9a73493f5fded490a0dbbec0681b1834ad0c52ccba3e18be9dda0e208c5a9912

Sharing

Copy URL Twitter E-mail

General

Target

9a73493f5fded490a0dbbec0681b1834ad0c52ccba3e18be9dda0e208c5a9912
Size

1019KB
MD5

077c607f8d3882d6ee3ab22eee156f30
SHA1

ec52edb194ca8f81bd425b1a73f847d45570c692
SHA256

9a73493f5fded490a0dbbec0681b1834ad0c52ccba3e18be9dda0e208c5a9912
SHA512

784838cf5ae345952e772c6f31bb8f24e1fb32c47badc07ac61d292b85e3f50490b61bd96f44a2751f2fb5b73b1d1e4b9f1428b2f4a7795e1c3ea7842a6209e6
SSDEEP

24576:okHYWh1ANGgh8shMwXys/8dTAUuwfiG/USpJYgA:pHYWh185PhPLUTAUdfiG/USpnA

Score

N/A

Malware Config

Signatures

Files

9a73493f5fded490a0dbbec0681b1834ad0c52ccba3e18be9dda0e208c5a9912
.exe windows x86

39aee7b271f1d2feabad5fcf2f019226

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
ExpandEnvironmentStringsW
ExitProcess
SetUnhandledExceptionFilter
SetEvent
lstrcmpW
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
WideCharToMultiByte
SetFileAttributesW
GetFileSize
WriteFile
GlobalFree
GetVersion
lstrcpyW
GetFileAttributesW
GetTickCount
LocalFree
FormatMessageW
lstrcatW
GetDiskFreeSpaceExW
GetDriveTypeW
GetSystemDirectoryW
GetLogicalDriveStringsW
WaitForMultipleObjects
CreateProcessW
WaitForSingleObject
CreateThread
GetPrivateProfileStringA
GetPrivateProfileIntW
GetTempPathW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetCommandLineW
WritePrivateProfileStringW
GetPrivateProfileStringW
FindClose
FindNextFileW
FindFirstFileW
SystemTimeToFileTime
GetUserDefaultLangID
GetTempFileNameW
CreateFileA
DeleteFileA
MoveFileA
Sleep
SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
IsBadReadPtr
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeA
GetLocaleInfoA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
GetStartupInfoA
GetFileType
SetHandleCount
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
GetACP
GetModuleHandleA
FatalAppExitA
HeapCreate
GetCurrentThread
GetModuleFileNameA
GetStdHandle
GetStringTypeW
GetCPInfo
LCMapStringW
LCMapStringA
GetStartupInfoW
RtlUnwind
IsDebuggerPresent
UnhandledExceptionFilter
TlsFree
TlsAlloc
ReleaseMutex
OpenThread
TlsSetValue
SetEnvironmentVariableW
TlsGetValue
GetEnvironmentVariableW
OutputDebugStringW
GetFileSizeEx
SetFilePointerEx
SetEndOfFile
LocalFileTimeToFileTime
GetSystemTimeAsFileTime
InterlockedExchange
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
VirtualProtect
CreateEventW
CreateMutexW
OpenProcess
TerminateProcess
lstrcpynW
lstrlenA
lstrcpynA
GetVersionExW
GetSystemTime
CopyFileW
DeleteFileW
CreateDirectoryW
GetLocalTime
GetModuleFileNameW
GetModuleHandleW
LoadLibraryExW
SetLastError
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
GetLastError
RaiseException
lstrlenW
GetCurrentThreadId
GetProcAddress
FreeLibrary
ReadFile
SetFilePointer
GetCurrentProcessId
CreateFileW
DeviceIoControl
CloseHandle
LoadLibraryW
GetCurrentProcess
FlushInstructionCache
MultiByteToWideChar
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoW

user32

FillRect
EndPaint
BeginPaint
DestroyAcceleratorTable
GetWindow
GetFocus
CreateAcceleratorTableW
FindWindowW
DestroyWindow
wvsprintfW
SetWindowLongW
SetWindowPos
IsWindow
GetWindowLongW
GetClassInfoExW
LoadCursorW
SetRectEmpty
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
GetAncestor
WindowFromPoint
GetShellWindow
FindWindowExW
EnumWindows
DeleteMenu
EnableMenuItem
LoadMenuW
UpdateWindow
CopyRect
GetWindowInfo
GetForegroundWindow
GetDoubleClickTime
GetSubMenu
EndDialog
MonitorFromWindow
DialogBoxParamW
LoadIconW
SetForegroundWindow
DrawTextW
TrackMouseEvent
GetMenuState
GetMenuItemID
GetMenuStringW
GetActiveWindow
CallNextHookEx
IsDialogMessageW
GetClassNameW
GetDlgItem
IsChild
UnhookWindowsHookEx
EnableWindow
CharNextW
CallWindowProcW
GetWindowRect
GetClientRect
ScreenToClient
GetDC
ReleaseDC
ShowWindow
SetTimer
KillTimer
PtInRect
SetCursor
GetCursorPos
UpdateLayeredWindow
SetCapture
RegisterClassExW
LoadImageW
CreateWindowExW
ReleaseCapture
PostMessageW
SendMessageTimeoutW
RegisterWindowMessageW
TranslateAcceleratorW
InvalidateRect
SendMessageW
CreatePopupMenu
AppendMenuW
RemoveMenu
MapWindowPoints
SetMenuItemInfoW
UnregisterClassA
GetMenuItemInfoW
SetMenuDefaultItem
LoadStringW
SetFocus
PostQuitMessage
LoadStringA
GetMenuItemCount
DestroyMenu
GetMonitorInfoW
MonitorFromPoint
TrackPopupMenuEx
MessageBeep
DestroyIcon
GetWindowThreadProcessId
GetDesktopWindow
SystemParametersInfoW
MessageBoxW
IntersectRect
MoveWindow
GetSystemMetrics
CheckDlgButton
SetDlgItemTextW
IsWindowVisible
GetParent
GetSysColor
ClientToScreen
InvalidateRgn
SetWindowsHookExW
GetDlgItemTextW
CreateDialogParamW
RedrawWindow

