0812e08a7393d0ea8ce84fe3f8b858ad9b505aff84cf1e53834692d9b3478ccc

Sharing

Copy URL Twitter E-mail

General

Target

0812e08a7393d0ea8ce84fe3f8b858ad9b505aff84cf1e53834692d9b3478ccc
Size

2.0MB
MD5

69c8b386cd91d1e39fea6854ca790f10
SHA1

4f22d66f9e377d6548210317b47bfb7657c281b4
SHA256

0812e08a7393d0ea8ce84fe3f8b858ad9b505aff84cf1e53834692d9b3478ccc
SHA512

59fecc1164865381a568f4266cd520284ec294b0094d878cae9f956c7d0db03c5a637d8f0e057df5861cfbe2edb6ca832c6731d139eb71535bc36f1ac138ac4b
SSDEEP

49152:5kbLMgaKTR/St8K/rQ+qX216k4xIUi9hOyiUMBcZo:5k/MgLTR/StP/s0FJr9hOyiUMBYo

Score

N/A

Malware Config

Signatures

Files

0812e08a7393d0ea8ce84fe3f8b858ad9b505aff84cf1e53834692d9b3478ccc
.exe windows x86

2ea08ac5971231f3e9bad594565a3986

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange
GetSystemInfo
GetTempFileNameW
GetLogicalDriveStringsW
CopyFileW
GetTempPathW
GetCurrentDirectoryW
MoveFileW
SetCurrentDirectoryW
QueryDosDeviceW
SetEndOfFile
FlushFileBuffers
GetSystemTimeAsFileTime
FileTimeToSystemTime
InitializeCriticalSectionAndSpinCount
FileTimeToLocalFileTime
GetUserDefaultLangID
GetComputerNameA
GetSystemDirectoryW
GetStdHandle
WaitForMultipleObjects
VirtualFree
VirtualAlloc
SetEvent
ReleaseSemaphore
ResetEvent
CreateSemaphoreW
CreateEventW
lstrcpyW
lstrcatW
SetFileAttributesW
DeviceIoControl
CreateFileA
LoadLibraryA
OpenMutexW
OpenEventW
OpenSemaphoreW
GetCurrentProcessId
ExpandEnvironmentStringsW
CreateProcessW
GetSystemTime
SetUnhandledExceptionFilter
SetEnvironmentVariableA
CompareStringW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
GetCurrentDirectoryA
GetFullPathNameA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
GetStartupInfoA
SetHandleCount
GetModuleFileNameA
IsValidCodePage
GetOEMCP
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
FindFirstFileA
GetDriveTypeA
GetCPInfo
LCMapStringW
LCMapStringA
ExitProcess
RtlUnwind
GetStartupInfoW
VirtualQuery
GetModuleHandleA
VirtualProtect
GetFileType
SetStdHandle
ExitThread
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
FormatMessageA
ExpandEnvironmentStringsA
SleepEx
IsProcessorFeaturePresent
GetThreadLocale
GetLocaleInfoA
GetACP
GetVersionExA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
ProcessIdToSessionId
LocalFree
LocalAlloc
OpenProcess
RemoveDirectoryW
FindClose
CreateDirectoryW
GetFileAttributesW
WriteFile
GetTickCount
SetFilePointer
GetCurrentThread
SetThreadPriority
LoadLibraryExW
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
DeleteCriticalSection
MapViewOfFileEx
MapViewOfFile
CreateFileMappingW
CreateThread
UnmapViewOfFile
TerminateThread
MoveFileExW
Sleep
GetDiskFreeSpaceExW
GetDriveTypeW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
WaitForSingleObject
DeleteFileW
GetPrivateProfileIntW
RaiseException
SetLastError
FlushInstructionCache
GetPrivateProfileStringW
GetWindowsDirectoryW
FreeResource
CreateFileW
GetFileSize
ReadFile
GetCurrentThreadId
InitializeCriticalSection
GetVersionExW
OutputDebugStringW
GetLocalTime
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
CloseHandle
GetCurrentProcess
FreeLibrary
GetModuleHandleW
GetLastError
WideCharToMultiByte
lstrlenW
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
lstrlenA
MultiByteToWideChar
InterlockedExchange
GetProcAddress
LoadLibraryW
CompareStringA

user32

LoadBitmapW
CharNextW
UpdateWindow
BringWindowToTop
FindWindowExW
DefWindowProcW
SetWindowLongW
SetRectEmpty
SendMessageW
CreateWindowExW
LoadCursorW
SetCursor
InflateRect
PtInRect
RegisterWindowMessageW
UnregisterClassA
CharUpperW
SetRect
UpdateLayeredWindow
ShowWindow
GetWindowTextW
DrawIconEx
SetTimer
DestroyIcon
DrawFrameControl
KillTimer
IntersectRect
IsRectEmpty
EqualRect
DrawTextW
CharLowerW
IsWindow
IsWindowVisible
SetForegroundWindow
LoadIconW
DestroyWindow
CallWindowProcW
GetClassInfoExW
PostThreadMessageW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
GetDlgCtrlID
PostMessageW
GetActiveWindow
GetDesktopWindow
IsWindowEnabled
EnableWindow
GetWindowThreadProcessId
GetForegroundWindow
SystemParametersInfoW
SetWindowPos
AttachThreadInput
SetActiveWindow
GetFocus
IsChild
GetParent
IsDialogMessageW
ClientToScreen
OffsetRect
CopyRect
GetWindow
GetWindowRect
GetWindowLongW
GetClientRect
MapWindowPoints
GetDlgItem
BeginPaint
EndPaint
MonitorFromWindow
GetMonitorInfoW
SetCapture
ReleaseCapture
GetCursorPos
SetFocus
GetNextDlgTabItem
ScreenToClient
MoveWindow
GetKeyState
WindowFromPoint
GetScrollPos
GetDC
ReleaseDC
RegisterClassExW
InvalidateRect
SetWindowTextW
FindWindowW
GetSystemMetrics
GetWindowTextLengthW
SetWindowRgn
LoadImageW

