8415e86e7d762eb547d5bfba875199a08ddf7b61974196978529429cad26a29d

Sharing

Copy URL Twitter E-mail

General

Target

8415e86e7d762eb547d5bfba875199a08ddf7b61974196978529429cad26a29d
Size

704KB
MD5

e350120d17400a00ed3b56c7fdef8623
SHA1

e4271803fea319a45a8d3d392bc52d1222c740b5
SHA256

8415e86e7d762eb547d5bfba875199a08ddf7b61974196978529429cad26a29d
SHA512

ce3d3e20c057b1d43e79c0c379aedcb7add8c060486f65e4ef42cf76ef0dd87038ff37361542c3def0f5d4ac0d1f1eaa28e4330276ce21642804b857559a5378
SSDEEP

12288:bWgqz7qEq6xpULO2/r5pa2TOj1ykYez5h/H7UE:ilqCaDba2TOBz5znP7UE

Score

N/A

Malware Config

Signatures

Files

8415e86e7d762eb547d5bfba875199a08ddf7b61974196978529429cad26a29d
.exe windows x86

db3b0b051daad1e4530b0dc4679127c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetErrorMode
HeapAlloc
HeapFree
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
GetSystemTimeAsFileTime
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCommandLineA
GetProcessHeap
GetStartupInfoA
ExitThread
HeapSize
SetStdHandle
GetFileType
VirtualFree
HeapDestroy
GetFileTime
GetStdHandle
GetACP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetFileAttributesA
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GetFullPathNameA
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
LocalAlloc
InterlockedIncrement
GetThreadLocale
GetModuleFileNameW
GetCurrentProcessId
CreateEventA
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetVersionExA
lstrcmpA
MulDiv
SetLastError
GetWindowsDirectoryA
lstrcatA
WinExec
lstrcpyA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetExitCodeThread
TerminateThread
GetLogicalDrives
TerminateProcess
FindNextFileA
WaitForSingleObject
DeleteFileA
OpenProcess
GetVolumeInformationA
CreateToolhelp32Snapshot
Module32First
Module32Next
GetCurrentProcess
GetTickCount
LoadLibraryA
FormatMessageA
LocalFree
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FreeResource
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetModuleHandleA
GetProcAddress
FreeLibrary
DeviceIoControl
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateFileA
WriteFile
GetModuleFileNameA
InterlockedDecrement
CreateThread
CloseHandle
lstrlenA
CompareStringW
CompareStringA
Sleep
ReadProcessMemory
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
HeapCreate
InterlockedExchange

user32

BringWindowToTop
SetMenu
TranslateAcceleratorA
InvalidateRgn
CopyAcceleratorTableA
GetSysColorBrush
WindowFromPoint
DestroyMenu
GetMenuItemInfoA
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
PostQuitMessage
FindWindowA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetMessageA
TranslateMessage
ValidateRect
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
SetRectEmpty
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowPos
OffsetRect
IntersectRect
GetWindowPlacement
GetWindow
CreatePopupMenu
InsertMenuItemA
ReuseDDElParam
UnpackDDElParam
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetMenuState
GetMenuItemID
GetMenuItemCount
CopyIcon
MessageBeep
GetSysColor
ReleaseCapture
SetCapture
PostThreadMessageA
RegisterClipboardFormatA
InflateRect
SetForegroundWindow
GetCursorPos
GetNextDlgGroupItem
UnregisterClassA
GetForegroundWindow
CharNextA
CharUpperA
SendMessageA
SetWindowRgn
GetWindowRect
InvalidateRect
EnableWindow
SetRect
GetParent
SetWindowLongA
GetWindowLongA
ReleaseDC
GetDC
PostMessageA
UpdateWindow
LoadAcceleratorsA
SetTimer
GetSystemMetrics
GetClientRect
SystemParametersInfoA
PtInRect
FillRect
IsWindowVisible
RedrawWindow
SetCursor
LoadCursorA
AdjustWindowRectEx
IsWindow
CopyRect
GetWindowTextA
GetWindowThreadProcessId
EnumWindows
MessageBoxA
IsRectEmpty
DrawIcon
AppendMenuA
GetSubMenu
LoadMenuA
LoadIconA
GetDesktopWindow
KillTimer
IsIconic
GetSystemMenu

