6732fc228d8d681f57aa34881b7052b3f864a1db11df7830b017d20f24431a39

Sharing

Copy URL Twitter E-mail

General

Target

6732fc228d8d681f57aa34881b7052b3f864a1db11df7830b017d20f24431a39
Size

400KB
MD5

099e89b24c2b19568f8e9c74e6e6f0c0
SHA1

39953df6c4a2f8168e77ec7f73a1b8f8471985b1
SHA256

6732fc228d8d681f57aa34881b7052b3f864a1db11df7830b017d20f24431a39
SHA512

178a77b47c92cfa5c40501695863546a73cba36c2b7f146f6f98d59d8a396f2f1240cf0ecbb179d70c64d9c3ba011439d24e51a3e8e919dca9958a02acf7d452
SSDEEP

6144:UEicfCwNYdX8k688o+uLHnt25wAlQwtWQuJ/agzpJzYsm5YQeAS/lW/At:UEHfCFDr8teN255l4zph6KQMlW/C

Score

N/A

Malware Config

Signatures

Files

6732fc228d8d681f57aa34881b7052b3f864a1db11df7830b017d20f24431a39
.exe windows x86

476194ae3d6643da08d86d1eba9d8cfc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ExtractIconA
SHGetSpecialFolderPathA
DragFinish
ord155
SHGetPathFromIDListA
DragQueryFileA
SHGetFileInfoA
SHBrowseForFolderA
Shell_NotifyIconA
DragAcceptFiles
SHChangeNotify
SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteA

winmm

timeSetEvent
mixerGetLineControlsA
timeKillEvent
waveInGetNumDevs
timeBeginPeriod
mixerGetControlDetailsA
mixerGetLineInfoA
mmioCreateChunk
mixerGetDevCapsA
waveInMessage

gdi32

StretchDIBits
MoveToEx
SetPixel
GetRegionData
CreateFontIndirectA
SelectPalette
Arc
CreatePalette
SetWorldTransform
SaveDC
BitBlt
CreateCompatibleDC
ExtCreatePen
PtInRegion
GetCurrentPositionEx
CreatePen
GetRgnBox
CreateDIBSection
RoundRect
SetMapMode
FillPath
SetViewportExtEx
ExtCreateRegion
GetTextMetricsA
BeginPath
GetCharABCWidthsA
StretchBlt
CreateEllipticRgn
SetDIBitsToDevice
LineTo
Rectangle
CombineRgn
SelectObject
StrokePath
CreateSolidBrush
SetBkMode
Pie
CopyMetaFileA
GetClipBox
GetPaletteEntries
CreateBitmap
UnrealizeObject
SetBrushOrgEx
SetWindowOrgEx
GetDeviceCaps
RealizePalette
SetBkColor
EndPath
CreateCompatibleBitmap
SetTextAlign
CreateDCA
CreatePolygonRgn
Polygon
TextOutA
FillRgn
Ellipse
DeleteDC
ModifyWorldTransform
EqualRgn
GetSystemPaletteEntries
GetStockObject
CreateRectRgn
PatBlt
EnumFontFamiliesExA
SetPolyFillMode
SetTextColor
GetBkColor
RestoreDC
SetWindowExtEx
SetStretchBltMode
SetPixelV
SetRectRgn
CreateHatchBrush
SelectClipRgn

ole32

OleCreateFromFile
OleDuplicateData
StgOpenStorageOnILockBytes
OleCreateLinkFromData
OleCreateLinkToFile
OleGetIconOfClass
OleSetMenuDescriptor
OleCreate
OleInitialize
CreateBindCtx
OleSave
CoRegisterMessageFilter

kernel32

InterlockedIncrement
GetProcAddress
RtlUnwind
ReadFile
LoadLibraryA
GetOEMCP
OutputDebugStringA
FreeEnvironmentStringsW
GetStringTypeW
IsBadReadPtr
lstrlenA
WriteConsoleW
SetStdHandle
LeaveCriticalSection
GetModuleHandleW
InitializeCriticalSection
TlsGetValue
TerminateProcess
VirtualAlloc
SetConsoleCtrlHandler
RaiseException
GetCurrentProcess
FatalAppExitA
GetFileType
GetStartupInfoA
GetLocaleInfoA
GetModuleFileNameW
CompareStringW
GetConsoleMode
GetStringTypeA
GetCurrentThreadId
LCMapStringA
QueryPerformanceCounter
GetCPInfo
GetCommandLineW
GetTimeFormatA
MultiByteToWideChar
ExitProcess
FreeEnvironmentStringsA
HeapDestroy
WideCharToMultiByte
GetStartupInfoW
FlushFileBuffers
GetCurrentThread
GetUserDefaultLCID
HeapFree
GetLocaleInfoW
GetACP
GetCommandLineA
GetModuleHandleA
LoadLibraryW
HeapValidate
OutputDebugStringW
WriteFile
LCMapStringW
VirtualFree
UnhandledExceptionFilter
SetHandleCount
HeapReAlloc
SetLastError
GetConsoleCP
GetVersionExA
GetCurrentProcessId
SetEnvironmentVariableA
TlsAlloc
EnterCriticalSection
GetEnvironmentStrings
CreateMutexW
VirtualQuery
IsValidCodePage
SetUnhandledExceptionFilter
GetDateFormatA
CompareStringA
IsValidLocale
FreeLibrary
DebugBreak
TlsSetValue
GetStdHandle
GetTickCount
DeleteCriticalSection
InterlockedExchange
GetConsoleOutputCP
GetTimeZoneInformation
GetProcessHeap
HeapCreate
InterlockedDecrement
CloseHandle
SetFilePointer
GetEnvironmentStringsW
GetLastError
IsDebuggerPresent
WriteConsoleA
TlsFree
GetSystemTimeAsFileTime
GetModuleFileNameA
HeapAlloc
CreateFileA

