8de70926f892aa6d98fb28e14a6c667b18dbd192e5b3647f79e139f8c88cf937

Sharing

Copy URL Twitter E-mail

General

Target

8de70926f892aa6d98fb28e14a6c667b18dbd192e5b3647f79e139f8c88cf937
Size

848KB
MD5

0f976e291b9a9021a4660e243153ea58
SHA1

28826c833f9e7bef8c011f9e0f659f9044127cac
SHA256

8de70926f892aa6d98fb28e14a6c667b18dbd192e5b3647f79e139f8c88cf937
SHA512

8ad0af16eafe8495ffee3518db3ee4032697b81516599126315d15a9b8a6c6130555f552d588f84ce073eefef9531c8ae06e65876544e57b0a8f03bb36ee2b46
SSDEEP

12288:amwx1x00+QODhHAvRoDldOtx8hMvHPa8AqqVcsj457oT2ri8v7RxoHzZj7WEm2h:ajx00+VD2oDIqCvQq6c/oDSUZWsh

Score

N/A

Malware Config

Signatures

Files

8de70926f892aa6d98fb28e14a6c667b18dbd192e5b3647f79e139f8c88cf937
.exe windows x86

33ac7c17defdfba6993338245c13442f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
GlobalAlloc
TlsAlloc
GetConsoleCursorInfo
VirtualProtect
GetModuleHandleA
GetStdHandle
GetConsoleCP
TlsSetValue
TlsGetValue
ExitProcess
LocalAlloc
LoadLibraryExW
GetTickCount
SetUnhandledExceptionFilter
WriteFile
CreateToolhelp32Snapshot
GlobalUnlock
GetProcAddress
SizeofResource
SetCurrentDirectoryW
WaitForSingleObject
GetFileAttributesW
OpenEventW
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
SetErrorMode
InterlockedExchange
ReadFile
GetLastError
FindResourceExW
HeapSetInformation
HeapSize
GetProcessHeap
Process32NextW
GetVersionExW
WideCharToMultiByte
IsProcessorFeaturePresent
VerifyVersionInfoW
GetStartupInfoW
EnterCriticalSection
GetFullPathNameW
FormatMessageW
GlobalFree
HeapFree
DeleteCriticalSection
LockResource
FreeLibrary
LeaveCriticalSection
GlobalLock
GetCurrentProcess
GetFileAttributesExW
RaiseException
Thread32Next
FindResourceW
SetEndOfFile
GetSystemTimeAsFileTime
HeapReAlloc
WaitForMultipleObjects
GetExitCodeProcess
SetEvent
GetLogicalDriveStringsW
GetSystemDirectoryW
SetLastError
DuplicateHandle
DeviceIoControl
HeapAlloc
LocalFree
GetModuleFileNameW
OpenProcess
InterlockedCompareExchange
GetCurrentProcessId
UnhandledExceptionFilter
SetFilePointer
GetFileSize
GetModuleHandleW
GetVersion
Sleep
MultiByteToWideChar
CloseHandle
OutputDebugStringW
InterlockedIncrement
GetPrivateProfileIntW
LoadResource
InterlockedDecrement
LoadLibraryA
MulDiv
LoadLibraryW
CreateEventW
Process32FirstW
ResetEvent
CreateFileW
VerSetConditionMask
CreateProcessW
HeapDestroy
QueryDosDeviceW
Thread32First
GetCurrentThreadId
QueryPerformanceCounter

user32

CreateWindowExW
ChangeDisplaySettingsW
DdeNameService
VkKeyScanW
GetMenuState
SetWindowPos
GetClientRect
DrawFocusRect
IsClipboardFormatAvailable
GetClipboardData
CreatePopupMenu
OffsetRect
ReleaseDC
ReleaseCapture
ShowWindow
MapWindowPoints
EndPaint
CallWindowProcW
PtInRect
IsWindow
DestroyAcceleratorTable
FillRect
CheckMenuRadioItem
GetUpdateRgn
GetWindowTextW
GetKeyState
GetCapture
GetWindowThreadProcessId
FindWindowExW
GetSystemMetrics
ScreenToClient
UnhookWindowsHookEx
DdeDisconnect
UnionRect
UnregisterClassW
SetMenu
GetDesktopWindow
CloseClipboard
DrawStateW
DestroyMenu
GetScrollInfo
GetDC
DdeGetLastError
GetWindowDC
IsWindowEnabled
EnableMenuItem
AppendMenuW
ExitWindowsEx
GetMenu
RegisterClipboardFormatW
DrawEdge
SendMessageW
LoadIconW
IsDialogMessageW
DeferWindowPos
GetDoubleClickTime
InvalidateRect
EnumThreadWindows
DdeUninitialize
MoveWindow
MsgWaitForMultipleObjects
DdeConnect
DdeFreeStringHandle
CreateMenu
EnumWindows
TranslateAcceleratorW
DdeGetData
EnableWindow
GetMessageW
SetWindowTextW
GetWindowTextLengthW
PostQuitMessage
GetSysColor
IsIconic
CreateIconIndirect
SetTimer
LoadImageW
SetWindowRgn
GetAsyncKeyState
InflateRect
GetClassInfoW
FlashWindow
GetActiveWindow
DdePostAdvise
EndDialog
PostMessageW
ScrollWindow
GetCursorPos
SetParent
WindowFromPoint
TrackPopupMenu
RedrawWindow
DestroyIcon
EnumClipboardFormats
CallNextHookEx
IsZoomed
LoadCursorFromFileW
PeekMessageW
ValidateRect
keybd_event
DdeQueryStringW
EndDeferWindowPos
DispatchMessageW
DrawMenuBar
ShowCaret
DrawTextW
IsWindowVisible
KillTimer
DestroyCursor
SetClipboardData
ModifyMenuW
SetScrollInfo
TranslateMessage
SetFocus
GetMessagePos
SetCapture
DdeCreateStringHandleW
SystemParametersInfoW
GetWindowRect
MessageBeep
GetWindow
InsertMenuItemW
DefWindowProcW
SetCursorPos
MessageBoxW
SetCursor
DdeClientTransaction
CopyRect
DrawIconEx
GetMenuItemCount
DdeInitializeW
GetSystemMenu
WaitForInputIdle
DdeFreeDataHandle
BeginPaint
DdeCreateDataHandle
HideCaret
ShowCursor
AdjustWindowRectEx
DrawIcon
GetIconInfo
RemoveMenu
EnumDisplaySettingsW
ClientToScreen
GetForegroundWindow
PostThreadMessageW
GetParent
SetForegroundWindow
SetWindowLongW
CheckMenuItem
CreateDialogIndirectParamW
SetWindowsHookExW
DrawFrameControl
LoadBitmapW
GetKeyboardState
BeginDeferWindowPos
GetUpdateRect
GetSubMenu
DestroyWindow
GetClipboardFormatNameW
ChildWindowFromPoint
GetFocus
OpenClipboard
GetMenuItemInfoW
CreateAcceleratorTableW
BringWindowToTop
GetMessageTime
GetClassNameW
ToUnicode
GetWindowLongW
CreateDialogParamW
RegisterWindowMessageW
EmptyClipboard
InsertMenuW
UpdateWindow
SetMenuItemInfoW

