e12cc34770d5f2f522f6fefad4d1d837426d7bfa3249ef87ab3a127de02e2dae

Sharing

Copy URL Twitter E-mail

General

Target

e12cc34770d5f2f522f6fefad4d1d837426d7bfa3249ef87ab3a127de02e2dae
Size

304KB
MD5

a26e3b4e5018b6476c9ee249b7238960
SHA1

72f4b1c0c1e9c073a57e0001d7435d01873e6ade
SHA256

e12cc34770d5f2f522f6fefad4d1d837426d7bfa3249ef87ab3a127de02e2dae
SHA512

8fb234c605c6ce8c85a76c9c8a38cf7987fe986d6887caa9a2b1d696a6c02a09fb643fe1d6f4aa0d59bab4e4f1a398f8a8c2413523209bcb0292de3ddb19c0eb
SSDEEP

6144:l8xKuQMkiM0f17CjBHpcWcceusssssssss/M3xQ5SbGq:l8YuQluf17AHpcWcceusssssssssFS

Score

N/A

Malware Config

Signatures

Files

e12cc34770d5f2f522f6fefad4d1d837426d7bfa3249ef87ab3a127de02e2dae
.exe windows x86

7d6de7e9d41350073bf185f12542aa07

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExW
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LockResource
MulDiv
MultiByteToWideChar
GetVersionExA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReadFile
SetCurrentDirectoryW
SetLastError
SetProcessWorkingSetSize
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualFree
VirtualProtect
VirtualQuery
WriteFile
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
GetVersion
GetUserDefaultUILanguage
GetTickCount
GetSystemTimeAsFileTime
GetSystemInfo
GetSystemDirectoryW
GetStartupInfoW
GetProcessHeap
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLongPathNameW
GetLocaleInfoW
GetLastError
GetFullPathNameW
GetFileTime
GetFileSize
GetFileAttributesW
GetFileAttributesA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetCommandLineW
GetAtomNameW
FreeLibrary
FormatMessageW
FlushInstructionCache
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FindAtomW
ExpandEnvironmentStringsW
EnterCriticalSection
DeleteFileW
DeleteCriticalSection
DeleteAtom
CreateProcessW
CreateFileW
CreateDirectoryW
CompareStringW
CloseHandle
AddAtomW
VirtualAlloc
GetWindowsDirectoryA
lstrcatA
OutputDebugStringA
CreateFileA

user32

GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoW
GetMenuState
GetMenuStringW
GetMessagePos
GetMessageTime
GetMonitorInfoW
GetNextDlgTabItem
GetKeyState
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetWindow
GetWindowLongA
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
GrayStringW
InflateRect
InsertMenuW
IntersectRect
InvalidateRect
InvalidateRgn
IsChild
IsIconic
IsMenu
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadAcceleratorsW
LoadImageW
LoadMenuW
LoadStringW
MapWindowPoints
MessageBeep
MessageBoxW
ModifyMenuW
MonitorFromPoint
MoveWindow
NotifyWinEvent
OffsetRect
PeekMessageW
PostMessageA
PostMessageW
PostQuitMessage
PtInRect
RedrawWindow
RegisterClassExW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageA
SendMessageTimeoutW
SendMessageW
SetActiveWindow
SetCapture
SetClipboardViewer
SetCursor
SetFocus
SetForegroundWindow
SetMenu
SetMenuDefaultItem
SetMenuItemInfoW
SetParent
SetRect
SetRectEmpty
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
TabbedTextOutW
TrackPopupMenuEx
TranslateAcceleratorW
UnhookWindowsHookEx
UnionRect
UpdateWindow
WinHelpW
wsprintfW
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
FindWindowExW
FillRect
EqualRect
EnumThreadWindows
EnumChildWindows
EndPaint
EndDeferWindowPos
EnableWindow
EnableMenuItem
DrawTextW
DrawIconEx
DrawFrameControl
DrawFocusRect
DrawEdge
DestroyWindow
DestroyMenu
DestroyIcon
DestroyAcceleratorTable
DeleteMenu
DeferWindowPos
DefWindowProcW
DefWindowProcA
CreateWindowExW
CreatePopupMenu
CreateIconIndirect
CreateAcceleratorTableW
CopyRect
CopyImage
CopyIcon
ClientToScreen
ChildWindowFromPointEx
CharUpperW
CharNextW
CharLowerW
ChangeClipboardChain
CallWindowProcW
CallNextHookEx
BringWindowToTop
BeginPaint
BeginDeferWindowPos
AppendMenuW
AdjustWindowRectEx
LoadIconW
LoadCursorW
LoadIconA
LoadCursorA
GetSystemMetrics
GetParent

gdi32

DeleteObject
Escape
ExtTextOutA
ExtTextOutW
FillRgn
GetBrushOrgEx
GetDIBits
GetDeviceCaps
GetLayout
GetObjectA
GetObjectW
GetPixel
GetTextExtentPoint32W
GetTextMetricsW
LPtoDP
OffsetRgn
PatBlt
DeleteEnhMetaFile
PtInRegion
PtVisible
RealizePalette
RectVisible
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetBrushOrgEx
SetLayout
SetStretchBltMode
SetTextAlign
SetTextColor
StretchBlt
StretchDIBits
TextOutW
PlayEnhMetaFile
GetStockObject
CreateSolidBrush
CreateRectRgn
CreatePolygonRgn
CreatePatternBrush
CreateHalftonePalette
CreateFontIndirectW
CreateDIBSection
CreateDIBPatternBrushPt
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteDC

advapi32

RegOpenKeyExW

shell32

ShellAboutW
SHGetSpecialFolderPathW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
SHGetFolderPathW
ExtractIconW
ExtractIconExW
ShellExecuteExW

ole32

CoCreateGuid
CoCreateInstance
CoDisconnectObject
CoFreeUnusedLibraries
CoGetClassObject
CoGetMalloc
CoInitializeEx
CoRegisterClassObject
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
DoDragDrop
GetHGlobalFromStream
OleInitialize
OleLockRunning
OleRun
OleUninitialize
ProgIDFromCLSID
RegisterDragDrop
RevokeDragDrop
StgOpenStorageOnILockBytes
StringFromCLSID
StringFromGUID2
CLSIDFromProgID
CLSIDFromString

shlwapi

PathFindFileNameW

Sections

.text
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d6de7e9d41350073bf185f12542aa07

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

Sections

.text Size: 252KB - Virtual size: 251KB

.text3 Size: 1024B - Virtual size: 1000B

.text2 Size: 11KB - Virtual size: 10KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 24KB - Virtual size: 24KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 252KB - Virtual size: 251KB

.text3
Size: 1024B - Virtual size: 1000B

.text2
Size: 11KB - Virtual size: 10KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 24KB - Virtual size: 24KB

.reloc
Size: 2KB - Virtual size: 2KB