b6c28303a9d1603845793f81b3fa1af365c36d2880e0f9ba6b5bba3d91fef231

Sharing

Copy URL Twitter E-mail

General

Target

b6c28303a9d1603845793f81b3fa1af365c36d2880e0f9ba6b5bba3d91fef231
Size

499KB
MD5

14668dbc0044f53e1e55821113c8d640
SHA1

b3b08d00ac4cbc0a49646b04f1161bd51be6c30b
SHA256

b6c28303a9d1603845793f81b3fa1af365c36d2880e0f9ba6b5bba3d91fef231
SHA512

d5300313e9dfd97ff8ff29e3198d5e7f36f0cefca0873cd81cbe0da6f5cd5460b1059be6d1ff7378a4657c9984f888b5721b2c760fab404379be85c2d77f4f48
SSDEEP

12288:TCFuaYFK88rHH8ZqMVCgaYA11SR7/D47gM/Vl:e2uHgqR1SR7E99l

Score

N/A

Malware Config

Signatures

Files

b6c28303a9d1603845793f81b3fa1af365c36d2880e0f9ba6b5bba3d91fef231
.exe windows x86

7a22798741e1935d1fae6dfc938a76f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetVolumeInformationW
GetFullPathNameW
SetErrorMode
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetFileAttributesW
GetFileSizeEx
GetFileTime
GetTickCount
GetStartupInfoW
RtlUnwind
HeapFree
HeapAlloc
ExitThread
CreateThread
RaiseException
UnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
HeapSize
GetSystemInfo
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
FileTimeToSystemTime
VirtualFree
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetTimeZoneInformation
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoA
LCMapStringA
GetStringTypeA
GetStringTypeW
CreateFileA
GetProcessHeap
SetEnvironmentVariableA
GetThreadLocale
lstrlenA
GetAtomNameW
DeleteAtom
FindAtomW
ReleaseMutex
AddAtomW
OpenThread
CreateMutexW
GetSystemTime
SetFilePointerEx
TlsFree
LocalReAlloc
QueryPerformanceCounter
SystemTimeToFileTime
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
WritePrivateProfileStringW
GetModuleHandleA
WaitForSingleObject
FreeResource
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
GetVersionExA
GlobalFree
GlobalUnlock
FormatMessageW
LocalFree
MulDiv
GlobalDeleteAtom
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryExW
CompareStringA
MultiByteToWideChar
InterlockedExchange
GlobalLock
lstrcmpW
GlobalAlloc
LoadLibraryA
SetFilePointer
GetFileSize
WriteFile
SetLastError
GetCurrentThread
SuspendThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualQuery
ResumeThread
InterlockedCompareExchange
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetVersionExW
OutputDebugStringW
GetCurrentThreadId
GetModuleHandleW
VirtualProtect
GetLastError
lstrlenW
SetUnhandledExceptionFilter
WideCharToMultiByte
OpenProcess
GetCommandLineW
FindNextFileW
FindFirstFileW
FindClose
GetTempPathW
GetTempFileNameW
DeleteFileW
LoadLibraryW
GetCurrentProcess
TerminateProcess
GetLongPathNameW
CreateProcessW
InterlockedDecrement
Sleep
ExitProcess
GetCurrentProcessId
CreateFileW
DeviceIoControl
CloseHandle
InterlockedIncrement
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleFileNameW
GetProcAddress
HeapCreate
FreeLibrary

user32

MessageBeep
GetNextDlgTabItem
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableW
CharNextW
CharUpperW
UnregisterClassW
GetSysColorBrush
ReleaseCapture
SetCapture
GetDesktopWindow
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetDC
ReleaseDC
DestroyMenu
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
SetCursor
GetMessageW
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageA
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetMenu
IsWindowVisible
SendMessageW
IsWindow
GetClientRect
UpdateWindow
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
EqualRect
CallWindowProcW
CopyRect
PtInRect
CreateDialogIndirectParamW
EndDialog
PostThreadMessageW
RegisterClipboardFormatW
WinHelpW
PostMessageW
SetForegroundWindow
ShowWindow
FindWindowW
MessageBoxW
GetWindowTextW
BringWindowToTop
IsIconic
InflateRect
DrawIcon
AppendMenuW
GetSystemMenu
LoadIconW
GetSystemMetrics
EnableWindow
MoveWindow
GetDlgItem
CreateWindowExW
LoadCursorW
DefWindowProcW
PostQuitMessage
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
UnhookWindowsHookEx
GetWindow
SendDlgItemMessageW
IsDialogMessageW
GetMenu
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetFocus
GetParent
SetWindowPos
SetFocus
IsWindowEnabled
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
GetWindowLongW
SetMenuItemBitmaps

gdi32

ExtSelectClipRgn
DeleteDC
GetStockObject
GetBkColor
GetTextColor
GetRgnBox
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RectVisible
PtVisible
SetMapMode
RestoreDC
SaveDC
DeleteObject
GetMapMode
CreateRectRgnIndirect
ExtTextOutW
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
GetClipBox
ScaleWindowExtEx
GetWindowExtEx
GetDeviceCaps
GetViewportExtEx

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegEnumKeyW
RegQueryValueExA
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
OpenProcessToken
GetTokenInformation

shell32

ShellExecuteExW
SHGetSpecialFolderPathW

shlwapi

StrChrW
PathFindFileNameW
SHGetValueW
StrStrIW
PathIsRelativeW
PathRemoveFileSpecW
PathCombineW
PathAppendW
StrCmpIW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathFileExistsW

oledlg

OleUIBusyW

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleIsCurrentClipboard
CoTaskMemAlloc
CoRevokeClassObject
CoTaskMemFree
CoInitialize
CoUninitialize
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysAllocString
SysStringLen
SysFreeString
VariantInit
VariantClear
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
VariantChangeType
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect

imm32

ImmDisableIME

Sections

.text
Size: 294KB - Virtual size: 294KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 17KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 107KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7a22798741e1935d1fae6dfc938a76f2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

imm32

Sections

.text Size: 294KB - Virtual size: 294KB

.rdata Size: 72KB - Virtual size: 72KB

.data Size: 17KB - Virtual size: 32KB

.rsrc Size: 107KB - Virtual size: 108KB

.text
Size: 294KB - Virtual size: 294KB

.rdata
Size: 72KB - Virtual size: 72KB

.data
Size: 17KB - Virtual size: 32KB

.rsrc
Size: 107KB - Virtual size: 108KB