a5afe540a57cb7e4a49033c353e81bb57b1ee2bfa6f5cdaf9fbcac5069e032e0

Sharing

Copy URL Twitter E-mail

General

Target

a5afe540a57cb7e4a49033c353e81bb57b1ee2bfa6f5cdaf9fbcac5069e032e0
Size

253KB
MD5

d156a13c704461b21d302b6606d1b741
SHA1

ab342d69bcda7c45c9551a85da76889624e1f0cd
SHA256

a5afe540a57cb7e4a49033c353e81bb57b1ee2bfa6f5cdaf9fbcac5069e032e0
SHA512

84690d0f431f9214c7db1bb5164361a3dd8443430d9f14937c0384104790b403848394250e03ba741b614c033aa39b7ca2324922e1cf9a5422afc5983c0ec86f
SSDEEP

3072:u2BAw5sM/FnLN1sl20x+6BAcnAtctxNbp1cBltmoQ+s7nuvy5IEdrjwcH0pgVMtz:UwyM/QRB/CctTUlQVjv2yjwXOLXy

Score

N/A

Malware Config

Signatures

Files

a5afe540a57cb7e4a49033c353e81bb57b1ee2bfa6f5cdaf9fbcac5069e032e0
.exe windows x86

10a9a79787db5479238c5e0989b562e2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

OpenClipboard
GetWindowModuleFileNameA
TrackPopupMenu
IsCharAlphaNumericA
DefWindowProcW
MapVirtualKeyExA
InvalidateRect
SetMenuItemInfoW
GetWindowRect
DestroyAcceleratorTable
GetKeyState
SetDlgItemTextW
SendMessageW
IsIconic
SetCapture
SetActiveWindow
SetClipboardData
GetDC
IsDialogMessageW
InsertMenuW
DialogBoxIndirectParamW
SetWindowTextW
GetClientRect
GetFocus
GetMenuState
GetScrollInfo
GetMenuItemInfoW
DrawFrameControl
TranslateAcceleratorW
BeginPaint
CheckMenuItem
PostMessageW
KillTimer
ScrollWindowEx
GetWindowPlacement
GetMessageW
EndPaint
GetUpdateRgn
FillRect
DrawMenuBar
LoadStringW
LoadImageW
RegisterWindowMessageW
CallWindowProcW
IsZoomed
GetMenu
GetClassLongW
GetPropW
SetTimer
DeferWindowPos
ShowWindow
CheckMenuRadioItem
GetDesktopWindow
GetDlgItemTextW
GetClassNameW
GetWindowTextW
MapWindowPoints
GetWindowLongW
EndDialog
CreateDialogParamW
DrawTextW
GetSystemMetrics
SetWindowPos
GetSysColor
LoadAcceleratorsW
UpdateWindow
MessageBoxW
CreateWindowExW
PtInRect
DestroyIcon
RegisterClassExW
GetParent
ScreenToClient
LoadIconW
GetSubMenu
IsDlgButtonChecked
GetCapture
EnableWindow
DestroyWindow
ReleaseCapture
SetWindowTextA
EnumChildWindows
EnableMenuItem
SetPropW
CheckDlgButton
OffsetRect
DialogBoxParamW
EndDeferWindowPos
CloseClipboard
DispatchMessageW
LoadCursorW
SetCursor
SetForegroundWindow
SetScrollInfo
GetSysColorBrush
UnionRect
InflateRect
ReleaseDC
SetFocus
IntersectRect
TranslateMessage
PostQuitMessage
IsCharUpperA
EndMenu
DrawAnimatedRects
SetUserObjectInformationA
CloseWindow
SetScrollRange
TrackMouseEvent
DrawFocusRect
MoveWindow
CreateIconFromResourceEx
IsWindowVisible
DefRawInputProc
GetWindowRgnBox
CountClipboardFormats
IsWindowEnabled
GetIconInfo
SetWindowContextHelpId
SetUserObjectInformationW
GetPriorityClipboardFormat
BeginDeferWindowPos
SetSysColors
ChangeClipboardChain
ScrollWindow
GetCursor
GetDialogBaseUnits
GetUserObjectInformationA
GetMessagePos
GetClipboardFormatNameA
SetWindowPlacement
SetParent
GetWindowRgn
SetMessageQueue
DefMDIChildProcA
MonitorFromPoint
MapVirtualKeyA
GetMenuItemID
IsClipboardFormatAvailable
ChildWindowFromPoint
DefMDIChildProcW
EmptyClipboard
EnumClipboardFormats
GetMenuItemCount
DefWindowProcA
SetWindowLongW
ChildWindowFromPointEx
DrawIconEx
SetWindowsHookExW
GetDlgItem
IsCharLowerW
CreateIconFromResource
RegisterHotKey
GetComboBoxInfo
GetActiveWindow
GetTopWindow
EnableScrollBar

comdlg32

ChooseFontW
GetSaveFileNameW
GetOpenFileNameW
PrintDlgW
FindTextW

shell32

SHChangeNotify
CommandLineToArgvW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW
SHGetSpecialFolderLocation
ShellExecuteW
SHGetMalloc

ole32

CoTaskMemFree
CoInitialize

advapi32

RegSetValueExW
RegCreateKeyExW
LookupAccountSidW
RegQueryValueExW
RegSetValueW
RegOpenKeyExA
RegCloseKey
EqualSid
RegCreateKeyW
AllocateAndInitializeSid
RegOpenKeyW
OpenSCManagerW
RegOpenKeyExW
OpenProcessToken
RegQueryValueExA
CloseServiceHandle
LookupPrivilegeValueW
FreeSid
AdjustTokenPrivileges
GetTokenInformation
EnumServicesStatusExW

