0a0f0273983b9101af7df447fff6dda77c816a2a64ee52187d3c74dec0194943

Sharing

Copy URL Twitter E-mail

General

Target

0a0f0273983b9101af7df447fff6dda77c816a2a64ee52187d3c74dec0194943
Size

694KB
MD5

30150ad5535d033e6430f13011d40e20
SHA1

b2f80aa088c8efaf2dbf12ab119ce21cf51858ee
SHA256

0a0f0273983b9101af7df447fff6dda77c816a2a64ee52187d3c74dec0194943
SHA512

93cddc4f6874e0c89cb712e1b6644492280ad3e8b9d178e6807db78ab4068b3a6112300212584eab2a5156e54d8435e5224f67248c816bb2b774ffe95baa6d81
SSDEEP

12288:RlSfQ4SvF82DFkcMIcgosq2ptU6fK2WQVlRlDciLjKEi2kAHKx8hNf26plTVH2Dk:RTF9pechcFs+GWQVlzciLjKEi2kAHKxI

Score

N/A

Malware Config

Signatures

Files

0a0f0273983b9101af7df447fff6dda77c816a2a64ee52187d3c74dec0194943
.exe windows x86

9403f8e24ea9c7c2ac9d424dce7920e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapFree
HeapReAlloc
RtlUnwind
RaiseException
ExitThread
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
IsDebuggerPresent
GetOEMCP
IsValidCodePage
LCMapStringW
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
SetErrorMode
GetFileSizeEx
FileTimeToLocalFileTime
CreateFileW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetFullPathNameW
GetFileTime
GetFileAttributesW
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
FileTimeToSystemTime
GetThreadLocale
lstrlenA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetTickCount
GetCurrentProcessId
GlobalGetAtomNameW
GetModuleHandleA
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
GetPrivateProfileStringW
WritePrivateProfileStringW
SuspendThread
SetThreadPriority
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
lstrlenW
MulDiv
MultiByteToWideChar
GetTempPathW
CreateThread
GetModuleHandleW
SetLastError
FreeLibrary
InterlockedDecrement
InterlockedIncrement
LocalFree
GetCommandLineW
GetProcAddress
LoadLibraryW
GetCurrentThreadId
ExitProcess
Sleep
GetExitCodeThread
ReleaseMutex
CreateMutexW
WideCharToMultiByte
SetEvent
ResumeThread
CreateEventW
WaitForSingleObject
CloseHandle
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleFileNameW
GetACP
GetLastError

user32

GetNextDlgTabItem
CreateDialogIndirectParamW
PostThreadMessageW
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatW
UnpackDDElParam
ReuseDDElParam
LoadMenuW
DestroyMenu
GetWindowThreadProcessId
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
BringWindowToTop
TranslateAcceleratorW
SetCursor
LoadCursorW
SetWindowRgn
DrawIcon
SystemParametersInfoW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
FillRect
ReleaseCapture
SetCapture
InvalidateRgn
ReleaseDC
GetDC
CopyAcceleratorTableW
IsRectEmpty
IsWindowEnabled
MoveWindow
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
RemovePropW
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
EndDialog
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetDlgCtrlID
GetMenu
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetActiveWindow
IsWindowVisible
PeekMessageW
GetCursorPos
ValidateRect
GetMenuState
GetDesktopWindow
SetWindowsHookExW
WindowFromPoint
ScreenToClient
GetSubMenu
PtInRect
LoadMenuA
GetMenuItemID
GetMenuStringW
GetMenuItemCount
PostQuitMessage
IsIconic
GetKeyState
CopyRect
GetComboBoxInfo
DrawEdge
DestroyIcon
CharUpperW
CharNextW
UnregisterClassW
GetSysColorBrush
GetMenuItemInfoW
IsZoomed
DrawTextW
IsWindow
LoadImageW
InflateRect
UnionRect
ShowOwnedPopups
SetWindowContextHelpId
SetActiveWindow
MapDialogRect
DrawIconEx
GetFocus
LoadIconW
GetSysColor
MapWindowPoints
KillTimer
SendMessageW
InvalidateRect
GetWindowRect
GetClientRect
LoadBitmapW
DispatchMessageW
TranslateMessage
GetMessageW
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
SetPropA
GetParent
GetClassNameA
DefWindowProcW
CallWindowProcW
GetPropA
SetRect
RegisterWindowMessageW
SetTimer
ShowWindow
GetPropW
PostMessageW
SetFocus
FindWindowExW
EnableWindow
SetWindowPlacement
UpdateWindow
GetSystemMetrics
SetWindowLongW
GetWindowLongW
SetParent
SetPropW
ScrollWindow

gdi32

ExtSelectClipRgn
CreatePatternBrush
CreateEllipticRgn
LPtoDP
SetWindowExtEx
GetCharWidthW
StretchDIBits
GetBkColor
CreateFontIndirectW
GetMapMode
GetTextMetricsW
GetTextExtentPoint32W
GetTextColor
ScaleWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
Ellipse
DeleteDC
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
RestoreDC
SaveDC
GetRgnBox
CreateRectRgnIndirect
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps
CreateSolidBrush
FillPath
EndPath
BeginPath
CreateFontW
SetBkMode
CreateCompatibleBitmap
CreatePen
StretchBlt
DeleteObject
BitBlt
GetStockObject
GetObjectW
SelectObject
CreateCompatibleDC

msimg32

TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegOpenKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegQueryValueExW
RegQueryValueExA
RegSetValueExW
RegCreateKeyExW

shell32

CommandLineToArgvW
DragQueryFileW
DragFinish

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFileExistsW
PathFindExtensionW

oledlg

OleUIBusyW

ole32

CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoTaskMemAlloc
OleIsCurrentClipboard
CoCreateInstance
CoUninitialize
OleUninitialize
OleInitialize
CoTaskMemFree
CoGetClassObject
OleFlushClipboard
CoRegisterMessageFilter
CoRevokeClassObject

oleaut32

OleCreateFontIndirect
VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantInit
VariantChangeType
VariantClear
SysStringLen
SysAllocString
SysAllocStringLen
SysFreeString

urlmon

URLDownloadToFileW

wininet

FindNextUrlCacheEntryW
DeleteUrlCacheEntryW
FindCloseUrlCache
FindFirstUrlCacheEntryW

Sections

.text
Size: 350KB - Virtual size: 350KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 226KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9403f8e24ea9c7c2ac9d424dce7920e4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

wininet

Sections

.text Size: 350KB - Virtual size: 350KB

.rdata Size: 101KB - Virtual size: 100KB

.data Size: 15KB - Virtual size: 30KB

.rsrc Size: 226KB - Virtual size: 226KB

.text
Size: 350KB - Virtual size: 350KB

.rdata
Size: 101KB - Virtual size: 100KB

.data
Size: 15KB - Virtual size: 30KB

.rsrc
Size: 226KB - Virtual size: 226KB