0b1deaa72a10b800d267ce7316e8ae58d1bb06a474d860095cf801b99bccb1dc

Sharing

Copy URL Twitter E-mail

General

Target

0b1deaa72a10b800d267ce7316e8ae58d1bb06a474d860095cf801b99bccb1dc
Size

855KB
MD5

81ff345f4775579d5a2fcdb68982c0d0
SHA1

31f746308c496ad6d99ad06727d6a33f735f592b
SHA256

0b1deaa72a10b800d267ce7316e8ae58d1bb06a474d860095cf801b99bccb1dc
SHA512

21b183d0d659b54a7320b3c5ba98bcb61ef4c7174e1183ea3ec4ea3d65fc1d374a176c83ba2342b94f8c9b8fd5bc42ed3d21b40e08f965a32407f084ffe1ade0
SSDEEP

24576:KNA7CJCaOknetXNM3248He4eHESx6GkwPzCjt7kkegBYh:VCDOketXf48+40dx3xPzCjJogB

Score

N/A

Malware Config

Signatures

Files

0b1deaa72a10b800d267ce7316e8ae58d1bb06a474d860095cf801b99bccb1dc
.exe windows x86

984754704aca0e4c4217b8e885ed23a4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageW
GlobalAlloc
Process32FirstW
QueryPerformanceCounter
GetCurrentThreadId
Thread32First
QueryDosDeviceW
HeapDestroy
CreateProcessW
VerSetConditionMask
CreateFileW
ResetEvent
CreateEventW
LoadLibraryW
MulDiv
LoadLibraryA
InterlockedDecrement
LoadResource
GetPrivateProfileIntW
InterlockedIncrement
OutputDebugStringW
GetConsoleCursorInfo
GetModuleHandleA
VirtualProtectEx
GetStdHandle
GetConsoleCP
ExitProcess
LocalAlloc
LoadLibraryExW
GetTickCount
SetUnhandledExceptionFilter
WriteFile
CreateToolhelp32Snapshot
GlobalUnlock
GetProcAddress
SizeofResource
SetCurrentDirectoryW
WaitForSingleObject
GetFileAttributesW
OpenEventW
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
SetErrorMode
InterlockedExchange
ReadFile
GetLastError
FindResourceExW
HeapSetInformation
HeapSize
GetProcessHeap
Process32NextW
GetVersionExW
WideCharToMultiByte
IsProcessorFeaturePresent
VerifyVersionInfoW
GetStartupInfoW
EnterCriticalSection
GetFullPathNameW
GetCurrentProcess
GlobalFree
HeapFree
DeleteCriticalSection
LockResource
FreeLibrary
LeaveCriticalSection
GlobalLock
TerminateProcess
GetFileAttributesExW
RaiseException
Thread32Next
FindResourceW
SetEndOfFile
GetSystemTimeAsFileTime
HeapReAlloc
WaitForMultipleObjects
GetExitCodeProcess
SetEvent
GetLogicalDriveStringsW
GetSystemDirectoryW
SetLastError
DuplicateHandle
DeviceIoControl
HeapAlloc
LocalFree
GetModuleFileNameW
OpenProcess
InterlockedCompareExchange
GetCurrentProcessId
CloseHandle
UnhandledExceptionFilter
SetFilePointer
GetFileSize
GetModuleHandleW
GetVersion
Sleep
MultiByteToWideChar

user32

DdeNameService
VkKeyScanW
GetMenuState
SetWindowPos
GetClientRect
DrawFocusRect
IsClipboardFormatAvailable
GetClipboardData
CreatePopupMenu
OffsetRect
ReleaseDC
ReleaseCapture
ShowWindow
MapWindowPoints
EndPaint
CallWindowProcW
PtInRect
IsWindow
DestroyAcceleratorTable
FillRect
CheckMenuRadioItem
GetUpdateRgn
GetWindowTextW
GetKeyState
GetCapture
GetWindowThreadProcessId
FindWindowExW
GetSystemMetrics
ScreenToClient
UnhookWindowsHookEx
DdeDisconnect
UnionRect
UnregisterClassW
SetMenu
GetDesktopWindow
CloseClipboard
ChangeDisplaySettingsW
CreateWindowExW
LoadImageW
GetUpdateRect
GetSubMenu
DestroyWindow
GetClipboardFormatNameW
ChildWindowFromPoint
GetFocus
OpenClipboard
GetMenuItemInfoW
CreateAcceleratorTableW
BringWindowToTop
GetMessageTime
GetClassNameW
ToUnicode
GetWindowLongW
CreateDialogParamW
EmptyClipboard
DrawStateW
DestroyMenu
GetScrollInfo
GetDC
DdeGetLastError
GetWindowDC
IsWindowEnabled
EnableMenuItem
AppendMenuW
ExitWindowsEx
RegisterClipboardFormatW
SetMenuItemInfoW
DrawEdge
SendMessageW
LoadIconW
IsDialogMessageW
DeferWindowPos
GetDoubleClickTime
InvalidateRect
EnumThreadWindows
DdeUninitialize
MoveWindow
MsgWaitForMultipleObjects
DdeConnect
DdeFreeStringHandle
CreateMenu
EnumWindows
TranslateAcceleratorW
DdeGetData
EnableWindow
GetMessageW
SetWindowTextW
GetWindowTextLengthW
PostQuitMessage
GetSysColor
IsIconic
CreateIconIndirect
SetTimer
RegisterWindowMessageW
SetWindowRgn
GetAsyncKeyState
InflateRect
GetClassInfoW
FlashWindow
GetActiveWindow
DdePostAdvise
EndDialog
PostMessageW
ScrollWindow
GetCursorPos
SetParent
WindowFromPoint
TrackPopupMenu
RedrawWindow
DestroyIcon
EnumClipboardFormats
CallNextHookEx
IsZoomed
LoadCursorFromFileW
PeekMessageW
ValidateRect
keybd_event
DdeQueryStringW
EndDeferWindowPos
DispatchMessageW
DrawMenuBar
ShowCaret
DrawTextW
IsWindowVisible
KillTimer
DestroyCursor
SetClipboardData
ModifyMenuW
SetScrollInfo
TranslateMessage
SetFocus
GetMessagePos
SetCapture
DdeCreateStringHandleW
SystemParametersInfoW
GetWindowRect
MessageBeep
GetWindow
InsertMenuItemW
DefWindowProcW
SetCursorPos
MessageBoxW
SetCursor
DdeClientTransaction
CopyRect
DrawIconEx
GetMenuItemCount
DdeInitializeW
GetSystemMenu
WaitForInputIdle
DdeFreeDataHandle
BeginPaint
DdeCreateDataHandle
HideCaret
ShowCursor
AdjustWindowRectEx
DrawIcon
GetIconInfo
RemoveMenu
EnumDisplaySettingsW
ClientToScreen
GetForegroundWindow
PostThreadMessageW
GetParent
SetForegroundWindow
SetWindowLongW
CheckMenuItem
CreateDialogIndirectParamW
SetWindowsHookExW
DrawFrameControl
LoadBitmapW
GetKeyboardState
BeginDeferWindowPos
InsertMenuW
UpdateWindow
GetMenu

