411edc9b9e9abf44d99bfc62766d641345da2fbe72a3ef4471beec958018c598

Sharing

Copy URL Twitter E-mail

General

Target

411edc9b9e9abf44d99bfc62766d641345da2fbe72a3ef4471beec958018c598
Size

1.3MB
MD5

030092a576f295972c8a306558e94f02
SHA1

8605f6373009f62c8f3bd00da47d01de47f476e3
SHA256

411edc9b9e9abf44d99bfc62766d641345da2fbe72a3ef4471beec958018c598
SHA512

6261ff69e703f13cc0d15659e44f0419119eaab9e876585317aafb9e87717efce070f43fb6f5a3c59742d57f9e6c3f57aa473016f1907c229b9ec8e40497b3c8
SSDEEP

24576:4C7Uu4ikjt37OAjIRakU4WJVp5GQx2PTktRrW47wALB550T:4IU/URBU4WJVpEQxiTeRq47550T

Score

N/A

Malware Config

Signatures

Files

411edc9b9e9abf44d99bfc62766d641345da2fbe72a3ef4471beec958018c598
.exe windows x86

b6df3893951664be59e2510ed4609588

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
lstrlenA
GlobalFlags
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
GetSystemTimeAsFileTime
RtlUnwind
ExitProcess
WriteConsoleW
GetFileType
GetStdHandle
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
InitializeCriticalSection
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
SetEnvironmentVariableA
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetFileTime
FileTimeToLocalFileTime
SetErrorMode
WritePrivateProfileStringW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetVersion
GlobalGetAtomNameW
GetModuleHandleA
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GlobalFree
FormatMessageW
LocalFree
MulDiv
FreeLibrary
InterlockedDecrement
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
GetVersionExA
CreateDirectoryA
RemoveDirectoryA
OutputDebugStringA
SetFilePointer
CreateFileA
SetFileAttributesA
GetFileAttributesA
FindNextFileA
FindFirstFileA
GlobalAlloc
GlobalLock
GlobalUnlock
Sleep
GlobalMemoryStatusEx
SystemTimeToFileTime
GetLocalTime
GetProcAddress
LoadLibraryW
SetLastError
FileTimeToSystemTime
GetSystemDirectoryW
TerminateProcess
GetExitCodeProcess
OpenProcess
Process32NextW
Process32FirstW
GetCurrentProcessId
CreateToolhelp32Snapshot
WaitForSingleObject
TerminateThread
CreateThread
WriteFile
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetCurrentDirectoryA
InitializeCriticalSectionAndSpinCount
GetCurrentDirectoryA
MoveFileW
GetTickCount
GetModuleFileNameA
GetCurrentDirectoryW
DeleteFileW
ReadFile
GetFileSize
CreateFileW
SetFileAttributesW
CreateMutexA
OpenMutexA
DeleteFileA
CloseHandle
CreateDirectoryW
GetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
RaiseException
MultiByteToWideChar
GetModuleFileNameW
FreeResource
SizeofResource
GetLastError
WideCharToMultiByte
lstrlenW
LockResource
LoadResource
FindResourceW
GetEnvironmentStringsW
GetModuleHandleW

user32

GetMenuItemInfoW
GetSysColorBrush
UnregisterClassW
InflateRect
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
GetMessageW
TranslateMessage
ValidateRect
PostQuitMessage
IsRectEmpty
FindWindowW
SystemParametersInfoW
UnpackDDElParam
ReuseDDElParam
LoadMenuW
DestroyMenu
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorW
GetWindowThreadProcessId
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
TabbedTextOutW
FillRect
IsWindowEnabled
MoveWindow
IsDialogMessageW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
SetWindowsHookExW
CallNextHookEx
CopyAcceleratorTableW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
GetWindowTextLengthW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
GetMessageTime
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
UpdateWindow
GetMenu
MessageBoxW
GetClassInfoExW
GetClassInfoW
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
GetDlgCtrlID
SetWindowPos
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
UnhookWindowsHookEx
CharUpperW
DrawTextW
SetCursor
PtInRect
SetCapture
DrawIcon
IsIconic
LoadImageW
SetActiveWindow
InvalidateRgn
CharNextW
PostThreadMessageW
SetForegroundWindow
SetWindowLongW
GetNextDlgGroupItem
RegisterClipboardFormatW
MessageBeep
GetClassLongW
DrawFocusRect
ReleaseCapture
OffsetRect
DrawEdge
ClientToScreen
WindowFromPoint
GetCursorPos
GetCapture
GetWindowLongW
ReleaseDC
GetDC
SetWindowRgn
LoadBitmapW
InvalidateRect
EqualRect
IsWindow
IsWindowVisible
RedrawWindow
GetWindowRect
GetSysColor
DefWindowProcW
SetFocus
CallWindowProcW
SetWindowTextW
GetWindowTextW
ShowWindow
GetClientRect
CreateWindowExW
GetSystemMetrics
RegisterClassW
LoadCursorW
LoadIconW
DestroyWindow
PostMessageW
wsprintfW
GetParent
KillTimer
SendMessageW
SetTimer
EnableWindow
SetRect
GetMessagePos
UnregisterClassA

