fed3a6a2bfb9e4a7404250dbf38cbba42411b89c67511a00ad3eb923926d488a

Sharing

Copy URL Twitter E-mail

General

Target

fed3a6a2bfb9e4a7404250dbf38cbba42411b89c67511a00ad3eb923926d488a
Size

1.3MB
MD5

05340c70eeb207b9bc818cba20f316e0
SHA1

577fc91d48a8da3f3d825fa403ae9d0836985101
SHA256

fed3a6a2bfb9e4a7404250dbf38cbba42411b89c67511a00ad3eb923926d488a
SHA512

718a96609b8ca7853c4bad8a9081355b9567bfdfb99492aeb869cdaa5078698f84b4fd8465404dfcd8139748569591bc7518903a61ccb36af092e215f2540391
SSDEEP

12288:AFiy9zmNIsHa/ldv7Dd4ffjFQdHj4PaRM90zwuMw:AFiy9zmNId/SXjFQdHjRijuMw

Score

N/A

Malware Config

Signatures

Files

fed3a6a2bfb9e4a7404250dbf38cbba42411b89c67511a00ad3eb923926d488a
.exe windows x86

9a2f68e4faa26597a6f5b32beffb9c81

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNativeSystemInfo
FindResourceA
LoadResource
LockResource
SizeofResource
FreeResource
RtlMoveMemory
lstrlenW
GlobalSize
LocalSize
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
IsBadReadPtr
GetPrivateProfileStringA
GetProcessHeap
WriteFile
CreateFileA
ReadFile
GetFileSize
GetModuleFileNameA
GetUserDefaultLCID
FormatMessageA
Sleep
SetFilePointer
WaitForSingleObject
CreateProcessA
GetStartupInfoA
FreeLibrary
LoadLibraryA
LCMapStringA
CreateThread
OpenThread
TerminateThread
GetModuleHandleW
CloseHandle
SetWaitableTimer
CreateWaitableTimerW
HeapFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
MultiByteToWideChar
WideCharToMultiByte
VirtualFree
VirtualAlloc
GetProcAddress
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateProcess
DeleteFileA
OpenProcess

user32

LoadCursorW
LookupIconIdFromDirectoryEx
ReleaseDC
PtInRect
SetTimer
LoadCursorFromFileW
GetPropA
IsIconic
IsZoomed
CreateIconFromResourceEx
PostMessageW
CopyImage
MsgWaitForMultipleObjects
SetForegroundWindow
DefWindowProcW
CreateWindowExW
SendMessageW
SystemParametersInfoA
SetWindowPos
SetCaretPos
GetCursorPos
GetWindowRect
DispatchMessageW
TrackMouseEvent
ShowWindow
BeginPaint
EndPaint
SetCapture
GetFocus
SetFocus
SetWindowLongW
SetPropA
GetDC
GetDesktopWindow
PeekMessageA
GetMessageA
DispatchMessageA
wsprintfA
MessageBoxA
RemovePropA
GetSystemMetrics
MoveWindow
SetWindowRgn
GetParent
TranslateMessage
GetMessageW
CallWindowProcW
IsWindow
SetCursor
SendMessageA
KillTimer
GetAsyncKeyState
IntersectRect
InvalidateRect
UpdateLayeredWindow
ReleaseCapture
GetClassNameW
GetWindowTextW
RegisterClassExW
GetClassLongW

gdi32

CreateDIBSection
BitBlt
SelectObject
CreateCompatibleBitmap
StretchBlt
GetObjectA
GetDIBits
CreateRectRgn
CreateRoundRectRgn
DeleteDC
DeleteObject
CreateCompatibleDC

wininet

InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle

advapi32

CryptDestroyHash
CryptCreateHash
CryptReleaseContext
CryptGetHashParam
CryptAcquireContextA
CryptHashData

ole32

CLSIDFromProgID
CoCreateInstance
OleRun
StringFromGUID2
CLSIDFromString
CreateStreamOnHGlobal
CoInitialize
CoUninitialize

olepro32

ord251

oleaut32

SafeArrayGetElemsize
VariantClear
VariantChangeType
VariantInit
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysFreeString
VarR8FromCy
VarR8FromBool
LoadTypeLi
LHashValOfNameSys
RegisterTypeLi
SafeArrayCreate
SafeArrayDestroy

shlwapi

PathFindExtensionA
PathFindFileNameA
PathFileExistsA

gdiplus

GdipSetPenDashStyle
GdipDrawPath
GdipDeletePen
GdiplusStartup
GdipCreateImageAttributes
GdipSetClipRegion
GdipSetClipRect
GdipDrawRectangle
GdipResetClip
GdipGetTextRenderingHint
GdipSetTextRenderingHint
GdipDeleteGraphics
GdipCreateFromHDC
GdipGetSmoothingMode
GdipSetSmoothingMode
GdipGetImagePixelFormat
GdipCloneBitmapArea
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageRect
GdipCreateStringFormat
GdipSetStringFormatHotkeyPrefix
GdipDeleteStringFormat
GdipCreateLineBrushFromRect
GdipFillRectangle
GdipMeasureString
GdipGetFontHeight
GdipDrawString
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipSetCompositingQuality
GdipSetInterpolationMode
GdipSetStringFormatAlign
GdipSetStringFormatTrimming
GdipCreateSolidFill
GdipGetStringFormatAlign
GdipGetStringFormatTrimming
GdipGetStringFormatFlags
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipSaveImageToStream
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipSetStringFormatMeasurableCharacterRanges
GdipCreateRegion
GdipMeasureCharacterRanges
GdipGetRegionBounds
GdipDeleteRegion
GdipCreateRegionHrgn
GdipCreateLineBrush
GdipCreatePen2
GdipFillPolygon
GdipDrawPolygon
GdipCreatePathGradientFromPath
GdipGetCompositingQuality
GdipCreateHBITMAPFromBitmap
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectRect
GdipGraphicsClear
GdipDeleteFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipCreateFont
GdipGetFontStyle
GdipGetFontSize
GdipGetFamilyName
GdipClosePathFigure
GdipAddPathArc
GdipCreatePath
GdipDeletePath
GdipDeleteBrush
GdipFillPath
GdipSetStringFormatFlags
GdipDisposeImage
GdipLoadImageFromStream

shell32

ShellExecuteA
Shell_NotifyIconW

imm32

ImmAssociateContext
ImmGetContext

msvcrt

??2@YAPAXI@Z
sprintf
_stricmp
atoi
_ftol
tolower
_CIfmod
toupper
strncmp
strchr
strncpy
modf
floor
_CIpow
free
__CxxFrameHandler
strtod
malloc
memmove
realloc
_strnicmp
??3@YAXPAX@Z

Sections

.text
Size: 596KB - Virtual size: 596KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 282KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9a2f68e4faa26597a6f5b32beffb9c81

Headers

File Characteristics

Imports

kernel32

user32

gdi32

wininet

advapi32

ole32

olepro32

oleaut32

shlwapi

gdiplus

shell32

imm32

msvcrt

Sections

.text Size: 596KB - Virtual size: 596KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 282KB - Virtual size: 330KB

.text
Size: 596KB - Virtual size: 596KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 282KB - Virtual size: 330KB