2adcb5cd86a050a74ea34013c96c0cbee123b0a49c06a216d48bf412aae4bbe5

Sharing

Copy URL

Twitter E-mail

General

Target

2adcb5cd86a050a74ea34013c96c0cbee123b0a49c06a216d48bf412aae4bbe5
Size

917KB
MD5

92346b29703584f146f291c7bf7e0000
SHA1

6e674c262ed22669b1570fd4852362e42062b445
SHA256

2adcb5cd86a050a74ea34013c96c0cbee123b0a49c06a216d48bf412aae4bbe5
SHA512

07d686c8927750675368128a96cd1d331ec79b215f6e6d2b941379131f1e33e51676325035a6d50e99d1761da09c2c369fd678835beabb8da3d5c89b364ffaba
SSDEEP

12288:Z6N6WrSoCe/QY0tHtgXEmA6Q0x7qkxmIKuzpljS9DLyrb7x8NwWntn3mBn:0o+x0tHtKXQi7q07NTjS9a7xq/nWn

Score

N/A

Malware Config

Signatures

Files

2adcb5cd86a050a74ea34013c96c0cbee123b0a49c06a216d48bf412aae4bbe5
.exe windows x86

b1f7e5b291beb30af2b648e9d5baa7f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExpandEnvironmentStringsW
GetFileAttributesExW
GetPrivateProfileStringW
MoveFileExW
SetFileAttributesW
GetFileSizeEx
lstrcpynW
GetTickCount
TerminateProcess
OutputDebugStringW
lstrlenA
LocalFree
LocalAlloc
VirtualAlloc
lstrcmpA
GetFileSize
SetFilePointer
ReadFile
WriteFile
lstrcpynA
GetSystemTime
CopyFileW
CreateDirectoryW
GetModuleHandleA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
InitializeCriticalSectionAndSpinCount
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
QueryPerformanceCounter
FreeEnvironmentStringsW
GetStartupInfoA
SetHandleCount
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
IsValidCodePage
GetOEMCP
GetACP
GetConsoleMode
GetConsoleCP
GetModuleFileNameA
GetStdHandle
HeapCreate
ExitProcess
GetCPInfo
LCMapStringW
LCMapStringA
GetFileAttributesW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
GetFileType
SystemTimeToFileTime
LocalFileTimeToFileTime
SetEndOfFile
SetFilePointerEx
GetEnvironmentVariableW
SetEnvironmentVariableW
TlsFree
TlsAlloc
OpenThread
TlsSetValue
TlsGetValue
ReleaseMutex
CreateFileA
GetSystemTimeAsFileTime
FormatMessageW
HeapSize
HeapReAlloc
HeapDestroy
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
WaitForSingleObject
GetVersionExW
GetStartupInfoW
CreateProcessW
Sleep
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
GetLongPathNameW
GetPrivateProfileIntW
WritePrivateProfileStringW
WideCharToMultiByte
MulDiv
FindNextFileW
FindFirstFileW
FindClose
GetTempPathW
GetTempFileNameW
DeleteFileW
MultiByteToWideChar
SetLastError
lstrcmpiW
GetModuleHandleW
InterlockedDecrement
GetProcAddress
GetCurrentThreadId
FreeLibrary
lstrlenW
GetModuleFileNameW
GetCurrentProcessId
CreateFileW
DeviceIoControl
CloseHandle
LoadLibraryExW
LoadLibraryW
InterlockedIncrement
GetCurrentProcess
FlushInstructionCache
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
InterlockedExchange
CreateMutexW
GetLastError
GetCommandLineW
GetEnvironmentStringsW

