4378de2939165def7bd751d1765971501f3106cc9b094ae4c588e34a72364864

Sharing

Copy URL Twitter E-mail

General

Target

4378de2939165def7bd751d1765971501f3106cc9b094ae4c588e34a72364864
Size

414KB
MD5

e0b738232b8124a49737622c19013b47
SHA1

2510b7b5751e6ccf1a6203a951f63a6384fbbd2d
SHA256

4378de2939165def7bd751d1765971501f3106cc9b094ae4c588e34a72364864
SHA512

f5e64c371254dedd15d7eb44b1b6190500f134d633d51fe4bb6d30d132ddb646ed3ae84f2e0c73f12ab127debad49354c9c1fd9e9cf6d2e0a5f4f393e3ec5bd3
SSDEEP

6144:r4l5Ed0YVhMOqCU5o7kFD71B97XwDBeNGfcP0lq129WC27cEEgOf69pVdokUfaMO:9VVr7aD71B9m4NGQ2EC2oEJ9pPUiMO

Score

N/A

Malware Config

Signatures

Files

4378de2939165def7bd751d1765971501f3106cc9b094ae4c588e34a72364864
.exe windows x86

2b6d4f7cb50212d560b9ec73d30a0cdf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMenuContextHelpId
GetDialogBaseUnits
GetMenuDefaultItem
GetMenuBarInfo
SetMessageQueue
MapVirtualKeyA
SetLastErrorEx
GetLayeredWindowAttributes
GetDlgItem
OffsetRect
GetDesktopWindow
PostMessageW
CreateDialogParamW
LoadCursorW
MoveWindow
ReleaseDC
ChildWindowFromPoint
EmptyClipboard
IntersectRect
GetClassNameW
MessageBoxW
DialogBoxIndirectParamW
SetMenuItemInfoW
LoadImageW
DrawTextW
TranslateMessage
GetActiveWindow
SendMessageW
GetWindowTextW
GetMenuItemInfoW
SetCursor
CheckMenuItem
MapWindowPoints
GetSysColor
IsDlgButtonChecked
InvalidateRect
LoadIconW
GetSysColorBrush
GetDC
UnionRect
GetFocus
KillTimer
CallWindowProcW
BeginDeferWindowPos
InsertMenuW
IsZoomed
SetWindowPos
DestroyIcon
OpenClipboard
TranslateAcceleratorW
GetPropW
ScrollWindowEx
ShowWindow
SetTimer
PtInRect
LoadAcceleratorsW
GetMenuState
GetClassLongW
IsIconic
GetParent
UpdateWindow
SetWindowTextA
GetDlgItemTextW
GetSubMenu
CheckDlgButton
SetWindowPlacement
CloseClipboard
FillRect
CreateWindowExW
DialogBoxParamW
RegisterClassExW
DrawFrameControl
SetClipboardData
BeginPaint
SetForegroundWindow
DestroyAcceleratorTable
GetMessageW
GetCapture
GetMenu
EnableMenuItem
GetWindowLongW
IsDialogMessageW
GetUpdateRgn
SetDlgItemTextW
GetWindowPlacement
IsWindowEnabled
ReleaseCapture
EndPaint
CheckMenuRadioItem
SetCapture
DeferWindowPos
GetWindowRect
ScreenToClient
DestroyWindow
RegisterWindowMessageW
EnumChildWindows
DrawIconEx
InflateRect
EndDeferWindowPos
DispatchMessageW
GetKeyState
SetActiveWindow
PostQuitMessage
GetClientRect
SetWindowLongW
DrawMenuBar
SetPropW
GetScrollInfo
DrawFocusRect
EndDialog
MapVirtualKeyW
GetKBCodePage
GetCaretPos
VkKeyScanA
ValidateRect
SetMenuDefaultItem
SetLayeredWindowAttributes
GetKeyboardType
IsWindow
DefWindowProcW
SetDebugErrorLevel
OpenIcon
ArrangeIconicWindows
DefMDIChildProcA
GetUserObjectInformationA
GetUserObjectInformationW
GetNextDlgGroupItem
GetProcessDefaultLayout
MapVirtualKeyExW
SetDlgItemTextA
ScrollWindow
SetFocus
GetMenuItemCount
GetIconInfo
SetProcessDefaultLayout
PrintWindow
WindowFromDC
UpdateLayeredWindow
MapDialogRect
EnumClipboardFormats
SetScrollInfo
GetNextDlgTabItem
GetSystemMetrics
IsCharAlphaNumericW
GetSystemMenu
SetWindowTextW
DefRawInputProc
FrameRect
InSendMessageEx

comdlg32

GetOpenFileNameW
ChooseFontW
FindTextW
PrintDlgW
GetSaveFileNameW

shell32

ShellExecuteW
SHGetMalloc
SHGetFileInfoW
SHGetPathFromIDListW
SHBrowseForFolderW
CommandLineToArgvW
SHChangeNotify
SHGetSpecialFolderLocation
ShellExecuteExW

ole32

CoCreateInstance
CoTaskMemFree
CoInitialize

advapi32

RegQueryValueExW
AdjustTokenPrivileges
RegOpenKeyExW
LookupPrivilegeValueW
RegOpenKeyW
RegSetValueW
AllocateAndInitializeSid
LookupAccountSidW
GetTokenInformation
RegCreateKeyExW
EnumServicesStatusExW
OpenProcessToken
RegQueryValueExA
RegSetValueExW
FreeSid
RegOpenKeyExA
RegCreateKeyW
RegCloseKey
CloseServiceHandle
OpenSCManagerW
EqualSid

gdi32

GetTextMetricsW
EndPage
StartDocW
CreateCompatibleBitmap
CreatePen
LineTo
BitBlt
SetBkMode
SelectClipRgn
CreateSolidBrush
CombineRgn
RectInRegion
CreateRectRgn
SetBkColor
CreateCompatibleDC
GetObjectW
CreateFontIndirectW
GetStockObject
CreateRectRgnIndirect
EndDoc
DeleteDC
Polyline
MoveToEx
SelectObject
SetTextColor
StartPage
SetMapMode
DeleteObject
GetDeviceCaps
FrameRgn
GetBkColor
Polygon

comctl32

InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_SetBkColor
ImageList_DrawEx
ImageList_Create

