378c9afc50895203a8a5eb9beb7b1799fe35f506e8d942158170f0c3ef709878

Sharing

Copy URL Twitter E-mail

General

Target

378c9afc50895203a8a5eb9beb7b1799fe35f506e8d942158170f0c3ef709878
Size

812KB
MD5

228388120f68468f620a53e87f48d730
SHA1

6d302a245830060a2b59f396dcc9f29973709a5e
SHA256

378c9afc50895203a8a5eb9beb7b1799fe35f506e8d942158170f0c3ef709878
SHA512

bd24ff0a656f843f832d77eb41fe4c6adc5d881d0b033b192fe467e6ab5d7f92fe7f04dddea1d2a08768a85e3504c5eebf47a1393e0ec1a565638e5b3455f88d
SSDEEP

12288:6SADDHyj7/BbmaDEPoiAtPA6lHu1PUK1FpRScTbNNwkwBJwBarsGSjx:ky9EAZI6lK1FppTBKkGJGayx

Score

N/A

Malware Config

Signatures

Files

378c9afc50895203a8a5eb9beb7b1799fe35f506e8d942158170f0c3ef709878
.exe windows x86

7cb6d6d119d595b5e656eb23798762b0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

dbghelp

MiniDumpWriteDump

kernel32

GetLongPathNameA
CreateProcessA
DeviceIoControl
GlobalMemoryStatus
VirtualQuery
RaiseException
GetFileSize
WriteFile
SetFilePointer
GetFileTime
GetSystemTimeAsFileTime
GetSystemInfo
FileTimeToLocalFileTime
FileTimeToDosDateTime
lstrcpyA
lstrlenA
GetTickCount
lstrcmpA
GetVersionExA
GetProcAddress
FlushInstructionCache
VirtualProtectEx
WriteProcessMemory
LoadLibraryA
lstrcpynA
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
OpenFileMappingA
GetLocalTime
MultiByteToWideChar
WideCharToMultiByte
SetProcessWorkingSetSize
WinExec
WaitForSingleObject
ReadFile
DeleteFileA
CopyFileA
GetShortPathNameA
GetCurrentThread
SetThreadPriority
lstrcatA
CreateEventA
GetEnvironmentVariableA
OutputDebugStringW
SetEndOfFile
CreateFileW
SetEnvironmentVariableA
WriteConsoleW
GetStringTypeW
OutputDebugStringA
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
LoadLibraryW
SetFilePointerEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
ReadConsoleW
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetConsoleCtrlHandler
LoadLibraryExW
FreeLibrary
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetFileType
HeapSize
GetModuleFileNameW
GetStdHandle
CreateSemaphoreW
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetLastError
UnhandledExceptionFilter
FatalAppExitA
GetCommandLineA
VirtualProtect
VirtualAlloc
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileA
FindFirstFileExA
FindClose
AreFileApisANSI
GetModuleHandleExW
IsProcessorFeaturePresent
IsDebuggerPresent
SetPriorityClass
CreateDirectoryA
GetTempPathA
GetModuleHandleA
CreateMutexA
Sleep
ReleaseMutex
ResumeThread
GetLastError
CreateThread
OpenProcess
GetProcessHeap
HeapFree
HeapAlloc
GlobalAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CreateFileA
GetFileAttributesExW
GetModuleFileNameA
CloseHandle
InitializeCriticalSectionAndSpinCount
SetErrorMode
GetCurrentThreadId
SetUnhandledExceptionFilter
ExitProcess
GetCurrentProcessId
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
GlobalFree
SetStdHandle
RtlUnwind
DecodePointer
EncodePointer
lstrcatW
GetSystemDirectoryA
lstrlenW
LocalFree
FindResourceA
SizeofResource
LoadResource
LockResource
FreeResource
InterlockedExchange

user32

GetClassNameA
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
wvsprintfA
wsprintfA
SendMessageA
GetParent
GetWindowRect
EnumChildWindows
TrackMouseEvent
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
PostMessageA
IsZoomed
CallWindowProcA
UnregisterClassA
RegisterClassExA
CreateWindowExA
ShowWindow
MoveWindow
GetDC
ReleaseDC
BeginPaint
EndPaint
RemovePropA
GetClientRect
MapWindowPoints
FindWindowExA
LoadCursorA
LoadImageA
RegisterWindowMessageA
PostThreadMessageA
DefWindowProcW
CallWindowProcW
SetPropA
GetPropA
IsWindowEnabled
DrawTextA
GetWindowTextA
SystemParametersInfoA
FillRect
SetCursor
SetWindowTextA
InvalidateRect
SetWindowRgn
GetForegroundWindow
KillTimer
SetTimer
OffsetRect
SetWindowPos
DestroyWindow
PostQuitMessage
DrawIconEx
DestroyIcon
GetWindowLongA
SetWindowLongW

gdi32

GetObjectA
CreatePolygonRgn
TextOutA
CreateSolidBrush
SetTextColor
StretchBlt
GetTextExtentPoint32A
CreateFontA
CreateDIBSection
SetBkMode
SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC
BitBlt
GetBitmapBits

advapi32

GetUserNameA
StartServiceA
OpenServiceA
OpenSCManagerA
DeleteService
CreateServiceA
ControlService
CloseServiceHandle
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyA
RegCloseKey

shell32

ShellExecuteExA
SHChangeNotify

ole32

OleUninitialize
StgCreateDocfile
OleCreate
OleInitialize
CoUninitialize
CreateStreamOnHGlobal
CoCreateInstance
CoInitialize

oleaut32

VariantClear
VariantCopy
VarCmp
SysAllocStringLen
SysStringLen
SysStringByteLen
SysAllocStringByteLen
VariantInit
SafeArrayDestroy
SafeArrayAccessData
SafeArrayPutElement
VariantChangeType
CreateErrorInfo
SetErrorInfo
GetErrorInfo
SafeArrayCreate
SysAllocString
SysFreeString

ws2_32

accept
bind
closesocket
inet_ntoa
gethostbyname
gethostname
__WSAFDIsSet
WSACleanup
WSAStartup
connect
ioctlsocket
socket
shutdown
setsockopt
sendto
send
select
recvfrom
recv
listen
inet_addr
htons
htonl
getsockname
getpeername

msimg32

AlphaBlend

shlwapi

StrStrIA

wininet

InternetCloseHandle
InternetOpenA
DeleteUrlCacheEntry
InternetReadFile
InternetOpenUrlA

psapi

GetModuleInformation

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

Sections

.text
Size: 442KB - Virtual size: 441KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 255KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7cb6d6d119d595b5e656eb23798762b0

Headers

DLL Characteristics

File Characteristics

Imports

dbghelp

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

ws2_32

msimg32

shlwapi

wininet

psapi

version

Sections

.text Size: 442KB - Virtual size: 441KB

.rdata Size: 93KB - Virtual size: 93KB

.data Size: 20KB - Virtual size: 47KB

.rsrc Size: 255KB - Virtual size: 254KB

.text
Size: 442KB - Virtual size: 441KB

.rdata
Size: 93KB - Virtual size: 93KB

.data
Size: 20KB - Virtual size: 47KB

.rsrc
Size: 255KB - Virtual size: 254KB