4887d3295702bb113baff46e7d534808e16de5becbc778591fe5f116d34507f6

Sharing

Copy URL Twitter E-mail

General

Target

4887d3295702bb113baff46e7d534808e16de5becbc778591fe5f116d34507f6
Size

332KB
MD5

75a77455142165aca3cef53ca1b99b21
SHA1

61015b4275e0b73d2157acddb95641195230e2c9
SHA256

4887d3295702bb113baff46e7d534808e16de5becbc778591fe5f116d34507f6
SHA512

3e7fca0a8499c488739eaa950c73f82c6c435349c00003e8be6097fd7cacb75897c94cdd5ef32a0bc844da3d0af5a9543e1154d141a967adcca404779470d33f
SSDEEP

6144:K2qllNMJ3m4y1JAjXs/GXbrTI+I1CjmUC9/syjgF0PS0AXaktfZRZagAatLO:/qnkm4yDyXbrTI1C6UiJbPHAXrtfrZE2

Score

N/A

Malware Config

Signatures

Files

4887d3295702bb113baff46e7d534808e16de5becbc778591fe5f116d34507f6
.exe windows x86

f042bf1d05cfce155d43ba572607f17b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHDeleteKeyA
PathGetCharTypeA
PathIsDirectoryA
SHEnumValueA
SHStrDupA
PathIsContentTypeA
SHDeleteValueA
SHGetValueA
PathIsContentTypeA
SHSetValueA
SHQueryInfoKeyA
PathGetCharTypeA
SHDeleteValueA
SHDeleteKeyA
SHEnumValueA
SHGetValueA
PathIsDirectoryA
SHGetValueA
SHQueryValueExA
SHEnumValueA
SHDeleteValueA
SHDeleteKeyA
SHStrDupA

