635832d9c76df97b7c8ffd092314567e038f9b518ec242b41be579387c1e4559

Sharing

Copy URL Twitter E-mail

General

Target

635832d9c76df97b7c8ffd092314567e038f9b518ec242b41be579387c1e4559
Size

815KB
MD5

84899aabdc0cbab0b9ab8f7ca76968c0
SHA1

57002eba47a9c0438ccc262dcdc7b4e625cfa297
SHA256

635832d9c76df97b7c8ffd092314567e038f9b518ec242b41be579387c1e4559
SHA512

fe5010cd276bf41763b1e9260b6a8ea423106cad4e9b065cb5020f67e2d1a8e0c28ca4a03c8d456cfc1a526ca5c0960a4c23297e1bbd467bcfd167b4b21820cb
SSDEEP

24576:vJp+EGyqg7JCGIkuDCON/mX70hEx/AYC:xp+EbqNrj+ohENr

Score

N/A

Malware Config

Signatures

Files

635832d9c76df97b7c8ffd092314567e038f9b518ec242b41be579387c1e4559
.exe windows x86

7e308a662c00314cbf27ab39b6969728

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
GetStartupInfoW
ResetEvent
GlobalLock
TlsSetValue
SetThreadExecutionState
TerminateProcess
WaitForSingleObject
WriteConsoleW
GetSystemDirectoryW
GetOEMCP
CancelIo
GetSystemTimeAsFileTime
InterlockedExchange
GetVersion
SetFilePointer
CreateFileW
FindNextFileW
GetFileType
GetFileAttributesExW
FlushFileBuffers
GetStdHandle
FindResourceExW
InitializeCriticalSection
CloseHandle
HeapSize
GetProcAddress
GetOverlappedResult
FileTimeToLocalFileTime
VirtualProtect
CreateEventW
ReadDirectoryChangesW
OutputDebugStringW
EnterCriticalSection
QueryPerformanceFrequency
SetConsoleCtrlHandler
GlobalAlloc
FlushInstructionCache
Sleep
GetSystemInfo
HeapReAlloc
GetCurrentThread
FreeEnvironmentStringsW
LCMapStringW
CreateThread
DeleteCriticalSection
SetLastError
SetThreadPriority
GetConsoleCP
GetLastError
HeapQueryInformation
SetEvent
GlobalUnlock
GlobalSize
LockResource
GlobalFree
GetConsoleMode
SetStdHandle
GetFileInformationByHandle
InterlockedCompareExchange
SetHandleCount
ResumeThread
LoadLibraryW
LocalFileTimeToFileTime
HeapFree
InterlockedIncrement
WriteFile
SetErrorMode
GetCurrentProcess
GetProcessHeap
FreeLibrary
RaiseException
lstrlenW
SetUnhandledExceptionFilter
GetFileTime
GetCurrentProcessId
GetTickCount
CreateMutexW
lstrlenA
GetModuleHandleA
LocalFree
TlsGetValue
TlsAlloc
CopyFileW
FindFirstFileW
HeapSetInformation
InterlockedDecrement
VirtualQuery
GetCurrentThreadId
LoadResource
MultiByteToWideChar
TlsFree
HeapDestroy
GetACP
ReadFile
SleepEx
GetFileSize
MulDiv
GetProcessAffinityMask
WaitForMultipleObjects
SystemTimeToFileTime
GetCPInfo
IsValidCodePage
VirtualAlloc
LocalAlloc
GetModuleFileNameW
LeaveCriticalSection
UnhandledExceptionFilter
MoveFileExW
GetThreadPriority
GetModuleHandleW
SetEndOfFile
FileTimeToSystemTime
InitializeCriticalSectionAndSpinCount
GetCommandLineW
FindClose
GetVersionExW
HeapAlloc
IsDebuggerPresent
GetFileAttributesW
GetStringTypeW
ExitProcess
SizeofResource
DuplicateHandle
RtlUnwind
HeapCreate
WideCharToMultiByte
LoadLibraryA
QueryPerformanceCounter
VirtualFree
IsProcessorFeaturePresent
ExitThread
FindResourceW
RemoveDirectoryW
GetEnvironmentStringsW
GetExitCodeThread

