b234f400f0907328fe14b875c30e1ff42f0437458b67d7fe2c04af34682ced0f

Sharing

Copy URL Twitter E-mail

General

Target

b234f400f0907328fe14b875c30e1ff42f0437458b67d7fe2c04af34682ced0f
Size

520KB
MD5

0f402a960a2ee3c033272ca47e3ee1b0
SHA1

9326135e5eac16a6bdd012f8f7c8330e1877b605
SHA256

b234f400f0907328fe14b875c30e1ff42f0437458b67d7fe2c04af34682ced0f
SHA512

b15e1e6300f92e00684b985eb6fed26ebc7f2c0403f197ef37c77401773cb136fdf81dadd758bb52660b350429ca6704305593404207accd23357a04cd392ce8
SSDEEP

12288:1Gkybw9kozcrH8ZmSSLznfuVqgIrugcL04TQ8hHjlR:1GkykkoIrcYLzmVdIruL0CHjlR

Score

N/A

Malware Config

Signatures

Files

b234f400f0907328fe14b875c30e1ff42f0437458b67d7fe2c04af34682ced0f
.exe windows x86

909ffd9134b189b002a70e9c9cb14553

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateToolhelp32Snapshot
QueryDosDeviceW
GetLogicalDriveStringsW
GetExitCodeThread
TerminateThread
GetWindowsDirectoryW
GetTickCount
MoveFileExW
lstrcmpW
OutputDebugStringW
GetSystemPowerStatus
SetFilePointerEx
SetEndOfFile
GetFileSizeEx
FlushFileBuffers
GetPrivateProfileStringW
GetProcessHeap
HeapAlloc
HeapFree
Process32FirstW
CreateProcessW
GetSystemDirectoryW
GetTempPathW
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
HeapSize
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
RaiseException
Process32NextW
Sleep
TerminateProcess
OpenProcess
GetCurrentProcessId
CreateEventW
CreateThread
ResetEvent
GetLocalTime
SetFileAttributesW
MoveFileW
SetEvent
WaitForSingleObject
WriteFile
FindFirstFileW
DeleteFileW
FindNextFileW
FindClose
RemoveDirectoryW
GetFileAttributesW
CreateDirectoryW
GetPrivateProfileIntW
CreateFileW
GetFileSize
ReadFile
GetModuleFileNameW
GetModuleHandleW
LoadLibraryExW
FreeResource
SetLastError
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
lstrlenW
lstrlenA
MultiByteToWideChar
GetCurrentThreadId
UnmapViewOfFile
CreateFileMappingW
MapViewOfFileEx
CloseHandle
WideCharToMultiByte
GetVersionExW
GetCurrentProcess
FlushInstructionCache
LoadLibraryW
GetProcAddress
FreeLibrary
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
HeapReAlloc

user32

IsChild
RegisterClassExW
SetWindowPos
GetClientRect
LoadCursorW
DefWindowProcW
IsWindow
UnregisterClassA
MapWindowPoints
SystemParametersInfoW
MoveWindow
GetDlgItem
PostMessageW
SendMessageW
GetWindowLongW
DestroyWindow
CreateWindowExW
SetWindowLongW
GetWindowRect
GetWindow
GetParent
InvalidateRect
GetClassInfoExW
CopyRect
InflateRect
IsDialogMessageW
GetFocus
SetForegroundWindow
ShowWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
ReleaseDC
GetDC
CharNextW
LoadImageW
LoadBitmapW
SetActiveWindow
EnableWindow
IsWindowEnabled
GetDesktopWindow
GetActiveWindow
CharLowerA
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
ClientToScreen
SetRectEmpty
PostThreadMessageW
CallWindowProcW
IsWindowVisible
SetFocus
FillRect
DrawTextW
GetDlgCtrlID
PtInRect
SetRect
EqualRect
OffsetRect
SetCursor
DestroyIcon
DrawFrameControl
LoadIconW
DrawIconEx
KillTimer
IntersectRect
ScreenToClient
SetCapture
GetNextDlgTabItem
GetMonitorInfoW
MonitorFromWindow
UpdateLayeredWindow
BeginPaint
EndPaint
ReleaseCapture
GetCursorPos

gdi32

GetTextColor
RectInRegion
GetCurrentObject
TextOutW
GetTextExtentPoint32W
GetObjectA
CreateSolidBrush
GetClipRgn
GetViewportOrgEx
ExtSelectClipRgn
OffsetRgn
CreateRoundRectRgn
SetViewportOrgEx
SetBkMode
CombineRgn
CreateRectRgnIndirect
CreateFontIndirectW
GetObjectW
SetStretchBltMode
CreateCompatibleBitmap
CreateBitmap
BitBlt
StretchBlt
SetTextColor
DeleteDC
CreateCompatibleDC
CreateDIBSection
GetStockObject
SelectObject
CreatePen
DeleteObject
CreateRectRgn
SetBkColor
ExtTextOutW
SaveDC
RestoreDC
SelectClipRgn
RoundRect
Rectangle

advapi32

RegOpenKeyW
OpenSCManagerW
ControlService
QueryServiceStatus
StartServiceW
OpenServiceW
DeleteService
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
CloseServiceHandle
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW

shell32

ShellExecuteW
SHGetFolderPathW
SHGetSpecialFolderPathW

ole32

CoInitialize
CoUninitialize
CreateStreamOnHGlobal
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