user32

CharNextW
CreateMenu
DrawMenuBar
DrawAnimatedRects
FillRect
GetWindowDC
GetClassInfoA
GetActiveWindow
PostMessageA
TrackPopupMenu
DeleteMenu
DrawEdge
SetParent
SetMenu
SendMessageW
SetScrollInfo
ActivateKeyboardLayout
RegisterWindowMessageA
WaitMessage
DrawIcon
GetClassNameA
IsDialogMessageW
ClientToScreen
PeekMessageW
ReleaseCapture
GetWindowRect
LoadKeyboardLayoutA
PeekMessageA
WindowFromPoint
GetDCEx
FindWindowA
SetForegroundWindow
GetKeyboardType
CloseClipboard
SendMessageA
EnumThreadWindows
SetTimer
MoveWindow
GetScrollPos
EndPaint
GetMessagePos
GetSubMenu
InvalidateRect
GetKeyState
ChildWindowFromPoint
GetPropA
SetPropA
SystemParametersInfoA
MessageBoxA
DrawMenuBar
PostQuitMessage
IsIconic
CreateWindowExA
MoveWindow
GetCapture
SetScrollRange
DestroyWindow
InflateRect
GetMenuStringA
CreatePopupMenu
GetClientRect
IsDialogMessageA
GetCursorPos
SetMenu
GetSystemMetrics
ReleaseDC
SetWindowPlacement
GetMenuItemCount
SetWindowLongA
IsRectEmpty
DispatchMessageA
SetWindowTextA
InsertMenuA
SetWindowsHookExA
GetWindowRect
UnregisterClassA
GetMessagePos
CallNextHookEx
GetDesktopWindow
SetScrollInfo
EndPaint
GetWindowDC
GetKeyboardLayout
CharToOemA
OffsetRect
GetKeyState
GetDCEx
GetScrollRange
RegisterClipboardFormatA
InvalidateRect
GetScrollPos
GetKeyboardState
SetMenu
CharNextA
SetClipboardData
GetForegroundWindow
TranslateMDISysAccel
SendMessageW
MsgWaitForMultipleObjects
WaitMessage
DrawIconEx
LoadKeyboardLayoutA
RedrawWindow
EmptyClipboard
GetWindowLongW
GetWindow
ChildWindowFromPoint
IsDialogMessageW
SetCursor
SendMessageA
CharLowerBuffA
MoveWindow
BeginPaint
RegisterClipboardFormatA
UpdateWindow
IntersectRect
GetMessagePos
GetWindowTextA
GetMenu
CallNextHookEx
GetMenuStringA
GetClassLongA
CreatePopupMenu
SetFocus
SetScrollRange
DrawMenuBar
IsWindow
GetSystemMenu
SetWindowLongA
GetKeyboardType
CreateMenu
SetWindowTextA
PtInRect
GetDCEx
wsprintfA
MapWindowPoints
InsertMenuItemA
ShowOwnedPopups
GetTopWindow
SetWindowLongW
CreateWindowExA
ShowWindow
CharToOemA
GetClassNameA
CreateMenu
SetParent
SetWindowsHookExA
ClientToScreen
DestroyMenu
IntersectRect
GetPropA
MapWindowPoints
GetKeyboardLayoutNameA
EnableMenuItem
OpenClipboard
DestroyWindow
GetMenuItemInfoA
GetKeyState
DefFrameProcA
FillRect
DispatchMessageW
AdjustWindowRectEx
PeekMessageW
RemovePropA
GetWindowLongW
EqualRect
GetScrollInfo
EnableWindow
GetMenuItemCount
GetDCEx
SetCapture
MsgWaitForMultipleObjects
CheckMenuItem
DestroyIcon
GetWindowRect
EnumThreadWindows
PostQuitMessage
GetActiveWindow
IsWindowVisible
SetMenu
SetWindowTextA
GetMenuItemID
GetDC
SetMenuItemInfoA
PostMessageA
EnumChildWindows
CreateMenu
GetFocus
DestroyMenu
SystemParametersInfoA
SetClassLongA
CallWindowProcA
WindowFromPoint
GetWindowRect
IsZoomed
OemToCharA
GetWindowLongW
OpenClipboard
WaitMessage
IsDialogMessageA
SetRect
SetScrollRange
InsertMenuA
IsWindowUnicode
GetMenuStringA
SetActiveWindow
GetMenuState
InsertMenuItemA
TrackPopupMenu
GetClientRect
SetScrollInfo
SetWindowLongW
SetMenu
DrawTextA
GetCapture
SetTimer
GetKeyState
GetLastActivePopup
CreateIcon
MoveWindow
GetScrollPos
RemovePropA
DefMDIChildProcA
GetSysColorBrush
UpdateWindow
DestroyCursor

comctl32

ImageList_Add
ImageList_DragShowNolock
ImageList_Remove
ImageList_Write
ImageList_Destroy
ImageList_Read
ImageList_Read
ImageList_DragShowNolock
ImageList_Write
ImageList_Read
ImageList_Draw
ImageList_Destroy
ImageList_Remove

ole32

OleRun
CoGetContextToken
PropVariantClear
WriteClassStm
CLSIDFromProgID
CoFreeUnusedLibraries
CoUninitialize
CoGetMalloc
StgCreateDocfileOnILockBytes
OleCreateStaticFromData
StgCreateDocfileOnILockBytes
CoCreateFreeThreadedMarshaler
CoCreateGuid
CoGetMalloc
MkParseDisplayName
CoReleaseMarshalData
CLSIDFromProgID
CoUnmarshalInterface
CoGetObjectContext
GetHGlobalFromStream
CoUnmarshalInterface
OleRegGetUserType
CoUninitialize
ReleaseStgMedium
OleRun
CreateBindCtx
CoUnmarshalInterface
MkParseDisplayName
CoUninitialize
CreateOleAdviseHolder
CreateBindCtx
CLSIDFromString
CoFreeUnusedLibraries
StgOpenStorage
CoUnmarshalInterface
OleCreateStaticFromData
CreateStreamOnHGlobal
CoGetContextToken
CreateOleAdviseHolder
PropVariantClear
StgOpenStorage

