291f8ab787dbf450e1fa855a32746ef398a2183fce07ea76ba5f53334c0df9a4

Sharing

Copy URL Twitter E-mail

General

Target

291f8ab787dbf450e1fa855a32746ef398a2183fce07ea76ba5f53334c0df9a4
Size

257KB
MD5

92db2cd22501add07570ff3aede2ca50
SHA1

ab84e68e507c38019b3c7597d98f635daafdcf7a
SHA256

291f8ab787dbf450e1fa855a32746ef398a2183fce07ea76ba5f53334c0df9a4
SHA512

4378d9cb3aa255c79914d2a2cc1662e1b90560858c366d219bec443ca05ef79c4109d83a06d416bd8dc55b941ddad104f328ed9fe477ce8f4d1a3f98972311b0
SSDEEP

3072:z7VkehPJKHJFz5mmnStxOgC4eiyfzt0MR9hXWEd2+/3C9lIIU5CLxcJ/x4ObciCr:zDKHb5mYgkwK50sbmEd5yQIU5C0bciW

Score

N/A

Malware Config

Signatures

Files

291f8ab787dbf450e1fa855a32746ef398a2183fce07ea76ba5f53334c0df9a4
.exe windows x86

77235f320b5db96327ff29a24e7a1c6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowDC
PostMessageA
GetWindowRect
GetClientRect
InvalidateRect
EnableWindow
LoadImageA
ReleaseDC
EnumPropsExW
CheckMenuRadioItem
GetWindowTextLengthW
ShowCursor
SendNotifyMessageW
CharUpperA
DialogBoxIndirectParamW
DdePostAdvise
SetWindowRgn
SetMenuItemBitmaps
GetDialogBaseUnits
IsCharAlphaNumericA
BringWindowToTop
GetAltTabInfoA
GetTopWindow
DestroyWindow
CopyRect
OffsetRect
SendMessageA
GetParent
wsprintfA
DestroyCursor
SetCursor
CallWindowProcW
WinHelpW
SetActiveWindow
ReleaseCapture
SetCapture
SetParent
FindWindowExW
GetClassInfoW
UnregisterClassW
RegisterClassW
GetCursorPos
GetFocus
SetWindowPlacement
SystemParametersInfoW
FindWindowW
SetForegroundWindow
IntersectRect
DialogBoxParamW
CreateDialogIndirectParamW
CreateDialogParamW
LoadCursorW
LoadStringW
LoadMenuIndirectW
LoadMenuW
SetProcessDefaultLayout
LoadImageW
LoadIconW
LoadBitmapW
GetMenuStringW
ModifyMenuW
GetMenuItemInfoW
GetMenuState
DeleteMenu
CreateAcceleratorTableW
LoadAcceleratorsW
CharNextW
CharNextA
GetDlgItemTextW
IsDlgButtonChecked
GetAsyncKeyState
GetForegroundWindow
ShowWindow
GetSystemMenu
EnableMenuItem
SetDlgItemTextW
CheckDlgButton
CreateWindowExW
GetLastActivePopup
SetWindowsHookExW
MessageBoxW
GetClassNameW
CallNextHookEx
wsprintfW
SetWindowLongW
GetWindowLongW
InflateRect
GetWindowTextW
DrawTextW
DefWindowProcW
GetDlgItem
SetFocus
MapWindowPoints
MoveWindow
SetWindowTextW
SendMessageW
EndDialog
GetMessageW
TranslateMessage
DispatchMessageW
WaitForInputIdle
PostThreadMessageW
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetSysColor
EndPaint
GetDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
LoadCursorA
GetSysColorBrush
GetClassNameA
DestroyMenu
UnhookWindowsHookEx
GetSystemMetrics
ExitWindowsEx
LoadIconA
GetDesktopWindow
BeginPaint
IsIconic
DrawIcon
LoadBitmapA
MessageBoxA

urlmon

UrlMkSetSessionOption
HlinkSimpleNavigateToString
CoInternetParseUrl

shell32

SHGetFolderPathW
SHGetPathFromIDListW
SHGetFileInfoW
SHGetSpecialFolderPathW
SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteW
ShellExecuteA
DragQueryFileW
Shell_NotifyIconW
FindExecutableA
DragAcceptFiles
DuplicateIcon
SHBrowseForFolderW
DragQueryPoint
DoEnvironmentSubstW

ole32

CoCreateInstance
CoInitialize
CoUninitialize
OleUninitialize
OleInitialize
ReadFmtUserTypeStg
CoLockObjectExternal
IsAccelerator
CreateDataCache
CreateStreamOnHGlobal
StringFromGUID2

advapi32

SetThreadToken
RegQueryValueExW
RegEnumKeyW
ReadEventLogW
RegQueryValueW
RegQueryMultipleValuesW
LookupPrivilegeDisplayNameA
RegRestoreKeyW
DuplicateToken
FreeSid
SetFileSecurityA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
AdjustTokenPrivileges
RegOpenKeyExA
OpenProcessToken
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
LookupPrivilegeValueA
RegOpenKeyExW
RegOpenKeyW
RegSetValueW
RegDeleteKeyW
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW

