b566a415f73b7399af0313c7fe52867d3b0a06674c2e8fb596b04369c566cbcd

Sharing

Copy URL Twitter E-mail

General

Target

b566a415f73b7399af0313c7fe52867d3b0a06674c2e8fb596b04369c566cbcd
Size

708KB
MD5

842077234d432c8c08b7b1fc7ab01da0
SHA1

2b3f1d6c975e0feb3f7947b829147f19d8f286b8
SHA256

b566a415f73b7399af0313c7fe52867d3b0a06674c2e8fb596b04369c566cbcd
SHA512

99c67d2cdebbab77967fd7d1b12d4e3c9125fdae76f2ba56f2a6d463171a850a13cae4c5aace4425cacdb1a7edb76db447f78fb9dab86040f28addb603498fc9
SSDEEP

12288:SV4tNcK0yuvOp2k3jbRbCbOpJoe1/3MWPyL+enMJhLWYiYhxPEc89KuU:SV4tiKrqQ3PtAI1/8kPe+xcc8u

Score

N/A

Malware Config

Signatures

Files

b566a415f73b7399af0313c7fe52867d3b0a06674c2e8fb596b04369c566cbcd
.exe windows x86

d87fb437da38d46cd6ca91c6e138f63a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
GetFileType
HeapSize
VirtualAlloc
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
LockResource
LoadResource
FindResourceW
lstrcmpiW
MulDiv
GetVersion
MultiByteToWideChar
FindClose
FindFirstFileW
Sleep
DeleteFileW
GetFileAttributesW
CopyFileW
WideCharToMultiByte
lstrcmpW
FreeEnvironmentStringsW
lstrlenW
GetEnvironmentStringsW
CloseHandle
CreateFileW
lstrcatW
lstrcpyW
GetTickCount
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryW
GetModuleFileNameW
GetVersionExW
GetLocaleInfoW
GetFileTime
IsBadReadPtr
GetExitCodeThread
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
GlobalSize
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SleepEx
LocalAlloc
LocalFree
GlobalHandle
WinExec
SetLastError
FormatMessageW
GetCurrentProcessId
GlobalAddAtomW
GlobalGetAtomNameW
GetModuleHandleW
GetVersionExA
LoadLibraryA
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
CreateThread
GetCurrentThreadId
FreeResource
GetProfileIntW
InterlockedDecrement
SetThreadPriority
ResumeThread
WaitForSingleObject
SetEvent
SuspendThread
CreateEventW
GetModuleHandleA
lstrcmpA
lstrlenA
InterlockedExchange
CompareStringA
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
FileTimeToSystemTime
FileTimeToLocalFileTime
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationW
GetFullPathNameW
GetFileSizeEx
InterlockedIncrement
TlsGetValue
GlobalReAlloc
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
WritePrivateProfileStringW
SetErrorMode
GetStartupInfoW
RtlUnwind
ExitProcess
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
RaiseException
HeapReAlloc
ExitThread
SizeofResource

