d800e466a5457ca63d18fcaaf8afea7743c94e26c847ba55175d14b1f0da2408[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

d800e466a5457ca63d18fcaaf8afea7743c94e26c847ba55175d14b1f0da2408.exe
Size

2.7MB
MD5

3dbb8fdaf9254e849c35cf6ca463c60b
SHA1

4cd82b01a5e53a468b962211a840044f4030d03c
SHA256

d800e466a5457ca63d18fcaaf8afea7743c94e26c847ba55175d14b1f0da2408
SHA512

e43a7410c59f75893ad3632e22da46e2a0c9cf4d431aaae55bbedb6f8e0933314fc5df53099f0dafac5e3587119e73ba23a96d723583d55dbd3c469b62361bbc
SSDEEP

49152:eI51x9/KUdZM+1iNw8Jyw6JENk3PZkHPcaNYFBA:e

Score

N/A

Malware Config

Signatures

Files

d800e466a5457ca63d18fcaaf8afea7743c94e26c847ba55175d14b1f0da2408.exe
.dll windows x64

ed77bbb22c8d53dc3bf609f4db0e8a95

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

RtlCaptureContext
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
HeapAlloc
HeapFree
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
FlsSetValue
GetCommandLineA
GetProcessHeap
ExitProcess
HeapSize
RtlVirtualUnwind
FlsGetValue
FlsFree
FlsAlloc
GetStdHandle
HeapSetInformation
HeapCreate
HeapDestroy
Sleep
SetHandleCount
IsDebuggerPresent
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetACP
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetTickCount
GetFileTime
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetThreadLocale
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
WritePrivateProfileStringA
GetCurrentProcessId
CloseHandle
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetLocaleInfoA
lstrcmpA
GlobalFree
GlobalAlloc
FormatMessageA
LocalFree
GlobalLock
GlobalUnlock
MulDiv
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
LoadLibraryA
SetLastError
lstrcmpW
GetModuleHandleA
GetProcAddress
GetVersionExA
lstrlenA
CompareStringW
CompareStringA
GetVersion
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
GetFileType
MultiByteToWideChar

user32

InvalidateRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
BeginPaint
GetWindowDC
ReleaseDC
GetDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
GetClassLongPtrA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
GetWindowLongPtrA
SetWindowLongPtrA
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
UnregisterClassA
SetRect
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
PostMessageA
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
GetParent
CopyRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
CharUpperA
LoadIconA
GetClientRect
IsIconic
GetSystemMenu
SetWindowPos
LoadCursorA
GetSysColorBrush
DestroyMenu
SendMessageA
AppendMenuA
DrawIcon
ShowWindow
EnableWindow
GetSystemMetrics
GetCursorPos
SetActiveWindow
ClientToScreen
KillTimer
SetTimer
ValidateRect
GetWindowRect
IsRectEmpty
CopyAcceleratorTableA
CharNextA
EqualRect
PtInRect
ReleaseCapture
SetCapture
SetWindowContextHelpId
MapDialogRect
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
SetCursor
GetMessageA
TranslateMessage
GetActiveWindow
PostQuitMessage
EndPaint
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
IsWindowEnabled
MoveWindow
SetWindowTextA
IsDialogMessageA
MapWindowPoints

gdi32

DeleteObject
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreateBitmap
GetStockObject
GetDeviceCaps
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
SetMapMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegQueryValueA
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA

comctl32

ord17

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoLoadLibrary
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize

oleaut32

VariantClear
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy
VariantChangeType

gdiplus

GdipDeleteBrush
GdiplusShutdown
GdipCloneImage
GdipCloneBrush
GdipCloneBitmapArea
GdipCreateFont
GdipDrawImageRectI
GdipDrawImage
GdipMeasureString
GdipDrawString
GdipFillRectangle
GdipSetSmoothingMode
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipSetCompositingQuality
GdipGetImageGraphicsContext
GdipCreateFromHWND
GdipCreateFromHDC
GdipSetStringFormatAlign
GdipCreateLineBrushFromRect
GdipCreateSolidFill
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromResource
GdipCreateBitmapFromGraphics
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteFont
GdipGetGenericFontFamilySansSerif
GdipDeleteGraphics
GdipDeleteStringFormat
GdipCreateStringFormat
GdipFree
GdipAlloc
GdiplusStartup

crypt32

CryptStringToBinaryA

Exports

Exports

DllMain

Sections

.text
Size: 337KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed77bbb22c8d53dc3bf609f4db0e8a95

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

crypt32

Exports

Exports

Sections

.text Size: 337KB - Virtual size: 336KB

.rdata Size: 2.3MB - Virtual size: 2.3MB

.data Size: 14KB - Virtual size: 37KB

.pdata Size: 25KB - Virtual size: 25KB

.rsrc Size: 512B - Virtual size: 176B

.reloc Size: 17KB - Virtual size: 17KB

.text
Size: 337KB - Virtual size: 336KB

.rdata
Size: 2.3MB - Virtual size: 2.3MB

.data
Size: 14KB - Virtual size: 37KB

.pdata
Size: 25KB - Virtual size: 25KB

.rsrc
Size: 512B - Virtual size: 176B

.reloc
Size: 17KB - Virtual size: 17KB