fbe381096bf8f86219e79daf7524318d22be055e68eed76ce9c55219e71774b5

Sharing

Copy URL Twitter E-mail

General

Target

fbe381096bf8f86219e79daf7524318d22be055e68eed76ce9c55219e71774b5
Size

828KB
MD5

9266d8a621ad6a7dbcf60e25818722c0
SHA1

7032164eedf0a07fab12e73f7425474f7edde79b
SHA256

fbe381096bf8f86219e79daf7524318d22be055e68eed76ce9c55219e71774b5
SHA512

33981bc3fab3b6b1c94292e7612457cc1c0c5cd59d26c1e474303aac83db3937d93b4c442bf49bf6712cc3a6805c66cb5b4d6f20382b49be57a80048eedc4609
SSDEEP

12288:iepfuClf6YEy4NQ/X0YwANTJO8g5FRAoPIPmjA9GLczBXv/4O1M7:iafuM4NS0YZNO8oAOensLczZn40M

Score

N/A

Malware Config

Signatures

Files

fbe381096bf8f86219e79daf7524318d22be055e68eed76ce9c55219e71774b5
.exe windows x86

d27b122d3aae30589a91e920b0329c55

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
VirtualProtectEx
HeapCreate
HeapDestroy
VirtualFree
PeekNamedPipe
lstrlenA
VirtualProtect
MapViewOfFile
LoadResource
GlobalAlloc
DeleteFileW
SetThreadLocale
CreateProcessA
GetUserDefaultLCID
GetComputerNameA
GetExitCodeProcess
WriteFile
GetProcessWorkingSetSize
GetCommandLineA
WaitForSingleObject
ExitProcess
InterlockedCompareExchange
UnlockFileEx
HeapSize
UnmapViewOfFile
SetLastError
DeleteCriticalSection
GetSystemTimeAsFileTime
DeviceIoControl
SetThreadPriority
FindClose
SizeofResource
GetThreadLocale
FindNextFileA
ResumeThread
ExpandEnvironmentStringsA
CreateThread
FormatMessageA
GetWindowsDirectoryA
FindFirstFileA
OpenProcess
LocalFileTimeToFileTime
LoadLibraryA
GetLastError
TlsFree
GetModuleFileNameA
LockFile
GetFileTime
Sleep
GetProcessHeap
CreateFileA
FreeLibrary
GetLogicalDriveStringsA
GlobalMemoryStatus
InitializeCriticalSection
LocalAlloc
TlsAlloc
CreateSemaphoreA
InterlockedDecrement
TlsGetValue
MoveFileExW
CreateFileMappingA
GetTempFileNameA
GetTempPathA
GetDriveTypeA
IsValidCodePage
GetTickCount
GetEnvironmentVariableA
InterlockedIncrement
LeaveCriticalSection
TlsSetValue
IsDBCSLeadByteEx
LockFileEx
RemoveDirectoryA
GetFileType
GetVersionExA
MultiByteToWideChar
TerminateProcess
ReleaseSemaphore
LockResource
GetCurrentProcess
SetFilePointer
CopyFileA
CreatePipe
SetNamedPipeHandleState
FindResourceA
EnterCriticalSection
SetErrorMode
DeleteFileA
GetThreadTimes
GetProcessTimes
FindFirstFileExA
GetCurrentThreadId
SystemTimeToFileTime
DuplicateHandle
FileTimeToSystemTime
ReadFile
CreateDirectoryA
InterlockedExchange
GetStdHandle
GlobalFree
GetLocaleInfoA
GetStartupInfoA
GetCurrentProcessId
GetDiskFreeSpaceA
GlobalSize
GetFileSizeEx
GlobalUnlock
GetFileAttributesA
GetSystemTime
ReleaseMutex
SetEnvironmentVariableA
SetFileTime
GetFileAttributesExA
GetCurrentThread
GetSystemInfo
GetACP
CloseHandle
SetThreadExecutionState
TerminateThread
SetCurrentDirectoryA
SetUnhandledExceptionFilter
GetExitCodeThread
GetFileSize
AreFileApisANSI
GetTempPathW
IsValidLocale
GetProcessAffinityMask
GetVolumeInformationA
LoadLibraryW
GetShortPathNameA
CreateMutexA
UnlockFile
GetProfileStringA
OpenFileMappingA
FlushFileBuffers
GetCPInfo
GlobalLock
GetFullPathNameA
LocalFree
SuspendThread
QueryPerformanceCounter
WideCharToMultiByte
GetProcAddress
GlobalMemoryStatusEx
SetEndOfFile
InterlockedExchangeAdd

