de5ca130d8dd19ee1705f88abccda02351b82ab32bb472c839e8d250d895254c

Sharing

Copy URL

Twitter E-mail

General

Target

de5ca130d8dd19ee1705f88abccda02351b82ab32bb472c839e8d250d895254c
Size

75KB
MD5

c8b0b1d1a994ed4f53ac23636a391843
SHA1

10b711201f02583b9e25545496e3222184a348cc
SHA256

de5ca130d8dd19ee1705f88abccda02351b82ab32bb472c839e8d250d895254c
SHA512

121f330beef25308928abb12764b7abc2f30d646d6bd7cc2781339d61bda5c5e828fd779e1292dac34f8d207b520e43489b00990b4e109de4e8a330553a1bf22
SSDEEP

1536:B5gXYejaaX4dhaNBGXPosjkM/+yfMYsjRexzV/F983jOnk:0XYenfEPosjkMGyEYsVexL983jOnk

Score

N/A

Malware Config

Signatures

Files

de5ca130d8dd19ee1705f88abccda02351b82ab32bb472c839e8d250d895254c
.exe windows x86

8eec37f8d14b28b8ef4e4dfc8ac91c8f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetAltTabInfoA
SetMenu
GetScrollBarInfo
GetKBCodePage
AnyPopup
GetCapture
SetPropW
GetSystemMenu
KillTimer
IsZoomed
GetSubMenu
DrawIconEx
SetForegroundWindow
IsWindowEnabled
GetMenuItemInfoW
TranslateMessage
LoadAcceleratorsW
ChildWindowFromPoint
GetMenu
IsDialogMessageW
GetWindowPlacement
CheckMenuRadioItem
UnionRect
GetWindowTextW
GetClassNameW
EnableMenuItem
GetMenuState
GetDesktopWindow
CheckDlgButton
EnumChildWindows
IsDlgButtonChecked
CreateDialogParamW
DrawMenuBar
GetActiveWindow
InsertMenuW
SetWindowTextA
DestroyIcon
DrawFrameControl
SetMenuItemInfoW
CheckMenuItem
MoveWindow
DispatchMessageW
EndPaint
GetUpdateRgn
GetKeyState
GetFocus
PostMessageW
RegisterWindowMessageW
PostQuitMessage
GetMessageW
SetActiveWindow
SetTimer
DestroyAcceleratorTable
TranslateAcceleratorW
SetWindowPlacement
DestroyWindow
GetDC
IntersectRect
InvalidateRect
ReleaseDC
ScrollWindowEx
SetScrollInfo
CallWindowProcW
DialogBoxParamW
GetParent
SetFocus
CloseWindow
MessageBoxW
GetDlgItemTextW
SetDlgItemTextW
EnableWindow
GetPropW
ScreenToClient
SetCapture
RegisterClassExW
OffsetRect
SetWindowLongW
SetWindowPos
CreateWindowExW
DeferWindowPos
ReleaseCapture
BeginDeferWindowPos
EndDeferWindowPos
DefWindowProcW
FillRect
DrawTextW
DrawFocusRect
GetScrollInfo
MapWindowPoints
CloseClipboard
GetWindowRect
LoadImageW
GetClientRect
PtInRect
LoadIconW
GetWindowLongW
EmptyClipboard
GetSysColor
LoadStringW
GetSystemMetrics
UpdateWindow
SetClipboardData
SetCursor
DialogBoxIndirectParamW
LoadCursorW
InflateRect
GetDlgItem
EndDialog
GetSysColorBrush
SendMessageW
SetWindowTextW
ShowWindow
GetClassLongW
OpenClipboard
GetDialogBaseUnits
GetClipboardFormatNameW
GetQueueStatus
IsCharAlphaNumericW
GetScrollRange
ToAsciiEx
GetGUIThreadInfo
GetClassWord
GetUserObjectInformationW
GetWindowTextLengthW
GetMonitorInfoA
RegisterHotKey
ExcludeUpdateRgn
EndMenu
ScrollWindow
ValidateRgn
GetLastActivePopup
ValidateRect
BeginPaint
IsIconic
GetCursorPos

comdlg32

ChooseFontW
GetOpenFileNameW
PrintDlgW
FindTextW
GetSaveFileNameW

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetMalloc
SHChangeNotify
SHGetFileInfoW
ShellExecuteW
CommandLineToArgvW
ShellExecuteExW
SHBrowseForFolderW