gdi32

SelectPalette
CreateDCW
SetViewportOrgEx
GetViewportOrgEx
SetDIBits
GetObjectW
RealizePalette
StretchBlt
SetStretchBltMode
EnumFontFamiliesW
GetObjectType
GetStockObject
GetDIBits
GdiFlush
CreateSolidBrush
GetDeviceCaps
BitBlt
CreateCompatibleBitmap
GetObjectA
CreatePen
LineTo
MoveToEx
CreateCompatibleDC
PatBlt
SelectObject
DeleteDC
CreateDIBSection
CreateFontW
DeleteObject

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegQueryValueExA
RegDeleteValueW
RegCloseKey
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW

shell32

ShellExecuteExW
SHCreateDirectoryExA
Shell_NotifyIconW
SHCreateDirectoryExW
SHGetFolderPathW
SHFileOperationW
ShellExecuteW

ole32

CoTaskMemAlloc
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
StringFromGUID2
CoInitialize
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc

oleaut32

OleCreateFontIndirect
DispCallFunc
SysAllocString
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
SysAllocStringLen
VariantClear
VariantInit
SysFreeString
SysStringLen

shlwapi

SHSetValueW
PathFileExistsW
SHGetValueW
StrStrIW
PathRemoveFileSpecW
PathFindFileNameW
StrCmpIW
PathFindExtensionW
PathAddBackslashW
SHDeleteValueA
SHSetValueA
StrStrIA
SHDeleteValueW
StrToIntA
PathCombineW
PathRemoveFileSpecA
PathAppendW

comctl32

_TrackMouseEvent
InitCommonControlsEx

msimg32

AlphaBlend

gdiplus

GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipDrawLine
GdipSetStringFormatHotkeyPrefix
GdipCreateHBITMAPFromBitmap
GdipDeletePen
GdipCreatePen1
GdipCloneImage
GdipDrawImageRectRectI
GdipSetInterpolationMode
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromFileICM
GdipGetImageRawFormat
GdipGetImageWidth
GdipSaveImageToFile
GdipDisposeImage
GdipCloneBrush
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipDrawString
GdipFillPath
GdipSetSmoothingMode
GdipSetTextRenderingHint
GdipCreateFromHDC
GdipAddPathArcI
GdipAddPathLineI
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipCreateSolidFill
GdipDeleteFont
GdipDeleteGraphics
GdipDeletePath
GdipCreatePath
GdipDeleteStringFormat
GdipCreateStringFormat
GdipAlloc
GdipFree
GdipDeleteBrush
GdipCreateBitmapFromFile

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

psapi

GetModuleFileNameExW

winmm

timeSetEvent
timeBeginPeriod
timeEndPeriod
timeKillEvent

urlmon

URLDownloadToFileW

ws2_32

WSAAsyncSelect
WSAAsyncGetHostByName
bind
ioctlsocket
setsockopt
send
WSACreateEvent
htons
gethostbyname
socket
WSAEventSelect
WSACloseEvent
WSAStartup
WSACleanup
recv
shutdown
connect
WSAGetLastError
WSAWaitForMultipleEvents
getsockname
WSAEnumNetworkEvents
gethostname
closesocket

wininet

InternetQueryOptionW
InternetQueryOptionA
InternetCrackUrlW

secur32

AcquireCredentialsHandleA
InitializeSecurityContextA
FreeCredentialsHandle

Sections

.text
Size: 585KB - Virtual size: 584KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 297KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

39aee7b271f1d2feabad5fcf2f019226

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

gdiplus

version

psapi

winmm

urlmon

ws2_32

wininet

secur32

Sections

.text Size: 585KB - Virtual size: 584KB

.rdata Size: 109KB - Virtual size: 109KB

.data Size: 20KB - Virtual size: 33KB

.rsrc Size: 297KB - Virtual size: 300KB

.text
Size: 585KB - Virtual size: 584KB

.rdata
Size: 109KB - Virtual size: 109KB

.data
Size: 20KB - Virtual size: 33KB

.rsrc
Size: 297KB - Virtual size: 300KB