baff4fc0075470385d671e8d46d3ae3c9a04bab8bb0a4151f966f3b9af915442

Sharing

Copy URL Twitter E-mail

General

Target

baff4fc0075470385d671e8d46d3ae3c9a04bab8bb0a4151f966f3b9af915442
Size

810KB
MD5

8276c35f3f3039851530124f1a573120
SHA1

2567a611ffcbe02a2ff71298b8ab7a3541e7900a
SHA256

baff4fc0075470385d671e8d46d3ae3c9a04bab8bb0a4151f966f3b9af915442
SHA512

75543250256ad6014645fae693e95880ac697d40c35d6e8e5c40df2353180e70f5682106fc9448fd32365cc368683951f55c53aafeaa5e506cd2f289ab0ec599
SSDEEP

12288:ErVVcEvT2p/vpIebkm78C4PGDu53A5qWrsYWJhcm2VPu+:yvg/RI/mGvdSsrJ8

Score

N/A

Malware Config

Signatures

Files

baff4fc0075470385d671e8d46d3ae3c9a04bab8bb0a4151f966f3b9af915442
.exe windows x86

e1aabb7768b8db0c3fe007c5c07a8244

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
EventWrite
EventRegister
EventUnregister
RegCreateKeyExW
RegSetValueExW

kernel32

GetCurrentProcess
IsWow64Process
GetProcessHeap
HeapAlloc
HeapFree
CreateMutexW
InterlockedExchange
LocalFree
InterlockedCompareExchange
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
CloseHandle
VerSetConditionMask
VerifyVersionInfoW
MulDiv
GetTickCount64
GetLastError
Sleep

gdi32

CreateCompatibleDC
SetBkColor
CreatePen
Polyline
CreateCompatibleBitmap
SetStretchBltMode
StretchBlt
CreateFontIndirectW
DeleteObject
GetObjectW
GetDeviceCaps
DeleteDC
BitBlt
GdiAlphaBlend
SelectObject
GetStockObject
GdiSetBatchLimit
SetTextColor
PatBlt
CreateSolidBrush
GetTextMetricsW
SetBkMode

user32

IsDlgButtonChecked
CheckRadioButton
EnumDisplaySettingsW
ChangeDisplaySettingsExW
EnumDisplayDevicesW
GetSysColor
DestroyWindow
CreateWindowExW
CopyImage
LoadBitmapW
DrawTextW
CheckDlgButton
MapWindowPoints
FillRect
RedrawWindow
SystemParametersInfoW
SetDlgItemTextW
MapDialogRect
GetClientRect
GetDlgItem
SetFocus
IsCharAlphaNumericW
EnableWindow
ShowWindow
DialogBoxParamW
EndDialog
SetTimer
MessageBoxW
FindWindowW
SetForegroundWindow
LoadCursorW
RegisterClassExW
DrawFocusRect
BeginPaint
GetSysColorBrush
FrameRect
EndPaint
TrackMouseEvent
DefWindowProcW
SendMessageW
InvalidateRect
GetFocus
SetWindowTextW
SetWindowLongW
GetParent
PostMessageW
SendDlgItemMessageW
GetDC
LoadStringW
ReleaseDC
GetProcessDefaultLayout
SendMessageTimeoutW
SetWindowPos
GetWindowRect
PtInRect
GetSystemMetrics
GetWindowLongW
KillTimer

msvcrt

__set_app_type
__p__fmode
memset
_wtoi
_vsnwprintf
_unlock
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
__dllonexit
_lock
_onexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler4_common
_controlfp
__p__commode
_ismbblead
_XcptFilter
_exit
_purecall
realloc
free
_ftol2
wcschr
_CxxThrowException
??0exception@@QAE@XZ
?what@exception@@UBEPBDXZ
_cexit
__getmainargs
malloc
_callnewh
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
_ftol2_sse

ntdll

WinSqmAddToStream
WinSqmIncrementDWORD

setupapi

SetupDiGetClassDevsW
SetupDiOpenDeviceInterfaceW
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW

uxtheme

IsThemeActive
GetThemeSysColor
OpenThemeData
GetThemeFont
GetThemeColor
GetThemeSysFont
CloseThemeData
DrawThemeParentBackground

oleacc

CreateStdAccessibleObject
LresultFromObject

ole32

StringFromGUID2
CoUninitialize
CoCreateInstance
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoGetObject

oleaut32

SafeArrayGetElement
SysAllocString
SysFreeString
SafeArrayGetUBound
SafeArrayGetLBound
VariantInit
VariantClear

comctl32

PropertySheetW
ord381
InitCommonControlsEx

dwrite

DWriteCreateFactory

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vmp0
Size: 508KB - Virtual size: 1.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e1aabb7768b8db0c3fe007c5c07a8244

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

ntdll

setupapi

uxtheme

oleacc

ole32

oleaut32

comctl32

dwrite

Sections

.text Size: 60KB - Virtual size: 59KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 236KB - Virtual size: 236KB

.reloc Size: 4KB - Virtual size: 3KB

.vmp0 Size: 508KB - Virtual size: 1.6MB

.text
Size: 60KB - Virtual size: 59KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 236KB - Virtual size: 236KB

.reloc
Size: 4KB - Virtual size: 3KB

.vmp0
Size: 508KB - Virtual size: 1.6MB