518614d5feaa7ffab2d3735f34f79438a549d9b002d10f7c0d0d8314fd5ae194

Sharing

Copy URL Twitter E-mail

General

Target

518614d5feaa7ffab2d3735f34f79438a549d9b002d10f7c0d0d8314fd5ae194
Size

412KB
MD5

9a07660da3c524d1601090d8a5d075ab
SHA1

b285a100042b21a0670d9b40fb7eaa2820f6a1c2
SHA256

518614d5feaa7ffab2d3735f34f79438a549d9b002d10f7c0d0d8314fd5ae194
SHA512

c029a3e071e20eed6cae02162251450c759563d47c849d8371cb9cbfe279e3b8cf39da86f5a7523b6806af42585457292e83fac947955998ea180e39728dab54
SSDEEP

12288:YA4FejR9FPYJhKqKzSVQ1NhSmooBKjN0yNu:OejRUgqKzQQ1NhdooAj2yNu

Score

N/A

Malware Config

Signatures

Files

518614d5feaa7ffab2d3735f34f79438a549d9b002d10f7c0d0d8314fd5ae194
.dll windows x86

eff7cfd4fb50ff62e7d88d7652416bed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetBkColor
CreateSolidBrush

user32

BringWindowToTop
CopyRect
CreateDialogParamW
CreateWindowExW
DestroyWindow
wsprintfW
ShowWindow
SetWindowTextW
SetWindowPos
SetTimer
SetForegroundWindow
SetDlgItemTextW
SetActiveWindow
SendMessageW
PostMessageW
OffsetRect
MessageBoxW
LoadStringW
LoadImageW
KillTimer
IsWindow
GetWindowRect
GetSystemMetrics
GetParent
GetDlgItemTextW
GetDlgItem
GetDesktopWindow
GetClientRect
ExitWindowsEx
EndDialog
EnableWindow
DialogBoxParamW

advapi32

AllocateAndInitializeSid
CheckTokenMembership
StartServiceW
SetTokenInformation
SetSecurityDescriptorSacl
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
RegSetValueExW
RegQueryValueExW
RegOpenKeyW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
QueryServiceStatusEx
OpenServiceW
OpenSCManagerW
OpenProcessToken
LookupPrivilegeValueW
InitializeSecurityDescriptor
GetUserNameW
FreeSid
DuplicateTokenEx
CreateProcessAsUserW
ControlService
CloseServiceHandle
AdjustTokenPrivileges

wininet

InternetCloseHandle
InternetConnectW
InternetOpenW
InternetQueryDataAvailable
HttpSendRequestW
InternetReadFile
InternetSetOptionW
InternetSetStatusCallbackW
HttpQueryInfoW
HttpOpenRequestW
InternetQueryOptionW
HttpAddRequestHeadersA

rpcrt4

UuidToStringW
UuidFromStringW
UuidCreate
RpcStringFreeW

kernel32

RtlUnwind
ReleaseMutex
ReadFile
RaiseException
SearchPathW
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SystemTimeToFileTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjects
WaitForSingleObject
WaitNamedPipeW
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
ResetEvent
QueryPerformanceCounter
Process32NextW
Process32FirstW
OutputDebugStringW
OpenProcess
OpenMutexW
OpenEventA
MultiByteToWideChar
MoveFileW
MoveFileExW
LocalFree
LoadLibraryW
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidLocale
IsValidCodePage
AllocConsole
CancelIo
CloseHandle
CompareStringA
CompareStringW
CopyFileW
CreateEventA
CreateEventW
CreateFileA
CreateMutexW
CreateProcessW
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFileW
DisconnectNamedPipe
EnterCriticalSection
EnumSystemLocalesA
ExitProcess
ExitThread
ExpandEnvironmentStringsW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDateFormatW
GetEnvironmentStringsA
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesW
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetLongPathNameW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeExW
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExW
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDebuggerPresent

shlwapi

PathCompactPathExW

shell32

ShellExecuteW
ShellExecuteExW
SHGetFolderPathW
SHCreateDirectoryExW
CommandLineToArgvW

ole32

CoInitializeEx
CoUninitialize

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Exports

Exports

GetMagicNumber
ReferenceError
get_gAMA
set_bgr

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 249KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eff7cfd4fb50ff62e7d88d7652416bed

Headers

File Characteristics

Imports

gdi32

user32

advapi32

wininet

rpcrt4

kernel32

shlwapi

shell32

ole32

version

Exports

Exports

Sections

.text Size: 68KB - Virtual size: 68KB

.rdata Size: 249KB - Virtual size: 248KB

.data Size: 70KB - Virtual size: 71KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 68KB - Virtual size: 68KB

.rdata
Size: 249KB - Virtual size: 248KB

.data
Size: 70KB - Virtual size: 71KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 4KB - Virtual size: 3KB