a3d4454803c5fa980c24d26b037d9295ba7853c890c10c75bd96a806e1556863

Sharing

Copy URL Twitter E-mail

General

Target

a3d4454803c5fa980c24d26b037d9295ba7853c890c10c75bd96a806e1556863
Size

827KB
MD5

0cb43cd11b01d068c63f2088e8ab5990
SHA1

ebf59324c5dcef21a2be15ce5e631b40a987a090
SHA256

a3d4454803c5fa980c24d26b037d9295ba7853c890c10c75bd96a806e1556863
SHA512

2644e02daad8ae0d950cb02ce5db9a326f9a4926bf9106486fcf04bad8a8d0512fdd41d998c8af4ac1f20751de661bef4416752a2bea412d02c22aa60dcf4323
SSDEEP

24576:r3lW5/IRfFkbePYbQD3Y6eFkgdrcfpRH6e/G9:r1IIRfDYEDopFkaYRVJG

Score

N/A

Malware Config

Signatures

Files

a3d4454803c5fa980c24d26b037d9295ba7853c890c10c75bd96a806e1556863
.exe windows x86

c4039b146b7fa23e1d591a57e07d2e18

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
LockFile
GlobalUnlock
OpenProcess
DeleteFileW
GetComputerNameA
GlobalSize
ReleaseSemaphore
GetUserDefaultLCID
FreeLibrary
GetExitCodeThread
RemoveDirectoryA
IsValidLocale
GlobalLock
LockResource
GetFileAttributesExA
GetSystemPowerStatus
HeapDestroy
VirtualProtectEx
InterlockedExchangeAdd
ConvertDefaultLocale
GetModuleHandleA
Sleep
FileTimeToSystemTime
DeleteFileA
SetEnvironmentVariableA
InterlockedDecrement
GetFileSizeEx
SetNamedPipeHandleState
GetEnvironmentVariableA
SetFileTime
EnterCriticalSection
DuplicateHandle
GetFileSize
GetSystemTimeAsFileTime
CopyFileA
SetErrorMode
CreateFileMappingA
QueryPerformanceCounter
OpenFileMappingA
IsDBCSLeadByteEx
MapViewOfFile
VirtualProtect
GetTempPathA
TlsSetValue
InterlockedExchange
FindFirstFileA
GlobalFree
GetCurrentThread
GetProcessHeap
FindResourceA
SetThreadExecutionState
InterlockedCompareExchange
PeekNamedPipe
ReleaseMutex
ExitProcess
GetCurrentThreadId
UnlockFileEx
TerminateThread
GetProcAddress
GetProcessWorkingSetSize
MultiByteToWideChar
GetTempFileNameA
SetUnhandledExceptionFilter
WriteFile
GetWindowsDirectoryA
GetSystemTime
GetSystemInfo
GetVersionExA
SystemTimeToFileTime
GetTickCount
CreatePipe
FindFirstFileExA
GetFileTime
GetThreadTimes
GetLocaleInfoA
WaitForSingleObject
FindNextFileA
SetThreadPriority
FormatMessageA
GetFullPathNameA
FlushFileBuffers
CreateThread
GetProcessAffinityMask
ReadFile
HeapSize
AreFileApisANSI
GetCurrentProcess
LeaveCriticalSection
UnlockFile
DeleteCriticalSection
SetThreadLocale
GetFileAttributesA
SuspendThread
GetLastError
LockFileEx
LocalFree
InterlockedIncrement
GetExitCodeProcess
GetShortPathNameA
TlsGetValue
FindClose
GetVolumeInformationA
WideCharToMultiByte
SetLastError
UnmapViewOfFile
SizeofResource
SetCurrentDirectoryA
CreateFileA
LocalFileTimeToFileTime
ResumeThread
GetProcessTimes
GetCPInfo
GetTempPathW
IsValidCodePage
GetThreadLocale
GetProfileStringA
GetDiskFreeSpaceA
SetEndOfFile
SetFilePointer
CreateDirectoryA
GetFileType
TerminateProcess
ExpandEnvironmentStringsA
GetCurrentProcessId
GetStdHandle
LoadResource
TlsFree
GetModuleFileNameA
GetStartupInfoA
MoveFileExW
GetDriveTypeA
TlsAlloc
GlobalAlloc
GetACP
CreateSemaphoreA
DeviceIoControl
InitializeCriticalSection
GlobalMemoryStatusEx
CloseHandle
GetCommandLineA
GlobalMemoryStatus
GetLogicalDriveStringsA
LocalAlloc
CreateProcessA

