64f1bbd8a9a1d79dacbba58df676a759e6f0432d2184998b94505e666215a5b1

Sharing

Copy URL Twitter E-mail

General

Target

64f1bbd8a9a1d79dacbba58df676a759e6f0432d2184998b94505e666215a5b1
Size

806KB
MD5

b778e30baccd57642a082c448770305a
SHA1

416179495e3d3e8f8e1f9cd1a79c3fe286809d07
SHA256

64f1bbd8a9a1d79dacbba58df676a759e6f0432d2184998b94505e666215a5b1
SHA512

c101593bf12a92ec752fa442f885f15d8c4c8159e25a59948c2a6096b777d5b492ef51e4bcd0d76fb25e69fafd89692891e42caed3359102aa09cbd39b2cac0b
SSDEEP

12288:wfzTa/BVJISxIZur9vjFpl4zSzFpIS+1A9pBTJXGc/z7deCl:wfna/BVJIbZ+9zlmSzFpIS+1AbDXGEEY

Score

N/A

Malware Config

Signatures

Files

64f1bbd8a9a1d79dacbba58df676a759e6f0432d2184998b94505e666215a5b1
.exe windows x86

45e32db5371a83c22f83161834883d6e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
GetSystemDirectoryA
GetWindowsDirectoryA
GetComputerNameA
TerminateProcess
OpenProcess
CreateProcessA
lstrlenA
GetVersionExA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
WriteProcessMemory
ReadProcessMemory
WaitForSingleObject
SetFileTime
DeleteFileA
MoveFileA
CopyFileA
CreateDirectoryA
RemoveDirectoryA
SetSystemPowerState
GetCurrentProcess
SizeofResource
LockResource
LoadResource
FindResourceA
EnumResourceNamesA
WideCharToMultiByte
CompareStringW
CompareStringA
SetEndOfFile
LCMapStringW
LCMapStringA
SetStdHandle
GetStringTypeW
GetStringTypeA
InterlockedIncrement
InterlockedDecrement
GlobalMemoryStatus
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
HeapSize
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
DeleteCriticalSection
FlushFileBuffers
WriteFile
RtlUnwind
UnhandledExceptionFilter
SetLastError
TlsAlloc
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSection
SetFilePointer
GetVersion
GetCommandLineA
GetStartupInfoA
GetSystemTimeAsFileTime
ExitProcess
HeapAlloc
HeapFree
LeaveCriticalSection
EnterCriticalSection
ExitThread
TlsGetValue
TlsSetValue
CreateThread
ResumeThread
GetSystemTime
GetTimeZoneInformation
GetTempFileNameA
QueryPerformanceFrequency
QueryPerformanceCounter
GetCurrentThreadId
CreateFileA
GetFileSize
ReadFile
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
SetEnvironmentVariableA
GetEnvironmentVariableA
GetShortPathNameA
SetFileAttributesA
GetFileAttributesA
GetModuleFileNameA
SetVolumeLabelA
GetVolumeInformationA
GetModuleHandleA
GetDiskFreeSpaceA
SetErrorMode
GetDriveTypeA
MultiByteToWideChar
FindNextFileA
GetLocalTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetCurrentDirectoryA
SetCurrentDirectoryA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetExitCodeProcess
CloseHandle
Sleep
GetFullPathNameA
GetLastError
FormatMessageA
FreeLibrary
FindClose
LoadLibraryA
GetEnvironmentStringsW
GetProcAddress

