701ef290d7916034fb7a8f20316da1e02098ec3a8b61a8b53835224068b38ad1

Sharing

Copy URL Twitter E-mail

General

Target

701ef290d7916034fb7a8f20316da1e02098ec3a8b61a8b53835224068b38ad1
Size

1.0MB
MD5

0f9cf6b5db14dc4dfdd3a0708f28c3e0
SHA1

7f72f327eff7f3a46d99481403bfba8ba8f1ff36
SHA256

701ef290d7916034fb7a8f20316da1e02098ec3a8b61a8b53835224068b38ad1
SHA512

e9e4787637b5509003538175b46f3ca3bdbb49220de73613a0be468b89639b7057cfd00a629ec7470972caa446fd63ab2f2ac16f3fd12dea9e627a5c97a1a59d
SSDEEP

12288:cqn6j23u9Cuwso1hteiXGafGf+HSVDGoUc3gJgLXIbR1kQ4+Sy:c+6V9CuYvteiaDGU7Il6g

Score

N/A

Malware Config

Signatures

Files

701ef290d7916034fb7a8f20316da1e02098ec3a8b61a8b53835224068b38ad1
.exe windows x86

0d355b57ab2177dc17b7cc3ab61f2854

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

TraceMessage
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueExW
RegEnumValueW
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
RegSetValueExA
CredGetSessionTypes
CredWriteW
CredReadW
CredUnmarshalCredentialW
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
CredWriteDomainCredentialsW
CredReadDomainCredentialsW
GetUserNameA
CredDeleteW
CredFree

kernel32

GetUserDefaultUILanguage
GetSystemDefaultUILanguage
UnmapViewOfFile
GetLocaleInfoW
CreateFileMappingW
MapViewOfFile
FindResourceExW
RaiseException
GetCurrentProcessId
GetCommandLineW
EnterCriticalSection
LeaveCriticalSection
HeapSetInformation
Sleep
ExpandEnvironmentStringsW
CreateProcessW
VerSetConditionMask
VerifyVersionInfoW
GetFileAttributesExW
FindFirstFileW
FindNextFileW
FindClose
GetTempPathW
SetFilePointer
GetACP
SetLastError
GetFullPathNameW
GetFileAttributesW
lstrcmpW
CompareStringW
LocalAlloc
LocalFree
GetCurrentDirectoryW
GetVersionExW
CreateDirectoryW
FormatMessageW
SearchPathW
GetStartupInfoA
DebugBreak
lstrlenW
DeleteFileW
TlsAlloc
TlsFree
LockResource
SystemTimeToFileTime
WriteFile
GetSystemDirectoryW
GetSystemTime
LoadLibraryA
ExpandEnvironmentStringsA
DeviceIoControl
HeapAlloc
GetProcessHeap
HeapFree
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
OutputDebugStringA
GetVersion
WideCharToMultiByte
InterlockedExchange
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
SetEvent
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
CreateEventW
CreateThread
GetModuleFileNameW
lstrcmpiW
GetModuleHandleW
GetProcAddress
LoadLibraryW
WaitForSingleObject
CloseHandle
GetLastError
GetCurrentProcess
TerminateProcess
GetVersionExA
InterlockedCompareExchange
CreateFileW
GetFileSize
ReadFile
GetLocalTime
GetTimeFormatW
DeleteCriticalSection
InitializeCriticalSection
GetDateFormatW

gdi32

DeleteObject
SetRectRgn
GetDCOrgEx
GetClipBox
CombineRgn
EqualRgn
RealizePalette
SelectPalette
GetObjectW
GetStockObject
GetDeviceCaps
SelectObject
CreateCompatibleDC
UpdateColors
DeleteDC
BitBlt
CreateFontIndirectW
TranslateCharsetInfo
SetMapMode
SetBkMode
SetTextColor
StretchBlt
CreateCompatibleBitmap
GetDIBColorTable
CreatePalette
CreateRectRgnIndirect
CreateRectRgn

user32

SendMessageW
PostMessageW
TranslateAcceleratorW
IsDialogMessageW
GetMessageW
TranslateMessage
SetWindowTextW
DispatchMessageW
CharUpperW
PostThreadMessageW
CharNextW
LoadIconW
GetClassInfoExW
UnregisterClassW
SetRect
AdjustWindowRect
IsZoomed
LoadCursorW
SetCursor
AppendMenuW
OffsetRect
IntersectRect
SystemParametersInfoA
IsWindow
EnableWindow
ShowWindow
CopyRect
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
CreateWindowExW
RegisterClassExW
DefWindowProcW
SetForegroundWindow
DestroyWindow
IsChild
GetWindowLongW
SetWindowLongW
LoadAcceleratorsW
DialogBoxParamW
CreateDialogParamW
MessageBoxW
EndDialog
CheckDlgButton
IsDlgButtonChecked
AllowSetForegroundWindow
KillTimer
SetFocus
GetDlgItem
SetDlgItemTextW
SetTimer
PtInRect
IsRectEmpty
SystemParametersInfoW
GetClassInfoW
DefDlgProcW
RegisterClassW
MonitorFromWindow
GetMonitorInfoW
LoadStringW
UnregisterClassA
EqualRect
PostQuitMessage
InsertMenuW
CreateMenu
ModifyMenuW
GetSystemMenu
SetWindowPos
GetClientRect
UpdateWindow
InvalidateRect
IsWindowVisible
SetWindowPlacement
LockWindowUpdate
MoveWindow
AdjustWindowRectEx
EnableMenuItem
CharLowerW
FillRect
CheckRadioButton
GetCursorPos
GetWindowDC
DrawIconEx
GetFocus
MapDialogRect
ScreenToClient
GetWindow
DrawTextW
EnumDisplayMonitors
GetDesktopWindow
CreateDialogIndirectParamW
GetDlgItemTextW
MapWindowPoints
BeginPaint
DrawIcon
EndPaint
SendDlgItemMessageW
GetDC
ReleaseDC
DestroyIcon
GetMenu
LoadImageW
IsWindowEnabled
RedrawWindow
ShowWindowAsync

