13280d423f2fc2badc95ec02336996ef11283666e655d6cad21a6035e2b1426e

Sharing

Copy URL Twitter E-mail

General

Target

13280d423f2fc2badc95ec02336996ef11283666e655d6cad21a6035e2b1426e
Size

826KB
MD5

5489c60511767c8e1c66a0f06b99d710
SHA1

9f99e24157837022e56172b0981a2b71be0b93df
SHA256

13280d423f2fc2badc95ec02336996ef11283666e655d6cad21a6035e2b1426e
SHA512

1229d66d0370d92250a1448868bc5d0228581808d726e591fe2e63171af22d26b5f2b60f413d3e23e97aea76fa4d14e95647aceacf91a6f6f4e745100a0a4c0e
SSDEEP

24576:PmscPC/AnVXdDITqk0o3oTxtC5fecu66htK9bB7gU49:PdcPlnVR/k0o3oyfez66W9bN54

Score

N/A

Malware Config

Signatures

Files

13280d423f2fc2badc95ec02336996ef11283666e655d6cad21a6035e2b1426e
.exe windows x86

3a736e0f2a5e599acafd205c30f0a55c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsValidLocale
CreateDirectoryA
FlushFileBuffers
GetFileAttributesExA
WriteFile
SetErrorMode
GetProcessHeap
SetUnhandledExceptionFilter
OpenProcess
GetTempPathW
InitializeCriticalSection
GetThreadTimes
LocalFileTimeToFileTime
GetExitCodeProcess
InterlockedCompareExchange
GetExitCodeThread
GetDriveTypeA
WideCharToMultiByte
lstrlenA
GetSystemPowerStatus
HeapDestroy
HeapCreate
InterlockedExchangeAdd
GetModuleHandleA
InterlockedExchange
SystemTimeToFileTime
SetEndOfFile
LeaveCriticalSection
IsValidCodePage
LoadResource
SizeofResource
GetProcessAffinityMask
FindClose
HeapSize
GetFileSize
GetStdHandle
FindNextFileA
GetTickCount
GetTempPathA
TlsAlloc
InterlockedIncrement
GetTempFileNameA
TlsSetValue
GetCommandLineA
LoadLibraryW
GlobalLock
GetProcAddress
GetWindowsDirectoryA
GlobalMemoryStatusEx
CreateProcessA
LocalAlloc
FindFirstFileA
GetCurrentProcess
ExpandEnvironmentStringsA
ReadFile
FindFirstFileExA
GetThreadLocale
GetFileSizeEx
GetCurrentProcessId
GetModuleFileNameA
GetSystemInfo
WaitForSingleObject
TlsFree
ExitProcess
CopyFileA
CreateFileMappingA
LockFileEx
GetProfileStringA
GetLocaleInfoA
ReleaseMutex
CreateThread
GlobalSize
GlobalAlloc
GetUserDefaultLCID
LocalFree
GetVersionExA
IsDBCSLeadByteEx
UnmapViewOfFile
GetLastError
DeleteFileW
SetCurrentDirectoryA
SetLastError
MultiByteToWideChar
GetSystemTime
GetDiskFreeSpaceA
MoveFileExW
GetEnvironmentVariableA
FileTimeToSystemTime
PeekNamedPipe
SetThreadPriority
GetFileType
SetNamedPipeHandleState
ReleaseSemaphore
InterlockedDecrement
QueryPerformanceCounter
CloseHandle
GetSystemTimeAsFileTime
GetFileAttributesA
SetFilePointer
CreateFileA
GetStartupInfoA
DeviceIoControl
GlobalMemoryStatus
FreeLibrary
UnlockFile
TerminateThread
OpenFileMappingA
SetThreadLocale
CreateSemaphoreA
MapViewOfFile
GetShortPathNameA
DuplicateHandle
LockResource
GetCPInfo
ResumeThread
SetThreadExecutionState
DeleteFileA
LockFile
GlobalUnlock
GetLogicalDriveStringsA
CreatePipe
CreateMutexA
VirtualProtect
DeleteCriticalSection
GetACP
SuspendThread
TlsGetValue
AreFileApisANSI
GetVolumeInformationA
GetFileTime
GetCurrentThreadId
GetProcessWorkingSetSize
SetFileTime
FormatMessageA
RemoveDirectoryA
GetCurrentThread
LoadLibraryA
FindResourceA
GetFullPathNameA
SetEnvironmentVariableA
EnterCriticalSection
Sleep
GetProcessTimes
GetComputerNameA
UnlockFileEx
GlobalFree
TerminateProcess

