43651d2a75fda3a429c0f96aebea72c82c583a9b7e425870ed9c42a01aaf7981

Sharing

Copy URL

Twitter E-mail

General

Target

43651d2a75fda3a429c0f96aebea72c82c583a9b7e425870ed9c42a01aaf7981
Size

544KB
MD5

93642bc71559de11d6875fec446d1c88
SHA1

746b88ea1ca2f5c749b028eedda4299f79f44d6f
SHA256

43651d2a75fda3a429c0f96aebea72c82c583a9b7e425870ed9c42a01aaf7981
SHA512

e85b44f8bb01607eb13f71cfe12555f46e0257dd6aeb4dd49fccfc146d194362225e90a86d3c25adcce6345ad5a76dea4c01b4c10d8d4258e73d30359c411319
SSDEEP

6144:FpWCDrqrLPXrYYvxhieBqqMWvTvDlCNBSehjBbLWbKk5+T3BUJpDcmKPHRJ:Prqrjr9xhi8q8DlEYUjB4K9rBoymKr

Score

N/A

Malware Config

Signatures

Files

43651d2a75fda3a429c0f96aebea72c82c583a9b7e425870ed9c42a01aaf7981
.exe windows x86

82ae0481630ff9ec634379e44a0665b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
GlobalFree
GetVersionExW
SizeofResource
LockResource
LoadResource
SetCurrentDirectoryW
CreateMutexW
FindResourceW
WritePrivateProfileSectionW
GetPrivateProfileStringW
WritePrivateProfileStringA
WritePrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
WaitForSingleObject
ReleaseMutex
CreateEventW
ResetEvent
GetUserDefaultUILanguage
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileW
SetFilePointer
CreateFileA
FlushFileBuffers
SetStdHandle
InitializeCriticalSection
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
LocalAlloc
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
EnumResourceNamesW
GlobalReAlloc
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
GetStdHandle
WriteFile
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
HeapSize
Sleep
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoW
GetProcessHeap
GetVersionExA
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
LoadLibraryA
InterlockedExchange
GetProcAddress
LoadLibraryW
FreeLibrary
DeleteFileW
CopyFileW
OpenProcess
GetLongPathNameW
ExpandEnvironmentStringsW
FindFirstFileW
FindNextFileW
FindClose
GlobalAlloc
GlobalLock
GlobalUnlock
InterlockedIncrement
GetModuleFileNameA
MulDiv
TerminateThread
GetFileAttributesW
ReadFile
LoadLibraryExW
GetTempPathW
GetTempFileNameW
GetSystemTime
GetLastError
GetConsoleCP
LocalFree
GetModuleFileNameW
CloseHandle
GetTickCount
FreeEnvironmentStringsW
CreateThread

user32

CreatePopupMenu
DispatchMessageW
LoadIconW
LoadCursorW
RemovePropW
SetWindowPlacement
IsZoomed
GetWindowPlacement
IsIconic
SetPropW
GetPropW
ShowWindow
SetForegroundWindow
GetForegroundWindow
ShowOwnedPopups
PostMessageW
SetTimer
MoveWindow
MapWindowPoints
GetWindowRect
PtInRect
GetWindowLongW
GetAncestor
EnumChildWindows
UpdateLayeredWindow
SetActiveWindow
DestroyMenu
KillTimer
GetCursorPos
EnableWindow
GetDlgItem
SetRect
GetClassNameW
GetClientRect
GetWindowTextW
SetWindowTextW
SendMessageW
WindowFromPoint
GetAsyncKeyState
DialogBoxParamW
RedrawWindow
BringWindowToTop
GetTopWindow
MessageBoxW
RegisterHotKey
UnregisterHotKey
EndDialog
DefWindowProcW
IsWindow
GetWindowThreadProcessId
TrackPopupMenu
CheckMenuItem
EnableMenuItem
AppendMenuW
ReleaseCapture
SetCapture
SetWindowLongW
UnhookWindowsHookEx
DestroyWindow
RegisterShellHookWindow
SetWindowsHookExW
PostQuitMessage
RegisterClipboardFormatW
CreateWindowExW
RegisterWindowMessageW
GetDC
ReleaseDC
GetWindowRgn
GetDesktopWindow
GetIconInfo
LookupIconIdFromDirectoryEx
DestroyIcon
CreateIconFromResourceEx
FindWindowW
SystemParametersInfoW
EnumWindows
GetWindow
GetParent
SendDlgItemMessageW
IsWindowVisible
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
LoadImageW
GetSystemMetrics
EnumDisplayMonitors
SetWindowPos
RegisterClassExW

