c448c8ee5b3a354ace4ef2ce083bfdf7a51ff24a744f0b45d8c6880efdeb1dd6

Sharing

Copy URL Twitter E-mail

General

Target

c448c8ee5b3a354ace4ef2ce083bfdf7a51ff24a744f0b45d8c6880efdeb1dd6
Size

329KB
MD5

08fcd0c7fb08f2cbdc8c417341180810
SHA1

3def46e98074b0076424d62e55be0a4fb0d1dc86
SHA256

c448c8ee5b3a354ace4ef2ce083bfdf7a51ff24a744f0b45d8c6880efdeb1dd6
SHA512

241e394a271de1c078de80aef612dc1e7be7a81b08e01ca3abc83996750d5acc9c63e47e1bf9a761aaf8409db2e1db5da580349cceb51c42f51fd80726cd2cd6
SSDEEP

3072:zO14g+z3JepQMEE6Q+1VqfvJqxEm4x1ESuQG+3SeyRS6CSfKVu1xgCAWUMs8xjBS:Sj+rJes5x1VqfvoxEvTEPp/F9HUce

Score

N/A

Malware Config

Signatures

Files

c448c8ee5b3a354ace4ef2ce083bfdf7a51ff24a744f0b45d8c6880efdeb1dd6
.exe windows x86

e1aabb7768b8db0c3fe007c5c07a8244

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
EventWrite
EventRegister
EventUnregister
RegCreateKeyExW
RegSetValueExW

kernel32

GetCurrentProcess
IsWow64Process
GetProcessHeap
HeapAlloc
HeapFree
CreateMutexW
InterlockedExchange
LocalFree
InterlockedCompareExchange
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
CloseHandle
VerSetConditionMask
VerifyVersionInfoW
MulDiv
GetTickCount64
GetLastError
Sleep

gdi32

CreateCompatibleDC
SetBkColor
CreatePen
Polyline
CreateCompatibleBitmap
SetStretchBltMode
StretchBlt
CreateFontIndirectW
DeleteObject
GetObjectW
GetDeviceCaps
DeleteDC
BitBlt
GdiAlphaBlend
SelectObject
GetStockObject
GdiSetBatchLimit
SetTextColor
PatBlt
CreateSolidBrush
GetTextMetricsW
SetBkMode

user32

IsDlgButtonChecked
CheckRadioButton
EnumDisplaySettingsW
ChangeDisplaySettingsExW
EnumDisplayDevicesW
GetSysColor
DestroyWindow
CreateWindowExW
CopyImage
LoadBitmapW
DrawTextW
CheckDlgButton
MapWindowPoints
FillRect
RedrawWindow
SystemParametersInfoW
SetDlgItemTextW
MapDialogRect
GetClientRect
GetDlgItem
SetFocus
IsCharAlphaNumericW
EnableWindow
ShowWindow
DialogBoxParamW
EndDialog
SetTimer
MessageBoxW
FindWindowW
SetForegroundWindow
LoadCursorW
RegisterClassExW
DrawFocusRect
BeginPaint
GetSysColorBrush
FrameRect
EndPaint
TrackMouseEvent
DefWindowProcW
SendMessageW
InvalidateRect
GetFocus
SetWindowTextW
SetWindowLongW
GetParent
PostMessageW
SendDlgItemMessageW
GetDC
LoadStringW
ReleaseDC
GetProcessDefaultLayout
SendMessageTimeoutW
SetWindowPos
GetWindowRect
PtInRect
GetSystemMetrics
GetWindowLongW
KillTimer

msvcrt

__set_app_type
__p__fmode
memset
_wtoi
_vsnwprintf
_unlock
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
__dllonexit
_lock
_onexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler4_common
_controlfp
__p__commode
_ismbblead
_XcptFilter
_exit
_purecall
realloc
free
_ftol2
wcschr
_CxxThrowException
??0exception@@QAE@XZ
?what@exception@@UBEPBDXZ
_cexit
__getmainargs
malloc
_callnewh
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
_ftol2_sse

ntdll

WinSqmAddToStream
WinSqmIncrementDWORD

setupapi

SetupDiGetClassDevsW
SetupDiOpenDeviceInterfaceW
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW

uxtheme

IsThemeActive
GetThemeSysColor
OpenThemeData
GetThemeFont
GetThemeColor
GetThemeSysFont
CloseThemeData
DrawThemeParentBackground

oleacc

CreateStdAccessibleObject
LresultFromObject

ole32

StringFromGUID2
CoUninitialize
CoCreateInstance
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoGetObject

oleaut32

SafeArrayGetElement
SysAllocString
SysFreeString
SafeArrayGetUBound
SafeArrayGetLBound
VariantInit
VariantClear

comctl32

PropertySheetW
ord381
InitCommonControlsEx

dwrite

DWriteCreateFactory

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e1aabb7768b8db0c3fe007c5c07a8244

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

ntdll

setupapi

uxtheme

oleacc

ole32

oleaut32

comctl32

dwrite

Sections

.text Size: 60KB - Virtual size: 59KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 236KB - Virtual size: 236KB

.reloc Size: 31KB - Virtual size: 32KB

.text
Size: 60KB - Virtual size: 59KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 236KB - Virtual size: 236KB

.reloc
Size: 31KB - Virtual size: 32KB