gdi32

TextOutA
RectVisible
PtVisible
CreateCompatibleBitmap
GetObjectA
GetDIBits
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
ExtTextOutA
CreateFontIndirectA
CreateRectRgn
CombineRgn
SelectObject
StretchBlt
BitBlt
GetBkColor
CreateCompatibleDC
AddFontResourceExA
CreateDCA
CreateDIBSection
CreateDCW
ChoosePixelFormat
CreateDIBPatternBrush
CreateColorSpaceW
ColorCorrectPalette
AddFontResourceA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
CreateBitmap
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
GetObjectW
CreateFontIndirectW
GetTextExtentPoint32W
GetTextMetricsW
PatBlt
SelectPalette
RealizePalette
StretchDIBits
Rectangle
Polygon
MoveToEx
LineTo
ExtTextOutW
CreateDIBitmap
GetPixel
GetTextFaceW
GetDCOrgEx
GetTextExtentPointA
CreateFontW
CreatePen
CreateSolidBrush
CreatePatternBrush
CreateBitmapIndirect
GetNearestColor
GetTextCharset
GetStockObject
SetViewportExtEx

opengl32

glTexParameteri
glTexCoord3fv
glNormal3iv
glVertex2s
glPushAttrib
glGetPixelMapfv
glPixelTransferf

dbghelp

ImageNtHeader
SymFromName
SymGetLinePrev
SymGetSymFromName
SymGetOptions
SymGetModuleInfoW64
ImageDirectoryEntryToData

comctl32

_TrackMouseEvent

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

shlwapi

PathFindExtensionA
PathFindFileNameA

kernel32

SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
GetConsoleOutputCP
WriteConsoleW
SetErrorMode
CreateFileA
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
WritePrivateProfileStringA
GetThreadLocale
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentProcessId
CloseHandle
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GetEnvironmentStringsW
GlobalFree
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalDeleteAtom
LoadLibraryA
lstrcmpW
GlobalLock
GlobalUnlock
MulDiv
FreeLibrary
GetModuleFileNameW
SetLastError
GetModuleHandleA
GetProcAddress
lstrlenA
CompareStringA
GetVersion
MultiByteToWideChar
GetCurrentProcess
CreateProcessA
GetLastError
FormatMessageA
LocalFree
WaitForSingleObject
GetExitCodeProcess
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
Sleep
GetStdHandle
VirtualFree
HeapCreate
HeapDestroy
GetACP
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapSize
ExitProcess
RaiseException
GetStartupInfoA
GetProcessHeap
GetCommandLineA
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
SetEnvironmentVariableA
CompareStringW
GetTimeZoneInformation
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
LoadLibraryW
GetModuleHandleW
GetFileAttributesW
CreateProcessW
CreateThread
MoveFileW
FatalAppExitA
SetConsoleCtrlHandler
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetFileSize
CreateFileW
OutputDebugStringA
GetShortPathNameW
FindClose
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
LoadLibraryExW
QueryPerformanceFrequency
SetEndOfFile
VirtualQuery
FileTimeToSystemTime
GetDateFormatW
GetTimeFormatW
GetCurrentDirectoryW
ReleaseSemaphore
CreateSemaphoreW
GetSystemInfo
GetVersionExW
GlobalSize
FindNextFileW
IsBadReadPtr
GetNumberFormatW
EnumResourceLanguagesW
GetSystemDefaultLCID
SetThreadLocale
GetLocaleInfoW
GetUserDefaultUILanguage
FindResourceW
FindResourceExW
GetVolumeInformationW
SetFileTime
GetFileTime
CopyFileW
MoveFileExW
IsBadWritePtr
CreateDirectoryW
GetDiskFreeSpaceW
GetTempPathW
GetLocalTime
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetProfileIntW
GetProfileStringW
GetCommState
SetCommState
DeviceIoControl
GetFullPathNameW
lstrcmpiW
SetEvent
GetCommandLineW
GetWindowsDirectoryW
CreateEventW
FormatMessageW
RemoveDirectoryW
FindFirstFileW
SetFileAttributesW
DeleteFileW
InterlockedIncrement
InterlockedDecrement
GetSystemDirectoryA
GetModuleFileNameA
GetVersionExA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
SetThreadIdealProcessor
GlobalFindAtomA
EnumDateFormatsW
WriteConsoleA
GetOverlappedResult
GlobalMemoryStatus
FlushViewOfFile
VirtualAlloc
InitializeCriticalSectionAndSpinCount
GlobalAlloc

Sections

.text
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.johnny
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

77235f320b5db96327ff29a24e7a1c6b

Headers

DLL Characteristics

File Characteristics

Imports

user32

urlmon

shell32

ole32

advapi32

gdi32

opengl32

dbghelp

comctl32

version

shlwapi

kernel32

Sections

.text Size: 158KB - Virtual size: 157KB

.data Size: 6KB - Virtual size: 31KB

.johnny Size: 61KB - Virtual size: 61KB

.rsrc Size: 30KB - Virtual size: 29KB

.text
Size: 158KB - Virtual size: 157KB

.data
Size: 6KB - Virtual size: 31KB

.johnny
Size: 61KB - Virtual size: 61KB

.rsrc
Size: 30KB - Virtual size: 29KB