user32

GetMessageTime
GetMenuItemInfoW
TranslateAcceleratorW
DdeCreateStringHandleW
DdeUninitialize
SetMenu
GetAsyncKeyState
DdeClientTransaction
SetCursor
DrawStateW
SendMessageW
GetDesktopWindow
TrackPopupMenu
DrawEdge
MoveWindow
MessageBoxW
DdeGetLastError
OffsetRect
FlashWindow
DdeQueryStringW
RemoveMenu
CreatePopupMenu
EndDialog
CallWindowProcW
EnumWindows
EnumClipboardFormats
IsWindowVisible
EndDeferWindowPos
UpdateWindow
SetCursorPos
DdeFreeDataHandle
SetCapture
GetUpdateRect
PtInRect
GetClassInfoW
GetUpdateRgn
SetWindowTextW
GetMessageW
CopyRect
GetDC
PostThreadMessageW
ExitWindowsEx
WaitForInputIdle
DestroyCursor
PostMessageW
LoadAcceleratorsW
GetDoubleClickTime
GetForegroundWindow
GetSystemMetrics
ModifyMenuW
RegisterWindowMessageW
RegisterClipboardFormatW
DdeConnect
GetDlgItem
SetClipboardData
SetWindowsHookExW
RedrawWindow
GetKeyState
ShowWindow
ScrollWindow
GetParent
GetClientRect
CreateWindowExW
EndPaint
InflateRect
EnableMenuItem
DefWindowProcW
DestroyIcon
GetClassNameW
InvalidateRect
WindowFromPoint
GetWindow
DdePostAdvise
EmptyClipboard
ReleaseCapture
EnumDisplaySettingsW
GetCapture
UnionRect
DrawTextW
DestroyMenu
TranslateMessage
GetMenuItemCount
EnableWindow
IsWindow
keybd_event
GetScrollInfo
GetActiveWindow
UnhookWindowsHookEx
ChildWindowFromPoint
MapWindowPoints
GetSubMenu
IsZoomed
DispatchMessageW
CheckMenuRadioItem
GetSysColor
InsertMenuW
GetWindowThreadProcessId
ReleaseDC
SetWindowPos
ShowCaret
DdeDisconnect
GetWindowTextLengthW
CreateDialogIndirectParamW
GetKeyboardState
SetForegroundWindow
BeginPaint
GetWindowRect
SetWindowLongW
GetWindowLongW
BeginDeferWindowPos
DrawIcon
LoadImageW
SystemParametersInfoW
DdeInitializeW
IsClipboardFormatAvailable
BringWindowToTop
GetFocus
DdeFreeStringHandle
DeferWindowPos
DdeCreateDataHandle
CreateAcceleratorTableW
FillRect
ShowCursor
ScreenToClient
EnumThreadWindows
DdeNameService
OpenClipboard
GetWindowDC
EndMenu
CheckMenuItem
InsertMenuItemW
DrawFocusRect
AppendMenuW
GetClipboardFormatNameW
IsDialogMessageW
SetScrollInfo
GetMessagePos
ClientToScreen
ChangeDisplaySettingsW
SetWindowRgn
KillTimer
GetClipboardData
GetMenuState
GetCursorPos
RegisterClassW
MessageBeep
DrawMenuBar
LoadBitmapW
ValidateRect
PostQuitMessage
FindWindowExW
LoadIconW
CreateMenu
SetMenuItemInfoW
ToUnicode
SetFocus
CreateDialogParamW
GetMenu
LoadCursorFromFileW
CloseClipboard
PeekMessageW
DdeGetData
GetWindowTextW
UnregisterClassW
DrawFrameControl
DestroyAcceleratorTable
DestroyWindow
SetParent
HideCaret
IsWindowEnabled
DrawIconEx
IsIconic
VkKeyScanW
GetSystemMenu
GetIconInfo
SetTimer
CreateIconIndirect
MsgWaitForMultipleObjects
AdjustWindowRectEx
CallNextHookEx

