cdecaf330a5b8ad5e39127496495574980d8317d6ba9bdca2a500b8ba21855e7

Sharing

Copy URL

Twitter E-mail

General

Target

cdecaf330a5b8ad5e39127496495574980d8317d6ba9bdca2a500b8ba21855e7
Size

2.5MB
MD5

865155e52d151a3f3f530d43d19f160c
SHA1

09a4adf488637804bf70c70d6fac9056847db83b
SHA256

cdecaf330a5b8ad5e39127496495574980d8317d6ba9bdca2a500b8ba21855e7
SHA512

2131c68a18e7738ccc843a0d46c04ad6b4ef88d14289afabe312f89d879317f46ba20ccca407ad1928f917e0eb0fee1b10c2c220c1c0be5a27312956291e5844
SSDEEP

49152:gqaQM7yo/otJxf4cCfamLrkWjRnXmTgCZjQaCbe1jJ4jK3f6NRCUxKNGd:euogvxf4cCfPLrk2nXmTgCZgbe1l4jKc

Score

N/A

Malware Config

Signatures

Files

cdecaf330a5b8ad5e39127496495574980d8317d6ba9bdca2a500b8ba21855e7
.exe windows x86

2b7f3972a044801701af8eb356c4f363

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetOpenW
InternetCanonicalizeUrlW
HttpSendRequestW
HttpOpenRequestW
InternetReadFile
InternetConnectW
InternetCloseHandle
HttpQueryInfoW

comctl32

InitCommonControlsEx

winmm

PlaySoundW

kernel32

GetCurrentProcess
GetVersionExW
GetTempPathW
GetModuleHandleW
DeviceIoControl
GetProcAddress
WaitForMultipleObjects
CreateProcessW
GetModuleFileNameW
GetSystemTimeAsFileTime
CloseHandle
CreateFileW
SetPriorityClass
GetSystemInfo
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
DuplicateHandle
RaiseException
GetCurrentThread
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
EncodePointer
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
GetCPInfo
GetCommandLineW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
CreateSemaphoreW
CreateThread
ExitThread
LoadLibraryExW
CreateTimerQueue
SetEvent
WaitForSingleObjectEx
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
GetStdHandle
GetFileType
ReadFile
SetFilePointerEx
VirtualAlloc
VirtualFree
VirtualProtect
OutputDebugStringW
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleHandleA
ReleaseSemaphore
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
IsValidCodePage
GetACP
GetOEMCP
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetTimeZoneInformation
SetStdHandle
WriteConsoleW
ReadConsoleW
LoadLibraryW
SetEndOfFile
SetEnvironmentVariableA
OutputDebugStringA
FreeResource
LoadResource
LockResource
GlobalLock
GlobalUnlock
GlobalFree
FindResourceW
GetSystemDirectoryW
GlobalDeleteAtom
lstrcmpW
LoadLibraryA
GlobalAddAtomW
GlobalFindAtomW
ResumeThread
SizeofResource
GlobalAlloc
lstrcmpA
CompareStringA
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetFileTime
GetFullPathNameW
GetTempFileNameW
GlobalGetAtomNameW
GlobalSize
LocalFree
MulDiv
FormatMessageW
CopyFileW
GlobalFlags
InitializeCriticalSection
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetCurrentDirectoryW
FindClose
FindFirstFileW
GetFileSize
GetShortPathNameW
GetVolumeInformationW
LockFile
SetFilePointer
UnlockFile
lstrcmpiW
GetStringTypeExW
GetThreadLocale
FileTimeToLocalFileTime
GetFileAttributesExW
GetFileSizeEx
FileTimeToSystemTime
GetWindowsDirectoryW
lstrcpyW
VerSetConditionMask
VerifyVersionInfoW
GetProfileIntW
SearchPathW
FindResourceExW
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
DecodePointer
DeleteFileW
GetLastError
GetFileAttributesW
HeapQueryInformation
WaitForSingleObject
VirtualQuery

