6ded5e2d000bbd174590351dce355e5b6b49faf8f0ffcbcd6b27872e5df9ca91

Sharing

Copy URL Twitter E-mail

General

Target

6ded5e2d000bbd174590351dce355e5b6b49faf8f0ffcbcd6b27872e5df9ca91
Size

653KB
MD5

9296984bf36d3c8777d127e872aec700
SHA1

a5222780395ef7b521fd474c31189f3e6981fbce
SHA256

6ded5e2d000bbd174590351dce355e5b6b49faf8f0ffcbcd6b27872e5df9ca91
SHA512

b23197cf199e033c4172e980039c26ce2ec0b1451b5ba12d4ae27ca585a4c5880c22200bb0beee6b89d53e2c839550a2bf4df36e96c38793ba8f0c82cafff232
SSDEEP

12288:sbAvWHWN277phrBed4BYFDyjsrJvCOQYsm+1TD0ne8bI4v:sbpJlh1ed4BYFDwsrJvhQYt+1Tgv

Score

N/A

Malware Config

Signatures

Files

6ded5e2d000bbd174590351dce355e5b6b49faf8f0ffcbcd6b27872e5df9ca91
.exe windows x86

3f7ddeae35258786d110c43accbf6224

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreW
FreeResource
FindResourceW
LoadResource
GlobalLock
GlobalAlloc
SizeofResource
GlobalUnlock
GlobalFree
LockResource
MulDiv
InterlockedDecrement
InterlockedIncrement
LocalFree
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
CreateFileA
GetStringTypeW
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
LoadLibraryA
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
VirtualAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
RtlUnwind
RaiseException
HeapReAlloc
CreateThread
ExitThread
GetStartupInfoA
GetProcessHeap
HeapAlloc
GetVersionExA
HeapFree
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetFileAttributesW
DeleteFileW
GetLongPathNameW
GetTempPathW
lstrlenW
GetFileAttributesW
CreateDirectoryW
GetTempFileNameW
GetFullPathNameW
MultiByteToWideChar
WideCharToMultiByte
ResumeThread
GetCurrentThreadId
GetTickCount
WaitForSingleObject
GetLastError
WriteFile
SetFileTime
SetEndOfFile
GetFileSize
lstrcmpW
CreateFileW
ReadFile
SetFilePointer
CloseHandle
WinExec
CreateEventW
ResetEvent
GetModuleFileNameW
Sleep
GetModuleHandleW
SetEvent
GetStringTypeA
CreateProcessW

user32

CreateCaret
HideCaret
ClientToScreen
CreateAcceleratorTableW
GetSysColor
ShowCaret
InvalidateRgn
SetWindowPos
SetWindowLongW
GetWindowLongW
PostQuitMessage
KillTimer
DestroyAcceleratorTable
GetWindow
SetCaretPos
FillRect
DrawTextW
DrawIconEx
CharPrevW
RedrawWindow
MoveWindow
SetWindowTextW
MapWindowPoints
ShowWindow
SystemParametersInfoW
GetWindowTextW
GetClientRect
GetParent
SetTimer
OffsetRect
SetCursor
CharNextW
IntersectRect
IsRectEmpty
LoadImageW
LoadCursorW
GetClassInfoExW
SetPropW
RegisterClassExW
RegisterClassW
EnableWindow
DestroyIcon
GetPropW
CallWindowProcW
DefWindowProcW
CharNextA
LoadStringW
LoadBitmapW
EndPaint
DestroyWindow
UpdateLayeredWindow
SetWindowRgn
ScreenToClient
GetMessageW
IsIconic
IsChild
SetCapture
PostMessageW
GetKeyState
GetFocus
SetFocus
BeginPaint
PtInRect
GetUpdateRect
GetDC
TranslateMessage
InvalidateRect
ReleaseDC
MonitorFromWindow
GetCursorPos
IsWindow
CreateWindowExW
ReleaseCapture
SendMessageW
GetMonitorInfoW
DispatchMessageW
GetWindowTextLengthW
GetWindowRect
IsZoomed

gdi32

CreateRectRgnIndirect
CombineRgn
Rectangle
GetObjectW
CreateRoundRectRgn
CreateRectRgn
CreatePen
GetStockObject
CreateFontIndirectW
CreateDIBSection
DeleteDC
GetTextMetricsW
CreateCompatibleDC
BitBlt
GetDeviceCaps
CreateSolidBrush
TextOutW
GetCharABCWidthsW
ExtTextOutW
SelectClipRgn
SetBkMode
SetBkColor
StretchBlt
SetTextColor
SelectObject
SetStretchBltMode
GetTextExtentPoint32W
SetBitmapBits
GetBitmapBits
GetClipBox
CreateCompatibleBitmap
ExtSelectClipRgn
RoundRect
DeleteObject

advapi32

RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegCloseKey

shell32

SHBrowseForFolderW
ShellExecuteW
SHGetPathFromIDListW

ole32

OleLockRunning
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleUninitialize
OleInitialize

oleaut32

OleLoadPicture
SysFreeString
SysAllocString

wininet

HttpQueryInfoW
InternetReadFile
InternetOpenUrlW
InternetCloseHandle
InternetSetOptionW
InternetOpenW

riched20

ord4

comctl32

_TrackMouseEvent

msimg32

AlphaBlend

Sections

.text
Size: 464KB - Virtual size: 461KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3f7ddeae35258786d110c43accbf6224

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

wininet

riched20

comctl32

msimg32

Sections

.text Size: 464KB - Virtual size: 461KB

.rdata Size: 92KB - Virtual size: 88KB

.data Size: 12KB - Virtual size: 19KB

.rsrc Size: 60KB - Virtual size: 59KB

.text
Size: 464KB - Virtual size: 461KB

.rdata
Size: 92KB - Virtual size: 88KB

.data
Size: 12KB - Virtual size: 19KB

.rsrc
Size: 60KB - Virtual size: 59KB