user32

GetWindowTextW
GetClipboardFormatNameW
ValidateRect
EndPaint
GetSystemMetrics
GetCapture
LoadImageW
TranslateAcceleratorW
GetClassInfoW
GetSysColor
InsertMenuItemW
GetAsyncKeyState
HideCaret
SetCursorPos
RegisterClipboardFormatW
ChangeDisplaySettingsW
DdeFreeStringHandle
VkKeyScanW
GetClientRect
GetWindowThreadProcessId
FillRect
ShowCaret
GetSystemMenu
DdeInitializeW
CreateDialogParamW
DestroyWindow
SetClipboardData
AppendMenuW
CopyRect
GetMenuState
MessageBoxW
SetWindowTextW
SetForegroundWindow
GetCursorPos
DdeConnect
SetFocus
EnumThreadWindows
PostMessageW
GetScrollInfo
DdePostAdvise
GetMessagePos
GetClipboardData
LoadCursorW
PtInRect
InflateRect
SetTimer
GetInputState
DdeFreeDataHandle
CallNextHookEx
SetCursor
GetMenu
GetWindowDC
GetDlgItem
IsWindowEnabled
PostQuitMessage
DrawMenuBar
GetWindowTextLengthW
SetWindowPos
DrawFocusRect
ScreenToClient
GetKeyboardState
EmptyClipboard
SystemParametersInfoW
GetClassNameW
GetParent
CallWindowProcW
DrawStateW
BeginDeferWindowPos
DdeUninitialize
SetMenu
ToUnicode
SetWindowLongW
BringWindowToTop
EnumClipboardFormats
DefWindowProcW
CreatePopupMenu
DdeQueryStringW
ExitWindowsEx
AdjustWindowRectEx
EndDialog
PostThreadMessageW
MsgWaitForMultipleObjects
ClientToScreen
KillTimer
SetScrollInfo
CloseClipboard
RegisterWindowMessageW
CheckMenuItem
TrackPopupMenu
GetOpenClipboardWindow
LoadCursorFromFileW
MapWindowPoints
CreateMenu
DrawFrameControl
ScrollWindow
DdeNameService
GetClipboardOwner
CreateWindowExW
SendMessageW
CheckMenuRadioItem
DrawTextW
EnableMenuItem
WindowFromPoint
GetDoubleClickTime
GetClipboardViewer
RedrawWindow
IsDialogMessageW
OpenClipboard
GetMessageTime
EndDeferWindowPos
EnumDisplaySettingsW
CreateIconIndirect
InvalidateRect
DestroyIcon
InsertMenuW
DestroyAcceleratorTable
GetUpdateRect
GetDC
SetParent
LoadIconW
DrawEdge
MessageBeep
UnregisterClassW
RemoveMenu
DeferWindowPos
SetCapture
EnumWindows
GetProcessWindowStation
GetMenuItemCount
TranslateMessage
GetMenuItemInfoW
IsWindowVisible
SetWindowRgn
GetWindowLongW
keybd_event
DestroyCursor
ReleaseDC
UnhookWindowsHookEx
RegisterClassW
IsClipboardFormatAvailable
GetForegroundWindow
DdeCreateStringHandleW
EndMenu
ChildWindowFromPoint
GetWindowRect
FindWindowExW
LoadAcceleratorsW
GetSubMenu
FlashWindow
GetFocus
UnionRect
BeginPaint
ShowWindow
IsIconic
GetKeyState
DrawIcon
DestroyMenu
GetQueueStatus
DdeClientTransaction
GetMessageW
PeekMessageW
GetUpdateRgn
DdeDisconnect
ShowCursor
OffsetRect
SetWindowsHookExW
DdeCreateDataHandle
DispatchMessageW
GetCaretPos
LoadBitmapW
WaitForInputIdle
GetIconInfo
EnableWindow
GetDesktopWindow
SetMenuItemInfoW
CreateDialogIndirectParamW
MoveWindow
GetActiveWindow
CreateAcceleratorTableW
ReleaseCapture
IsWindow
DrawIconEx
DdeGetData
DdeGetLastError
GetWindow
UpdateWindow
ModifyMenuW
IsZoomed