user32

GetWindowThreadProcessId
GetProcessWindowStation
IsWindowEnabled
ExitWindowsEx
SetClipboardData
GetClientRect
CheckMenuItem
GetFocus
RegisterClipboardFormatW
EndMenu
FindWindowExW
ChangeDisplaySettingsW
DestroyAcceleratorTable
PeekMessageW
CheckMenuRadioItem
SetWindowTextW
GetSubMenu
InsertMenuW
GetCursorPos
InvalidateRect
DestroyWindow
DrawEdge
GetClipboardData
MsgWaitForMultipleObjects
DdeGetData
FlashWindow
SetCursor
SetWindowPos
GetUpdateRect
CallNextHookEx
DdeCreateDataHandle
GetMenuState
DispatchMessageW
ReleaseCapture
GetScrollInfo
CreatePopupMenu
EnumDisplaySettingsW
GetWindowRect
GetClipboardOwner
GetSysColor
SetFocus
DdeQueryStringW
DrawStateW
OpenClipboard
DrawIconEx
GetWindowLongW
GetWindowDC
GetDlgItem
DrawFrameControl
CreateDialogParamW
GetWindow
GetDesktopWindow
RemoveMenu
GetClassInfoW
IsDialogMessageW
InsertMenuItemW
DdeFreeDataHandle
EnumThreadWindows
GetIconInfo
UpdateWindow
EnableWindow
GetSystemMenu
GetDC
GetMenuItemInfoW
DdeInitializeW
BeginDeferWindowPos
GetClipboardViewer
IsIconic
CreateAcceleratorTableW
SetCapture
GetQueueStatus
UnregisterClassW
DestroyCursor
EndPaint
GetKeyboardState
EmptyClipboard
RegisterClassW
IsZoomed
BeginPaint
CreateIconIndirect
GetOpenClipboardWindow
GetParent
GetActiveWindow
EnableMenuItem
AppendMenuW
TranslateMessage
BringWindowToTop
GetClassNameW
ToUnicode
KillTimer
PostQuitMessage
DeferWindowPos
GetDoubleClickTime
SetTimer
LoadIconW
ReleaseDC
RegisterWindowMessageW
PostThreadMessageW
UnhookWindowsHookEx
GetSystemMetrics
GetMessageTime
GetAsyncKeyState
SetScrollInfo
TranslateAcceleratorW
PtInRect
SystemParametersInfoW
EndDeferWindowPos
MessageBoxW
EndDialog
AdjustWindowRectEx
EnumWindows
DestroyIcon
MapWindowPoints
MessageBeep
DdeCreateStringHandleW
GetInputState
ScrollWindow
CallWindowProcW
SetMenuItemInfoW
LoadAcceleratorsW
TrackPopupMenu
ChildWindowFromPoint
OffsetRect
GetForegroundWindow
CreateMenu
ClientToScreen
GetMessageW
LoadBitmapW
ShowWindow
SetWindowLongW
GetMenuItemCount
DestroyMenu
HideCaret
DdeUninitialize
WindowFromPoint
DrawMenuBar
SetForegroundWindow
MoveWindow
CopyRect
GetCaretPos
DdeDisconnect
EnumClipboardFormats
InflateRect
IsWindow
PostMessageW
DdeConnect
SetCursorPos
DdePostAdvise
GetMenu
GetWindowTextLengthW
ModifyMenuW
WaitForInputIdle
ShowCaret
RedrawWindow
LoadImageW
GetUpdateRgn
DefWindowProcW
DdeGetLastError
UnionRect
ShowCursor
ScreenToClient
VkKeyScanW
DdeFreeStringHandle
SetParent
SetWindowRgn
SetWindowsHookExW
DdeClientTransaction
DdeNameService
GetMessagePos
CloseClipboard
FillRect
DrawIcon
LoadCursorW
GetCapture
CreateDialogIndirectParamW
SetMenu
DrawFocusRect
keybd_event
DrawTextW
GetKeyState
IsWindowVisible
GetWindowTextW