gdi32

ExtSelectClipRgn
CreatePatternBrush
CreatePen
CreateRectRgnIndirect
ScaleWindowExtEx
GetMapMode
CreateEllipticRgn
LPtoDP
Ellipse
GetRgnBox
GetBkColor
GetTextColor
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateCompatibleBitmap
MoveToEx
LineTo
SetMapMode
SetStretchBltMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetTextExtentPoint32A
CreateFontIndirectA
GetDeviceCaps
BitBlt
SetDIBColorTable
CreateSolidBrush
GetStockObject
CreateDIBSection
DeleteObject
GetObjectA
CreateDCA
GetDIBits
DeleteDC
CreateFontA
GetDIBColorTable
SelectObject
StretchBlt
RoundRect
Rectangle
CreateCompatibleDC
CreateRoundRectRgn

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyA
LookupPrivilegeValueA
RegEnumKeyA
RegDeleteKeyA
AdjustTokenPrivileges
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
OpenProcessToken

shell32

ShellExecuteA
Shell_NotifyIconA
DragQueryFileA
DragFinish

comctl32

_TrackMouseEvent
ord17

shlwapi

PathStripToRootA
PathIsUNCA
PathFindExtensionA
UrlUnescapeA
PathFindFileNameA

oledlg

ord8

ole32

CreateStreamOnHGlobal
CoUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CoDisconnectObject
CLSIDFromProgID
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysFreeString
VariantInit
VariantClear
VariantChangeType
SysAllocStringLen
SysAllocStringByteLen
SysStringLen
VariantCopy
VarDateFromStr
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SysAllocString
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
LoadTypeLi
GetErrorInfo

urlmon

URLDownloadToFileA

gdiplus

GdipCreateBitmapFromStream
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipCreateBitmapFromHBITMAP
GdipGetImageHeight
GdipGetImageWidth
GdipSaveImageToStream
GdiplusShutdown
GdipCloneImage
GdipCloneBrush
GdipCreateFont
GdipGetImagePalette
GdipDrawString
GdipFillRectangleI
GdipReleaseDC
GdipCreateFromHDC
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipDisposeImage
GdipDeleteFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDeleteGraphics
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteBrush
GdipAlloc
GdipFree
GdipDrawImageRectI
GdipGetImagePaletteSize
GdipCreateSolidFill
GdipDrawImageI

psapi

EnumProcesses
EnumProcessModules
GetModuleFileNameExA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

iphlpapi

GetAdaptersInfo

wininet

HttpQueryInfoA
DeleteUrlCacheEntry
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetSetOptionExA
InternetQueryDataAvailable
HttpOpenRequestA
InternetConnectA
HttpSendRequestA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle

ws2_32

send
closesocket
shutdown
inet_addr
WSACleanup
select
gethostbyname
gethostname
WSAStartup
recv
connect
htons
WSAGetLastError
__WSAFDIsSet
inet_ntoa
socket

Sections

.text
Size: 480KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db3b0b051daad1e4530b0dc4679127c8

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

gdiplus

psapi

version

iphlpapi

wininet

ws2_32

Sections

.text Size: 480KB - Virtual size: 477KB

.rdata Size: 104KB - Virtual size: 100KB

.data Size: 16KB - Virtual size: 36KB

.rsrc Size: 100KB - Virtual size: 97KB

.text
Size: 480KB - Virtual size: 477KB

.rdata
Size: 104KB - Virtual size: 100KB

.data
Size: 16KB - Virtual size: 36KB

.rsrc
Size: 100KB - Virtual size: 97KB