gdi32

ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
CreatePatternBrush
SetViewportExtEx
CreateEllipticRgn
LPtoDP
Ellipse
GetMapMode
GetRgnBox
GetBkColor
GetTextColor
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
PtVisible
GetWindowExtEx
GetViewportExtEx
SetMapMode
CreateFontW
CreateFontIndirectW
SetTextColor
SetBkMode
RectVisible
CreateBitmap
SetBkColor
SaveDC
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
SetStretchBltMode
SetDIBitsToDevice
RestoreDC
CreateDIBSection
SelectObject
DeleteObject
CreateBitmapIndirect
CreateDIBitmap
GetDeviceCaps
GetBitmapBits
GetTextExtentPoint32W
GetPixel
BitBlt
SetPixel
StretchBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
GetStockObject
ExtCreateRegion
DeleteDC
GetDIBits
CreateICW
GetObjectW

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegQueryValueExW
RegCloseKey

shell32

ShellExecuteW
DragFinish
DragQueryFileW
SHGetSpecialFolderPathW

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathFileExistsA
PathStripToRootW
PathIsUNCW
PathFindExtensionW
StrStrW
PathFindFileNameW

oledlg

OleUIBusyW

ole32

CoUninitialize
CoInitialize
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
CoTaskMemAlloc
CoGetClassObject
OleFlushClipboard
CoRegisterMessageFilter
CoCreateInstance

oleaut32

OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysStringLen
VariantChangeType
SysFreeString
SysAllocStringLen
VariantCopy
VariantClear
SysAllocString
VariantInit

winmm

timeGetTime

wininet

InternetCloseHandle
DeleteUrlCacheEntryW
InternetOpenUrlW
InternetOpenW
InternetReadFile
InternetQueryDataAvailable
HttpQueryInfoW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

d3d9

Direct3DCreate9

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

Exports

Exports

LZ4_compress
LZ4_compressBound
LZ4_compress_continue
LZ4_compress_default
LZ4_compress_destSize
LZ4_compress_fast
LZ4_compress_fast_continue
LZ4_compress_fast_extState
LZ4_compress_limitedOutput
LZ4_compress_limitedOutput_continue
LZ4_compress_limitedOutput_withState
LZ4_compress_withState
LZ4_create
LZ4_createStream
LZ4_createStreamDecode
LZ4_decompress_fast
LZ4_decompress_fast_continue
LZ4_decompress_fast_usingDict
LZ4_decompress_fast_withPrefix64k
LZ4_decompress_safe
LZ4_decompress_safe_continue
LZ4_decompress_safe_partial
LZ4_decompress_safe_usingDict
LZ4_decompress_safe_withPrefix64k
LZ4_freeStream
LZ4_freeStreamDecode
LZ4_loadDict
LZ4_resetStream
LZ4_resetStreamState
LZ4_saveDict
LZ4_setStreamDecode
LZ4_sizeofState
LZ4_sizeofStreamState
LZ4_slideInputBuffer
LZ4_uncompress
LZ4_uncompress_unknownOutputSize
LZ4_versionNumber
LZ4_versionString

Sections

.text
Size: 628KB - Virtual size: 625KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 452KB - Virtual size: 449KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b6df3893951664be59e2510ed4609588

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

winmm

wininet

version

d3d9

oleacc

Exports

Exports

Sections

.text Size: 628KB - Virtual size: 625KB

.rdata Size: 152KB - Virtual size: 149KB

.data Size: 28KB - Virtual size: 108KB

.rsrc Size: 452KB - Virtual size: 449KB

.reloc Size: 60KB - Virtual size: 57KB

.text
Size: 628KB - Virtual size: 625KB

.rdata
Size: 152KB - Virtual size: 149KB

.data
Size: 28KB - Virtual size: 108KB

.rsrc
Size: 452KB - Virtual size: 449KB

.reloc
Size: 60KB - Virtual size: 57KB