1483adf87f42401df67485df0a09649928ee17e98579ed3739e99e71300adcc8

Sharing

Copy URL Twitter E-mail

General

Target

1483adf87f42401df67485df0a09649928ee17e98579ed3739e99e71300adcc8
Size

1.7MB
MD5

81fe72b7287b7ced589c4bac19f0b5dc
SHA1

071a417a4cfb6668a0c96b4c55be6d8a5aca5b4a
SHA256

1483adf87f42401df67485df0a09649928ee17e98579ed3739e99e71300adcc8
SHA512

12278a3445e11909c96d34dba03db426d4c58e13cc3fdcdaeefc8b3179a4d64e62e0151dc842a2e2456dc468d2ef5f2f7f4088ace572d5081ff8e64a29670d83
SSDEEP

24576:0984q6MYlukVSz7arVFbpOM72inoEmXBJSB2ZExMbKQhx9IhkHhKhTE1u:UPFbp92NoE1u

Score

N/A

Malware Config

Signatures

Files

1483adf87f42401df67485df0a09649928ee17e98579ed3739e99e71300adcc8
.exe windows x86

fb5544d153e0d9f8326a5a3bf756ae74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathStripToRootW
PathFindExtensionW
PathIsUNCW
PathFindFileNameW
PathRemoveFileSpecW
PathCombineW
PathFileExistsW
PathCompactPathW

gdiplus

GdipDeleteGraphics
GdipLoadImageFromFile
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromHBITMAP
GdipSetImageAttributesColorMatrix
GdipSetImageAttributesColorKeys
GdipDeletePen
GdipCreateFromHDC
GdipResetWorldTransform
GdipDrawRectangleI
GdipFillRectangleI
GdipDrawImagePointsI
GdipDrawImageRectRectI
GdipCloneImage
GdiplusStartup
GdipCreatePen1
GdipDeleteBrush
GdipDisposeImageAttributes
GdipCreateSolidFill
GdipAlloc
GdipFree
GdipCreateImageAttributes

kernel32

GlobalFindAtomW
GlobalAddAtomW
FreeResource
MulDiv
LocalFree
FormatMessageW
GlobalUnlock
GlobalLock
GlobalAlloc
InterlockedDecrement
SetThreadPriority
SuspendThread
GetModuleHandleA
lstrcmpA
lstrlenA
InterlockedExchange
CompareStringA
GetLocaleInfoW
EnumResourceLanguagesW
GetVersion
ConvertDefaultLocale
GetCurrentThread
GlobalGetAtomNameW
GetCurrentProcessId
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
InterlockedIncrement
GetThreadLocale
FileTimeToSystemTime
GlobalDeleteAtom
WritePrivateProfileStringW
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
GetFullPathNameW
SetErrorMode
FileTimeToLocalFileTime
GetFileTime
GetTickCount
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
RtlUnwind
ExitProcess
HeapReAlloc
RaiseException
ExitThread
CreateThread
HeapSize
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
CompareStringW
LoadLibraryA
MultiByteToWideChar
GetVersionExA
GlobalFree
VirtualProtect
GetLogicalDriveStringsW
CreateProcessW
GetExitCodeProcess
GetCurrentThreadId
GetTempPathW
ReleaseSemaphore
Sleep
ResumeThread
FindFirstChangeNotificationW
FindNextChangeNotification
FindCloseChangeNotification
GetModuleFileNameW
GetVersionExW
FreeLibrary
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
OpenEventW
OpenMutexW
CreateMutexW
ReleaseMutex
ResetEvent
CreateEventW
WaitForMultipleObjects
SetEvent
WaitForSingleObject
CreateDirectoryW
WriteFile
lstrcpynW
GetFileAttributesW
SetFileAttributesW
CreateFileW
GetFileSize
ReadFile
CloseHandle
GetVolumeInformationW
GetShortPathNameW
WideCharToMultiByte
FindFirstFileW
lstrcmpW
DeleteFileW
FindNextFileW
FindClose
RemoveDirectoryW
lstrlenW
GetLocalTime
GetDriveTypeW
GetLastError
SetLastError
GetProcAddress
GetModuleHandleW
LoadLibraryW
lstrcpyW
FindResourceW
LoadResource
LockResource
SizeofResource

user32

GetNextDlgTabItem
CreateDialogIndirectParamW
ValidateRect
TranslateMessage
GetMessageW
FillRect
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
PostQuitMessage
SetCursor
ShowOwnedPopups
SetWindowContextHelpId
TranslateAcceleratorW
SetMenu
BringWindowToTop
SetRectEmpty
CreatePopupMenu
InsertMenuItemW
LoadAcceleratorsW
DestroyMenu
LoadMenuW
ReuseDDElParam
UnpackDDElParam
GetMenuItemInfoW
SystemParametersInfoW
GetSysColorBrush
UnregisterClassW
CharUpperW
CharNextW
CopyAcceleratorTableW
IsRectEmpty
SetRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatW
PostThreadMessageW
EndDialog
MoveWindow
SetWindowTextW
IsDlgButtonChecked
SetDlgItemTextW
GetDlgItemTextW
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
RemovePropW
GetWindowTextW
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
TrackPopupMenu
GetKeyState
UpdateWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetCapture
GetActiveWindow
MapDialogRect
ShowWindow
GetFocus
SetFocus
GetWindowLongW
GetDlgItem
IsWindowEnabled
ReleaseCapture
SetCapture
GetSystemMetrics
SetPropW
WaitForInputIdle
EnumThreadWindows
RegisterWindowMessageW
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
IsWindow
FindWindowW
SetWindowRgn
LoadBitmapW
IsDialogMessageW
IsWindowVisible
GetClientRect
wsprintfW
ScreenToClient
LoadCursorW
GetDesktopWindow
GetWindow
GetPropW
SetForegroundWindow
SetWindowPos
SetActiveWindow
PostMessageW
InflateRect
GetCursorPos
GetParent
KillTimer
SetTimer
InvalidateRect
GetWindowRect
OffsetRect
PtInRect
CopyRect
GetSysColor
LoadIconW
ReleaseDC
GetDC
SendMessageW
EnableWindow
TrackMouseEvent
UnregisterClassA

gdi32

GetClipBox
SetTextColor
SetBkColor
CreateBitmap
GetDeviceCaps
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetWindowExtEx
ScaleWindowExtEx
CreatePalette
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
GetStockObject
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
DeleteObject
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
CreateSolidBrush
CreateRectRgnIndirect
CreateRoundRectRgn
CreateFontIndirectW
GetTextMetricsW
GetObjectW
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetTextExtentPoint32W
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetMalloc
DragQueryFileW
DragFinish
SHGetFileInfoW

oledlg

OleUIBusyW

ole32

CoTaskMemFree
CoUninitialize
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoInitialize

oleaut32

SysAllocString
OleCreateFontIndirect
SysFreeString
SysStringLen
VariantInit
VariantChangeType
VariantClear
VariantCopy
SysAllocStringLen
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime

Sections

.text
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fb5544d153e0d9f8326a5a3bf756ae74

Headers

File Characteristics

Imports

shlwapi

gdiplus

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

oledlg

ole32

oleaut32

Sections

.text Size: 300KB - Virtual size: 299KB

.rdata Size: 76KB - Virtual size: 72KB

.data Size: 16KB - Virtual size: 29KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.text
Size: 300KB - Virtual size: 299KB

.rdata
Size: 76KB - Virtual size: 72KB

.data
Size: 16KB - Virtual size: 29KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB