b190abd087438c8f1785dfc7cd25be189fd3111c6dc472ae424faf160298ca8b

Sharing

Copy URL Twitter E-mail

General

Target

b190abd087438c8f1785dfc7cd25be189fd3111c6dc472ae424faf160298ca8b
Size

987KB
MD5

5a0eb4d6206c57679528776e558e0e2c
SHA1

e2af7df01b1ecc84d1a36e5fd604c79945cdcde5
SHA256

b190abd087438c8f1785dfc7cd25be189fd3111c6dc472ae424faf160298ca8b
SHA512

11b26240d3bfa66d028b0ff0e3caba1ae858c4f705703011dc3c1043f7291acef6d852792c454384590b1ef2b304f66728a137222f0d16ab1ac6206274012f1f
SSDEEP

24576:Ot3v3WYu9tEkJT44m/+LkmgYkmxFAXGYdTBOWG:MWmiA3dYkmcGYdlOWG

Score

N/A

Malware Config

Signatures

Files

b190abd087438c8f1785dfc7cd25be189fd3111c6dc472ae424faf160298ca8b
.exe windows x86

959a51df8bd080a320d0787eaa0c898b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx
ImageList_Create
ImageList_ReplaceIcon

gdi32

GetObjectW
RoundRect
GetStockObject
Polyline
GetTextExtentPoint32W
SetBkMode
LineTo
MoveToEx
CreatePen
SetBkColor
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
DeleteObject
CreateFontW
CreateSolidBrush
CreateCompatibleBitmap
SetTextColor

winmm

timeGetTime

shlwapi

PathRemoveExtensionW
PathRemoveFileSpecW

winhttp

WinHttpGetIEProxyConfigForCurrentUser

kernel32

DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
QueueUserAPC
TerminateThread
InterlockedExchangeAdd
WaitForMultipleObjects
InterlockedDecrement
GetQueuedCompletionStatus
SetWaitableTimer
InterlockedExchange
InterlockedIncrement
PostQueuedCompletionStatus
InterlockedCompareExchange
SetLastError
LeaveCriticalSection
EnterCriticalSection
TlsFree
TlsAlloc
TlsSetValue
TlsGetValue
GetSystemTimeAsFileTime
GetProcessHeap
HeapFree
GetTickCount
Sleep
SleepEx
CreateEventW
HeapAlloc
CreateWaitableTimerW
DeleteFileW
SetFilePointerEx
WriteFile
SetFileAttributesW
MoveFileW
MoveFileExW
CreateFileW
DeviceIoControl
SetEndOfFile
FormatMessageW
LocalFree
lstrcpyW
GlobalAlloc
GlobalLock
GlobalFree
GlobalUnlock
lstrlenW
GetCommandLineW
LoadLibraryW
GetProcAddress
GetModuleFileNameW
GetUserDefaultUILanguage
GetFileAttributesW
GetVersionExW
OutputDebugStringW
SystemTimeToFileTime
OpenEventA
CreateIoCompletionPort
ResetEvent
GetCurrentProcessId
ResumeThread
FormatMessageA
WideCharToMultiByte
MultiByteToWideChar
IsDBCSLeadByteEx
GetLastError
CompareStringW
LCMapStringW
FoldStringW
GetLocaleInfoA
EnumSystemLocalesA
GetDateFormatW
GetCurrencyFormatW
GetLocaleInfoW
GetTimeFormatW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
SetEnvironmentVariableA
LoadLibraryA
GetModuleHandleA
IsValidLocale
GetUserDefaultLCID
GetCurrentDirectoryA
GetFullPathNameA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetFilePointer
SetHandleCount
ReadFile
GetTimeZoneInformation
GetStringTypeA
GetOEMCP
GetACP
HeapSize
VirtualAlloc
VirtualFree
HeapCreate
ExitProcess
GetModuleFileNameA
CompareStringA
GetStringTypeW
LCMapStringA
RtlUnwind
RaiseException
FindFirstFileA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
GetStartupInfoA
GetCommandLineA
HeapReAlloc
GetDateFormatA
GetTimeFormatA
GetCPInfo
CreateThread
ExitThread
GetStdHandle
GetFileType
WriteConsoleW
IsDebuggerPresent
VirtualQuery
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExpandEnvironmentStringsA
InitializeCriticalSection
WaitForSingleObject
GetCurrentThreadId
SetEvent
CreateEventA
CloseHandle
GetModuleHandleW
CreateFileA
IsValidCodePage
ReleaseSemaphore

