f36f6bcec84690e62002019070df8002aeef287d15b6db8ab178e3be99b6f5ff

Sharing

Copy URL Twitter E-mail

General

Target

f36f6bcec84690e62002019070df8002aeef287d15b6db8ab178e3be99b6f5ff
Size

828KB
MD5

44eaf8dbfeef2d5d8c9239e38accf9cd
SHA1

832957abeeaeb9f2d70984af3003862cfdd2b04e
SHA256

f36f6bcec84690e62002019070df8002aeef287d15b6db8ab178e3be99b6f5ff
SHA512

c8c8ce549b0b7715e3e906c56f13d0d421b3f84e5eb0953af2baff19e4dfa094ef36852c89bfb52f81b23e9a69a695c880633a3ca137631df796696cc1dd1e3d
SSDEEP

12288:cLZc0xU8LFUBOuvbXhcM2XS2MKv28rb0XrdNdTNK5YS9PMM2MM:KwOuvVcM2Xb3v2ubmXTsYSJMM2MM

Score

N/A

Malware Config

Signatures

Files

f36f6bcec84690e62002019070df8002aeef287d15b6db8ab178e3be99b6f5ff
.exe windows x86

370150b00818854d08dc44fb57d1a189

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetStringTypeA
GetStringTypeW
GetDriveTypeA
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
FreeLibrary
GetProcAddress
LoadLibraryW
GetWindowsDirectoryW
lstrcpyW
WinExec
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetStartupInfoA
GetStdHandle
SetHandleCount
GetCommandLineA
SetUnhandledExceptionFilter
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
HeapReAlloc
GetFileType
SetStdHandle
ExitThread
CreateThread
HeapFree
HeapAlloc
RaiseException
GetTimeZoneInformation
RtlUnwind
ExitProcess
FindResourceA
GlobalAddAtomA
GetProfileStringA
EnumResourceLanguagesW
EnumResourceNamesW
EnumResourceTypesW
LocalSize
OpenProcess
LoadLibraryExW
LoadLibraryExA
VirtualQuery
VirtualProtect
GetSystemInfo
GetExitCodeThread
TerminateThread
ResetEvent
GetVersionExW
GetCurrentProcessId
GetCommandLineW
lstrlenW
lstrcatW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetSystemTime
GetLastError
TerminateProcess
Sleep
MultiByteToWideChar
ReadFile
CloseHandle
CreateProcessW
GetStartupInfoW
CreatePipe
DeleteFileW
GetLocalTime
WideCharToMultiByte
GetTempPathW
FindFirstFileW
GetTempFileNameW
LoadResource
FindResourceW
LockResource
GlobalFree
GlobalUnlock
GlobalLock
GetModuleHandleW
GetModuleFileNameW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
GetCurrentThreadId
GetVersion
lstrlenA
LoadLibraryA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentDirectoryW
SetErrorMode
GetFileTime
GetFileSize
GetFileAttributesW
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SizeofResource
GlobalFlags
FindNextFileW
SetLastError
MulDiv
GetTickCount
CreateEventW
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
lstrcmpW
GlobalAlloc
lstrcmpiA
GetCurrentThread
lstrcmpiW
GetThreadLocale
GetFullPathNameW
lstrcpynW
GetVolumeInformationW
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
CreateFileW
GetCurrentProcess
DuplicateHandle
lstrcmpA
FormatMessageW
LocalFree
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA

