199bcc50fc940af365b893fbdf419ffb174a9b373751936b639674b5405b24bb

Sharing

Copy URL

Twitter E-mail

General

Target

199bcc50fc940af365b893fbdf419ffb174a9b373751936b639674b5405b24bb
Size

183KB
MD5

0f68c778659686bffdab1f3ff3925a40
SHA1

3b0be3270c7bd6dddfdd1a2ceb8930b24222c006
SHA256

199bcc50fc940af365b893fbdf419ffb174a9b373751936b639674b5405b24bb
SHA512

6dfbec23680f64bbe6f218269feb8f2f25e52cd4b04d9d329c756ce9ce13f2247f1670d37ea4898108f170b0363a01d2003e0dd82006cf6a451d89e24b439675
SSDEEP

3072:lYqfHbhq0/Deu+DZpFB+2xmh0QSoKKBlKxyAZEHzRD95Z:lP7h5Ku+ts2xmhfGKraEHtZ

Score

N/A

Malware Config

Signatures

Files

199bcc50fc940af365b893fbdf419ffb174a9b373751936b639674b5405b24bb
.exe windows x86

6445f6d3fcb90f4f27d8d6bf6dd768f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegGetValueW
TraceMessage
RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
TraceEvent
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
RegQueryValueExW

kernel32

OpenEventW
SetThreadExecutionState
CreateFileW
lstrcmpiW
GetCommandLineW
FindClose
FindNextFileW
FindFirstFileW
GetFileAttributesW
GetWindowsDirectoryW
CreateEventW
CloseHandle
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
Sleep
CreateMutexW
RegisterApplicationRestart
ReleaseMutex
GetLastError
LocalFree
HeapSetInformation
lstrlenW
UnhandledExceptionFilter

gdi32

DeleteObject

user32

AllowSetForegroundWindow
SetForegroundWindow
LoadStringW
SetTimer
GetDoubleClickTime
FindWindowW
KillTimer
UnregisterClassW
CreateWindowExW
LoadIconW
GetCursorPos
PostMessageW
GetSystemMetrics
GetClientRect
EndDialog
DestroyIcon
GetFocus
GetForegroundWindow
SendDlgItemMessageW
IsDlgButtonChecked
GetDlgItem
LoadImageW
EnableWindow
GetSysColor
SendMessageW
GetWindowLongA
SetWindowLongA
EnableScrollBar
DestroyMenu
TrackPopupMenuEx
PostQuitMessage
GetMessageW
TranslateMessage
DispatchMessageW
CheckDlgButton
EndMenu
SystemParametersInfoW
SendMessageTimeoutW
DialogBoxParamW
DefWindowProcW
RegisterClassExW
AppendMenuW
SetMenuDefaultItem
RegisterWindowMessageW
DestroyWindow
CreatePopupMenu

msvcrt

_amsg_exit
??_V@YAXPAX@Z
??_U@YAPAXI@Z
memcpy
_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
??2@YAPAXI@Z
??3@YAXPAX@Z
_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_cexit
__getmainargs
_ftol2
_vsnwprintf
wcsncmp
memset

winmm

PlaySoundW
waveOutGetNumDevs

shell32

CommandLineToArgvW
ord100
SHGetSpecialFolderPathW
SHGetFileInfoW
SHGetFolderPathW
Shell_NotifyIconW

gdiplus

GdipCreateBitmapFromScan0
GdipCreateHBITMAPFromBitmap
GdipCreateSolidFill
GdipGetImageGraphicsContext
GdipFillRectangleI
GdipDrawImageRectI
GdipCloneBrush
GdipCloneImage
GdipCreateBitmapFromFileICM
GdipDisposeImage
GdipDeleteGraphics
GdipDeleteBrush
GdipFree
GdipAlloc
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromFile
GdipGetImageHeight
GdipGetImageThumbnail
GdipGetImageWidth

ole32

CoInitializeEx
CoCreateInstance
CoUninitialize

comctl32

ImageList_Destroy
ImageList_Remove
ord345
ImageList_ReplaceIcon
ImageList_Create
ord344

comdlg32

GetOpenFileNameW

shlwapi

ord271
ord618
PathCombineW
PathMakePrettyW
PathFindExtensionW
PathFindFileNameW
PathAppendW
StrChrW
PathRemoveExtensionW
ord158

powrprof

PowerDeterminePlatformRole
GetPwrCapabilities

slc

SLGetWindowsInformationDWORD

oleaut32

SysAllocString
SysFreeString
VariantInit

secur32

GetUserNameExW

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6445f6d3fcb90f4f27d8d6bf6dd768f7

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

winmm

shell32

gdiplus

ole32

comctl32

comdlg32

shlwapi

powrprof

slc

oleaut32

secur32

Sections

.text Size: 55KB - Virtual size: 55KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 106KB - Virtual size: 106KB

.reloc Size: 20KB - Virtual size: 23KB

.text
Size: 55KB - Virtual size: 55KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 106KB - Virtual size: 106KB

.reloc
Size: 20KB - Virtual size: 23KB