VarUI4FromStr

shlwapi

StrToIntW
StrStrIW
PathFileExistsW
PathAddBackslashW
PathAppendW
PathRemoveFileSpecW
StrToIntA

comctl32

InitCommonControlsEx
_TrackMouseEvent

msimg32

AlphaBlend

msvcp80

?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z

gdiplus

GdipGetImageGraphicsContext
GdipAddPathStringI
GdipCreateBitmapFromScan0
GdipDeleteFontFamily
GdipDrawPath
GdipSetSmoothingMode
GdipFillPath
GdipAddPathArcI
GdipClosePathFigure
GdipDeletePath
GdipCreatePath
GdipDrawLineI
GdipSetPenDashStyle
GdipDeletePen
GdipCreatePen1
GdipCloneBrush
GdipCreateFontFromLogfontW
GdipCreateFontFromDC
GdipMeasureString
GdipDrawString
GdipFillRectangleI
GdipSetCompositingQuality
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipCreateSolidFill
GdipDeleteFont
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteBrush
GdipLoadImageFromFileICM
GdipLoadImageFromFile
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipCloneImage
GdipDrawImagePointsRectI
GdipDrawImageRectRect
GdipDrawImageRectI
GdipImageRotateFlip
GdipDrawImageRectRectI
GdipCreateFromHDC
GdipSetImageAttributesColorMatrix
GdipSetInterpolationMode
GdipSetPixelOffsetMode
GdipGraphicsClear
GdipDrawImageI
GdipCreateFontFromLogfontA
GdipGetFamily
GdipGetFontSize
GdipDrawLinesI
GdipSetPenStartCap
GdipSetPenEndCap
GdipDrawLine
GdipAddPathRectangleI
GdipAddPathPieI
GdipSetClipPath
GdipResetWorldTransform
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipSetTextRenderingHint
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipDeleteGraphics
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipAlloc
GdipFree
GdiplusShutdown
GdiplusStartup
GdipSetPenMode

msvcr80

iswspace
wcsrchr
wcspbrk
wcschr
_wcslwr_s
setlocale
wcscpy_s
wcscmp
_waccess
memcpy
labs
wcsncpy_s
malloc
_recalloc
calloc
wcslen
vsprintf_s
_vscprintf
??2@YAPAXI@Z
_mbsicmp
_invalid_parameter_noinfo
memmove_s
memcpy_s
??0exception@std@@QAE@ABV01@@Z
_mbscmp
strlen
__CxxFrameHandler3
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
_wtoi
swprintf_s
vswprintf_s
_vscwprintf
strcmp
memset
_CxxThrowException
_purecall
free
??_V@YAXPAX@Z
??3@YAXPAX@Z
tolower
isalpha
isalnum
strncmp
strchr
_beginthreadex
wcscat_s
_mbsstr
_time32
_wrename
wcstok
_mbschr
floor
ceil
wcsspn
wcscspn
abs
__RTDynamicCast
_stricmp
_wcsupr_s
_time64
fwrite
fclose
_wfopen
_vsnprintf
_wcsicmp
wcsstr
_wcsnicmp
wcstol
memmove
fprintf
sscanf_s
atoi
_vsnprintf_s
??0exception@std@@QAE@ABQBD@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_itow_s
towupper
realloc
_scwprintf
_strlwr_s
_ultoa_s
wcsnlen
_get_errno
_set_errno
strtol
_resetstkoflw
_controlfp_s
_invoke_watson
_crt_debugger_hook
isspace
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_except_handler4_common
?terminate@@YAXXZ

ws2_32

WSASetLastError
WSASocketW
closesocket
WSAStartup
WSACreateEvent
WSASetEvent
WSAEventSelect
WSARecv
WSAResetEvent
WSASend
WSAGetOverlappedResult
WSAConnect
WSAGetLastError
WSAEnumNetworkEvents
WSACloseEvent
WSACleanup
freeaddrinfo
getaddrinfo

Sections

.text
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

909ffd9134b189b002a70e9c9cb14553

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

msvcp80

gdiplus

msvcr80

ws2_32

Sections

.text Size: 240KB - Virtual size: 240KB

.rdata Size: 63KB - Virtual size: 62KB

.data Size: 6KB - Virtual size: 7KB

.rsrc Size: 204KB - Virtual size: 204KB

.text
Size: 240KB - Virtual size: 240KB

.rdata
Size: 63KB - Virtual size: 62KB

.data
Size: 6KB - Virtual size: 7KB

.rsrc
Size: 204KB - Virtual size: 204KB