user32

SetWindowLongW
IsCharAlphaW
MapWindowPoints
TrackPopupMenu
IntersectRect
UnhookWindowsHookEx
IsWindowEnabled
ReleaseDC
GetMonitorInfoW
IsChild
RedrawWindow
CreateDialogParamW
DrawEdge
PostQuitMessage
DeregisterShellHookWindow
LoadAcceleratorsW
DestroyWindow
MessageBeep
GetSystemMetrics
DestroyMenu
SetLayeredWindowAttributes
AdjustWindowRectEx
CopyRect
MapDialogRect
UnregisterClassW
DestroyAcceleratorTable
GetMenu
EndDeferWindowPos
MonitorFromPoint
SetActiveWindow
OffsetRect
GetMessageW
IsDialogMessageW
EmptyClipboard
SetCursor
DefWindowProcW
GetClipboardData
SendMessageW
GetParent
TranslateAcceleratorW
UnregisterHotKey
SendDlgItemMessageW
GetDC
MapVirtualKeyW
ShowWindow
GetComboBoxInfo
GetScrollInfo
CreateWindowExW
BeginDeferWindowPos
PostMessageW
CheckMenuRadioItem
GetWindowTextW
AllowSetForegroundWindow
PeekMessageW
UpdateWindow
WindowFromPoint
GetFocus
RegisterClassExW
DrawTextW
GetMessagePos
BeginPaint
GetMenuItemInfoW
ClientToScreen
GetWindowPlacement
GetKeyState
TranslateMessage
SetMenuItemInfoW
CloseClipboard
EnumThreadWindows
OpenClipboard
EndPaint
LoadCursorW
EnumWindows
RegisterWindowMessageW
GetWindowThreadProcessId
AdjustWindowRect
IsClipboardFormatAvailable
RegisterHotKey
GetMenuItemCount
MoveWindow
CreatePopupMenu
SetForegroundWindow
SetWindowsHookExW
RegisterShellHookWindow
CallWindowProcW
AppendMenuW
LoadImageW
SetClipboardData
RegisterClassW
DispatchMessageW
GetClassNameW
FillRect
MonitorFromRect
GetDlgItem
GetWindowLongW
SetDlgItemTextW
UnregisterClassA
GetDlgCtrlID
IsWindowVisible
DestroyIcon
LoadIconW
EnumChildWindows
ScreenToClient
GetWindowDC
KillTimer
CallNextHookEx
SetWindowTextW
GetClassInfoExW
TrackPopupMenuEx
IsIconic
MsgWaitForMultipleObjects
CharLowerW
GetActiveWindow
GetSysColor
EnableWindow
EndDialog
GetClientRect
RegisterClipboardFormatW
SetTimer
DeferWindowPos
wsprintfW
GetWindowRect
DialogBoxParamW
SetWindowPos
InvalidateRect
DrawIconEx
CharUpperW
MessageBoxW
SetFocus
SetCapture

gdi32

CreateCompatibleDC
DeleteObject
CreateCompatibleBitmap
CreateFontIndirectW
SelectObject
GetObjectW
SetBkColor
SetWindowOrgEx
ExtTextOutW
SetDCBrushColor
SetBkMode
SetTextColor
DeleteDC
GetStockObject
GetDeviceCaps
OffsetWindowOrgEx
GetTextExtentPoint32W

advapi32

RegDeleteValueW
CryptGetHashParam
CryptAcquireContextW
RegQueryValueExW
RegOpenKeyW
CryptCreateHash
CryptVerifySignatureW
RegCreateKeyW
CryptImportKey
CryptDestroyHash
RegEnumKeyExW
CryptDestroyKey
CopySid
RegOpenKeyExW
CryptHashData
RegEnumValueW
RegCloseKey
RegSetValueExW
RegQueryInfoKeyW
CryptReleaseContext
RegCreateKeyExW

ole32

CoTaskMemFree
OleGetClipboard
CoUninitialize
OleInitialize
CreateStreamOnHGlobal
CoCreateInstance
OleUninitialize
OleSetClipboard
CoTaskMemAlloc
CoCreateGuid
ReleaseStgMedium
CoInitialize

shlwapi

SHDeleteKeyW
ColorHLSToRGB
StrCmpLogicalW
SHAutoComplete

crypt32

CertGetCertificateChain
CertFreeCertificateChain
CertFreeCertificateContext
CertVerifyRevocation
CertOpenSystemStoreW
CertVerifyTimeValidity
CertFindCertificateInStore
CertVerifyCertificateChainPolicy
CertCloseStore

iphlpapi

GetAdaptersInfo

secur32

DeleteSecurityContext
InitializeSecurityContextW
DecryptMessage
AcquireCredentialsHandleW
QueryContextAttributesW
FreeContextBuffer
EncryptMessage
ApplyControlToken
FreeCredentialsHandle

oledlg

ord8

dsound

ord3
ord1

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.makex
Size: 648KB - Virtual size: 647KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text22
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idat
Size: 53KB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e308a662c00314cbf27ab39b6969728

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

shlwapi

crypt32

iphlpapi

secur32

oledlg

dsound

Sections

.text Size: 53KB - Virtual size: 52KB

.makex Size: 648KB - Virtual size: 647KB

.text22 Size: 23KB - Virtual size: 23KB

.rdata Size: 9KB - Virtual size: 9KB

.idat Size: 53KB - Virtual size: 5.3MB

.tls Size: 512B - Virtual size: 101B

.rsrc Size: 17KB - Virtual size: 16KB

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 53KB - Virtual size: 52KB

.makex
Size: 648KB - Virtual size: 647KB

.text22
Size: 23KB - Virtual size: 23KB

.rdata
Size: 9KB - Virtual size: 9KB

.idat
Size: 53KB - Virtual size: 5.3MB

.tls
Size: 512B - Virtual size: 101B

.rsrc
Size: 17KB - Virtual size: 16KB

.reloc
Size: 9KB - Virtual size: 8KB