4765ddb0f8887a4a22f610e6516d586a7fcecec04cd2324261cf8d4df05845ea

Sharing

Copy URL Twitter E-mail

General

Target

4765ddb0f8887a4a22f610e6516d586a7fcecec04cd2324261cf8d4df05845ea
Size

849KB
MD5

927782c2451dde845b412fbe1b9bb4c0
SHA1

24dc16e409685c465a3307cb50fcf42f7830e58e
SHA256

4765ddb0f8887a4a22f610e6516d586a7fcecec04cd2324261cf8d4df05845ea
SHA512

48925febba43272222666465a1f59aefecf13414395c46d819adabf91da56f80b49fedbb06823916d59ea9e860391dbd870d5270ee35955958d967adacb98f18
SSDEEP

24576:Be4LXJla0JFtxncwfa8o+DPPz7hoQYVkv2Ma9W:BeaJla0jeuDPhLYVkvba9W

Score

N/A

Malware Config

Signatures

Files

4765ddb0f8887a4a22f610e6516d586a7fcecec04cd2324261cf8d4df05845ea
.exe windows x86

7e308a662c00314cbf27ab39b6969728

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
GetStartupInfoW
ResetEvent
GlobalLock
TlsSetValue
SetThreadExecutionState
TerminateProcess
WaitForSingleObject
WriteConsoleW
GetSystemDirectoryW
GetOEMCP
CancelIo
GetSystemTimeAsFileTime
InterlockedExchange
GetVersion
SetFilePointer
CreateFileW
FindNextFileW
GetFileType
GetFileAttributesExW
FlushFileBuffers
GetStdHandle
FindResourceExW
InitializeCriticalSection
CloseHandle
HeapSize
GetProcAddress
GetOverlappedResult
FileTimeToLocalFileTime
VirtualProtect
CreateEventW
ReadDirectoryChangesW
OutputDebugStringW
EnterCriticalSection
QueryPerformanceFrequency
SetConsoleCtrlHandler
GlobalAlloc
FlushInstructionCache
Sleep
GetSystemInfo
HeapReAlloc
GetCurrentThread
FreeEnvironmentStringsW
LCMapStringW
CreateThread
DeleteCriticalSection
SetLastError
SetThreadPriority
GetConsoleCP
GetLastError
HeapQueryInformation
SetEvent
GlobalUnlock
GlobalSize
LockResource
GlobalFree
GetConsoleMode
SetStdHandle
GetFileInformationByHandle
InterlockedCompareExchange
SetHandleCount
ResumeThread
LoadLibraryW
LocalFileTimeToFileTime
HeapFree
InterlockedIncrement
WriteFile
SetErrorMode
GetCurrentProcess
GetProcessHeap
FreeLibrary
RaiseException
lstrlenW
SetUnhandledExceptionFilter
GetFileTime
GetCurrentProcessId
GetTickCount
CreateMutexW
lstrlenA
GetModuleHandleA
LocalFree
TlsGetValue
TlsAlloc
CopyFileW
FindFirstFileW
HeapSetInformation
InterlockedDecrement
VirtualQuery
GetCurrentThreadId
LoadResource
MultiByteToWideChar
TlsFree
HeapDestroy
GetACP
ReadFile
SleepEx
GetFileSize
MulDiv
GetProcessAffinityMask
WaitForMultipleObjects
SystemTimeToFileTime
GetCPInfo
IsValidCodePage
VirtualAlloc
LocalAlloc
GetModuleFileNameW
LeaveCriticalSection
UnhandledExceptionFilter
MoveFileExW
GetThreadPriority
GetModuleHandleW
SetEndOfFile
FileTimeToSystemTime
InitializeCriticalSectionAndSpinCount
GetCommandLineW
FindClose
GetVersionExW
HeapAlloc
IsDebuggerPresent
GetFileAttributesW
GetStringTypeW
ExitProcess
SizeofResource
DuplicateHandle
RtlUnwind
HeapCreate
WideCharToMultiByte
LoadLibraryA
QueryPerformanceCounter
VirtualFree
IsProcessorFeaturePresent
ExitThread
FindResourceW
RemoveDirectoryW
GetEnvironmentStringsW
GetExitCodeThread