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

mpr

WNetCancelConnection2W
WNetAddConnection2W

shlwapi

SHAutoComplete

kernel32

Sleep
GetNativeSystemInfo
SetEndOfFile
WriteConsoleW
DebugBreak
FileTimeToSystemTime
CreateEventW
MultiByteToWideChar
ExpandEnvironmentStringsW
SizeofResource
FreeEnvironmentStringsW
HeapReAlloc
GetTimeZoneInformation
FindClose
GetStdHandle
OpenThread
IsBadReadPtr
VirtualFree
GetModuleFileNameW
QueryPerformanceFrequency
GetStringTypeW
InitializeCriticalSection
GlobalAddAtomW
LeaveCriticalSection
WriteFile
QueryDosDeviceW
SetCurrentDirectoryW
EnterCriticalSection
CreateFileMappingW
GetTimeFormatW
GetModuleFileNameA
GetModuleHandleA
WaitForMultipleObjects
VirtualQueryEx
LocalFree
SetEnvironmentVariableW
FormatMessageW
FreeLibrary
CreateFileA
DeleteCriticalSection
GetConsoleCP
GetFileSize
GetProcAddress
CreateToolhelp32Snapshot
HeapCreate
Module32NextW
GetConsoleMode
GlobalAlloc
DeleteFileW
GetSystemTimeAsFileTime
GetCurrentProcessId
Thread32Next
SetEvent
Thread32First
GlobalUnlock
GetOverlappedResult
SetProcessWorkingSetSize
TlsFree
GetConsoleOutputCP
ResumeThread
LoadLibraryA
GetTickCount
SetEnvironmentVariableA
GetLastError
GetEnvironmentStrings
RtlUnwind
TlsGetValue
LoadResource
GetLocaleInfoW
GlobalFree
InitializeCriticalSectionAndSpinCount
HeapAlloc
Module32FirstW
GetSystemInfo
SetHandleCount
FindFirstFileW
SetUnhandledExceptionFilter
GetLocaleInfoA
GetProcessHeap
GetEnvironmentStringsW
CreateProcessW
GetTempPathA
GetVersion
HeapSize
GetACP
UnmapViewOfFile
GetCPInfo
GetNumberFormatW
UnhandledExceptionFilter
VirtualAllocEx
PeekNamedPipe
LocalAlloc
ConnectNamedPipe
GetCurrentDirectoryW
VirtualAlloc
EncodePointer
GetThreadTimes
RequestWakeupLatency
ResetWriteWatch
GetProcessPriorityBoost
SetMessageWaitingIndicator
FlushFileBuffers
lstrlenA
WaitForSingleObject
CompareStringA
Process32NextW
GetFileInformationByHandle
WriteConsoleA
GetStringTypeA
FreeEnvironmentStringsA
GetFileType
OpenProcess
FindResourceW
GetCurrentThreadId
QueryPerformanceCounter
WideCharToMultiByte
CreateFileW
IsDebuggerPresent
TerminateProcess
GetOEMCP
GlobalLock
TlsSetValue
SetLastError
TlsAlloc
SetFilePointer
HeapFree
GetCommandLineA
CreateNamedPipeW
GetEnvironmentVariableW
ReadFile
ExitThread
LCMapStringW
GetModuleHandleW
LockResource
LoadLibraryW
ExpandEnvironmentStringsA
RaiseException
GetThreadContext
ExitProcess
LCMapStringA
CompareStringW
Process32FirstW
SuspendThread
GetFileAttributesW
GetStartupInfoA
MapViewOfFile
CreateThread
FileTimeToLocalFileTime
IsValidCodePage
WriteProcessMemory
InterlockedIncrement
InterlockedDecrement
ReadProcessMemory
GlobalUnfix
GetCurrentProcess
GetCommandLineW
RequestDeviceWakeup
GetMailslotInfo
GlobalUnWire
GetThreadSelectorEntry
ReplaceFileW
QueryMemoryResourceNotification
SetStdHandle
GetLogicalDrives
GetProcessAffinityMask
FlushInstructionCache
GetNamedPipeInfo
PurgeComm
CreateTimerQueue
GetThreadPriority
SetHandleInformation
EncodeSystemPointer
SetProcessPriorityBoost
CloseHandle

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b6d4f7cb50212d560b9ec73d30a0cdf

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

shell32

ole32

advapi32

gdi32

comctl32

version

mpr

shlwapi

kernel32

Sections

.text Size: 71KB - Virtual size: 70KB

.rdata Size: 35KB - Virtual size: 35KB

.data Size: 6KB - Virtual size: 148KB

.rsrc Size: 300KB - Virtual size: 299KB

.text
Size: 71KB - Virtual size: 70KB

.rdata
Size: 35KB - Virtual size: 35KB

.data
Size: 6KB - Virtual size: 148KB

.rsrc
Size: 300KB - Virtual size: 299KB