385f5330eaac215c8277439c8972e65cb5b21d26d878ea3f72b80c47617732aa

Sharing

Copy URL Twitter E-mail

General

Target

385f5330eaac215c8277439c8972e65cb5b21d26d878ea3f72b80c47617732aa
Size

255KB
MD5

49ba629c5e95bd4243ea004a8346db19
SHA1

64e6350a0fdbe34bf545ce6abfb5bff0b815201e
SHA256

385f5330eaac215c8277439c8972e65cb5b21d26d878ea3f72b80c47617732aa
SHA512

91741f3a5f913ab9bc392ccc25cdd5e6719087c738e1371a81ec0134360d9716484079ae9dcf6ff83a541420aca8ca63445dbcd011f5f1b9a27cfcccfb39ec0d
SSDEEP

6144:WkKH15mYgkwLxLYQYwN5Sbq6Ca10mwsHq:WkKV5mYgkOL9Ywmbp0mwsK

Score

N/A

Malware Config

Signatures

Files

385f5330eaac215c8277439c8972e65cb5b21d26d878ea3f72b80c47617732aa
.exe windows x86

5dd7958426b7354c0c19c72efcae1a3d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetTopWindow
SetWindowRgn
ReleaseDC
GetWindowDC
PostMessageA
GetWindowRect
GetClientRect
InvalidateRect
GetParent
EnumDisplaySettingsA
GetWindowInfo
IsCharUpperA
SetForegroundWindow
UnhookWinEvent
GetSysColorBrush
CharUpperBuffA
GetWindowRgn
GetListBoxInfo
SetCaretBlinkTime
OpenDesktopW
BringWindowToTop
GetAltTabInfoA
CharLowerBuffA
DialogBoxIndirectParamW
EnableWindow
LoadImageA
CopyRect
OffsetRect
wsprintfA
DestroyCursor
SetCursor
CallWindowProcW
WinHelpW
SetActiveWindow
ReleaseCapture
SetCapture
SetParent
FindWindowExW
GetClassInfoW
UnregisterClassW
RegisterClassW
GetCursorPos
GetFocus
SetWindowPlacement
SystemParametersInfoW
FindWindowW
IntersectRect
DialogBoxParamW
CreateDialogIndirectParamW
CreateDialogParamW
LoadCursorW
LoadStringW
LoadMenuIndirectW
LoadMenuW
SetProcessDefaultLayout
LoadImageW
LoadIconW
LoadBitmapW
GetMenuStringW
ModifyMenuW
GetMenuItemInfoW
GetMenuState
DeleteMenu
CreateAcceleratorTableW
LoadAcceleratorsW
CharNextW
CharNextA
GetWindowTextLengthW
GetDlgItemTextW
IsDlgButtonChecked
GetAsyncKeyState
DestroyWindow
GetForegroundWindow
ShowWindow
GetSystemMenu
EnableMenuItem
SetDlgItemTextW
CheckDlgButton
CreateWindowExW
GetLastActivePopup
SetWindowsHookExW
MessageBoxW
GetClassNameW
CallNextHookEx
wsprintfW
SetWindowLongW
GetWindowLongW
InflateRect
GetWindowTextW
DrawTextW
DefWindowProcW
GetDlgItem
SetFocus
MapWindowPoints
MoveWindow
SetWindowTextW
SendMessageW
EndDialog
GetMessageW
TranslateMessage
DispatchMessageW
WaitForInputIdle
PostThreadMessageW
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetSysColor
EndPaint
GetDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
LoadCursorA
GetClassNameA
DestroyMenu
UnhookWindowsHookEx
GetSystemMetrics
ExitWindowsEx
LoadIconA
GetDesktopWindow
BeginPaint
IsIconic
DrawIcon
LoadBitmapA
MessageBoxA
SendMessageA

urlmon

URLDownloadToFileW
URLOpenBlockingStreamW
HlinkNavigateString

shell32

SHGetFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteA
ShellExecuteW
DragFinish
FindExecutableW
FindExecutableA
Shell_NotifyIconA
SHGetFileInfoW
DragQueryPoint
ShellAboutW

ole32

OleUninitialize
OleInitialize
StringFromGUID2
CoInitialize
CoUninitialize
OleCreateMenuDescriptor
OleConvertIStorageToOLESTREAM
CoAddRefServerProcess
ReadClassStm
CreateDataCache
CreateStreamOnHGlobal
CoCreateInstance

advapi32

AccessCheckAndAuditAlarmA
RegQueryValueExW
RegDeleteValueA
ObjectCloseAuditAlarmA
GetSidSubAuthority
RegFlushKey
ReadEventLogA
InitializeSecurityDescriptor
ObjectPrivilegeAuditAlarmW
RegGetKeySecurity
IsValidSecurityDescriptor
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
AdjustTokenPrivileges
RegOpenKeyExA
OpenProcessToken
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
LookupPrivilegeValueA
RegOpenKeyExW
RegOpenKeyW
RegQueryValueW
RegSetValueW
RegDeleteKeyW
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW

gdi32

ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateCompatibleBitmap
GetObjectA
GetDIBits
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
Escape
GetStockObject
CreateFontIndirectA
CreateRectRgn
SelectObject
StretchBlt
BitBlt
GetBkColor
CreateCompatibleDC
Chord
CreateBitmapIndirect
CloseMetaFile
CreateBrushIndirect
AddFontResourceExW
CreateDIBPatternBrush
CombineRgn
CreateDCA
AddFontResourceExA
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
CreateDIBSection
GetObjectW
CreateFontIndirectW
GetTextExtentPoint32W
CreateDCW
GetTextMetricsW
PatBlt
SelectPalette
RealizePalette
StretchDIBits
Rectangle
Polygon
MoveToEx
LineTo
ExtTextOutW
CreateDIBitmap
GetPixel
GetTextFaceW
GetDCOrgEx
GetTextExtentPointA
CreateFontW
CreatePen
CreateSolidBrush
CreatePatternBrush
GetNearestColor
GetTextCharset
GetDeviceCaps
CreateBitmap

opengl32

glTexCoord1s
glRasterPos3fv
glRasterPos3i
glDepthMask
glRasterPos4fv
glTexCoord4sv
glRasterPos3s

dbghelp

SymFromAddr
StackWalk64
SymFunctionTableAccess64
SymInitialize
SymRegisterFunctionEntryCallback64
UnDecorateSymbolName

comctl32

_TrackMouseEvent

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

shlwapi

PathFindExtensionA
PathFindFileNameA

kernel32

SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetErrorMode
CreateFileA
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
WritePrivateProfileStringA
GetThreadLocale
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentProcessId
CloseHandle
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GetEnvironmentStringsW
GlobalAlloc
GlobalFree
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
lstrcmpW
GlobalLock
GlobalUnlock
MulDiv
FreeLibrary
GetModuleFileNameW
SetLastError
GetModuleHandleA
GetProcAddress
lstrlenA
CompareStringA
GetVersion
MultiByteToWideChar
GetCurrentProcess
CreateProcessA
FormatMessageA
LocalFree
WaitForSingleObject
GetExitCodeProcess
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
Sleep
GetStdHandle
VirtualFree
HeapCreate
HeapDestroy
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapSize
ExitProcess
RaiseException
GetStartupInfoA
GetProcessHeap
GetCommandLineA
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
SetEnvironmentVariableA
CompareStringW
GetTimeZoneInformation
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
LoadLibraryW
GetModuleHandleW
GetFileAttributesW
CreateProcessW
CreateThread
MoveFileW
FatalAppExitA
SetConsoleCtrlHandler
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetFileSize
CreateFileW
OutputDebugStringA
GetShortPathNameW
FindClose
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
LoadLibraryExW
GlobalMemoryStatus
QueryPerformanceFrequency
SetEndOfFile
VirtualQuery
FileTimeToSystemTime
GetDateFormatW
GetTimeFormatW
GetCurrentDirectoryW
ReleaseSemaphore
CreateSemaphoreW
GetSystemInfo
GetVersionExW
GlobalSize
FindNextFileW
IsBadReadPtr
GetNumberFormatW
EnumResourceLanguagesW
GetSystemDefaultLCID
SetThreadLocale
GetLocaleInfoW
GetUserDefaultUILanguage
FindResourceW
FindResourceExW
GetVolumeInformationW
SetFileTime
GetFileTime
CopyFileW
MoveFileExW
IsBadWritePtr
CreateDirectoryW
GetDiskFreeSpaceW
GetTempPathW
GetLocalTime
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetProfileIntW
GetProfileStringW
GetCommState
SetCommState
DeviceIoControl
GetFullPathNameW
lstrcmpiW
SetEvent
GetCommandLineW
GetWindowsDirectoryW
CreateEventW
FormatMessageW
RemoveDirectoryW
FindFirstFileW
SetFileAttributesW
DeleteFileW
InterlockedIncrement
InterlockedDecrement
GetSystemDirectoryA
GetModuleFileNameA
GetVersionExA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
BuildCommDCBAndTimeoutsW
GetLongPathNameW
CreateDirectoryExA
EnumResourceNamesA
GetLastError
GetACP
LocalSize
InitializeCriticalSectionAndSpinCount
lstrcmpA
VirtualAlloc

Sections

.text
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.johnny
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5dd7958426b7354c0c19c72efcae1a3d

Headers

DLL Characteristics

File Characteristics

Imports

user32

urlmon

shell32

ole32

advapi32

gdi32

opengl32

dbghelp

comctl32

version

shlwapi

kernel32

Sections

.text Size: 158KB - Virtual size: 157KB

.data Size: 6KB - Virtual size: 31KB

.johnny Size: 61KB - Virtual size: 61KB

.rsrc Size: 28KB - Virtual size: 28KB

.text
Size: 158KB - Virtual size: 157KB

.data
Size: 6KB - Virtual size: 31KB

.johnny
Size: 61KB - Virtual size: 61KB

.rsrc
Size: 28KB - Virtual size: 28KB