gdi32

ExtCreateRegion
PlayEnhMetaFile
GetClipBox
MaskBlt
SetBrushOrgEx
GetCharABCWidthsW
CreateCompatibleDC
EqualRgn
GetObjectW
GetRgnBox
GetWinMetaFileBits
SetPixel
Polyline
CreateHatchBrush
Ellipse
OffsetRgn
CloseEnhMetaFile
PolyPolygon
CombineRgn
GetStockObject
CreatePalette
CreateRectRgn
SetROP2
SetWindowOrgEx
GetNearestPaletteIndex
RectInRegion
SetStretchBltMode
CopyEnhMetaFileW
StretchDIBits
PatBlt
GetDIBits
BitBlt
SetBkMode
GetTextMetricsW
GetTextColor
SetBkColor
SetViewportExtEx
GetMetaFileBitsEx
SetWindowExtEx
GdiFlush
SelectPalette
GetTextExtentPoint32W
SetViewportOrgEx
CreateDIBSection
PtInRegion
GetPaletteEntries
CreateCompatibleBitmap
StretchBlt
SetPolyFillMode
CreateDIBitmap
SetMapMode
GetBkColor
Pie
GetDIBColorTable
ExtCreatePen
SetWinMetaFileBits
CreateSolidBrush
EnumFontFamiliesExW
LineTo
ExcludeClipRect
SaveDC
GetPixel
SetTextAlign
GetDeviceCaps
RoundRect
GetSystemPaletteEntries
CreatePen
Arc
GetEnhMetaFileW
Rectangle
DeleteEnhMetaFile
TextOutW
CreatePatternBrush
CreateBitmap
SelectClipRgn
RestoreDC
SetMetaFileBitsEx
Polygon
CreateBitmapIndirect
MoveToEx
ExtSelectClipRgn
CreatePolygonRgn
CreateICW
GetRegionData
DeleteDC
SelectObject
CreateEnhMetaFileW
CreateFontIndirectW
RealizePalette
GetTextExtentExPointW
SetTextColor
GetEnhMetaFileHeader
CreateRectRgnIndirect
DeleteObject
ExtFloodFill

comdlg32

CommDlgExtendedError
GetOpenFileNameW
GetSaveFileNameW
ChooseColorW
ChooseFontW

advapi32

RegOpenKeyExA
RegQueryValueExW
OpenProcessToken
CloseServiceHandle
RegSetValueExW
RegOpenKeyExW
RegCloseKey
OpenServiceW
AdjustTokenPrivileges
RegEnumValueW
RegCreateKeyW
GetUserNameW
OpenSCManagerW
RegEnumKeyW
ControlService
RegDeleteKeyW
RegQueryInfoKeyW
RegQueryValueExA
LookupPrivilegeValueW
RegDeleteValueW

shell32

ExtractIconExW
ExtractIconW
DragFinish
SHGetFolderPathW
DragQueryPoint
SHBrowseForFolderW
SHGetPathFromIDListW
SHFileOperationW
DragAcceptFiles
SHGetFileInfoW
SHGetMalloc
SHGetIconOverlayIndexW
ShellExecuteExW
Shell_NotifyIconW
DragQueryFileW
SHGetSpecialFolderLocation

oleaut32

SysAllocString
SysStringLen

winmm

PlaySoundW

wsock32

sendto
getsockopt
ioctlsocket
gethostbyaddr
recvfrom
select
shutdown
htonl
ntohl
__WSAFDIsSet
getservbyname

mpr

WNetGetConnectionW

secur32

QuerySecurityPackageInfoA

oledlg

ord3

Sections

.text
Size: 400KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 378KB - Virtual size: 5.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3a736e0f2a5e599acafd205c30f0a55c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

oleaut32

winmm

wsock32

mpr

secur32

oledlg

Sections

.text Size: 400KB - Virtual size: 400KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 378KB - Virtual size: 5.6MB

.tls Size: - Virtual size: 101B

.rsrc Size: 17KB - Virtual size: 17KB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 400KB - Virtual size: 400KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 378KB - Virtual size: 5.6MB

.tls
Size: - Virtual size: 101B

.rsrc
Size: 17KB - Virtual size: 17KB

.reloc
Size: 12KB - Virtual size: 12KB