user32

EmptyClipboard
SetClipboardData
CloseClipboard
RegisterWindowMessageW
SendDlgItemMessageW
OpenClipboard
GetWindowLongW
EnumChildWindows
GetWindowInfo
GetParent
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetSysColorBrush
OffsetRect
InflateRect
CopyRect
SetWindowPos
SetParent
GetMenuItemInfoW
GetMenuItemCount
CheckMenuItem
AppendMenuW
DrawIconEx
GetIconInfo
DrawTextW
GetMessagePos
ClientToScreen
EnableMenuItem
GetWindowTextLengthW
IsDlgButtonChecked
LoadIconW
SendMessageW
SetWindowTextW
GetDlgItem
EndDialog
DialogBoxParamW
LoadImageW
LoadCursorW
DestroyIcon
BeginPaint
GetClientRect
CallWindowProcW
EndPaint
MoveWindow
CreateWindowExW
SetWindowLongW
InvalidateRect
SetFocus
GetWindowTextW
GetFocus
FillRect
LoadMenuW
GetSubMenu
SetMenuItemInfoW
TrackPopupMenu
DestroyMenu
SetCursor
GetKeyState
KillTimer
ScreenToClient
SetTimer
DrawTextExW
GetDC
ReleaseDC
SetScrollInfo
GetScrollInfo
GetMessageW
LoadAcceleratorsW
FindWindowW
PostQuitMessage
DestroyWindow
GetSysColor
ReleaseCapture
SetCapture
MessageBoxW
GetLastActivePopup
DrawMenuBar
SetMenu
GetMenu
RemoveMenu
GetCursorPos
PostMessageW
ShowWindow
IsZoomed
SetForegroundWindow
IsIconic
ShowWindowAsync
EndDeferWindowPos
DeferWindowPos
GetWindowRect
BeginDeferWindowPos
UpdateWindow
IsWindowVisible
RegisterClassExW
DefWindowProcW
ScrollWindow

advapi32

RegCreateKeyExW
CryptDestroyHash
CryptCreateHash
CryptAcquireContextA
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
RegQueryValueExW
CryptReleaseContext
CryptGetHashParam
CryptHashData

shell32

SHGetFolderPathW
ShellExecuteW
SHBindToParent
SHParseDisplayName
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteA
Shell_NotifyIconW
SHFileOperationW
ord155
SHOpenFolderAndSelectItems
ord190
ord74

ole32

OleUninitialize
OleInitialize
ReleaseStgMedium
CoCreateGuid
StringFromCLSID
RegisterDragDrop
RevokeDragDrop
DoDragDrop
CoCreateInstance
CoTaskMemFree

ws2_32

getpeername
htons
recv
socket
getsockopt
bind
getsockname
connect
send
__WSAFDIsSet
WSASocketW
WSASend
setsockopt
ioctlsocket
WSASetLastError
WSAGetLastError
closesocket
WSAStartup
WSACleanup
getaddrinfo
freeaddrinfo
select
ntohs

Sections

.text
Size: 654KB - Virtual size: 654KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

959a51df8bd080a320d0787eaa0c898b

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

gdi32

winmm

shlwapi

winhttp

kernel32

user32

advapi32

shell32

ole32

ws2_32

Sections

.text Size: 654KB - Virtual size: 654KB

.rdata Size: 178KB - Virtual size: 177KB

.data Size: 38KB - Virtual size: 48KB

.rsrc Size: 61KB - Virtual size: 61KB

.reloc Size: 54KB - Virtual size: 53KB

.text
Size: 654KB - Virtual size: 654KB

.rdata
Size: 178KB - Virtual size: 177KB

.data
Size: 38KB - Virtual size: 48KB

.rsrc
Size: 61KB - Virtual size: 61KB

.reloc
Size: 54KB - Virtual size: 53KB