ae75bd680803c747a593856fb3dc754baf9af325808a56aea8ca1453c8d9e158

Sharing

Copy URL Twitter E-mail

General

Target

ae75bd680803c747a593856fb3dc754baf9af325808a56aea8ca1453c8d9e158
Size

861KB
MD5

929bc72e123aab2b774b11aab57632f0
SHA1

5b492ff6fff718b9a9eae9cf1e89659692c2d924
SHA256

ae75bd680803c747a593856fb3dc754baf9af325808a56aea8ca1453c8d9e158
SHA512

3ff5a909d0ef58d037370d7294e4f74d405bcbb6282be5111fb359c2640169f417b2a1bf35fecb0504c9111e3ab71483c499d0890dcde6fcd3c2910761beb754
SSDEEP

24576:TJqSh0Bqm4iXfAlGDy6Hn+0C18m/OicYEYzz:l90Bqm4ofQGKCM

Score

N/A

Malware Config

Signatures

Files

ae75bd680803c747a593856fb3dc754baf9af325808a56aea8ca1453c8d9e158
.exe windows x86

2bca8058955cee03f31c51418bc42332

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
InterlockedExchangeAdd
HeapDestroy
GetSystemPowerStatus
VirtualFree
lstrlenA
TlsFree
GetFileType
GlobalMemoryStatus
GetUserDefaultLCID
GetTempPathA
GetVolumeInformationA
DeleteFileA
SetNamedPipeHandleState
LoadLibraryW
GetModuleFileNameA
ReleaseSemaphore
LockFile
WriteFile
GetCurrentProcess
ExitProcess
OpenFileMappingA
GetTickCount
TlsSetValue
Sleep
CloseHandle
ResumeThread
MapViewOfFile
OpenProcess
HeapSize
GlobalFree
InterlockedExchange
GlobalUnlock
LocalFileTimeToFileTime
ExpandEnvironmentStringsA
GetCurrentThreadId
SetFileTime
InterlockedCompareExchange
GlobalMemoryStatusEx
GetEnvironmentVariableA
CreatePipe
GetProfileStringA
QueryPerformanceCounter
GetProcAddress
GetThreadTimes
ReadFile
LocalAlloc
SetEnvironmentVariableA
RemoveDirectoryA
InitializeCriticalSection
SetErrorMode
GetCommandLineA
FindClose
GetExitCodeProcess
TerminateProcess
GetFileSize
VirtualProtect
SetLastError
GetExitCodeThread
MoveFileExW
FileTimeToSystemTime
IsDBCSLeadByteEx
CreateSemaphoreA
FindFirstFileA
GetProcessWorkingSetSize
FormatMessageA
AreFileApisANSI
DuplicateHandle
LeaveCriticalSection
GlobalLock
MultiByteToWideChar
FindNextFileA
CreateDirectoryA
DeleteCriticalSection
LockFileEx
SuspendThread
GetFileAttributesA
IsValidLocale
GetCurrentThread
GetFileAttributesExA
FindFirstFileExA
WaitForSingleObject
GetTempPathW
SetThreadLocale
UnlockFileEx
GetDiskFreeSpaceA
SetCurrentDirectoryA
GlobalAlloc
GetStdHandle
GetLocaleInfoA
GetComputerNameA
WideCharToMultiByte
GetSystemTime
InterlockedDecrement
PeekNamedPipe
SetEndOfFile
TlsGetValue
GetDriveTypeA
TlsAlloc
UnmapViewOfFile
CreateMutexA
GetShortPathNameA
DeviceIoControl
CreateFileMappingA
FindResourceA
CreateThread
GetProcessHeap
UnlockFile
GetSystemInfo
SizeofResource
GetSystemTimeAsFileTime
GetProcessTimes
SetThreadExecutionState
CreateFileA
FreeLibrary
CreateProcessA
GlobalSize
CopyFileA
LoadResource
EnterCriticalSection
GetTempFileNameA
GetWindowsDirectoryA
GetStartupInfoA
SetThreadPriority
GetLastError
GetCurrentProcessId
GetThreadLocale
GetCPInfo
TerminateThread
ReleaseMutex
SetUnhandledExceptionFilter
LocalFree
FlushFileBuffers
LockResource
GetFullPathNameA
GetFileTime
GetVersionExA
InterlockedIncrement
GetLogicalDriveStringsA
GetACP
IsValidCodePage
GetProcessAffinityMask
LoadLibraryA
DeleteFileW
GetFileSizeEx
SetFilePointer
SystemTimeToFileTime