user32

CopyAcceleratorTableW
CharNextW
PostThreadMessageW
DestroyIcon
GetMenuStringW
GetWindowThreadProcessId
WaitMessage
ReleaseCapture
SetCapture
GetSysColorBrush
GetDesktopWindow
GetClassNameW
WindowFromPoint
GrayStringW
DrawTextW
TabbedTextOutW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
DestroyMenu
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatW
SetRect
TranslateMessage
ValidateRect
GetCursorPos
PostQuitMessage
CharUpperW
EnableWindow
GetWindowLongW
GetWindow
SendMessageW
LoadIconW
GetSystemMetrics
GetWindowRect
AppendMenuW
LoadStringW
wvsprintfW
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CheckMenuItem
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
GetNextDlgGroupItem
SetRectEmpty
LoadMenuW
GetMessageW
UpdateWindow
SendDlgItemMessageW
SendDlgItemMessageA
GetSystemMenu
DrawIcon
GetClientRect
IsIconic
LoadBitmapW
KillTimer
SetWindowLongW
MessageBeep
SetTimer
InvalidateRect
PtInRect
ScreenToClient
GetMessagePos
SetCursor
GetSysColor
IsWindow
InflateRect
ReleaseDC
GetDC
GetParent
CopyIcon
LoadCursorW
RegisterWindowMessageW
PostMessageW
MessageBoxW
IsWindowEnabled
GetDlgItem
DestroyWindow
CreateDialogIndirectParamW
UnregisterClassW
GetWindowTextLengthA
HideCaret
ShowCaret
EnableMenuItem
MapWindowPoints
PeekMessageW
DispatchMessageW
GetFocus
SetFocus
AdjustWindowRectEx
EqualRect
CopyRect
IsWindowVisible
GetScrollInfo
SetScrollInfo
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpW
wsprintfW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthW
GetWindowTextW
GetDlgCtrlID
ExcludeUpdateRgn
GetWindowTextA
GetKeyState
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoW
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
DrawEdge
SendMessageTimeoutW
GetClassLongW
DrawIconEx
IsRectEmpty
FillRect
SetWindowLongA
GetWindowLongA
IsWindowUnicode
EnumWindows
EnableScrollBar
CallWindowProcA
DefWindowProcA
DefFrameProcA
DefFrameProcW
DefDlgProcA
DefDlgProcW
DefMDIChildProcA
DefMDIChildProcW
RegisterClassA
DrawFrameControl
DrawMenuBar
TrackPopupMenuEx
DrawStateW
SetClassLongW
SetWindowRgn
GetIconInfo
GetMenuItemInfoW
SetMenuDefaultItem
GetMenuDefaultItem
DrawFocusRect
GetDoubleClickTime
LoadImageW
CreateIconFromResourceEx
CreateIconIndirect
LookupIconIdFromDirectoryEx
GetPropA
SetPropA
GetClassNameA
SendMessageA
SetWindowsHookExA
RemovePropA
CharNextA
GetClassInfoA
DrawTextA

gdi32

GetObjectW
CreateFontIndirectW
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
GetClipRgn
ExtSelectClipRgn
GetObjectType
GetViewportExtEx
GetWindowExtEx
CreatePen
GetStockObject
CreateSolidBrush
PtVisible
RectVisible
TextOutW
Escape
GetTextMetricsW
GetTextColor
GetBkColor
LPtoDP
GetTextExtentPoint32W
BitBlt
SelectObject
CreateCompatibleDC
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
PatBlt
CreateRectRgnIndirect
GetDeviceCaps
GetMapMode
DeleteObject
CreatePatternBrush
CombineRgn
CreateRectRgn
ExtTextOutW
DPtoLP
DeleteDC
SaveDC
GetTextCharsetInfo
GetPixel
CreateCompatibleBitmap
OffsetRgn
CreateDIBSection
StretchBlt
SetBrushOrgEx
Polygon
CreatePalette
CreateDIBitmap
GetDIBits
ExtTextOutA
GetTextExtentPointA
StretchDIBits
RestoreDC
SelectPalette
SetBkMode
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx

comdlg32

GetSaveFileNameW
GetFileTitleW
GetOpenFileNameW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegQueryValueW

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW

comctl32

ImageList_Destroy
ord17
FlatSB_GetScrollProp
ImageList_GetIcon
_TrackMouseEvent
ImageList_GetBkColor
ImageList_GetImageInfo
ImageList_DrawIndirect
ImageList_GetIconSize
ImageList_Draw
ImageList_GetImageCount
ImageList_Create
ImageList_Add

oledlg

OleUIBusyW

ole32

CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
OleFlushClipboard
CoGetClassObject
CoRegisterMessageFilter
CoCreateInstance
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoRevokeClassObject

olepro32

ord253

oleaut32

SysFreeString
SysStringByteLen
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen
OleLoadPicturePath
VariantCopy

winmm

PlaySoundW

imagehlp

ImageDirectoryEntryToData

Sections

.text
Size: 500KB - Virtual size: 499KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

370150b00818854d08dc44fb57d1a189

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

winmm

imagehlp

Sections

.text Size: 500KB - Virtual size: 499KB

.rdata Size: 96KB - Virtual size: 93KB

.data Size: 132KB - Virtual size: 150KB

.rsrc Size: 96KB - Virtual size: 92KB

.text
Size: 500KB - Virtual size: 499KB

.rdata
Size: 96KB - Virtual size: 93KB

.data
Size: 132KB - Virtual size: 150KB

.rsrc
Size: 96KB - Virtual size: 92KB