gdi32

Polygon
SetBrushOrgEx
DeleteObject
SetViewportOrgEx
SetPixel
GetCharABCWidthsW
SelectClipRgn
Rectangle
GetPixel
ExtSelectClipRgn
GetBkColor
GetPaletteEntries
BitBlt
CreateHatchBrush
RealizePalette
GetStockObject
SaveDC
Arc
GetDIBits
GetDeviceCaps
CopyEnhMetaFileW
GdiFlush
CreateSolidBrush
CreatePen
SetViewportExtEx
CreateBitmapIndirect
DeleteEnhMetaFile
ExcludeClipRect
GetSystemPaletteEntries
StretchDIBits
CreateRectRgnIndirect
SelectObject
GetRgnBox
GetWinMetaFileBits
PatBlt
EqualRgn
GetClipBox
CloseEnhMetaFile
GetNearestPaletteIndex
SetBkColor
RoundRect
GetMetaFileBitsEx
SetStretchBltMode
SetMetaFileBitsEx
Ellipse
StretchBlt
RestoreDC
SetTextAlign
RectInRegion
SetWinMetaFileBits
CombineRgn
GetTextMetricsW
CreatePalette
GetTextExtentPoint32W
SelectPalette
CreateRectRgn
PlayEnhMetaFile
MoveToEx
CreateCompatibleDC
TextOutW
SetWindowExtEx
SetTextColor
GetTextExtentExPointW
ExtFloodFill
PtInRegion
LineTo
CreateBitmap
CreateFontIndirectW
CreateCompatibleBitmap
CreateICW
OffsetRgn
GetEnhMetaFileHeader
ExtCreatePen
GetObjectW
CreatePatternBrush
GetRegionData
DeleteDC
CreateDIBitmap
GetEnhMetaFileW
SetBkMode
GetDIBColorTable
CreateDIBSection
SetMapMode
GetTextColor
Pie
Polyline
CreateEnhMetaFileW
ExtCreateRegion
SetROP2
PolyPolygon
SetWindowOrgEx
EnumFontFamiliesExW
SetPolyFillMode
CreatePolygonRgn
MaskBlt

comdlg32

CommDlgExtendedError
GetOpenFileNameW
ChooseColorW
GetSaveFileNameW
ChooseFontW

advapi32

OpenServiceW
RegCloseKey
RegDeleteKeyW
OpenProcessToken
ControlService
RegOpenKeyExW
RegEnumKeyW
RegCreateKeyW
RegSetValueExW
OpenSCManagerW
RegQueryInfoKeyW
CloseServiceHandle
AdjustTokenPrivileges
LookupPrivilegeValueW
RegDeleteValueW
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExA
RegEnumValueW
GetUserNameW

shell32

SHGetFileInfoW
SHFileOperationW
ExtractIconW
SHGetSpecialFolderLocation
DragQueryFileW
SHGetMalloc
ExtractIconExW
SHGetFolderPathW
SHGetIconOverlayIndexW
ShellExecuteExW
SHBrowseForFolderW
Shell_NotifyIconW
DragAcceptFiles
DragQueryPoint
SHGetPathFromIDListW
DragFinish

oleaut32

SysStringLen
SysAllocString

oledlg

ord3

Sections

.text
Size: 448KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 270KB - Virtual size: 5.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c4039b146b7fa23e1d591a57e07d2e18

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

oleaut32

oledlg

Sections

.text Size: 448KB - Virtual size: 448KB

.rdata Size: 78KB - Virtual size: 77KB

.data Size: 270KB - Virtual size: 5.5MB

.CRT Size: 512B - Virtual size: 8B

.tls Size: - Virtual size: 101B

.rsrc Size: 17KB - Virtual size: 16KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 448KB - Virtual size: 448KB

.rdata
Size: 78KB - Virtual size: 77KB

.data
Size: 270KB - Virtual size: 5.5MB

.CRT
Size: 512B - Virtual size: 8B

.tls
Size: - Virtual size: 101B

.rsrc
Size: 17KB - Virtual size: 16KB

.reloc
Size: 12KB - Virtual size: 11KB