user32

IsDialogMessageW
GetShellWindow
SendMessageTimeoutW
GetSystemMetrics
LoadImageW
RegisterWindowMessageW
SetForegroundWindow
UnregisterClassA
MessageBoxW
SendMessageW
KillTimer
CreatePopupMenu
AppendMenuW
IsWindowEnabled
PostQuitMessage
ShowWindow
FindWindowW
SetWindowLongW
RegisterClassW
GetClassInfoW
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
CharNextW
DestroyWindow
CreateDialogParamW
DefWindowProcW
PostMessageW
GetDlgItem
CreateWindowExW
RegisterClassExW
LoadCursorW
GetClassInfoExW
SetTimer
GetDlgItemTextW
CopyRect
DrawIcon
FillRect
SetDlgItemTextW
DestroyIcon
GetDC
ReleaseDC
GetScrollPos
DrawIconEx
GetSubMenu
TrackPopupMenu
LoadMenuW
ClientToScreen
MonitorFromPoint
DestroyMenu
EnableMenuItem
GetWindow
MonitorFromWindow
GetMonitorInfoW
SetFocus
EndDialog
GetWindowTextW
MoveWindow
IsDlgButtonChecked
FindWindowExW
GetWindowThreadProcessId
SetRect
GetParent
ScreenToClient
EndPaint
BeginPaint
CallWindowProcW
PtInRect
DrawTextW
IsRectEmpty
SetWindowTextW
GetActiveWindow
DialogBoxParamW
EnableWindow
MapWindowPoints
IsWindow
RedrawWindow
IsWindowVisible
InvalidateRect
GetClientRect
GetWindowRect
SetWindowPos
GetWindowLongW

gdi32

CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
DeleteDC
DeleteObject
CreateFontW
SetTextColor
SetBkMode
GetStockObject
LineTo
MoveToEx
SetViewportOrgEx
GetObjectType
GetTextColor
EnumFontFamiliesW
CreateSolidBrush
CreatePen
SelectObject
ExtTextOutW
SetBkColor

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
DuplicateTokenEx
RegOpenKeyW
RegEnumKeyW
RegQueryValueExW
GetTokenInformation
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExA

shell32

ExtractIconExW
SHGetFolderPathW
SHGetSpecialFolderPathW
SHGetFileInfoW
ord680
ShellExecuteExW
ShellExecuteW
CommandLineToArgvW

ole32

CoTaskMemAlloc
CoInitialize
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc

oleaut32

VarUI4FromStr
SysStringByteLen
SysAllocStringByteLen
VariantClear
VariantInit
SysFreeString
SysStringLen
SysAllocString

shlwapi

PathAppendW
PathRemoveExtensionW
PathFindExtensionW
StrCpyNW
StrCmpIW
UrlGetPartW
SHDeleteValueW
SHSetValueW
StrCmpW
PathFindFileNameW
StrCmpNIW
StrChrW
PathCombineW
PathIsRelativeW
PathFileExistsW
SHGetValueW
PathSkipRootW
PathRemoveFileSpecW

comctl32

InitCommonControlsEx
_TrackMouseEvent

psapi

GetModuleFileNameExW

version

VerQueryValueW
GetFileVersionInfoSizeW
VerQueryValueA
GetFileVersionInfoW

wininet

InternetOpenW
InternetReadFile
HttpOpenRequestW
HttpSendRequestW
InternetConnectW

Sections

.text
Size: 408KB - Virtual size: 407KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 19KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 311KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nrdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b1f7e5b291beb30af2b648e9d5baa7f8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

psapi

version

wininet

Sections

.text Size: 408KB - Virtual size: 407KB

.rdata Size: 99KB - Virtual size: 98KB

.data Size: 19KB - Virtual size: 33KB

.rsrc Size: 311KB - Virtual size: 311KB

.nrdata Size: 72KB - Virtual size: 72KB

.text
Size: 408KB - Virtual size: 407KB

.rdata
Size: 99KB - Virtual size: 98KB

.data
Size: 19KB - Virtual size: 33KB

.rsrc
Size: 311KB - Virtual size: 311KB

.nrdata
Size: 72KB - Virtual size: 72KB