aca3264ed04cbd54eeed74d8fb243fd22b7dfae4683836e807973358816ccf49

Sharing

Copy URL Twitter E-mail

General

Target

aca3264ed04cbd54eeed74d8fb243fd22b7dfae4683836e807973358816ccf49
Size

392KB
MD5

49bbb082ff032f4e97c7f647f1766c80
SHA1

52e8b8e340e8a2b5b393248becc41f7e4bdea291
SHA256

aca3264ed04cbd54eeed74d8fb243fd22b7dfae4683836e807973358816ccf49
SHA512

9b8ab740c013d613b857cb68fface11251d6a0da06dc2094e846d265d985835cb9c6933e9a0c94cf73cca8c6c5f118b5e4b6d3728770a6755c725884e2858222
SSDEEP

6144:R+4IJdiB3nGOhsdrTIgbeCYZxrweQK+v:R+4IJdi1VhKJLYZxsK

Score

N/A

Malware Config

Signatures

Files

aca3264ed04cbd54eeed74d8fb243fd22b7dfae4683836e807973358816ccf49
.exe windows x86

f82fbcf0ec4b20c8c937106e86aa6980

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetPrivateProfileIntW
WritePrivateProfileStringW
MultiByteToWideChar
lstrlenA
GetVersionExW
LoadLibraryW
GetProcAddress
FreeLibrary
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GlobalReAlloc
GetTickCount
CreateEventW
ResetEvent
WaitForSingleObject
InterlockedDecrement
HeapFree
GetProcessHeap
InterlockedIncrement
HeapAlloc
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
DuplicateHandle
WaitForMultipleObjects
GetSystemDirectoryW
DeleteCriticalSection
LeaveCriticalSection
LoadResource
LockResource
SizeofResource
CloseHandle
GetFileSize
GetModuleFileNameW
SetEnvironmentVariableA
SetEndOfFile
CompareStringA
GetLastError
CreateFileA
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetTimeZoneInformation
LoadLibraryA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetDateFormatA
GetTimeFormatA
IsValidCodePage
GetOEMCP
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetFilePointer
VirtualAlloc
VirtualFree
HeapCreate
GetCPInfo
LCMapStringW
LCMapStringA
RtlUnwind
CreateThread
ExitThread
GetStartupInfoW
GetSystemTimeAsFileTime
ExitProcess
GetModuleHandleA
IsDebuggerPresent
SetUnhandledExceptionFilter
GetPrivateProfileStringW
FreeResource
WriteFile
CreateFileW
lstrcpynW
ReadFile
SetLastError
SetEvent
OpenFileMappingW
GetFileAttributesW
OpenEventW
UnmapViewOfFile
MapViewOfFile
WideCharToMultiByte
GetCurrentThreadId
CreateDirectoryW
InitializeCriticalSection
GetLocalTime
CompareStringW
EnterCriticalSection
CreateMutexW
FindResourceW
Sleep
InterlockedExchange
UnhandledExceptionFilter
TerminateProcess
GetThreadLocale
GetLocaleInfoA
GetACP
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
RaiseException
InterlockedCompareExchange
FindResourceExW

user32

RegisterClassExW
SystemParametersInfoW
FindWindowW
IsWindow
SetForegroundWindow
SetWindowPos
ShowWindow
SetRect
RegisterWindowMessageW
MoveWindow
UpdateWindow
DestroyWindow
PostMessageW
FindWindowA
UnregisterClassA
SendMessageTimeoutW
GetMessageW
TranslateMessage
DispatchMessageW
GetMenuState
GetSystemMenu
GetWindowTextW
GetWindowLongW
SetCursor
CallNextHookEx
CallWindowProcW
SetWindowsHookExW
SetWindowPlacement
SetFocus
UnhookWindowsHookEx
ClientToScreen
WindowFromPoint
PtInRect
GetClientRect
SetWindowLongW
ScreenToClient
SetTimer
GetActiveWindow
KillTimer
SendMessageW
UnionRect
OffsetRect
IntersectRect
InvalidateRect
SetWindowRgn
IsRectEmpty
GetCursorPos
IsZoomed
BeginPaint
GetDC
UpdateLayeredWindow
ReleaseDC
FindWindowExW
GetClassNameW
IsWindowVisible
GetClassInfoExW
GetWindowRect
GetSystemMetrics
DrawIconEx
EndPaint
CreateWindowExW
LoadCursorW
CopyRect
DrawTextW
EqualRect
GetClassInfoW
FillRect
DefWindowProcW
GetKeyState
GetCapture
ReleaseCapture
SetCapture

gdi32

SetTextColor
CreateSolidBrush
GetObjectA
Rectangle
CombineRgn
ExtCreateRegion
GetObjectW
GetStockObject
CreatePen
BitBlt
ExcludeClipRect
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreateRectRgn
SetBkMode
DeleteDC
DeleteObject
CreateFontIndirectW
GetTextExtentPoint32W

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

shell32

SHGetSpecialFolderPathW

ole32

CreateStreamOnHGlobal
CoLoadLibrary

shlwapi

PathAppendW

comctl32

InitCommonControlsEx
_TrackMouseEvent

gdiplus

GdiplusShutdown
GdipCreateHBITMAPFromBitmap
GdipGetImageHeight
GdipGetImageWidth
GdipAlloc
GdipFree
GdipDrawImageRectI
GdiplusStartup
GdipBitmapUnlockBits
GdipSetWorldTransform
GdipCloneBitmapAreaI
GdipCreateSolidFill
GdipDeleteBrush
GdipSetStringFormatTrimming
GdipDeleteFont
GdipMeasureString
GdipDrawString
GdipCreateFontFromLogfontA
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipCreateFontFromDC
GdipSetStringFormatFlags
GdipSetTextRenderingHint
GdipDeleteStringFormat
GdipCreateStringFormat
GdipLoadImageFromFile
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipRotateMatrix
GdipCreateBitmapFromScan0
GdipTranslateMatrix
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipDeleteMatrix
GdipGraphicsClear
GdipCreateMatrix
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipGetImagePixelFormat
GdipDisposeImage
GdipCloneImage
GdipDrawImageRectRectI
GdipBitmapLockBits

msimg32

AlphaBlend

iphlpapi

GetAdaptersInfo

wininet

HttpQueryInfoW
HttpOpenRequestW
HttpSendRequestW
InternetReadFileExA
InternetCloseHandle
InternetSetStatusCallbackW
InternetOpenW
InternetCrackUrlW
InternetConnectW

Sections

.text
Size: 252KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f82fbcf0ec4b20c8c937106e86aa6980

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

comctl32

gdiplus

msimg32

iphlpapi

wininet

Sections

.text Size: 252KB - Virtual size: 248KB

.rdata Size: 56KB - Virtual size: 52KB

.data Size: 12KB - Virtual size: 20KB

.tls Size: 4KB - Virtual size: 13B

.rsrc Size: 4KB - Virtual size: 1KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 252KB - Virtual size: 248KB

.rdata
Size: 56KB - Virtual size: 52KB

.data
Size: 12KB - Virtual size: 20KB

.tls
Size: 4KB - Virtual size: 13B

.rsrc
Size: 4KB - Virtual size: 1KB

.rmnet
Size: 60KB - Virtual size: 60KB