gdi32

StretchDIBits
SelectPalette
CombineRgn
SaveDC
SetPolyFillMode
CreateBitmapIndirect
MoveToEx
CreateHatchBrush
GetTextColor
SetBkColor
SetWinMetaFileBits
GetTextExtentExPointW
CreatePatternBrush
RectInRegion
PtInRegion
GdiFlush
GetMetaFileBitsEx
CreateFontIndirectW
OffsetRgn
GetNearestPaletteIndex
MaskBlt
SetViewportOrgEx
GetBkColor
CreateRectRgn
CreateCompatibleBitmap
GetPixel
PatBlt
GetSystemPaletteEntries
ExcludeClipRect
GetEnhMetaFileHeader
GetDeviceCaps
GetStockObject
SelectClipRgn
CreatePalette
TextOutW
Pie
ExtFloodFill
CreateRectRgnIndirect
BitBlt
GetDIBits
CreateEnhMetaFileW
Ellipse
GetTextMetricsW
Polyline
Rectangle
SetBrushOrgEx
SelectObject
CreateBitmap
RealizePalette
SetBkMode
CreateSolidBrush
SetTextAlign
ExtCreatePen
GetClipBox
CloseEnhMetaFile
StretchBlt
GetCharABCWidthsW
SetWindowExtEx
GetEnhMetaFileW
DeleteObject
GetDIBColorTable
CreatePen
GetRegionData
RoundRect
GetRgnBox
SetStretchBltMode
PlayEnhMetaFile
ExtSelectClipRgn
RestoreDC
CreateDIBSection
GetWinMetaFileBits
SetMetaFileBitsEx
DeleteDC
CreateDIBitmap
SetViewportExtEx
CreateCompatibleDC
DeleteEnhMetaFile
Polygon
GetTextExtentPoint32W
SetMapMode
EqualRgn
GetObjectW
GetPaletteEntries
SetPixel
ExtCreateRegion
SetWindowOrgEx
Arc
CopyEnhMetaFileW
SetTextColor
CreatePolygonRgn
CreateICW
EnumFontFamiliesExW
SetROP2
LineTo

comdlg32

ChooseColorW
CommDlgExtendedError
ChooseFontW
GetSaveFileNameW
GetOpenFileNameW

advapi32

RegCreateKeyW
RegEnumKeyW
RegQueryInfoKeyW
AdjustTokenPrivileges
RegDeleteKeyW
RegSetValueExW
RegOpenKeyExA
RegEnumValueW
OpenProcessToken
RegQueryValueExA
LookupPrivilegeValueW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
GetUserNameW

shell32

DragQueryPoint
SHBrowseForFolderW
DragQueryFileW
DragAcceptFiles
ExtractIconW
SHGetIconOverlayIndexW
SHGetFolderPathW
SHGetFileInfoW
SHGetMalloc
ShellExecuteExW
SHFileOperationW
SHGetPathFromIDListW
ExtractIconExW
Shell_NotifyIconW
SHGetSpecialFolderLocation
DragFinish

oleaut32

SysStringLen
SysAllocString

shlwapi

wnsprintfA

winmm

joyGetNumDevs

oledlg

ord5

Sections

.text
Size: 489KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 259KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

984754704aca0e4c4217b8e885ed23a4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

oleaut32

shlwapi

winmm

oledlg

Sections

.text Size: 489KB - Virtual size: 488KB

.rdata Size: 88KB - Virtual size: 87KB

.data Size: 259KB - Virtual size: 311KB

.rsrc Size: 14KB - Virtual size: 14KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 489KB - Virtual size: 488KB

.rdata
Size: 88KB - Virtual size: 87KB

.data
Size: 259KB - Virtual size: 311KB

.rsrc
Size: 14KB - Virtual size: 14KB

.reloc
Size: 4KB - Virtual size: 3KB