6e60587bb03361106f13b30156c06f04edb05486216335a68c2f0ccdca6d72e5

Sharing

Copy URL Twitter E-mail

General

Target

6e60587bb03361106f13b30156c06f04edb05486216335a68c2f0ccdca6d72e5
Size

560KB
MD5

0ede7adc43eb74c465aea56e1230f2bf
SHA1

6e9a937c9416497b38a02e8083cbb0a9c2b47853
SHA256

6e60587bb03361106f13b30156c06f04edb05486216335a68c2f0ccdca6d72e5
SHA512

2cac5969336997ec660d8822511f57e79e239184bde8e2bd9c288cda4f89dc636444995f12a4b1e378772f1959bee6d759c6c7bc1eb619b8e441d8fe1a5ea22e
SSDEEP

6144:qoyiZgWxYl8lXdYORj+645fOfUaps+oS7wtKuPfpLZV/jdbKBj5uNM+m95ZKl+NT:qKMafuVOI+oowtKuPhLZFAAoNT

Score

N/A

Malware Config

Signatures

Files

6e60587bb03361106f13b30156c06f04edb05486216335a68c2f0ccdca6d72e5
.exe windows x86

d9fa838f8446b889f2fcdf8e9e1cdcb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_strdate
_strtime
_chdrive
_getdcwd
strchr
mktime
_CxxThrowException
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_onexit
__dllonexit
strtok
_strnicmp
_ultow
wcstoul
_endthread
_purecall
_exit
time
realloc
_stricmp
_strlwr
_ultoa
_wcslwr
wcscpy
wcscspn
_wmkdir
isdigit
atoi
strlen
strcpy
_strupr
memcpy
strcat
strcmp
strncmp
strncpy
malloc
free
ftell
fsetpos
fseek
fread
fwrite
wcstol
_wcsdup
wcsncat
fgetws
wcsncpy
wcsrchr
_wtoi
_ftol
_wfopen
fclose
fputws
srand
rand
__CxxFrameHandler
_wmakepath
swprintf
wcscmp
_wcsnicmp
wcschr
_beginthread
??2@YAPAXI@Z
wcstok
_wcsicmp
??3@YAXPAX@Z
_wsplitpath
_wcsupr
wcsstr
wcscat
wcslen
toupper
_getdrive

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

msimg32

AlphaBlend

comdlg32

GetSaveFileNameW
ChooseColorW
ChooseFontW
GetOpenFileNameW
GetSaveFileNameA

comctl32

ImageList_DragLeave
ImageList_EndDrag
ImageList_DragMove
ImageList_GetImageInfo
ImageList_Merge
ImageList_BeginDrag
ImageList_DragEnter
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Create
ImageList_ReplaceIcon
ImageList_Destroy
PropertySheetW
ImageList_Add
ord17

winmm

mixerGetNumDevs
mixerOpen
mixerGetDevCapsW
mixerClose
mciSendCommandW
mixerGetLineInfoW
mixerGetLineControlsW
mixerGetControlDetailsW
mixerGetID
timeGetTime
mmioOpenW
mmioDescend
mixerSetControlDetails
mmioClose

kernel32

GlobalHandle
lstrcpyA
TlsAlloc
GetStartupInfoA
GetModuleHandleA
TlsSetValue
TlsFree
TlsGetValue
IsDBCSLeadByte
_llseek
lstrcatA
lstrcmpA
lstrcpynA
LocalUnlock
LocalFree
LocalLock
LocalAlloc
DeleteFileA
SetCurrentDirectoryA
SetFileAttributesA
GetFileAttributesA
QueryDosDeviceA
lstrcmpiA
CreateDirectoryA
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindFirstFileA
IsBadStringPtrA
GetWindowsDirectoryA
CreateProcessA
GetTickCount
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetVolumeInformationA
SetFileTime
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryW
GetDriveTypeW
GetLongPathNameW
SearchPathW
GetFullPathNameW
GetModuleHandleW
WideCharToMultiByte
lstrlenW
GlobalFree
WaitForSingleObject
Sleep
GetCommandLineW
MultiByteToWideChar
lstrlenA
GetModuleFileNameW
CloseHandle
GetLastError
CreateMutexW
CreateDirectoryW
CreateFileW
GetLocaleInfoW
OpenMutexW
GlobalAlloc
GetVolumeInformationW
DeviceIoControl
CreateFileA
GetVersion
FindClose
FindNextFileW
FindFirstFileW
GetFileAttributesW
GetPrivateProfileStringW
SystemTimeToFileTime
GetLocalTime
FreeResource
LockResource
LoadResource
FindResourceW
SetFilePointer
ReadFile
GlobalReAlloc
GlobalUnlock
GlobalLock
WriteFile
lstrcpyW
IsBadWritePtr
IsBadReadPtr
InterlockedIncrement
InterlockedDecrement
GetVersionExA
GetVersionExW
GetFileSize
SetEndOfFile
LoadLibraryExW
SizeofResource
GetSystemTime
GetUserDefaultLangID
GetDriveTypeA
VirtualFree
VirtualAlloc
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryA
ResetEvent
LeaveCriticalSection
CreateEventA
EnterCriticalSection