user32

ReleaseCapture
CreatePopupMenu
DestroyMenu
InsertMenuItemW
IntersectRect
OffsetRect
LoadImageW
UnpackDDElParam
ReuseDDElParam
GetMenuStringW
GetMenuState
InsertMenuW
AppendMenuW
RemoveMenu
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
ClientToScreen
FillRect
InflateRect
RealChildWindowFromPoint
GetSysColorBrush
GetMenuItemInfoW
CopyImage
DeleteMenu
SetTimer
KillTimer
CharUpperW
GetKeyNameTextW
MapVirtualKeyW
UnionRect
IsRectEmpty
GetSystemMenu
SetParent
GetMenuDefaultItem
GetNextDlgGroupItem
SetCapture
WindowFromPoint
DrawFocusRect
DrawIconEx
GetIconInfo
MessageBeep
GetAsyncKeyState
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
SetRect
LockWindowUpdate
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
SetWindowRgn
IsMenu
UpdateLayeredWindow
MonitorFromPoint
TrackMouseEvent
GetComboBoxInfo
IsZoomed
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
BringWindowToTop
CopyAcceleratorTableW
GetDoubleClickTime
CopyIcon
SetMenuDefaultItem
GetLastActivePopup
RegisterClipboardFormatW
CharUpperBuffW
FrameRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
CreateMenu
MapDialogRect
DestroyCursor
GetWindowRgn
DrawIcon
GetWindowTextLengthW
GetWindowTextW
GetScrollPos
SetScrollPos
GetDesktopWindow
SetActiveWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
CreateDialogIndirectParamW
DestroyWindow
IsWindow
CheckDlgButton
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetTopWindow
GetClassNameW
GetClassLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetDlgCtrlID
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
IsIconic
SetRectEmpty
GetWindowThreadProcessId
ShowOwnedPopups
GetCursorPos
LoadMenuW
DestroyAcceleratorTable
IsDialogMessageW
IsChild
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetMessageTime
GetMessagePos
PeekMessageW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
CreateAcceleratorTableW
SetWindowsHookExW
LoadStringW
SetClassLongW
EndPaint
BeginPaint
EndDialog
DialogBoxParamW
RegisterClassExW
PostQuitMessage
DefWindowProcW
UpdateWindow
SystemParametersInfoW
ReleaseDC
GetDC
LoadIconW
SetCursorPos
SetFocus
EnableWindow
FindWindowW
DestroyIcon
TranslateAcceleratorW
LoadAcceleratorsW
DispatchMessageW
TranslateMessage
GetMessageW
LoadCursorW
SetWindowLongW
GetWindowLongW
GetSysColor
SetCursor
RemovePropW
GetPropW
SetPropW
InvalidateRect
CallWindowProcW
GetWindowPlacement
SetWindowPos
ShowWindow
CreateWindowExW
PostMessageW
GetParent
MessageBoxW
GetWindowRect
GetClientRect
SetWindowTextW
GetSystemMetrics
IsDlgButtonChecked
GetDlgItem
MoveWindow
SendMessageW
RegisterWindowMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
SendDlgItemMessageA
ModifyMenuW
GetWindow

gdi32

CreateHatchBrush
CreatePen
CreatePatternBrush
CreateBitmap
CopyMetaFileW
CreateCompatibleDC
CreateCompatibleBitmap
CreateRectRgn
CreateSolidBrush
DeleteDC
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
FillRgn
SetPaletteEntries
ExtFloodFill
SetPixelV
GetDeviceCaps
RoundRect
CreateRoundRectRgn
OffsetRgn
GetRgnBox
EnumFontFamiliesExW
Polyline
Polygon
CreatePolygonRgn
GetTextColor
Ellipse
CreateEllipticRgn
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
GetBkColor
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
DPtoLP
SetRectRgn
CreateFontIndirectW
DeleteObject
GetStockObject
SetTextColor
GetObjectW
GetTextExtentPoint32W
SelectObject
GetTextMetricsW
Rectangle
PtInRegion
BitBlt
GetTextFaceW
FrameRgn
CreateDCW
SetBkColor
GetBoundsRect
PatBlt
CreateRectRgnIndirect
CombineRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible

comdlg32

GetSaveFileNameW

advapi32

RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegEnumKeyW
RegQueryValueW
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyW
RegOpenCurrentUser
RegCloseKey
RegEnumKeyExW
RegEnumValueW
RegSetValueW

shell32

SHCreateDirectoryExW
ShellExecuteExW
SHGetFileInfoW
SHGetFolderPathW
SHAppBarMessage
SHBrowseForFolderW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ExtractIconW
SHAddToRecentDocs
DragFinish
DragQueryFileW
ShellExecuteW

ole32

RegisterDragDrop
RevokeDragDrop
OleDuplicateData
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
DoDragDrop
StringFromCLSID
CoTaskMemFree
CoTaskMemAlloc
CoCreateGuid
CoCreateInstance
CoUninitialize
CoInitialize
CoInitializeEx
CreateStreamOnHGlobal
CoDisconnectObject
ReleaseStgMedium

msimg32

TransparentBlt
AlphaBlend

shlwapi

PathFindExtensionW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathRemoveFileSpecW
PathFindFileNameW

uxtheme

GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
GetThemeColor
CloseThemeData
OpenThemeData
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeBackground
DrawThemeText
GetThemePartSize
IsAppThemed

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipDrawImageRectI

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

oleaut32

VariantCopy
VarBstrFromDate
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
LoadTypeLi
SysFreeString
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 428KB - Virtual size: 428KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b7f3972a044801701af8eb356c4f363

Headers

DLL Characteristics

File Characteristics

Imports

wininet

comctl32

winmm

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

msimg32

shlwapi

uxtheme

oleacc

gdiplus

imm32

winspool.drv

oleaut32

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 428KB - Virtual size: 428KB

.data Size: 42KB - Virtual size: 84KB

.rsrc Size: 26KB - Virtual size: 26KB

.reloc Size: 143KB - Virtual size: 143KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 428KB - Virtual size: 428KB

.data
Size: 42KB - Virtual size: 84KB

.rsrc
Size: 26KB - Virtual size: 26KB

.reloc
Size: 143KB - Virtual size: 143KB