19b38cce7741169a917324e046f84296f9547da80165c7f110f03c36848cc7a8

Sharing

Copy URL Twitter E-mail

General

Target

19b38cce7741169a917324e046f84296f9547da80165c7f110f03c36848cc7a8
Size

2.8MB
MD5

b1d4696b7691271d2cd46f35e1dbcc8b
SHA1

08dde7b030869019da0554a174e72251ed5faec0
SHA256

19b38cce7741169a917324e046f84296f9547da80165c7f110f03c36848cc7a8
SHA512

229fe65e5d29c6092200b4e4d833d2c232c762cbb1805c4eab35e3d6b7d148096518673efb96f73a6c42a73f4fc9ca4bf4cbaf8f3c1e575a554d5825c16bf3df
SSDEEP

49152:9DL2eAn+QydVgJ5ARaourm5KzA04e7BZuTuukmR7DACRaIitoI4q2g0KONOXvkjh:9v1c+Qq6ARajK5L0bqTuukmR7DACRaTE

Score

N/A

Malware Config

Signatures

Files

19b38cce7741169a917324e046f84296f9547da80165c7f110f03c36848cc7a8
.exe windows x86

13b89d2cfe723f2f2b7a7193e3a68bf6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
LCMapStringW
GetStringTypeW
SetEnvironmentVariableA
CreateFileA
WriteConsoleW
GetLocaleInfoA
IsProcessorFeaturePresent
IsValidLocale
GetDriveTypeW
GetFullPathNameA
GetProcessHeap
PeekNamedPipe
GetFileInformationByHandle
FindFirstFileExA
GetDriveTypeA
IsDebuggerPresent
UnhandledExceptionFilter
EnumSystemLocalesA
FindResourceW
LoadResource
SizeofResource
LockResource
GetSystemTime
GetLocalTime
Sleep
CreateThread
MultiByteToWideChar
lstrcpynW
TerminateProcess
CloseHandle
GetCurrentProcessId
lstrlenW
WideCharToMultiByte
GetLastError
GetModuleHandleW
lstrcmpW
LoadLibraryW
GetProcAddress
InterlockedDecrement
InterlockedIncrement
GetCurrentDirectoryW
FindFirstFileW
FindNextFileW
FindClose
SetEnvironmentVariableW
GetModuleFileNameW
DeleteFileW
CreateDirectoryW
GetVersionExW
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
LocalAlloc
LocalLock
LocalFree
LocalUnlock
GetCurrentThreadId
GetModuleHandleA
GetVersion
GetFileType
GetStdHandle
GetTickCount
QueryPerformanceCounter
GlobalMemoryStatus
FreeLibrary
LoadLibraryA
GetVersionExA
FlushConsoleInputBuffer
SetLastError
FormatMessageW
GlobalSize
CopyFileW
GlobalFree
InterlockedExchange
DeactivateActCtx
ActivateActCtx
GetLocaleInfoW
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
GlobalDeleteAtom
lstrcmpA
FreeResource
lstrcpyW
GetPrivateProfileIntW
WritePrivateProfileStringW
GetPrivateProfileStringW
SetThreadPriority
ResumeThread
WaitForSingleObject
GlobalAddAtomW
CompareStringW
GlobalFindAtomW
CreateActCtxW
ReleaseActCtx
RaiseException
lstrlenA
GetThreadLocale
lstrcmpiW
CreateFileW
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationW
GetFullPathNameW
FileTimeToSystemTime
FileTimeToLocalFileTime
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GlobalGetAtomNameW
TlsGetValue
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetFileAttributesExW
GetFileAttributesW
GetFileSizeEx
GetFileTime
SetErrorMode
GetTempFileNameW
GetTempPathW
GetWindowsDirectoryW
GetNumberFormatW
GetProfileIntW
SearchPathW
VirtualProtect
GetUserDefaultLCID
FindResourceExW
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
HeapFree
HeapReAlloc
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
HeapAlloc
ExitProcess
SetConsoleCtrlHandler
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
GetTimeZoneInformation
RtlUnwind
ExitThread
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapQueryInformation
HeapSize
SetStdHandle
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate

user32

IsChild
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcW
CallWindowProcW
GetMenu
GetWindowTextLengthW
ShowWindow
GetDlgCtrlID
SendDlgItemMessageW
InvalidateRect
UpdateWindow
DrawStateW
ShowOwnedPopups
SetCursor
GetMessageW
IsWindowVisible
GetKeyState
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
CheckMenuItem
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
GetFocus
PtInRect
GetWindowDC
ReleaseDC
ClientToScreen
ScreenToClient
GrayStringW
DrawTextExW
TabbedTextOutW
GetWindowThreadProcessId
DestroyMenu
GetMenuItemInfoW
InflateRect
SendDlgItemMessageA
SetActiveWindow
GetNextDlgTabItem
EndDialog
RegisterWindowMessageW
SetWindowContextHelpId
MapDialogRect
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
PostQuitMessage
WaitMessage
DispatchMessageW
TranslateMessage
IsDialogMessageW
PeekMessageW
CreateDialogIndirectParamW
GetWindow
GetAsyncKeyState
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetWindowTextW
WinHelpW
SetWindowTextW
GetParent
MoveWindow
SetWindowPos
SetFocus
CheckDlgButton
GetSystemMenu
GetWindowRgn
EnableMenuItem
GetClassNameW
DestroyCursor
CreateWindowExW
DestroyWindow
IsWindow
FillRect
GetDlgItem
DestroyIcon
DrawTextW
SystemParametersInfoW
LoadStringW
GetDialogBaseUnits
GetSysColor
EndPaint
BeginPaint
MessageBeep
MessageBoxW
GetLastActivePopup
GetActiveWindow
SetRect
GetDesktopWindow
GetDC
SetLayeredWindowAttributes
CharUpperW
GetSysColorBrush
LoadCursorW
SetCapture
WindowFromPoint
ReleaseCapture
DeleteMenu
RealChildWindowFromPoint
SetRectEmpty
EnumDisplayMonitors
CharNextW
OffsetRect
CopyAcceleratorTableW
IsRectEmpty
IntersectRect
InvalidateRgn
GetWindowLongW
SetWindowLongW
SetTimer
KillTimer
AnimateWindow
PostMessageW
GetWindowRect
PostThreadMessageW
GetCursorPos
SetForegroundWindow
DrawIcon
GetNextDlgGroupItem
LoadMenuW
SetWindowRgn
NotifyWinEvent
IsZoomed
UnionRect
EnableScrollBar
UpdateLayeredWindow
CopyRect
MonitorFromPoint
SendMessageW
RedrawWindow
EnableWindow
LoadIconW
CreatePopupMenu
AppendMenuW
IsIconic
GetSystemMetrics
GetClientRect
SubtractRect
MapVirtualKeyExW
IsCharLowerW
GetDoubleClickTime
GetUpdateRect
IsClipboardFormatAvailable
CreateMenu
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
GetKeyNameTextW
CharUpperBuffW
CopyIcon
FrameRect
CopyImage
GetIconInfo
HideCaret
InvertRect
RegisterClipboardFormatW
LockWindowUpdate
SetCursorPos
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyW
ToUnicodeEx
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
SetClassLongW
DestroyAcceleratorTable
SetParent
UnpackDDElParam
ReuseDDElParam
LoadImageW
LoadAcceleratorsW
InsertMenuItemW
BringWindowToTop
TranslateAcceleratorW
UnregisterClassW
GetMenuDefaultItem
SetMenuDefaultItem
IsWindowEnabled
IsMenu

gdi32

SetPixelV
GetTextFaceW
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
LPtoDP
SetPaletteEntries
ExtFloodFill
EnumFontFamiliesExW
Rectangle
SetPixel
StretchBlt
SetDIBColorTable
OffsetRgn
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
Polygon
Ellipse
Polyline
CreateEllipticRgn
CreatePolygonRgn
CreateDIBSection
CreateRoundRectRgn
DPtoLP
PatBlt
GetMapMode
CombineRgn
SetRectRgn
GetRgnBox
GetTextColor
GetTextCharsetInfo
EnumFontFamiliesW
GetTextMetricsW
CreateRectRgnIndirect
CreateDIBitmap
CreateHatchBrush
CreatePen
GetObjectType
SelectPalette
GetStockObject
CreateBitmap
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutW
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
ExtTextOutW
GetObjectW
CopyMetaFileW
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
BitBlt
SetTextColor
SetBkColor
DeleteObject
DeleteDC
GetTextExtentPoint32W
SelectObject
CreateFontIndirectW
CreateDCW
CreateSolidBrush
GetBkColor

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegEnumValueW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW
DeregisterEventSource
ReportEventA
RegisterEventSourceA
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegQueryInfoKeyW

shell32

ShellExecuteW
ShellExecuteA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHAppBarMessage
Shell_NotifyIconW
DragQueryFileW
DragFinish

comctl32

ImageList_GetIconSize
InitCommonControlsEx

shlwapi

PathFileExistsW
PathFileExistsA
PathRemoveFileSpecW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
UrlUnescapeW

ole32

CoRegisterMessageFilter
OleDuplicateData
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoDisconnectObject
CoUninitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CreateStreamOnHGlobal
CoTaskMemAlloc
ReleaseStgMedium
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
CoInitializeEx
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
CoRevokeClassObject
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoTaskMemFree
CoInitialize
CoCreateGuid

oleaut32

VariantInit
VariantCopy
DispCallFunc
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayCreate
VariantChangeType
SysStringLen
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
LoadTypeLi
OleCreateFontIndirect
VariantClear
SysAllocStringLen
SysFreeString
SysAllocString

oledlg

OleUIBusyW

gdiplus

GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDrawImageI
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipCreateFromHDC

ws2_32

shutdown
WSAGetLastError
WSASetLastError
send
recv
inet_ntoa
WSACleanup
accept
listen
setsockopt
bind
inet_addr
htons
socket
WSAStartup
closesocket
WSAAsyncSelect

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

wininet

InternetSetStatusCallbackW
InternetCanonicalizeUrlW
InternetQueryOptionW
InternetQueryDataAvailable
InternetOpenUrlW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetCrackUrlW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpQueryInfoW

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 513KB - Virtual size: 513KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 215KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13b89d2cfe723f2f2b7a7193e3a68bf6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

ws2_32

oleacc

wininet

imm32

winmm

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 513KB - Virtual size: 513KB

.data Size: 60KB - Virtual size: 98KB

.rsrc Size: 98KB - Virtual size: 97KB

.reloc Size: 215KB - Virtual size: 214KB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 513KB - Virtual size: 513KB

.data
Size: 60KB - Virtual size: 98KB

.rsrc
Size: 98KB - Virtual size: 97KB

.reloc
Size: 215KB - Virtual size: 214KB