gdi32

GetCurrentObject
TextOutW
GetTextColor
SelectClipRgn
LineTo
RoundRect
GetClipRgn
RestoreDC
OffsetRgn
ExtSelectClipRgn
CombineRgn
CreateRectRgn
GetViewportOrgEx
SaveDC
RectInRegion
MoveToEx
CreatePen
GetTextExtentPoint32W
SelectObject
SetViewportOrgEx
DeleteObject
SetTextColor
StretchBlt
CreateBitmap
CreateCompatibleBitmap
BitBlt
SetBkColor
ExtTextOutW
CreateRoundRectRgn
CreateRectRgnIndirect
GetStockObject
GetObjectW
DeleteDC
CreateCompatibleDC
CreateDIBSection
GetDeviceCaps
Rectangle
SetStretchBltMode
GetTextMetricsW
CreateFontW
SetBkMode
CreateFontIndirectW

advapi32

RegSetValueExW
RegOpenKeyW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CreateProcessAsUserW
SetTokenInformation
DuplicateTokenEx
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
RegDeleteValueW
RegDeleteKeyW

shell32

SHGetSpecialFolderPathW
SHFileOperationW
SHGetFolderPathW
Shell_NotifyIconW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW

ole32

CoUninitialize
CoSetProxyBlanket
CoCreateGuid
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
CreateStreamOnHGlobal
CoInitializeEx

oleaut32

VarUI4FromStr
SysFreeString
SysAllocStringLen
SysStringLen
VariantInit
VariantCopy
VariantClear
SysAllocString

shlwapi

StrToIntA
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW
PathAddBackslashW
PathFileExistsW
PathAppendW
StrToIntW

comctl32

InitCommonControlsEx
_TrackMouseEvent

msimg32

AlphaBlend

gdiplus

GdipGetImagePixelFormat
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStream
GdipCloneBitmapArea
GdipCreateBitmapFromHBITMAP
GdipFree
GdipBitmapUnlockBits
GdipImageRotateFlip
GdipDrawImagePointsRectI
GdipLoadImageFromStream
GdipPrivateAddFontFile
GdipGetFontCollectionFamilyCount
GdipAlloc
GdipGetFontCollectionFamilyList
GdipDeleteFontFamily
GdipNewPrivateFontCollection
GdipBitmapLockBits
GdipDeletePrivateFontCollection
GdipCloneFontFamily
GdipDrawLinesI
GdipCreateFromHDC
GdipDeleteGraphics
GdipCreateSolidFill
GdipFillRectangleI
GdipCreatePen1
GdiplusShutdown
GdipCloneBrush
GdipDeleteBrush
GdipCreateLineBrushI
GdiplusStartup
GdipDrawString
GdipCreateStringFormat
GdipSetStringFormatAlign
GdipMeasureString
GdipFillRectangle
GdipDeleteFont
GdipCreateFont
GdipCreateFontFromLogfontW
GdipSetStringFormatLineAlign
GdipSetStringFormatFlags
GdipSetStringFormatTrimming
GdipCloneImage
GdipLoadImageFromFile
GdipDisposeImage
GdipGetImageHeight
GdipGetImageWidth
GdipSetInterpolationMode
GdipDrawImageRectI
GdipSetTextRenderingHint
GdipSetCompositingQuality
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipSetPixelOffsetMode
GdipGetFamily
GdipAddPathStringI
GdipGetFontSize
GdipFillPath
GdipGraphicsClear
GdipDrawImageI
GdipAddPathRectangleI
GdipSetPenDashStyle
GdipAddPathPieI
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetClipPath
GdipSetImageAttributesColorMatrix
GdipDrawImageRectRectI
GdipDrawImageRectRect
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipResetWorldTransform
GdipDrawPath
GdipClosePathFigure
GdipAddPathArcI
GdipDeletePath
GdipCreatePath
GdipDrawRectangleI
GdipDrawLine
GdipSetSmoothingMode
GdipSetPenMode
GdipSetPenStartCap
GdipSetPenEndCap
GdipDeletePen
GdipDeleteStringFormat

wtsapi32

WTSEnumerateSessionsW
WTSFreeMemory

psapi

GetProcessImageFileNameW
GetModuleFileNameExW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

rasapi32

RasEnumConnectionsW

iphlpapi

IcmpSendEcho
IcmpCloseHandle
IcmpCreateFile
GetAdaptersInfo

Sections

.text
Size: 780KB - Virtual size: 778KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 164KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 908KB - Virtual size: 908KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2ea08ac5971231f3e9bad594565a3986

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

gdiplus

wtsapi32

psapi

version

rasapi32

iphlpapi

Sections

.text Size: 780KB - Virtual size: 778KB

.rdata Size: 164KB - Virtual size: 161KB

.data Size: 28KB - Virtual size: 46KB

.rsrc Size: 908KB - Virtual size: 908KB

.text
Size: 780KB - Virtual size: 778KB

.rdata
Size: 164KB - Virtual size: 161KB

.data
Size: 28KB - Virtual size: 46KB

.rsrc
Size: 908KB - Virtual size: 908KB