user32

GetSubMenu
RegisterClassW
GetUpdateRgn
DdeInitializeW
GetMessagePos
DrawFrameControl
LoadImageW
InvalidateRect
SetCursor
GetIconInfo
DdeClientTransaction
CreateIconIndirect
DdeUninitialize
DdeCreateDataHandle
GetClipboardFormatNameW
GetWindow
GetWindowLongW
MoveWindow
VkKeyScanW
DrawFocusRect
LoadBitmapW
DdeConnect
DestroyWindow
GetCaretPos
CreateDialogIndirectParamW
DdeFreeStringHandle
PostThreadMessageW
DrawStateW
GetDoubleClickTime
GetWindowDC
IsWindowEnabled
ToUnicode
FlashWindow
GetClipboardData
DrawIcon
ShowCursor
MsgWaitForMultipleObjects
GetClientRect
DestroyCursor
PostQuitMessage
EndPaint
FindWindowExW
CheckMenuRadioItem
MapWindowPoints
CloseClipboard
DrawMenuBar
InsertMenuW
CreatePopupMenu
DdeQueryStringW
MessageBoxW
SetTimer
GetKeyState
GetFocus
UnregisterClassW
SetForegroundWindow
FillRect
RegisterClipboardFormatW
ShowCaret
SetWindowsHookExW
CheckMenuItem
WaitForInputIdle
TrackPopupMenu
ScreenToClient
GetClassNameW
DdeGetLastError
SetFocus
GetClassInfoW
GetQueueStatus
DrawTextW
DdeGetData
RedrawWindow
IsZoomed
GetCapture
DefWindowProcW
DestroyMenu
GetWindowRect
GetSysColor
ExitWindowsEx
GetDlgItem
GetMessageW
GetSystemMenu
AdjustWindowRectEx
EnumClipboardFormats
UpdateWindow
SystemParametersInfoW
BeginPaint
WindowFromPoint
IsClipboardFormatAvailable
SetMenu
DdeCreateStringHandleW
GetWindowTextW
AppendMenuW
GetForegroundWindow
CreateMenu
DdeNameService
LoadIconW
ModifyMenuW
IsWindowVisible
GetSystemMetrics
GetWindowTextLengthW
OpenClipboard
InsertMenuItemW
ReleaseCapture
SetMenuItemInfoW
TranslateMessage
EndMenu
SetWindowPos
EmptyClipboard
MessageBeep
ShowWindow
GetProcessWindowStation
CopyRect
SetClipboardData
ChangeDisplaySettingsW
IsWindow
GetWindowThreadProcessId
RegisterWindowMessageW
DestroyIcon
GetClipboardViewer
OffsetRect
BringWindowToTop
EndDialog
CallWindowProcW
UnionRect
CreateDialogParamW
GetMessageTime
DispatchMessageW
PostMessageW
DdeFreeDataHandle
DrawIconEx
GetAsyncKeyState
SetWindowLongW
SetWindowRgn
DeferWindowPos
LoadAcceleratorsW
HideCaret
DestroyAcceleratorTable
keybd_event
EnumDisplaySettingsW
GetMenu
GetScrollInfo
GetActiveWindow
GetInputState
ChildWindowFromPoint
PeekMessageW
EnableMenuItem
GetDC
GetDesktopWindow
EnumWindows
KillTimer
GetUpdateRect
SetParent
ClientToScreen
TranslateAcceleratorW
ScrollWindow
ValidateRect
CreateAcceleratorTableW
DdeDisconnect
UnhookWindowsHookEx
EndDeferWindowPos
DdePostAdvise
GetMenuState
LoadCursorFromFileW
GetParent
EnableWindow
SetCursorPos
EnumThreadWindows
BeginDeferWindowPos
CallNextHookEx
InflateRect
SetScrollInfo
GetOpenClipboardWindow
GetKeyboardState
IsDialogMessageW
RemoveMenu
PtInRect
GetMenuItemInfoW
LoadCursorW
GetClipboardOwner
SetCapture
IsIconic
SetWindowTextW
DrawEdge
GetMenuItemCount
GetCursorPos
ReleaseDC

