsapi32

WTSQueryUserToken

urlmon

CreateUri

Sections

.text
Size: 474KB - Virtual size: 473KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62f0ffe3c78898c0b6004e9de039821c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

userenv

msvfw32

comctl32

pdh

gdiplus

winhttp

wtsapi32

urlmon

Sections

.text Size: 474KB - Virtual size: 473KB

.rdata Size: 30KB - Virtual size: 30KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 93KB - Virtual size: 92KB

.text
Size: 474KB - Virtual size: 473KB

.rdata
Size: 30KB - Virtual size: 30KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 93KB - Virtual size: 92KB