user32

CreateMenu
SetMenu
DeleteMenu
DrawMenuBar
GetMenuItemInfoA
CharNextA
LoadImageA
IntersectRect
GetSysColor
SetCursor
ChildWindowFromPoint
PtInRect
MessageBeep
GetKeyState
UnregisterHotKey
DestroyWindow
MessageBoxA
SetMenuItemInfoA
ReleaseCapture
DefDlgProcA
VkKeyScanA
InvalidateRect
LoadMenuA
CheckMenuItem
SetForegroundWindow
TrackPopupMenuEx
DestroyMenu
KillTimer
PostQuitMessage
SetTimer
RegisterWindowMessageA
DefWindowProcA
GetSysColorBrush
EndDialog
RegisterClassExA
DestroyIcon
InsertMenuItemA
CreatePopupMenu
CreateIconFromResourceEx
ExitWindowsEx
EnumThreadWindows
GetKeyboardState
SetKeyboardState
GetAsyncKeyState
keybd_event
SetCapture
GetKeyboardLayoutNameA
LoadStringA
DispatchMessageA
TranslateMessage
PeekMessageA
GetMessageA
IsDialogMessageA
DialogBoxParamA
SendMessageA
CharLowerA
CharUpperA
SetWindowTextA
GetWindowTextA
SendMessageTimeoutA
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
SetClassLongA
SetClipboardData
EmptyClipboard
ReleaseDC
GetDC
GetWindowLongA
SetWindowLongA
FindWindowA
IsIconic
IsZoomed
GetCaretPos
GetFocus
GetMenu
GetMenuItemCount
GetMenuStringA
GetMenuItemID
GetDlgItem
SendDlgItemMessageA
LoadIconA
IsMenu
GetSubMenu
IsWindowEnabled
MapVirtualKeyA
GetParent
ScreenToClient
SetActiveWindow
SetFocus
GetDlgCtrlID
PostMessageA
MoveWindow
EnableWindow
IsWindowVisible
GetClassNameA
IsWindow
EnumWindows
EnumChildWindows
IsCharUpperA
IsCharLowerA
IsCharAlphaNumericA
IsCharAlphaA
GetForegroundWindow
ClientToScreen
RegisterHotKey
LoadCursorA
WindowFromPoint
GetWindowThreadProcessId
AttachThreadInput
GetCursor
SystemParametersInfoA
SetRect
AdjustWindowRectEx
CreateWindowExA
GetClientRect
CopyImage
SetWindowPos
ShowWindow
GetDesktopWindow
GetWindowRect
mouse_event
GetCursorPos

gdi32

GetObjectA
CreateCompatibleDC
GetTextExtentPoint32A
SetTextColor
SetBkMode
CreateSolidBrush
SetBkColor
DeleteObject
CreateDCA
GetStockObject
SelectObject
GetTextFaceA
GetDeviceCaps
DeleteDC
GetPixel
CreateFontA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegConnectRegistryA
RegCloseKey
RegQueryValueExA
GetUserNameA
OpenSCManagerA
LockServiceDatabase
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumValueA
CloseServiceHandle
UnlockServiceDatabase
RegEnumKeyExA

shell32

ExtractIconA
DragQueryPoint
DragQueryFileA
DragFinish
Shell_NotifyIconA
SHFileOperationA
SHGetMalloc
SHGetDesktopFolder
SHBrowseForFolderA
SHGetPathFromIDListA
ExtractIconExA

ole32

CoUninitialize
CoCreateInstance
CoInitialize
CreateStreamOnHGlobal

oleaut32

OleLoadPicture

winmm

waveOutSetVolume
timeGetTime
mciSendStringA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

wsock32

WSAStartup
inet_addr
gethostname
gethostbyname
WSACleanup
ioctlsocket

comctl32

ImageList_Create
InitCommonControlsEx
ImageList_DragMove
ImageList_EndDrag
ImageList_DragLeave
ImageList_DragEnter
ImageList_BeginDrag
ImageList_SetDragCursorImage
ImageList_Destroy
ImageList_ReplaceIcon

mpr

WNetCancelConnection2A
WNetUseConnectionA
WNetGetConnectionA

Sections

.text
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45e32db5371a83c22f83161834883d6e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

winmm

version

wsock32

comctl32

mpr

Sections

.text Size: 200KB - Virtual size: 199KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 24KB - Virtual size: 91KB

.idata Size: 9KB - Virtual size: 8KB

.rsrc Size: 9KB - Virtual size: 12KB

.text
Size: 200KB - Virtual size: 199KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 24KB - Virtual size: 91KB

.idata
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 9KB - Virtual size: 12KB