5d36b7cbdd8127602fcfc54f4359e6d667aaf8f496b1d7b425c0b6d7192bbb0b

Sharing

Copy URL Twitter E-mail

General

Target

5d36b7cbdd8127602fcfc54f4359e6d667aaf8f496b1d7b425c0b6d7192bbb0b
Size

644KB
MD5

0988bd4f175844ffbcce2f07501cea40
SHA1

15d630ccd09fd120eabeaacbba910e3d72e5564c
SHA256

5d36b7cbdd8127602fcfc54f4359e6d667aaf8f496b1d7b425c0b6d7192bbb0b
SHA512

010c0ccb642b7557fbca85b51c17c966bbaf1b2f09836dd009649c736447f74d511ab8cdbdbd37ee6e5eaf6e0750110014ad903f03a183bd5ad2e58e3b0a4bc1
SSDEEP

12288:fp933oG9ZMqFPO2R/eTdZCKgqtB5ihBciRcTgno7AAI7gSzMLm7ZYae9J5:79CcO2ReTdZP7BY3YgunQgSz7Yae9J

Score

N/A

Malware Config

Signatures

Files

5d36b7cbdd8127602fcfc54f4359e6d667aaf8f496b1d7b425c0b6d7192bbb0b
.exe windows x86

a4632abb39cce1e8484980f350439bcc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetOpenA
InternetCrackUrlA
InternetOpenUrlA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle

gdiplus

GdipDeleteGraphics
GdipDeletePrivateFontCollection
GdipCreateFromHDC
GdipNewPrivateFontCollection
GdipDeleteFont
GdipCreateFont
GdipGetFontCollectionFamilyList
GdipDrawString
GdipCreateSolidFill
GdipCloneFontFamily
GdipCreateBitmapFromStream
GdipSetTextRenderingHint
GdiplusStartup
GdipGetFontCollectionFamilyCount
GdipPrivateAddMemoryFont
GdipGetImageHeight
GdipGetImageWidth
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipSetPixelOffsetMode
GdipCloneBrush
GdipSetInterpolationMode
GdipCloneImage
GdipDeleteBrush
GdipDrawImageRectI
GdipDisposeImage
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipFree
GdipAlloc
GdiplusShutdown
GdipDeleteFontFamily

kernel32

SetLastError
ExitProcess
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
GetCPInfo
GetStartupInfoA
GetProcAddress
VirtualAlloc
FindResourceA
SizeofResource
LockResource
WideCharToMultiByte
LoadResource
lstrlenW
lstrlenA
MultiByteToWideChar
CreateFileA
CloseHandle
SetFilePointerEx
GetFileSizeEx
ReadFile
WriteFile
GetModuleFileNameA
CreateEventA
WaitForSingleObject
CreateThread
SetEvent
CopyFileExA
WaitForMultipleObjects
DeleteFileA
GetTempPathA
SetFilePointer
GetLocalTime
RemoveDirectoryA
MoveFileExA
FindClose
FindNextFileA
FindFirstFileA
MoveFileA
GetCurrentProcess
GetVersionExA
GetProcessHeap
GlobalFree
GlobalAlloc
DeleteCriticalSection
GetModuleHandleA
SetHandleCount
GetTickCount
CreateProcessA
Sleep
TerminateProcess
GetCommandLineA
GetExitCodeProcess
GetTempFileNameA
LocalAlloc
LocalFree
InitializeCriticalSection
GetDiskFreeSpaceExA
HeapFree
InterlockedIncrement
InterlockedDecrement
GlobalLock
GlobalUnlock
ResetEvent
GetCurrentThreadId
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
CreateMutexA
ReleaseMutex
GetLastError
InterlockedExchange
GetLocaleInfoA
GetACP
GetThreadLocale
HeapDestroy
HeapAlloc
HeapReAlloc
HeapSize
RaiseException
EnterCriticalSection
LeaveCriticalSection
InterlockedCompareExchange
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetStdHandle
GetFileType
HeapCreate
VirtualFree
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
LoadLibraryA
SetStdHandle
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileW
SetEndOfFile
FindResourceExA

user32

CreateWindowExW
PtInRect
ReleaseCapture
SetCapture
RegisterClassExW
LoadIconA
InvalidateRect
DispatchMessageA
PostQuitMessage
SetWindowPos
EndDialog
EndPaint
DrawEdge
BeginPaint
SetCursor
GetDlgItem
SetWindowTextW
DialogBoxParamW
GetWindowLongA
SetWindowLongA
SetLayeredWindowAttributes
GetWindowRect
SetWindowRgn
DefWindowProcW
PostThreadMessageA
GetMessageA
GetSystemMetrics
DialogBoxParamA
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
GetClassNameA
UpdateWindow
MoveWindow
DefWindowProcA
ShowWindow
GetClientRect
CreateWindowExA
RegisterClassExA
LoadCursorA
UnregisterClassA
DestroyWindow
EnumChildWindows
SetWindowTextA
GetDlgCtrlID
MessageBoxW
ReleaseDC
GetDC
GetWindow
SendMessageA
GetTopWindow

gdi32

CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
CreateRectRgn
CreateDCA
GetTextFaceA
SelectObject
DeleteDC
CreateFontIndirectA
EnumFontFamiliesExA
DeleteObject
GetObjectA

advapi32

FreeSid
SetNamedSecurityInfoA
SetEntriesInAclA
CreateWellKnownSid
BuildExplicitAccessWithNameA
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
RegCreateKeyExA
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
CheckTokenMembership
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA

shell32

SHGetFolderPathW
SHFileOperationA
SHBrowseForFolderW
SHGetPathFromIDListW
SHCreateDirectoryExA
SHGetFolderLocation
SHParseDisplayName
ShellExecuteA
ShellExecuteExA
SHGetFolderPathA
SHFileOperationW

ole32

CoUninitialize
OleUninitialize
CoInitialize
CoCreateInstance
CreateStreamOnHGlobal
OleCreate
OleSetContainedObject
CoTaskMemFree
OleInitialize

oleaut32

VariantClear
SysAllocString

shlwapi

PathFileExistsA
PathIsRelativeA
SHGetValueA

ws2_32

WSACleanup
WSAStartup
closesocket
WSACloseEvent

Sections

.text
Size: 176KB - Virtual size: 431KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 372KB - Virtual size: 371KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4632abb39cce1e8484980f350439bcc

Headers

File Characteristics

Imports

wininet

gdiplus

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

ws2_32

Sections

.text Size: 176KB - Virtual size: 431KB

.rdata Size: 80KB - Virtual size: 78KB

.data Size: 12KB - Virtual size: 4.0MB

.rsrc Size: 372KB - Virtual size: 371KB

.text
Size: 176KB - Virtual size: 431KB

.rdata
Size: 80KB - Virtual size: 78KB

.data
Size: 12KB - Virtual size: 4.0MB

.rsrc
Size: 372KB - Virtual size: 371KB