gdi32

CloseEnhMetaFile
SetPixel
CopyEnhMetaFileW
GetDIBits
Polyline
SetBkColor
GetClipBox
SetTextColor
LineTo
SelectObject
GetMetaFileBitsEx
CreateFontIndirectW
EnumFontFamiliesExW
PolyPolygon
CreateCompatibleBitmap
EqualRgn
RoundRect
CreateRectRgn
ExtSelectClipRgn
SetTextAlign
SelectPalette
Pie
GetDeviceCaps
StretchBlt
MoveToEx
OffsetRgn
CreateSolidBrush
GetDIBColorTable
CreateRectRgnIndirect
SetROP2
SetStretchBltMode
CombineRgn
SetMetaFileBitsEx
PtInRegion
GetEnhMetaFileW
RealizePalette
CreateBitmapIndirect
RectInRegion
GetPixel
SetViewportOrgEx
BitBlt
SetWinMetaFileBits
Rectangle
ExtCreatePen
ExtFloodFill
GdiFlush
GetPaletteEntries
SetBrushOrgEx
MaskBlt
CreateICW
GetRgnBox
Polygon
ExtCreateRegion
Ellipse
RestoreDC
GetNearestPaletteIndex
DeleteDC
CreatePolygonRgn
GetObjectW
SetPolyFillMode
PatBlt
GetTextExtentExPointW
CreateCompatibleDC
GetRegionData
SetMapMode
SetBkMode
DeleteEnhMetaFile
GetBkColor
CreatePalette
ExcludeClipRect
GetEnhMetaFileHeader
CreateDIBitmap
SelectClipRgn
SaveDC
SetViewportExtEx
GetTextMetricsW
Arc
CreatePatternBrush
SetWindowOrgEx
TextOutW
CreateEnhMetaFileW
CreateBitmap
CreatePen
GetCharABCWidthsW
GetTextColor
StretchDIBits
GetSystemPaletteEntries
PlayEnhMetaFile
CreateHatchBrush
GetTextExtentPoint32W
GetStockObject
CreateDIBSection
DeleteObject
GetWinMetaFileBits
SetWindowExtEx

comdlg32

ChooseColorW
GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError
ChooseFontW

advapi32

RegCloseKey
OpenServiceW
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyW
RegOpenKeyExA
RegSetValueExW
LookupPrivilegeValueW
CloseServiceHandle
RegQueryInfoKeyW
RegQueryValueExA
GetUserNameW
ControlService
OpenSCManagerW
AdjustTokenPrivileges
RegDeleteValueW
RegQueryValueExW
OpenProcessToken
RegEnumKeyW
RegEnumValueW

shell32

SHGetMalloc
ShellExecuteExW
SHGetFileInfoW
SHFileOperationW
SHGetFolderPathW
DragFinish
Shell_NotifyIconW
DragQueryPoint
DragQueryFileW
SHBrowseForFolderW
SHGetSpecialFolderLocation
DragAcceptFiles
SHGetPathFromIDListW
SHGetIconOverlayIndexW
ExtractIconExW
ExtractIconW

ole32

OleFlushClipboard
OleInitialize
DoDragDrop
CoCreateInstance
CoTaskMemFree
RegisterDragDrop
OleSetClipboard
ReleaseStgMedium
CoLockObjectExternal
CoFreeUnusedLibraries
OleIsCurrentClipboard
OleGetClipboard
OleUninitialize
RevokeDragDrop

oleaut32

SysStringLen
SysAllocString

comctl32

ImageList_DragLeave
ImageList_Remove
ImageList_GetImageCount
CreateStatusWindowW
ord16
ImageList_DragMove
ord17
ImageList_Add
ImageList_DragEnter
ImageList_BeginDrag
ImageList_Replace
ImageList_GetIconSize
ImageList_Draw
ImageList_GetIcon
ImageList_Create
ImageList_SetDragCursorImage
ImageList_EndDrag
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_AddMasked
ImageList_SetBkColor

winmm

PlaySoundW

wsock32

ntohl
getsockopt
accept
getpeername
select
WSAGetLastError
sendto
htons
closesocket
getsockname
gethostbyname
WSACleanup
send
recv
socket
connect
inet_addr
WSAStartup
__WSAFDIsSet
ntohs
bind
gethostbyaddr
recvfrom
ioctlsocket
htonl
setsockopt
listen
WSASetLastError
inet_ntoa
getservbyname
shutdown

mpr

WNetGetConnectionW

netapi32

NetApiBufferFree
NetShareEnum

ws2_32

WSACreateEvent
WSAWaitForMultipleEvents
WSAEventSelect
WSAEnumNetworkEvents
WSASetEvent
WSACloseEvent

secur32

DeleteSecurityContext

oledlg

ord6

rasapi32

RasDeleteEntryA
RasCreatePhonebookEntryA

Sections

.text
Size: 411KB - Virtual size: 411KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 382KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2bca8058955cee03f31c51418bc42332

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

winmm

wsock32

mpr

netapi32

ws2_32

secur32

oledlg

rasapi32

Sections

.text Size: 411KB - Virtual size: 411KB

.rdata Size: 45KB - Virtual size: 45KB

.data Size: 382KB - Virtual size: 420KB

.rsrc Size: 16KB - Virtual size: 16KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 411KB - Virtual size: 411KB

.rdata
Size: 45KB - Virtual size: 45KB

.data
Size: 382KB - Virtual size: 420KB

.rsrc
Size: 16KB - Virtual size: 16KB

.reloc
Size: 5KB - Virtual size: 4KB