gdi32

SetROP2
BitBlt
SelectClipRgn
LineTo
GetRegionData
SetWinMetaFileBits
CreateSolidBrush
SetMetaFileBitsEx
CreateRectRgn
CreateBitmap
CreateICW
GetRgnBox
GetDeviceCaps
SetTextAlign
GetClipBox
GetTextMetricsW
GetNearestPaletteIndex
GetMetaFileBitsEx
GetStockObject
CloseEnhMetaFile
PtInRegion
CreatePatternBrush
CopyEnhMetaFileW
DeleteEnhMetaFile
Pie
CreateEnhMetaFileW
ExcludeClipRect
SetBkMode
CreateCompatibleBitmap
CreateBitmapIndirect
CreateRectRgnIndirect
TextOutW
SetViewportOrgEx
GetWinMetaFileBits
SetWindowExtEx
CreateCompatibleDC
MaskBlt
CreateHatchBrush
GetTextColor
DeleteDC
GetDIBits
GetPixel
GetTextExtentPoint32W
Polyline
GdiFlush
SetStretchBltMode
StretchDIBits
GetPaletteEntries
SelectPalette
GetTextExtentExPointW
ExtFloodFill
GetDIBColorTable
Rectangle
GetEnhMetaFileHeader
SaveDC
GetObjectW
ExtCreatePen
CreatePalette
CreatePen
SetPolyFillMode
CreateFontIndirectW
GetCharABCWidthsW
GetEnhMetaFileW
GetBkColor
Polygon
RectInRegion
CreatePolygonRgn
SetBkColor
RealizePalette
PlayEnhMetaFile
SetViewportExtEx
SelectObject
GetSystemPaletteEntries
ExtSelectClipRgn
SetTextColor
EnumFontFamiliesExW
CombineRgn
DeleteObject
PatBlt
Arc
RestoreDC
ExtCreateRegion
SetMapMode
OffsetRgn
MoveToEx
CreateDIBitmap
Ellipse
CreateDIBSection
PolyPolygon
EqualRgn
StretchBlt
SetWindowOrgEx
SetBrushOrgEx
RoundRect
SetPixel

comdlg32

ChooseFontW
CommDlgExtendedError
GetSaveFileNameW
ChooseColorW
GetOpenFileNameW

advapi32

RegDeleteKeyW
RegEnumKeyW
ControlService
RegCloseKey
RegCreateKeyW
RegQueryValueExA
GetUserNameW
AdjustTokenPrivileges
OpenProcessToken
RegQueryInfoKeyW
OpenSCManagerW
RegQueryValueExW
CloseServiceHandle
OpenServiceW
RegOpenKeyExA
RegDeleteValueW
RegSetValueExW
RegEnumValueW
RegOpenKeyExW
LookupPrivilegeValueW

shell32

SHGetPathFromIDListW
DragAcceptFiles
SHGetMalloc
ShellExecuteExW
SHGetFileInfoW
DragQueryFileW
DragFinish
ExtractIconExW
SHGetSpecialFolderLocation
DragQueryPoint
ExtractIconW
Shell_NotifyIconW
SHGetIconOverlayIndexW
SHBrowseForFolderW
SHFileOperationW
SHGetFolderPathW

ole32

OleInitialize
OleGetClipboard
RegisterDragDrop
CoTaskMemFree
ReleaseStgMedium
OleFlushClipboard
DoDragDrop
CoCreateInstance
OleIsCurrentClipboard
OleSetClipboard
CoFreeUnusedLibraries
RevokeDragDrop
OleUninitialize
CoLockObjectExternal

oleaut32

SysAllocString
SysStringLen

comctl32

ImageList_AddMasked
ImageList_EndDrag
ord17
ImageList_SetBkColor
ImageList_DragLeave
ImageList_DragMove
ImageList_DragEnter
CreateStatusWindowW
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_BeginDrag
ImageList_Replace
ord16
ImageList_Remove
ImageList_Create
ImageList_Add
ImageList_SetDragCursorImage
ImageList_GetIconSize
ImageList_Destroy
ImageList_Draw
ImageList_GetIcon

winmm

PlaySoundW

wsock32

htons
send
recvfrom
connect
getsockopt
WSAGetLastError
ntohs
socket
WSAStartup
inet_ntoa
select
bind
closesocket
WSASetLastError
ntohl
inet_addr
getsockname
accept
__WSAFDIsSet
sendto
ioctlsocket
gethostbyaddr
WSACleanup
recv
setsockopt
getservbyname
gethostbyname
getpeername
shutdown
listen
htonl

mpr

WNetGetConnectionW

netapi32

NetApiBufferFree
NetShareEnum

ws2_32

WSACreateEvent
WSAEventSelect
WSAEnumNetworkEvents
WSASetEvent
WSACloseEvent
WSAWaitForMultipleEvents

rasapi32

RasDeleteEntryA

Sections

.text
Size: 327KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idat
Size: 468KB - Virtual size: 5.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d27b122d3aae30589a91e920b0329c55

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

winmm

wsock32

mpr

netapi32

ws2_32

rasapi32

Sections

.text Size: 327KB - Virtual size: 327KB

.idat Size: 468KB - Virtual size: 5.7MB

.tls Size: 512B - Virtual size: 101B

.rsrc Size: 17KB - Virtual size: 17KB

.reloc Size: 14KB - Virtual size: 13KB

.text
Size: 327KB - Virtual size: 327KB

.idat
Size: 468KB - Virtual size: 5.7MB

.tls
Size: 512B - Virtual size: 101B

.rsrc
Size: 17KB - Virtual size: 17KB

.reloc
Size: 14KB - Virtual size: 13KB