oleaut32

SafeArrayPtrOfIndex
SafeArrayUnaccessData
VariantChangeType
RegisterTypeLib
VariantCopyInd
SafeArrayPtrOfIndex
SysFreeString
SafeArrayGetUBound
SafeArrayCreate
VariantChangeType
VariantCopyInd
SysAllocStringLen
GetErrorInfo
VariantCopyInd
SysReAllocStringLen
VariantChangeType
SysStringLen
GetErrorInfo
SysFreeString
SafeArrayCreate
SysAllocStringLen
SafeArrayCreate
VariantCopyInd
RegisterTypeLib
SafeArrayGetUBound
OleLoadPicture
SysReAllocStringLen
GetErrorInfo
SysAllocStringLen
SysFreeString
SafeArrayPtrOfIndex

gdi32

SetPixel
CopyEnhMetaFileA
CreatePenIndirect
LineTo
GetClipBox
GetPaletteEntries
CreateCompatibleDC
GetCurrentPositionEx
GetBitmapBits
CreateDIBitmap
GetBitmapBits
CopyEnhMetaFileA
GetRgnBox
SelectPalette
GetObjectA
CreateBrushIndirect
SetPixel
SetBkMode
GetClipBox
CreatePenIndirect
RestoreDC

version

VerInstallFileA
VerInstallFileA
GetFileVersionInfoA

kernel32

GetEnvironmentStrings
lstrcmpiA
CloseHandle
GetLocalTime
LocalFree
FreeLibrary
ResetEvent
SetEvent
CompareStringA
GetProcAddress
VirtualFree
GetDateFormatA
HeapDestroy
LoadLibraryA
ExitThread
VirtualQuery
SetLastError
GlobalDeleteAtom
FreeResource
GetACP
GetCurrentProcessId
GetCPInfo
ExitThread
GetCommandLineA
GetProcAddress
ReadFile
GetModuleHandleA
GetThreadLocale
lstrlenA
VirtualAllocEx
ExitProcess
LoadLibraryA
LoadLibraryExA
CreateEventA
GetSystemDefaultLangID
GlobalDeleteAtom
VirtualAllocEx
LoadLibraryExA
GetLocaleInfoA
VirtualAlloc
FindClose
FormatMessageA
MoveFileExA
HeapAlloc
GetStdHandle
GetStartupInfoA
GetUserDefaultLCID
lstrcatA
GetModuleHandleW
CreateThread
GlobalFindAtomA
GetFileAttributesA
GetLastError
GetFileType
GetCurrentProcessId
HeapFree
DeleteCriticalSection
GetStdHandle
SetHandleCount
RaiseException
LocalAlloc
GetStartupInfoA
LoadLibraryA
DeleteFileA
GetACP
GetVersionExA
WriteFile
GetEnvironmentStrings
EnterCriticalSection

shell32

SHGetDesktopFolder
SHFileOperationA
SHGetSpecialFolderLocation
Shell_NotifyIconA
SHGetDesktopFolder
Shell_NotifyIconA
SHFileOperationA
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetSpecialFolderLocation

advapi32

RegEnumValueA
GetUserNameA
RegLoadKeyA
RegOpenKeyA
GetLengthSid
GetUserNameA

comdlg32

ChooseColorA
FindTextA
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
ChooseColorA

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f042bf1d05cfce155d43ba572607f17b

Headers

File Characteristics

Imports

shlwapi

user32

comctl32

ole32

oleaut32

gdi32

version

kernel32

shell32

advapi32

comdlg32

Sections

.text Size: 71KB - Virtual size: 70KB

.data Size: 2KB - Virtual size: 1KB

.rdata Size: 247KB - Virtual size: 247KB

.adata Size: 1024B - Virtual size: 964B

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 71KB - Virtual size: 70KB

.data
Size: 2KB - Virtual size: 1KB

.rdata
Size: 247KB - Virtual size: 247KB

.adata
Size: 1024B - Virtual size: 964B

.rsrc
Size: 10KB - Virtual size: 9KB