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize

advapi32

OpenProcessToken
RegQueryValueExA
EnumServicesStatusExW
AdjustTokenPrivileges
LookupAccountSidW
LookupPrivilegeValueW
OpenSCManagerW
CloseServiceHandle
RegOpenKeyW
RegOpenKeyExW
FreeSid
AllocateAndInitializeSid
RegOpenKeyExA
RegSetValueExW
RegCreateKeyW
RegQueryValueExW
RegCloseKey
GetTokenInformation
RegCreateKeyExW
RegSetValueW
EqualSid

gdi32

CreatePen
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
SetMapMode
CreateSolidBrush
EndPage
StartPage
GetDeviceCaps
SetBkColor
FrameRgn
SetBkMode
DeleteObject
StartDocW
EndDoc
Polygon
DeleteDC
SetTextColor
LineTo
BitBlt
Polyline
SelectClipRgn
GetTextMetricsW
GetObjectW
CreateFontW
CreateRectRgnIndirect
CombineRgn
CreateFontIndirectW
CreateRectRgn
GetBkColor
RectInRegion
GetStockObject
MoveToEx

comctl32

InitCommonControlsEx
ImageList_DrawEx
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy
ImageList_SetBkColor

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

kernel32

GetModuleFileNameA
GetStdHandle
WriteFile
VirtualFree
HeapCreate
HeapSize
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RaiseException
RtlUnwind
GetStartupInfoA
GetFileType
PeekNamedPipe
GetFileInformationByHandle
GetCurrentThreadId
ExitThread
HeapReAlloc
HeapAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcessHeap
HeapFree
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
ReadProcessMemory
SizeofResource
LoadResource
FindResourceW
DeleteCriticalSection
GetSystemInfo
CreateFileMappingW
EnterCriticalSection
GetConsoleCP
CreateFileW
LeaveCriticalSection
InitializeCriticalSection
GetTickCount
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
SetFilePointer
GetFileSize
GlobalUnlock
CompareStringW
GetLocaleInfoW
GlobalAlloc
GlobalLock
LocalFree
LocalAlloc
GetCommandLineW
Module32NextW
CreateToolhelp32Snapshot
Module32FirstW
SetCurrentDirectoryW
LoadLibraryW
FreeLibrary
ExpandEnvironmentStringsW
DeleteFileW
CloseHandle
GetConsoleMode
LCMapStringW
GetStringTypeA
GetStringTypeW
SetHandleCount
SetStdHandle
GetProcAddress
GetCurrentDirectoryW
GetLastError
GetModuleFileNameW
GetFileAttributesW
Sleep
GetModuleHandleW
WaitForSingleObject
GetCurrentProcess
CreateProcessW
InitializeCriticalSectionAndSpinCount
GetEnvironmentStringsW
GetModuleHandleA
WriteConsoleA
LCMapStringA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
LoadLibraryA
ExpandEnvironmentStringsA
GetNumberFormatW
ExitProcess
VirtualAllocEx
VirtualProtectEx
WriteProcessMemory
DebugBreak
VirtualQueryEx
CreateThread
SuspendThread
GetTempPathA
GetCurrentProcessId
GetVersion
FileTimeToLocalFileTime
Process32NextW
SetProcessWorkingSetSize
QueryDosDeviceW
OpenThread
Process32FirstW
GlobalFree
Thread32Next
FileTimeToSystemTime
TerminateProcess
GetTimeFormatW
Thread32First
IsBadReadPtr
GetNativeSystemInfo
GetThreadContext
GlobalAddAtomW
ResumeThread
QueryPerformanceFrequency
WaitForMultipleObjects
CreateEventW
GetOverlappedResult
ReadFile
FormatMessageW
CreateNamedPipeW
ConnectNamedPipe
SetEvent
QueryPerformanceCounter
FindClose
SetEnvironmentVariableW
FindFirstFileW
GetEnvironmentVariableW
GetSystemTimeAsFileTime
LockResource
InterlockedIncrement
InterlockedDecrement
GetLocaleInfoA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
GetTimeZoneInformation
ConvertFiberToThread
GetCommandLineA
LocalUnlock
RequestWakeupLatency
GetEnvironmentStrings
ClearCommError
DeleteAtom
InitAtomTable
SetLastError
ReleaseMutex
RemoveVectoredExceptionHandler
UpdateResourceW
GetProcessPriorityBoost
GetFileTime
VirtualAlloc
DisableThreadLibraryCalls
GetCurrentThread
OpenProcess
MulDiv
SetEnvironmentVariableA
CompareStringA
CreateFileA

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8eec37f8d14b28b8ef4e4dfc8ac91c8f

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

shell32

ole32

advapi32

gdi32

comctl32

version

kernel32

Sections

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 15KB - Virtual size: 15KB

.data Size: 6KB - Virtual size: 30KB

.rsrc Size: 18KB - Virtual size: 18KB

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 15KB - Virtual size: 15KB

.data
Size: 6KB - Virtual size: 30KB

.rsrc
Size: 18KB - Virtual size: 18KB