user32

DrawTextExW
GrayStringW
GetWindowDC
BeginPaint
EndPaint
IsClipboardFormatAvailable
PostQuitMessage
ShowOwnedPopups
CharUpperW
GetSysColorBrush
UnregisterClassW
PostThreadMessageW
SetDlgItemTextW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
IsChild
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetWindowTextW
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
CreateWindowExW
GetClassInfoExW
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
DefWindowProcW
DrawTextW
SystemParametersInfoA
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
CheckMenuItem
GetClassNameW
UnpackDDElParam
ReuseDDElParam
DestroyMenu
WinHelpW
SetWindowPos
SetFocus
GetActiveWindow
EqualRect
SetWindowLongW
GetDlgCtrlID
PeekMessageW
GetCapture
LoadAcceleratorsW
SetActiveWindow
IsIconic
InsertMenuItemW
CreatePopupMenu
GetClassInfoW
IntersectRect
OffsetRect
SetRectEmpty
CopyRect
GetMenu
BringWindowToTop
GetWindow
ShowWindow
GetWindowThreadProcessId
GetWindowLongW
IsWindowEnabled
GetMenuState
GetMenuItemID
GetMenuItemCount
SetCapture
DrawFocusRect
InflateRect
MessageBeep
SetCursor
ReleaseCapture
ShowScrollBar
GetSysColor
TranslateAcceleratorW
GetDC
ReleaseDC
KillTimer
SetTimer
GetParent
GetDlgItem
GetDesktopWindow
MessageBoxW
LoadImageW
GetCursorPos
GetSystemMetrics
LoadMenuW
TabbedTextOutW
FillRect
GetMenuItemInfoW
GetMessageW
TranslateMessage
ValidateRect
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
WindowFromPoint
CallWindowProcW
SetRect
AppendMenuW
SystemParametersInfoW
LoadIconW
RegisterClassW
LoadCursorW
SetMenu
SendMessageW
IsDialogMessageW
EnableWindow
GetForegroundWindow
GetLastActivePopup
IsWindowVisible
InvalidateRect
UpdateWindow
ClientToScreen
GetClientRect
GetWindowRect
IsZoomed
PostMessageW
SetWindowTextW
RemoveMenu
GetSubMenu
EnableMenuItem
RegisterClipboardFormatW
IsWindow
PtInRect
MoveWindow
GetKeyState

gdi32

GetPaletteEntries
CreateHalftonePalette
GetTextMetricsW
CreateSolidBrush
CreatePen
SelectPalette
GetStockObject
CreatePatternBrush
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutW
RectVisible
PtVisible
GetPixel
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
ExtTextOutW
GetBkColor
CreateFontW
GetCharWidthW
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
CreateCompatibleBitmap
CopyMetaFileW
GetDeviceCaps
GetTextExtentPoint32W
CreateFontIndirectW
SetStretchBltMode
StretchDIBits
GetViewportOrgEx
GetObjectW
GetDIBColorTable
DeleteDC
DeleteObject
BitBlt
RealizePalette
SelectObject
CreateCompatibleDC
CreatePalette

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegQueryValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW

shell32

ShellExecuteW
DragQueryFileW
DragFinish

ole32

CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoFreeUnusedLibraries
OleInitialize
OleGetClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleDuplicateData
CoRegisterMessageFilter
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitializeEx
OleUninitialize

winmm

waveInStop
waveOutReset
waveInStart
waveOutRestart
waveOutPause
PlaySoundW
mixerGetLineControlsW
mixerOpen
mixerClose
mixerGetNumDevs
mixerGetLineInfoW
mixerGetDevCapsW
mixerSetControlDetails
mixerGetControlDetailsW
mixerGetID
timeGetTime
timeSetEvent
timeKillEvent
waveOutGetPosition
waveInGetPosition
waveOutOpen
waveInOpen
sndPlaySoundW
waveOutClose
waveInClose
waveOutPrepareHeader
waveInPrepareHeader
waveOutUnprepareHeader
waveInUnprepareHeader
waveOutWrite

oledlg

OleUIBusyW

avifil32

AVIStreamTimeToSample
AVIFileOpenW
AVIStreamGetFrameOpen
AVIStreamGetFrame
AVIStreamGetFrameClose
AVIStreamFindSample
AVIFileInfoW
AVIStreamRelease
AVIFileRelease
AVIStreamStart
AVIStreamReadFormat
AVIStreamInfoW
AVIStreamLength
AVIStreamSampleToTime
AVIFileGetStream
AVIFileExit
AVIStreamRead
AVIFileInit

msvfw32

ICClose
ICOpen

Sections

.text
Size: 350KB - Virtual size: 349KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 265KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d87fb437da38d46cd6ca91c6e138f63a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

ole32

winmm

oledlg

avifil32

msvfw32

Sections

.text Size: 350KB - Virtual size: 349KB

.rdata Size: 76KB - Virtual size: 76KB

.data Size: 15KB - Virtual size: 31KB

.rsrc Size: 265KB - Virtual size: 268KB

.text
Size: 350KB - Virtual size: 349KB

.rdata
Size: 76KB - Virtual size: 76KB

.data
Size: 15KB - Virtual size: 31KB

.rsrc
Size: 265KB - Virtual size: 268KB