4a6085e90d5575b397401e49e03c2c227cb58f2e685486b994557aaa59ede4d8

Sharing

Copy URL Twitter E-mail

General

Target

4a6085e90d5575b397401e49e03c2c227cb58f2e685486b994557aaa59ede4d8
Size

2.9MB
MD5

cc2f61bc380e8f0389dbd7dd967dc531
SHA1

23c7ac94aac8bff709177de8d7c0180cb3e46f1d
SHA256

4a6085e90d5575b397401e49e03c2c227cb58f2e685486b994557aaa59ede4d8
SHA512

0093f5df95ea9f9b6dcf7c9d92abbfa12472cf1975b33d5e2b55082bc37b98538ed32b31d4d88c384b6ca5411ace0815ab4c207e1999b402cabfa7e956b00821
SSDEEP

49152:xLYTsQ5hbakFgF6nJuQZ5PSvechmJTIwrVYWv7MTY70ZX2FgpS6C+5ZdhxtnwQKo:yTX5h26gF61HcheT9rvj0AFg06XbdntX

Score

N/A

Malware Config

Signatures

Files

4a6085e90d5575b397401e49e03c2c227cb58f2e685486b994557aaa59ede4d8
.exe windows x86

8c7181fe4b54b4e5965bd54d74d2d634

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFileTimeToFileTime
GetCurrentDirectoryW
ReadFile
CreateFileW
GetFileAttributesW
SystemTimeToFileTime
SetFilePointer
WideCharToMultiByte
LoadResource
GetLastError
GetModuleHandleW
FindResourceW
MultiByteToWideChar
DeleteFileW
Sleep
WriteFile
SetFileTime
SizeofResource
GetLocalTime
GetModuleFileNameW
CloseHandle
CreateThread
CreateDirectoryW
GetTempPathW
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
SetEndOfFile
GetACP
GetProcAddress
LoadLibraryW
GetTickCount
LeaveCriticalSection
EnterCriticalSection
InterlockedExchange
GetVersionExW
ExitProcess
LockResource
FreeResource
GetFileType
DuplicateHandle
GetCurrentProcess
DosDateTimeToFileTime
GetFileSize
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
InitializeCriticalSection
DeleteCriticalSection
MulDiv
InterlockedIncrement
InterlockedDecrement
GetEnvironmentVariableW
OutputDebugStringW
HeapFree
GetProcessHeap
GetSystemTimeAsFileTime
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
HeapReAlloc
RtlUnwind
RaiseException
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapSize
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetStartupInfoA
GetConsoleCP
GetConsoleMode
HeapCreate
VirtualFree
VirtualAlloc
GetCPInfo
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetCurrentProcessId
LCMapStringW
LCMapStringA
GetModuleHandleA
GetTimeZoneInformation
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW

user32

GetDC
GetClientRect
SetWindowPos
SetWindowLongW
GetWindowLongW
InvalidateRect
IsWindow
SetCapture
ReleaseCapture
EndPaint
BeginPaint
RedrawWindow
PtInRect
ReleaseDC
SetFocus
GetFocus
MapWindowPoints
IsWindowVisible
IsIconic
UpdateLayeredWindow
GetWindowRect
IsRectEmpty
GetUpdateRect
GetWindow
ScreenToClient
GetCursorPos
GetParent
DispatchMessageW
TranslateMessage
GetMessageW
DefWindowProcW
EnableWindow
MoveWindow
GetMonitorInfoW
MonitorFromWindow
GetKeyState
CallWindowProcW
GetPropW
SetPropW
ClientToScreen
RegisterClassW
RegisterClassExW
GetClassInfoExW
IsZoomed
SetWindowRgn
GetWindowTextW
GetWindowTextLengthW
SetWindowTextW
CharNextW
ShowCaret
CreateCaret
IntersectRect
SetRect
FillRect
DrawTextW
CharPrevW
HideCaret
SetCaretPos
GetSysColor
GetCaretPos
InvalidateRgn
CreateAcceleratorTableW
GetAsyncKeyState
CopyRect
wsprintfW
SetTimer
KillTimer
LoadCursorW
wvsprintfW
DestroyWindow
PostQuitMessage
ShowWindow
CreateWindowExW
SendMessageW
MessageBoxW
PostMessageW
SetCursor
InflateRect
OffsetRect
GetDesktopWindow

gdi32

GetObjectW
GetStockObject
CreateCompatibleDC
DeleteDC
SetDIBColorTable
GetSystemPaletteEntries
CreateFontIndirectW
CreateDIBSection
SetWindowOrgEx
Rectangle
RestoreDC
SaveDC
CreateCompatibleBitmap
CombineRgn
CreatePen
CreateRectRgnIndirect
ExtTextOutW
SetBkColor
GetObjectA
GetDeviceCaps
GetCharABCWidthsW
GetTextExtentPoint32W
TextOutW
RoundRect
CreatePenIndirect
MoveToEx
LineTo
SetStretchBltMode
StretchBlt
DeleteObject
CreateFontW
SelectObject
GetTextMetricsW
BitBlt
CreateRoundRectRgn
GetClipBox
ExtSelectClipRgn
SelectClipRgn
CreateRectRgn
ExtCreateRegion
PtInRegion
CreatePatternBrush
SetTextColor
SetBkMode
CreateSolidBrush
GdiFlush

advapi32

RegCloseKey
RegSetValueExW
RegOpenKeyW

shell32

SHGetSpecialFolderPathW
ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW

ole32

CLSIDFromProgID
CoInitialize
CoUninitialize
CoCreateInstance
CLSIDFromString
OleLockRunning

gdiplus

GdiplusStartup
GdipCreateLineBrushI
GdipSetStringFormatAlign
GdipDeleteFont
GdipCreateFromHDC
GdipSetTextRenderingHint
GdipDrawString
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCloneBrush
GdipDeleteGraphics
GdiplusShutdown
GdipDeleteBrush
GdipFree
GdipAlloc
GdipCreateStringFormat
GdipSetStringFormatLineAlign
GdipDeleteStringFormat

shlwapi

PathFileExistsW

imm32

ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext

comctl32

_TrackMouseEvent
ord17

wininet

HttpQueryInfoA
InternetReadFile
InternetOpenW
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetCloseHandle

oleaut32

SysFreeString
VariantClear
VariantInit
SysAllocString

Sections

.text
Size: 365KB - Virtual size: 364KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c7181fe4b54b4e5965bd54d74d2d634

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

gdiplus

shlwapi

imm32

comctl32

wininet

oleaut32

Sections

.text Size: 365KB - Virtual size: 364KB

.rdata Size: 87KB - Virtual size: 87KB

.data Size: 9KB - Virtual size: 19KB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 29KB - Virtual size: 29KB

.text
Size: 365KB - Virtual size: 364KB

.rdata
Size: 87KB - Virtual size: 87KB

.data
Size: 9KB - Virtual size: 19KB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 29KB - Virtual size: 29KB