gdi32

CreateRectRgn
LineTo
DeleteObject
CreateCompatibleBitmap
SelectClipRgn
CreateFontW
DeleteDC
RectInRegion
SetTextColor
CreateSolidBrush
Polyline
SetMapMode
StartPage
GetStockObject
CreateCompatibleDC
BitBlt
CreateRectRgnIndirect
MoveToEx
SetBkColor
GetBkColor
CombineRgn
GetTextMetricsW
SetBkMode
GetObjectW
SelectObject
StartDocW
CreatePen
FrameRgn
Polygon
EndPage
EndDoc
GetDeviceCaps

comctl32

ImageList_Destroy
ImageList_ReplaceIcon
InitCommonControlsEx
ImageList_DrawEx
ImageList_Create
ImageList_SetBkColor

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

mpr

WNetAddConnection2W
WNetCancelConnection2W

shlwapi

SHAutoComplete

kernel32

HeapReAlloc
GetFileSize
FreeEnvironmentStringsW
IsValidCodePage
GetOverlappedResult
Thread32First
GetNumberFormatW
WideCharToMultiByte
LockResource
GetCurrentDirectoryW
WriteFile
OpenThread
CreateNamedPipeW
MapViewOfFile
GetSystemTimeAsFileTime
Module32NextW
GetProcAddress
DeleteFileW
CreateFileA
LoadResource
QueryPerformanceCounter
GetModuleHandleW
GetOEMCP
GetCommandLineA
ConnectNamedPipe
Sleep
FindFirstFileW
GetTimeZoneInformation
GetEnvironmentVariableW
CloseHandle
HeapSize
WaitForSingleObject
GetProcessHeap
SetFilePointer
GlobalFree
Thread32Next
ReadFile
EnterCriticalSection
GlobalUnlock
SetLastError
GetEnvironmentStringsW
ExitThread
ReadProcessMemory
WriteConsoleA
LocalFree
GetTickCount
LocalAlloc
SetCurrentDirectoryW
QueryDosDeviceW
GlobalAlloc
UnmapViewOfFile
TerminateProcess
PeekNamedPipe
lstrlenA
ExpandEnvironmentStringsA
GetLocaleInfoW
GetFileType
GetTimeFormatW
QueryPerformanceFrequency
VirtualFree
GetFileInformationByHandle
LoadLibraryW
SizeofResource
TlsFree
SetEndOfFile
CompareStringA
WaitForMultipleObjects
GlobalLock
CreateThread
DeleteCriticalSection
GetConsoleOutputCP
GetCurrentProcess
GetFileAttributesW
SuspendThread
LCMapStringW
GetStringTypeA
WriteProcessMemory
FreeLibrary
FormatMessageW
GetThreadContext
TlsAlloc
IsDebuggerPresent
FileTimeToLocalFileTime
LoadLibraryA
IsProcessInJob
VirtualAlloc
GetProcessWorkingSetSize
GetExitCodeThread
GetFileTime
GetCurrentProcessId
CreateToolhelp32Snapshot
LCMapStringA
TlsGetValue
GetLocaleInfoA
GetStdHandle
VirtualAllocEx
ReplaceFileW
PurgeComm
DecodePointer
GetProcessPriorityBoost
GetPriorityClass
ConvertFiberToThread
GetCommandLineW
GetTapeParameters
GetNamedPipeHandleStateW
CreateMemoryResourceNotification
GetDevicePowerState
TransmitCommChar
PostQueuedCompletionStatus
HeapAlloc
FindResourceW
CreateFileW
ResumeThread
GlobalAddAtomW
HeapCreate
SetProcessWorkingSetSize
VirtualProtectEx
VirtualQueryEx
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
CreateProcessW
IsBadReadPtr
LeaveCriticalSection
GetModuleFileNameW
GetModuleFileNameA
GetModuleHandleA
Module32FirstW
GetStringTypeW
CreateEventW
FileTimeToSystemTime
Process32NextW
DebugBreak
RtlUnwind
SetEnvironmentVariableA
FindClose
FreeEnvironmentStringsA
SetEnvironmentVariableW
Process32FirstW
SetEvent
WriteConsoleW
GetNativeSystemInfo
HeapFree
GetACP
GetCPInfo
SetUnhandledExceptionFilter
GetCurrentThreadId
UnhandledExceptionFilter
GetSystemInfo
GetStartupInfoA
OpenProcess
ExitProcess
CreateFileMappingW
GetVersion
MultiByteToWideChar
RaiseException
GetConsoleCP
InterlockedIncrement
InterlockedDecrement
ExpandEnvironmentStringsW
FindVolumeClose
SetHandleCount
CreateIoCompletionPort
ContinueDebugEvent
GetEnvironmentStrings
TlsSetValue
SetStdHandle
FlushFileBuffers
GetProcessId
GlobalUnfix
SetProcessShutdownParameters
GetLastError

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10a9a79787db5479238c5e0989b562e2

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

shell32

ole32

advapi32

gdi32

comctl32

version

mpr

shlwapi

kernel32

Sections

.text Size: 73KB - Virtual size: 72KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 6KB - Virtual size: 121KB

.rsrc Size: 155KB - Virtual size: 154KB

.text
Size: 73KB - Virtual size: 72KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 6KB - Virtual size: 121KB

.rsrc
Size: 155KB - Virtual size: 154KB