73b24ab35f8fd905f073acd19bc0a3ad5b3e4bc8441f93fb7aad3f3df57d0fab

Sharing

Copy URL Twitter E-mail

General

Target

73b24ab35f8fd905f073acd19bc0a3ad5b3e4bc8441f93fb7aad3f3df57d0fab
Size

726KB
MD5

11a7b56db5c13410a501487cdc403ea0
SHA1

ba3ec6a9e1e0fd753961797ed2b341b358fbac13
SHA256

73b24ab35f8fd905f073acd19bc0a3ad5b3e4bc8441f93fb7aad3f3df57d0fab
SHA512

74e8bc4b92fd9104d060ec97b149c7740866063f264d8584d0edc52e205582fddeb0abec0e24b4814cd66b89a48ff310813584cc4a6a4e4bc1c3d4f70e5c5924
SSDEEP

12288:DSrE/5xiX9LPnP5xeplW8c+foWxbGkkO0+3B/0Xx3UT9MXki8PEKyYMI1eA//TT:u4/EbkkO1/LMXypyY3b/H

Score

N/A

Malware Config

Signatures

Files

73b24ab35f8fd905f073acd19bc0a3ad5b3e4bc8441f93fb7aad3f3df57d0fab
.exe windows x86

ffa0667aa1a6674f27a80ec2da98e675

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
lstrlenA
GetLastError
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrlenW
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
SetThreadAffinityMask
FileTimeToSystemTime
SetEvent
WaitForMultipleObjectsEx
ResetEvent
CreateEventW
SetFilePointer
SetEndOfFile
FreeLibrary
SystemTimeToTzSpecificLocalTime
GetCurrentProcess
CreateDirectoryW
WriteFile
LoadLibraryW
CopyFileW
FlushFileBuffers
GetProcAddress
MoveFileW
GetFileAttributesExW
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
FormatMessageA
GetCommandLineA
GetSystemDirectoryW
GetVolumeInformationA
GetSystemDirectoryA
GetModuleFileNameA
OutputDebugStringA
LocalFree
RaiseException
GetExitCodeThread
GetLocalTime
FindNextFileW
WideCharToMultiByte
CancelIo
GetUserDefaultLCID
VirtualFree
VirtualAlloc
GetOEMCP
GlobalAlloc
GlobalFree
DeviceIoControl
GetPrivateProfileStringW
FlushViewOfFile
GetOverlappedResult
lstrcmpA
LocalAlloc
FileTimeToLocalFileTime
lstrcpyW
CreateMutexW
OpenMutexW
GetVersionExW
GetTempPathW
GetPrivateProfileIntW
SetCurrentDirectoryW
GetCurrentThread
GetSystemTimeAsFileTime
GetThreadLocale
GetLocaleInfoA
GetACP
GetVersionExA
HeapSize
HeapReAlloc
HeapDestroy
InterlockedExchange
IsDebuggerPresent
ExitThread
Process32NextW
Process32FirstW
UnhandledExceptionFilter
FindClose
CreateFileW
ReadFile
TerminateProcess
MulDiv
GetFileAttributesW
OpenProcess
CreateThread
GetTimeFormatA
GetDateFormatA
GetStartupInfoW
RtlUnwind
GetModuleHandleA
ExitProcess
ReadFileEx
DeleteFileW
LCMapStringA
LCMapStringW
GetCPInfo
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetTickCount
FindFirstFileW
GetFileSize
ResumeThread
SuspendThread
GetCurrentProcessId
CloseHandle
GetCurrentThreadId
CreateToolhelp32Snapshot
LockResource
CreateFileMappingW
OpenThread
GetModuleFileNameW
Thread32Next
IsBadWritePtr
SizeofResource
Thread32First
GetProcessHeap
WaitForSingleObject
HeapFree
SetUnhandledExceptionFilter
HeapAlloc
CreateProcessW
LoadResource
FindResourceW
FindResourceExW
VirtualQuery
UnmapViewOfFile
MapViewOfFile
GetCommandLineW
GetModuleHandleW
SetEnvironmentVariableA
CreateFileA
SetLastError
GetStdHandle
HeapCreate
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
SetHandleCount
GetFileType
CompareStringW
CompareStringA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
LoadLibraryA
IsValidLocale
EnumSystemLocalesA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
GetStartupInfoA

user32

KillTimer
PostThreadMessageW
UnregisterClassA
DestroyWindow
EndPaint
SetCursor
SetTimer
PostQuitMessage
FillRect
PostMessageW
SetForegroundWindow
AttachThreadInput
LoadCursorW
GetClientRect
BeginPaint
GetForegroundWindow
RegisterClassExW
LoadIconW
InvalidateRect
BringWindowToTop
GetWindowLongW
SetWindowLongW
LoadBitmapW
CreateWindowExW
GetSystemMetrics
SendMessageW
UpdateWindow
EnableWindow
SetWindowTextW
DefWindowProcW
GetWindowThreadProcessId
MoveWindow
GetMessageW
TranslateMessage
DispatchMessageW
ShowWindow

gdi32

SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetTextExtentPointW
CreateFontW
CreatePen
TextOutW
GetTextColor
DeleteObject
SetBkMode
GetDeviceCaps
SetTextColor
LineTo
BitBlt
MoveToEx
DeleteDC
CreateSolidBrush

advapi32

BuildExplicitAccessWithNameW
SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
RegOpenKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW

shell32

SHCreateDirectoryExW
ShellExecuteW
SHGetSpecialFolderPathW

oleaut32

OleLoadPicturePath

shlwapi

PathIsDirectoryW
PathFileExistsW
PathFileExistsA

ws2_32

WSAAsyncSelect
WSACancelAsyncRequest
WSAAsyncGetHostByName
WSAIoctl
recvfrom
WSAEventSelect
WSAWaitForMultipleEvents
ioctlsocket
connect
select
WSAGetLastError
WSACleanup
bind
__WSAFDIsSet
send
getsockopt
getsockname
htons
setsockopt
sendto
socket
closesocket
ntohs
inet_addr
inet_ntoa
gethostbyname
ntohl
htonl
WSAStartup
recv

msimg32

GradientFill

iphlpapi

GetAdaptersInfo

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

crypt32

CryptMsgGetParam
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetNameStringW
CryptQueryObject
CryptDecodeObject
CryptMsgClose

Sections

.text
Size: 472KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 40KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ffa0667aa1a6674f27a80ec2da98e675

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

oleaut32

shlwapi

ws2_32

msimg32

iphlpapi

version

crypt32

Sections

.text Size: 472KB - Virtual size: 468KB

.rdata Size: 80KB - Virtual size: 78KB

.data Size: 40KB - Virtual size: 93KB

.rsrc Size: 124KB - Virtual size: 124KB

.text
Size: 472KB - Virtual size: 468KB

.rdata
Size: 80KB - Virtual size: 78KB

.data
Size: 40KB - Virtual size: 93KB

.rsrc
Size: 124KB - Virtual size: 124KB