a9401d52ba62b218245100c6343448040eac43934476fd1fc7c14dbc8f5a6185

Sharing

Copy URL

Twitter E-mail

General

Target

a9401d52ba62b218245100c6343448040eac43934476fd1fc7c14dbc8f5a6185
Size

384KB
MD5

6eb1c8fb571684bd3d219b963fad3d6f
SHA1

b9205cd714e320fbac5f8c22171d40cc005a26ab
SHA256

a9401d52ba62b218245100c6343448040eac43934476fd1fc7c14dbc8f5a6185
SHA512

c65072e68066bf503ffae0605c56ecc86142c0d72cd14367a3c9237725ef2705b58d14f78abc31795d6fec691737a9562c8c48075ca6e3e614824be8b1278cde
SSDEEP

6144:5NcjGIJMerRAOEYIAZ6enYlFXENKtamXUIecJw+y9Mn8c8O0lb4oI:w1JfVaT7JlF00Rex9M13oI

Score

N/A

Malware Config

Signatures

Files

a9401d52ba62b218245100c6343448040eac43934476fd1fc7c14dbc8f5a6185
.exe windows x86

c8c4c1a89b79c0fcdf515a5d57be889b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetCursorPos
WindowFromPoint
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
PostQuitMessage
EnableMenuItem
CheckMenuItem
GetActiveWindow
CreateDialogIndirectParamA
IsWindowEnabled
GetNextDlgTabItem
EndDialog
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
DefWindowProcW
SendMessageW
LoadImageW
SetWindowLongW
ValidateRect
TranslateMessage
GetMessageA
SetCursor
GetWindowThreadProcessId
UnregisterClassA
GetMenuState
FindWindowExW
GetClassInfoW
CharNextW
GetWindowLongW
GetFocus
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetSysColor
EndPaint
GetDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
LoadCursorA
GetSysColorBrush
GetClassNameA
DestroyMenu
UnhookWindowsHookEx
GetSystemMetrics
ExitWindowsEx
LoadIconA
GetDesktopWindow
BeginPaint
IsIconic
DrawIcon
LoadBitmapA
MessageBoxA
GetParent
SendMessageA
OffsetRect
CopyRect
LoadImageA
EnableWindow
InvalidateRect
GetClientRect
GetWindowRect
PostMessageA
GetWindowDC
ReleaseDC
SetWindowRgn
GetTopWindow
SetDlgItemTextA
CharNextA
CharUpperA
wsprintfA
CreateDialogParamA
DialogBoxIndirectParamA
CharLowerA
DestroyIcon
FillRect
GetDlgItemTextA
wvsprintfA
LoadStringA
SetRect
FindWindowA
IntersectRect
SubtractRect
CharPrevA
WaitForInputIdle
DialogBoxParamA
MsgWaitForMultipleObjects
KillTimer
SetTimer
CharLowerBuffA
OpenClipboard
TrackPopupMenu
AppendMenuW
CreatePopupMenu
GetSystemMenu
SetClassLongW
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
CreateDialogParamW
SetWindowTextW
wsprintfW
SendMessageTimeoutW
LoadCursorW
DrawTextW

comdlg32

GetOpenFileNameW
FindTextW
GetSaveFileNameW
PrintDlgW
ChooseColorW
ChooseFontW

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetMalloc
ShellExecuteA
ShellExecuteExW
SHGetFileInfoW
ShellExecuteW
SHBrowseForFolderA
SHGetPathFromIDListA
Shell_NotifyIconW

advapi32

RegCloseKey
LookupPrivilegeValueA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
OpenProcessToken
RegOpenKeyExA
AdjustTokenPrivileges
RegQueryValueExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCreateKeyA
RegDeleteValueA

gdi32

CreateHalftonePalette
UnrealizeObject
SelectPalette
RealizePalette
CreateFontIndirectW
GetBkMode
CreateRectRgnIndirect
CreatePen
GetObjectW
CreateDIBSection
GetTextExtentPoint32W
SetTextAlign
CreatePalette
CreateCompatibleDC
GetBkColor
BitBlt
LineTo
SelectObject
CombineRgn
CreateRectRgn
CreateFontIndirectA
GetStockObject
GetDeviceCaps
SaveDC
RestoreDC
GetSystemPaletteEntries
TranslateCharsetInfo
CreateDIBitmap
CreateFontA
GetDIBColorTable
GetTextExtentPoint32A
ExtTextOutW
SetBkColor
SetBkMode
SetTextColor
SetMapMode
GetClipBox
DeleteObject
GetDIBits
GetObjectA
CreateCompatibleBitmap
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
CreateBitmap
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
Rectangle
SetROP2
MoveToEx
EndPage
StartPage
EndDoc
StartDocW
Polyline
SelectClipRgn
RectInRegion
StretchBlt
CreateSolidBrush
GetTextMetricsW

comctl32

_TrackMouseEvent
ImageList_Create
ImageList_DrawEx
ImageList_Destroy
InitCommonControlsEx
ImageList_Add
ImageList_ReplaceIcon
CreateToolbarEx
CreatePropertySheetPageW
CreateStatusWindowW
PropertySheetW

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

netapi32

NetEnumerateComputerNames

shlwapi

ColorRGBToHLS
UrlUnescapeW
PathFindFileNameA
ColorHLSToRGB
PathFindExtensionA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

kernel32

SetLastError
GetModuleHandleA
GetProcAddress
lstrlenA
CompareStringA
GetVersion
MultiByteToWideChar
GetCurrentProcess
CreateProcessA
GetLastError
FormatMessageA
LocalFree
WaitForSingleObject
GetExitCodeProcess
GetModuleFileNameW
GetModuleFileNameA
GetVersionExA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetUserDefaultLangID
GetAtomNameA
DeleteFileA
lstrlenW
GetPrivateProfileIntA
CompareStringW
FreeLibrary
MulDiv
GlobalUnlock
GlobalLock
lstrcmpW
LoadLibraryA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
FreeResource
GlobalFree
GlobalAlloc
lstrcmpA
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
CloseHandle
GetCurrentProcessId
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
GetThreadLocale
WritePrivateProfileStringA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
CreateFileA
SetErrorMode
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
Sleep
GetStdHandle
VirtualFree
HeapCreate
HeapDestroy
GetACP
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapSize
ExitProcess
RaiseException
GetStartupInfoA
GetProcessHeap
GetCommandLineA
VirtualAlloc
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
GetTimeFormatA
GetDateFormatA
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
IsValidCodePage
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
SetEnvironmentVariableA
GetSystemDirectoryA

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8c4c1a89b79c0fcdf515a5d57be889b

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

shell32

advapi32

gdi32

comctl32

version

netapi32

shlwapi

winspool.drv

kernel32

Sections

.text Size: 112KB - Virtual size: 111KB

.rdata Size: 48KB - Virtual size: 48KB

.data Size: 6KB - Virtual size: 332KB

.tls Size: 10KB - Virtual size: 10KB

.rsrc Size: 206KB - Virtual size: 206KB

.text
Size: 112KB - Virtual size: 111KB

.rdata
Size: 48KB - Virtual size: 48KB

.data
Size: 6KB - Virtual size: 332KB

.tls
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 206KB - Virtual size: 206KB