msvcrt

_errno
_wcslwr
iswdigit
_wtol
wcstok
calloc
wcschr
_wcsnicmp
__getmainargs
_cexit
_exit
wcsrchr
srand
time
iswspace
toupper
_wtoi
wcspbrk
towupper
towlower
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
memcpy
_vsnprintf
wcsncmp
wcsstr
memmove
_wcsicmp
_vsnwprintf
_purecall
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
bsearch
ungetc
_fileno
_read
__pioinfo
__set_app_type
wcstombs
iswctype
wctomb
localeconv
isxdigit
isleadbyte
__mb_cur_max
mbtowc
isdigit
??2@YAPAXI@Z
memset
??_U@YAPAXI@Z
free
malloc
??_V@YAXPAX@Z
??3@YAXPAX@Z
_controlfp
_CIpow
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
realloc
__badioinfo

ole32

CoRevokeClassObject
CLSIDFromString
StringFromGUID2
CoTaskMemFree
CoRegisterClassObject
CoUninitialize
CoInitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance

oleaut32

RegisterTypeLi
SysStringLen
SysFreeString
LoadTypeLi
UnRegisterTypeLi
VarUI4FromStr
SafeArrayGetVartype
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SysStringByteLen
VariantClear
SysAllocStringLen
SafeArrayCreate
VariantInit
SysAllocStringByteLen
SysAllocString

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
ExtractIconW
ShellExecuteExW
SHAddToRecentDocs
SHGetDesktopFolder

comctl32

ImageList_ReplaceIcon
ImageList_LoadImageW
InitCommonControlsEx
ImageList_Create
ImageList_Destroy
ord17

comdlg32

GetFileTitleW
GetSaveFileNameW
GetOpenFileNameW

shlwapi

PathFindExtensionW
PathAppendW
PathFindFileNameW
SHStrDupW
PathStripPathW
PathRemoveFileSpecW

crypt32

CertGetCertificateContextProperty
CertFreeCertificateContext
CertFreeCertificateChain
CryptBinaryToStringW
CryptStringToBinaryW
CertDuplicateCertificateContext
CertDuplicateCertificateChain
CertVerifyCertificateChainPolicy
CryptMsgClose
CertOpenStore
CryptMsgUpdate
CryptMsgOpenToDecode
CryptSignMessage
CertCloseStore
CryptVerifyDetachedMessageSignature
CryptUnprotectData
CryptProtectData
CryptDecodeObject
CertFindExtension
CertGetEnhancedKeyUsage
CertGetCertificateChain

credui

CredUIParseUserNameW
CredUIPromptForCredentialsW

secur32

LsaConnectUntrusted
GetUserNameExW
FreeContextBuffer
QuerySecurityPackageInfoW
LsaLookupAuthenticationPackage
LsaDeregisterLogonProcess

cryptui

CryptUIDlgViewCertificateW

ntdll

RtlInitString
NtOpenFile
RtlInitUnicodeString
RtlInitializeCriticalSection
RtlUnwind

cfgmgr32

CM_Get_Parent
CM_Get_Child
CM_Get_DevNode_Registry_PropertyW
CM_Get_Sibling

winhttp

WinHttpOpen
WinHttpConnect
WinHttpOpenRequest
WinHttpSendRequest
WinHttpQueryOption
WinHttpCloseHandle

winmm

timeKillEvent
timeSetEvent
timeGetTime

netapi32

NetGetJoinInformation
NetApiBufferFree

Sections

.text
Size: 401KB - Virtual size: 401KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 594KB - Virtual size: 593KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0d355b57ab2177dc17b7cc3ab61f2854

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

ole32

oleaut32

shell32

comctl32

comdlg32

shlwapi

crypt32

credui

secur32

cryptui

ntdll

cfgmgr32

winhttp

winmm

netapi32

Sections

.text Size: 401KB - Virtual size: 401KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 594KB - Virtual size: 593KB

.reloc Size: 45KB - Virtual size: 48KB

.text
Size: 401KB - Virtual size: 401KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 594KB - Virtual size: 593KB

.reloc
Size: 45KB - Virtual size: 48KB