bc115d8bb7b0b2718f518fe13711b519a33fcf03017f56ae03e9f22dc9056f46

Sharing

Copy URL

Twitter E-mail

General

Target

bc115d8bb7b0b2718f518fe13711b519a33fcf03017f56ae03e9f22dc9056f46
Size

524KB
MD5

a34256e948fd778059e64593fe339acb
SHA1

a47399e9bee4b250e6fd6c49e4769280e500fd7e
SHA256

bc115d8bb7b0b2718f518fe13711b519a33fcf03017f56ae03e9f22dc9056f46
SHA512

2ad60cdef5ec9971a61f52f1d69fe77793efc4d56a0f58a3e8bd380db41b4d47b9380b0b0f143823dc14f1e54c9660c9aabcaed8e8fbc097500217f48867d7c7
SSDEEP

6144:yhWcgdYd5PAl21n8/rXicEMEFONmbLuun0mfct5BTBJlgy/X/VVg0Eg:9YnPfnIXicEME0Nmbiun5wBTriy3b+g

Score

N/A

Malware Config

Signatures

Files

bc115d8bb7b0b2718f518fe13711b519a33fcf03017f56ae03e9f22dc9056f46
.exe windows x86

91d7d324ddf0897c27c0d12804159d79

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeA
SetEnvironmentVariableA
CompareStringW
CreateFileA
CompareStringA
GetLastError
WriteConsoleW
GetSystemDefaultLangID
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
SetFilePointer
VirtualQuery
SetUnhandledExceptionFilter
GetCurrentProcess
GetModuleHandleW
GetCurrentThread
WriteFile
LoadLibraryW
FormatMessageW
IsBadWritePtr
GetModuleFileNameW
CreateFileW
GetProcAddress
GetLocalTime
GetCurrentThreadId
CloseHandle
GetCurrentProcessId
CreateDirectoryW
SetLastError
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
GetTempPathW
InterlockedIncrement
InterlockedCompareExchange
WideCharToMultiByte
MultiByteToWideChar
CreateProcessW
MoveFileExW
WaitForSingleObject
CopyFileW
GetExitCodeProcess
FileTimeToSystemTime
GetFileTime
DeleteFileW
SetFileAttributesW
CreateEventW
WaitForMultipleObjects
DuplicateHandle
LocalFree
FindFirstFileW
FindClose
LocalAlloc
FindNextFileW
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetSystemDirectoryW
RemoveDirectoryW
CreateMutexW
OpenMutexW
ReleaseMutex
GetFileSize
Sleep
ReadFile
FlushFileBuffers
DeleteFileA
HeapFree
HeapAlloc
GetTimeZoneInformation
HeapReAlloc
GetSystemTimeAsFileTime
GetStartupInfoW
FileTimeToLocalFileTime
GetDriveTypeW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedDecrement
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapCreate
VirtualFree
VirtualAlloc
ExitProcess
GetStdHandle
GetModuleFileNameA
HeapSize
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetFullPathNameW
GetCurrentDirectoryA
LCMapStringA
LCMapStringW
GetModuleHandleA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetLocaleInfoA
FreeLibrary
LoadLibraryA
GetConsoleCP
GetConsoleMode

user32

GetWindowRect
GetWindowDC
DrawTextW
SetForegroundWindow
GetFocus
DialogBoxParamW
GetParent
TrackMouseEvent
IsWindowEnabled
GetClientRect
DestroyWindow
GetDC
GetForegroundWindow
InvalidateRect
GetWindowLongW
GetWindowTextW
ReleaseDC
ScrollWindow
SetWindowLongW
EndDialog
SetWindowPos
CheckDlgButton
IsDlgButtonChecked
CreateWindowExW
MessageBoxW
SendMessageW
CallWindowProcW
DefWindowProcW
SystemParametersInfoW
GetSystemMetrics
wvsprintfW
EndPaint
BeginPaint

gdi32

SetTextColor
GetObjectW
GetTextExtentPoint32W
CreateSolidBrush
GetStockObject
CreatePen
Rectangle
SelectObject
DeleteObject
SetBkMode
CreateFontIndirectW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

comctl32

InitCommonControlsEx

msimg32

GradientFill

advapi32

RegQueryInfoKeyW
RegQueryValueExW
RegEnumKeyW
BuildExplicitAccessWithNameW
GetSecurityDescriptorSacl
GetSidLengthRequired
SetEntriesInAclW
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorW
InitializeAcl
GetNamedSecurityInfoW
SetNamedSecurityInfoW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAceEx
LookupAccountSidW
GetTokenInformation
OpenProcessToken
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegCreateKeyExW

shell32

ShellExecuteW
ShellExecuteExW
SHFileOperationW
SHGetSpecialFolderPathW

Sections

.text
Size: 395KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CHONG
Size: 512B - Virtual size: 155B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

91d7d324ddf0897c27c0d12804159d79

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

version

comctl32

msimg32

advapi32

shell32

Sections

.text Size: 395KB - Virtual size: 395KB

.rdata Size: 96KB - Virtual size: 96KB

.data Size: 15KB - Virtual size: 35KB

.rsrc Size: 11KB - Virtual size: 10KB

.CHONG Size: 512B - Virtual size: 155B

.text
Size: 395KB - Virtual size: 395KB

.rdata
Size: 96KB - Virtual size: 96KB

.data
Size: 15KB - Virtual size: 35KB

.rsrc
Size: 11KB - Virtual size: 10KB

.CHONG
Size: 512B - Virtual size: 155B