shlwapi

PathIsUNCA
PathFindFileNameA
PathFindExtensionA
PathQuoteSpacesA
PathAppendA
PathStripToRootA
UrlUnescapeA
PathSkipRootA
PathRemoveExtensionA

advapi32

ControlService
InitializeSecurityDescriptor
OpenSCManagerW
RegSetValueExW
StartServiceCtrlDispatcherW
CloseServiceHandle
RegDeleteValueW
RegisterServiceCtrlHandlerW
RegCloseKey
OpenServiceW
CreateServiceW
RegOpenKeyExW

comctl32

ImageList_Add
ImageList_DragEnter
ImageList_SetBkColor
ImageList_DragLeave
ImageList_Remove
ord17
ImageList_LoadImageA
PropertySheetA
ImageList_Draw
ImageList_Create
ImageList_GetIconSize
_TrackMouseEvent
InitCommonControlsEx
DestroyPropertySheetPage
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_EndDrag
CreatePropertySheetPageA
ImageList_DragMove
ImageList_GetImageInfo
ImageList_BeginDrag
ImageList_AddMasked
ImageList_Destroy
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_GetImageCount

user32

GetMenuDefaultItem
SetCapture
RegisterClassW
LoadMenuW
DrawFrameControl
ReleaseCapture
GetWindowPlacement
IsWindow
ShowWindow
DrawFocusRect
GetMessagePos
SystemParametersInfoA
GetClassNameW
CallNextHookEx
DefWindowProcW
GetSystemMenu
BringWindowToTop
SetTimer
GetSystemMetrics
DrawMenuBar
WaitMessage
CloseClipboard
AdjustWindowRectEx
GetCapture
SetWindowRgn
CopyRect
TranslateMDISysAccel
UnhookWindowsHookEx
GetDlgItemInt
IntersectRect
BeginPaint
OffsetRect
InflateRect
UnregisterClassW
EnumChildWindows
RegisterClipboardFormatW
GetDesktopWindow
GetWindow
ClientToScreen
SetClassLongW
ReuseDDElParam
EnableMenuItem
EndPaint
MessageBoxW
IsMenu
EqualRect
IsRectEmpty
LoadBitmapW
SetParent
CreateWindowExW
IsWindowEnabled
SetMenu
KillTimer
DestroyMenu
CheckMenuItem
WindowFromPoint
SetMenuDefaultItem
RegisterClassExW
SendMessageW
UpdateWindow
IsZoomed
ChildWindowFromPoint
GetForegroundWindow
CreateAcceleratorTableW
DestroyIcon
GetCursorPos
AttachThreadInput
DestroyWindow
PostQuitMessage
DestroyAcceleratorTable
FillRect
LoadCursorW
GetWindowTextW
GetTopWindow

wsock32

WSACleanup

winspool.drv

ord204
GetPrinterW
GetPrinterA
OpenPrinterW
DeviceCapabilitiesA
DeviceCapabilitiesW
ClosePrinter
OpenPrinterA

Sections

.text
Size: 220KB - Virtual size: 217KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

476194ae3d6643da08d86d1eba9d8cfc

Headers

File Characteristics

Imports

shell32

winmm

gdi32

ole32

kernel32

shlwapi

advapi32

comctl32

user32

wsock32

winspool.drv

Sections

.text Size: 220KB - Virtual size: 217KB

.rdata Size: 112KB - Virtual size: 110KB

.data Size: 52KB - Virtual size: 82KB

.rsrc Size: 12KB - Virtual size: 10KB

.text
Size: 220KB - Virtual size: 217KB

.rdata
Size: 112KB - Virtual size: 110KB

.data
Size: 52KB - Virtual size: 82KB

.rsrc
Size: 12KB - Virtual size: 10KB