user32

SetWindowLongW
IsCharAlphaW
MapWindowPoints
TrackPopupMenu
IntersectRect
UnhookWindowsHookEx
IsWindowEnabled
ReleaseDC
GetMonitorInfoW
IsChild
RedrawWindow
CreateDialogParamW
DrawEdge
PostQuitMessage
DeregisterShellHookWindow
LoadAcceleratorsW
DestroyWindow
MessageBeep
GetSystemMetrics
DestroyMenu
SetLayeredWindowAttributes
AdjustWindowRectEx
CopyRect
MapDialogRect
UnregisterClassW
DestroyAcceleratorTable
GetMenu
EndDeferWindowPos
MonitorFromPoint
SetActiveWindow
OffsetRect
GetMessageW
IsDialogMessageW
EmptyClipboard
SetCursor
DefWindowProcW
GetClipboardData
SendMessageW
GetParent
TranslateAcceleratorW
UnregisterHotKey
SendDlgItemMessageW
GetDC
MapVirtualKeyW
ShowWindow
GetComboBoxInfo
GetScrollInfo
CreateWindowExW
BeginDeferWindowPos
PostMessageW
CheckMenuRadioItem
GetWindowTextW
AllowSetForegroundWindow
PeekMessageW
UpdateWindow
WindowFromPoint
GetFocus
RegisterClassExW
DrawTextW
GetMessagePos
BeginPaint
GetMenuItemInfoW
ClientToScreen
GetWindowPlacement
GetKeyState
TranslateMessage
SetMenuItemInfoW
CloseClipboard
EnumThreadWindows
OpenClipboard
EndPaint
LoadCursorW
EnumWindows
RegisterWindowMessageW
GetWindowThreadProcessId
AdjustWindowRect
IsClipboardFormatAvailable
RegisterHotKey
GetMenuItemCount
MoveWindow
CreatePopupMenu
SetForegroundWindow
SetWindowsHookExW
RegisterShellHookWindow
CallWindowProcW
AppendMenuW
LoadImageW
SetClipboardData
RegisterClassW
DispatchMessageW
GetClassNameW
FillRect
MonitorFromRect
GetDlgItem
GetWindowLongW
SetDlgItemTextW
UnregisterClassA
GetDlgCtrlID
IsWindowVisible
DestroyIcon
LoadIconW
EnumChildWindows
ScreenToClient
GetWindowDC
KillTimer
CallNextHookEx
SetWindowTextW
GetClassInfoExW
TrackPopupMenuEx
IsIconic
MsgWaitForMultipleObjects
CharLowerW
GetActiveWindow
GetSysColor
EnableWindow
EndDialog
GetClientRect
RegisterClipboardFormatW
SetTimer
DeferWindowPos
wsprintfW
GetWindowRect
DialogBoxParamW
SetWindowPos
InvalidateRect
DrawIconEx
CharUpperW
MessageBoxW
SetFocus
SetCapture

gdi32

CreateCompatibleDC
DeleteObject
CreateCompatibleBitmap
CreateFontIndirectW
SelectObject
GetObjectW
SetBkColor
SetWindowOrgEx
ExtTextOutW
SetDCBrushColor
SetBkMode
SetTextColor
DeleteDC
GetStockObject
GetDeviceCaps
OffsetWindowOrgEx
GetTextExtentPoint32W

advapi32

RegDeleteValueW
CryptGetHashParam
CryptAcquireContextW
RegQueryValueExW
RegOpenKeyW
CryptCreateHash
CryptVerifySignatureW
RegCreateKeyW
CryptImportKey
CryptDestroyHash
RegEnumKeyExW
CryptDestroyKey
CopySid
RegOpenKeyExW
CryptHashData
RegEnumValueW
RegCloseKey
RegSetValueExW
RegQueryInfoKeyW
CryptReleaseContext
RegCreateKeyExW

ole32

CoTaskMemFree
OleGetClipboard
CoUninitialize
OleInitialize
CreateStreamOnHGlobal
CoCreateInstance
OleUninitialize
OleSetClipboard
CoTaskMemAlloc
CoCreateGuid
ReleaseStgMedium
CoInitialize

shlwapi

SHDeleteKeyW
ColorHLSToRGB
StrCmpLogicalW
SHAutoComplete

crypt32

CertGetCertificateChain
CertFreeCertificateChain
CertFreeCertificateContext
CertVerifyRevocation
CertOpenSystemStoreW
CertVerifyTimeValidity
CertFindCertificateInStore
CertVerifyCertificateChainPolicy
CertCloseStore

iphlpapi

GetAdaptersInfo

secur32

DeleteSecurityContext
InitializeSecurityContextW
DecryptMessage
AcquireCredentialsHandleW
QueryContextAttributesW
FreeContextBuffer
EncryptMessage
ApplyControlToken
FreeCredentialsHandle

oledlg

ord8

dsound

ord3
ord1

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tex323
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mader3
Size: 676KB - Virtual size: 675KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e308a662c00314cbf27ab39b6969728

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

shlwapi

crypt32

iphlpapi

secur32

oledlg

dsound

Sections

.text Size: 58KB - Virtual size: 57KB

.tex323 Size: 24KB - Virtual size: 24KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 52KB - Virtual size: 95KB

.mader3 Size: 676KB - Virtual size: 675KB

.rsrc Size: 24KB - Virtual size: 23KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 58KB - Virtual size: 57KB

.tex323
Size: 24KB - Virtual size: 24KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 52KB - Virtual size: 95KB

.mader3
Size: 676KB - Virtual size: 675KB

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 4KB - Virtual size: 3KB