user32

DrawIconEx
DialogBoxParamW
wvsprintfW
EnableWindow
SetDlgItemInt
GetDlgItemInt
CheckDlgButton
IsDlgButtonChecked
GetKeyState
CheckRadioButton
GetFocus
SendDlgItemMessageW
CreateDialogParamW
SetCursor
GetActiveWindow
GetMenuItemCount
GetSysColor
wsprintfA
TrackPopupMenu
GetCursorPos
GetWindowPlacement
GetForegroundWindow
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
CharUpperW
SetCapture
ClientToScreen
ReleaseCapture
SetRectEmpty
LoadCursorFromFileW
SetWindowRgn
IntersectRect
BringWindowToTop
PeekMessageW
CharUpperBuffA
CharPrevA
CharNextA
OemToCharA
CharUpperA
DispatchMessageA
PeekMessageA
SendMessageA
LoadCursorA
MessageBoxA
DialogBoxParamA
SetWindowTextA
SetDlgItemTextA
GetWindowThreadProcessId
EnumWindows
WaitForInputIdle
PostMessageA
SetWindowLongW
DestroyIcon
IsIconic
GetAsyncKeyState
RegisterWindowMessageW
ShowCursor
RegisterClassW
BeginPaint
FillRect
EndPaint
PostQuitMessage
DefWindowProcW
LoadIconW
LoadCursorW
RegisterClassExW
GetClientRect
FrameRect
GetDC
ReleaseDC
UnregisterClassW
CreateWindowExW
SetRect
GetWindowRect
InvalidateRect
UpdateWindow
WinHelpW
EndDialog
DestroyWindow
GetWindowTextW
SetWindowTextW
GetDlgItemTextW
SetDlgItemTextW
KillTimer
IsWindowVisible
InsertMenuItemW
CreatePopupMenu
GetWindowLongW
SetFocus
LoadMenuW
GetSubMenu
EnableMenuItem
CheckMenuItem
DestroyMenu
ShowWindow
GetSystemMetrics
GetDesktopWindow
MessageBoxW
FindWindowW
SendMessageW
SystemParametersInfoW
SetWindowPos
GetMessageW
TranslateMessage
DispatchMessageW
wsprintfW
IsWindow
PostMessageW
SetTimer
LoadStringW
CallWindowProcW
DrawTextW
GetNextDlgTabItem
GetDlgCtrlID
MapWindowPoints
EnumChildWindows
LoadBitmapW
GetParent
GetDlgItem
ScreenToClient
GetSysColorBrush
GetMenuItemInfoW
SetMenuItemInfoW
DeleteMenu
LoadImageW
AdjustWindowRect
IsZoomed
SetActiveWindow
MoveWindow
SetForegroundWindow

gdi32

SelectPalette
SetSystemPaletteUse
Escape
GetDIBits
CreateHalftonePalette
CreateDIBSection
GetPaletteEntries
SetStretchBltMode
CreateBitmap
CombineRgn
ExtCreateRegion
RestoreDC
CreateFontIndirectW
RealizePalette
SetWindowOrgEx
SetViewportOrgEx
ModifyWorldTransform
SetGraphicsMode
SaveDC
StretchBlt
CreatePolygonRgn
CreateRectRgn
GetRgnBox
GetRegionData
GdiFlush
PatBlt
PtInRegion
GetSystemPaletteEntries
ResizePalette
SetPaletteEntries
GetDeviceCaps
CreatePen
CreatePalette
CreateCompatibleBitmap
StretchDIBits
EnumFontsW
BitBlt
CreateFontW
GetTextMetricsW
GetBitmapBits
SetBitmapBits
CreateCompatibleDC
DeleteDC
GetObjectW
GetTextExtentPoint32W
SetTextColor
TextOutW
DeleteObject
GetStockObject
SelectObject
GetBkColor
SetBkMode
MoveToEx
LineTo
SetBkColor
CreateSolidBrush
DPtoLP

advapi32

RegCloseKey
RegOpenKeyExW
GetUserNameW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegEnumKeyW
RegEnumValueW
IsTextUnicode
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW

shell32

SHGetSpecialFolderPathW
CommandLineToArgvW
SHGetMalloc
ShellExecuteW
Shell_NotifyIconW
ShellExecuteExW
DragQueryFileW
DragAcceptFiles
SHGetFileInfoW
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragFinish
SHBrowseForFolderW
SHGetPathFromIDListW

ole32

CoCreateGuid
GetRunningObjectTable
CreateClassMoniker
CoGetClassObject
CoTaskMemFree
CoCreateInstance
CoInitialize
StringFromIID
CoUninitialize

shlwapi

PathRemoveFileSpecW

Sections

.text
Size: 308KB - Virtual size: 306KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 64KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d9fa838f8446b889f2fcdf8e9e1cdcb4

Headers

File Characteristics

Imports

msvcrt

version

msimg32

comdlg32

comctl32

winmm

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

Sections

.text Size: 308KB - Virtual size: 306KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 64KB - Virtual size: 83KB

.rsrc Size: 168KB - Virtual size: 168KB

.text
Size: 308KB - Virtual size: 306KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 64KB - Virtual size: 83KB

.rsrc
Size: 168KB - Virtual size: 168KB