gdi32

CreateRectRgn
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateDIBSection
DeleteDC
SelectObject
DeleteObject
GetObjectW

comdlg32

GetSaveFileNameW
ChooseColorW
ChooseFontW
GetOpenFileNameW
CommDlgExtendedError

advapi32

RegQueryValueExW
RegCreateKeyW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor

shell32

SHFileOperationW
DragFinish
ord25
ShellExecuteW
ord4
SHGetPathFromIDListW
ord2
SHGetSpecialFolderLocation
SHBindToParent
ord162
SHGetDataFromIDListW
SHGetMalloc
SHGetSpecialFolderPathW
SHGetFileInfoW
ShellExecuteExW
ord155
SHBrowseForFolderW

ole32

OleInitialize
OleUninitialize
CreateStreamOnHGlobal
RegisterDragDrop
CoLockObjectExternal
ReleaseStgMedium
CoCreateInstance

oleaut32

SysAllocStringLen
SysFreeString

comctl32

ImageList_Create
ImageList_Add

gdiplus

GdipDrawImageI
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromHICON
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipImageRotateFlip
GdipMeasureString
GdipFillPath
GdipDrawPath
GdipSetSmoothingMode
GdipGetInterpolationMode
GdipTransformPath
GdipAddPathString
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipCreateSolidFill
GdipTranslateMatrix
GdipSetMatrixElements
GdipCreateMatrix
GdipBitmapGetPixel
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipDeletePath
GdipCreatePath
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeletePen
GdipCreatePen1
GdipDeleteMatrix
GdipCloneBitmapAreaI
GdipSetImageAttributesColorMatrix
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePixelFormat
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipCloneImage
GdipCloneBrush
GdipDrawImageRectRectI
GdipDrawImageRectI
GdipFillRectangleI
GdipSetInterpolationMode
GdipSetCompositingQuality
GdipSetCompositingMode
GdipReleaseDC
GdipGetDC
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipCreateTextureIAI
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromScan0
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipSetTextureWrapMode
GdipScaleTextureTransform
GdipTranslateTextureTransform
GdipDeleteBrush
GdipAlloc
GdipFree

shlwapi

PathRemoveFileSpecW
PathRemoveFileSpecA
PathIsDirectoryW
PathSearchAndQualifyW
PathFileExistsW
StrRetToBufW

psapi

EnumProcesses
GetModuleBaseNameW
GetModuleFileNameExW

setupapi

SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList

Exports

Exports

DockletBrowseForImage
DockletDefaultConfigDialog
DockletDoAttentionAnimation
DockletGetLabel
DockletGetRect
DockletGetRelativeFolder
DockletGetRootFolder
DockletIsVisible
DockletLoadGDIPlusImage
DockletLockMouseEffect
DockletQueryDockAlign
DockletQueryDockEdge
DockletSetDockAlign
DockletSetDockEdge
DockletSetImage
DockletSetImageFile
DockletSetImageOverlay
DockletSetLabel
WritePrivateProfileInt

Sections

.text
Size: 280KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.krdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

82ae0481630ff9ec634379e44a0665b5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

gdiplus

shlwapi

psapi

setupapi

Exports

Exports

Sections

.text Size: 280KB - Virtual size: 278KB

.rdata Size: 48KB - Virtual size: 44KB

.data Size: 8KB - Virtual size: 13KB

.rsrc Size: 144KB - Virtual size: 141KB

.krdata Size: 60KB - Virtual size: 60KB

.text
Size: 280KB - Virtual size: 278KB

.rdata
Size: 48KB - Virtual size: 44KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 144KB - Virtual size: 141KB

.krdata
Size: 60KB - Virtual size: 60KB