gdi32

StretchDIBits
SelectPalette
CombineRgn
SaveDC
SetPolyFillMode
CreateBitmapIndirect
MoveToEx
CreateHatchBrush
GetTextColor
SetBkColor
SetWinMetaFileBits
GetTextExtentExPointW
CreatePatternBrush
RectInRegion
PtInRegion
GdiFlush
GetMetaFileBitsEx
CreateFontIndirectW
OffsetRgn
GetNearestPaletteIndex
MaskBlt
SetViewportOrgEx
GetBkColor
CreateRectRgn
CreateCompatibleBitmap
GetPixel
PatBlt
GetSystemPaletteEntries
ExcludeClipRect
GetEnhMetaFileHeader
GetDeviceCaps
GetStockObject
SelectClipRgn
CreatePalette
TextOutW
Pie
CreateCompatibleDC
CreateRectRgnIndirect
BitBlt
GetDIBits
CreateEnhMetaFileW
Ellipse
GetTextMetricsW
Polyline
Rectangle
SetBrushOrgEx
SelectObject
CreateBitmap
RealizePalette
SetBkMode
CreateSolidBrush
SetTextAlign
ExtCreatePen
GetClipBox
CloseEnhMetaFile
StretchBlt
GetCharABCWidthsW
SetWindowExtEx
GetEnhMetaFileW
DeleteObject
GetDIBColorTable
CreatePen
GetRegionData
RoundRect
GetRgnBox
SetStretchBltMode
PlayEnhMetaFile
ExtSelectClipRgn
RestoreDC
CreateDIBSection
GetWinMetaFileBits
SetMetaFileBitsEx
DeleteDC
CreateDIBitmap
SetViewportExtEx
SetROP2
DeleteEnhMetaFile
Polygon
GetTextExtentPoint32W
SetMapMode
EqualRgn
GetObjectW
GetPaletteEntries
SetPixel
ExtCreateRegion
SetWindowOrgEx
LineTo
Arc
CopyEnhMetaFileW
SetTextColor
CreatePolygonRgn
CreateICW
EnumFontFamiliesExW
ExtFloodFill

comdlg32

ChooseColorW
CommDlgExtendedError
ChooseFontW
GetSaveFileNameW
GetOpenFileNameW

advapi32

RegOpenKeyExA
RegOpenKeyExW
RegDeleteValueW
LookupPrivilegeValueW
RegQueryValueExA
OpenProcessToken
RegEnumValueW
RegSetValueExW
RegDeleteKeyW
AdjustTokenPrivileges
RegQueryInfoKeyW
RegEnumKeyW
RegCreateKeyW
GetUserNameW
RegCloseKey
RegQueryValueExW

shell32

DragAcceptFiles
ExtractIconW
SHGetIconOverlayIndexW
SHGetFolderPathW
SHBrowseForFolderW
SHGetMalloc
ShellExecuteExW
SHFileOperationW
SHGetPathFromIDListW
ExtractIconExW
Shell_NotifyIconW
SHGetSpecialFolderLocation
DragFinish
DragQueryPoint
SHGetFileInfoW
DragQueryFileW

oleaut32

SysStringLen
SysAllocString

Sections

.text
Size: 482KB - Virtual size: 482KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 258KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33ac7c17defdfba6993338245c13442f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

oleaut32

Sections

.text Size: 482KB - Virtual size: 482KB

.rdata Size: 87KB - Virtual size: 87KB

.data Size: 258KB - Virtual size: 277KB

.rsrc Size: 14KB - Virtual size: 14KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 482KB - Virtual size: 482KB

.rdata
Size: 87KB - Virtual size: 87KB

.data
Size: 258KB - Virtual size: 277KB

.rsrc
Size: 14KB - Virtual size: 14KB

.reloc
Size: 4KB - Virtual size: 3KB