d79f3e71d36d3827671fbc507e9b7172b6b731c2216168f67bbfda6b5cede07c

Sharing

Copy URL Twitter E-mail

General

Target

d79f3e71d36d3827671fbc507e9b7172b6b731c2216168f67bbfda6b5cede07c
Size

2.1MB
MD5

fbedc394621022f5eb3768b26bc9e7fb
SHA1

b5cf748d73381e4073c479d5d4f179724761784a
SHA256

d79f3e71d36d3827671fbc507e9b7172b6b731c2216168f67bbfda6b5cede07c
SHA512

3779197d3f43646a230d22c7df560b4d99729858000e02ca2ec502c2fd9e1128b62e5c4c33064c5169cb35441b16a67c399ff5cf885d27d3b240ea196f7fcc41
SSDEEP

49152:UyMDb7driEt9R8asD5TN+315pGK1BwZdbJXQO5kwAU16KG+ZN2HkcTDGfrcS8gE:bMDbth9R8asVTN05pGK1BwZdbJQOtmKu

Score

N/A

Malware Config

Signatures

Files

d79f3e71d36d3827671fbc507e9b7172b6b731c2216168f67bbfda6b5cede07c
.exe windows x86

a1ab0a63586922a028667c31deeb9320

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

sqlite3

sqlite3_free
sqlite3_prepare
sqlite3_busy_timeout
sqlite3_close
sqlite3_open
sqlite3_errmsg
sqlite3_finalize
sqlite3_step
sqlite3_column_name
sqlite3_column_text
sqlite3_column_count
sqlite3_mprintf

ws2_32

__WSAFDIsSet
select
listen
recv
recvfrom
sendto
gethostname
ioctlsocket
getaddrinfo
freeaddrinfo
WSAGetLastError
closesocket
WSAStartup
WSACleanup
socket
connect
setsockopt
getsockopt
htons
bind
ntohs
getsockname
send
WSASetLastError
accept

wldap32

ord79
ord35
ord32
ord30
ord33
ord301
ord27
ord41
ord46
ord26
ord50
ord60
ord211
ord143
ord200
ord22

gdiplus

GdipGetImageGraphicsContext
GdipFree
GdipAlloc
GdiplusShutdown
GdiplusStartup
GdipDrawImageRect
GdipDeleteGraphics
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromScan0
GdipCloneImage
GdipDisposeImage
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipCreateFont
GdipGetGenericFontFamilySansSerif
GdipDeleteFont
GdipCreateSolidFill
GdipDeleteBrush
GdipDrawString
GdipCreateFromHDC
GdipDrawImageI
GdipReleaseDC
GdipLoadImageFromStream
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromHBITMAP
GdipGetImagePixelFormat

version

VerQueryValueW

kernel32

IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
CreateFileA
GetFullPathNameA
GetDriveTypeW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
SetHandleCount
LCMapStringW
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
HeapCreate
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
SetStdHandle
FormatMessageA
ExpandEnvironmentStringsA
LoadLibraryA
GetStdHandle
GetFileType
WaitForMultipleObjects
PeekNamedPipe
ReadFile
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SetLastError
RemoveDirectoryW
FindNextFileW
FindFirstFileW
GetCommandLineW
GetModuleFileNameW
GetTickCount
CreateMutexW
FormatMessageW
Sleep
WriteConsoleW
VirtualAlloc
ExitProcess
HeapSize
HeapQueryInformation
RaiseException
RtlUnwind
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
ResetEvent
WaitForSingleObject
GetVersionExW
lstrlenA
FindFirstFileExA
GetDriveTypeA
CreateThread
ExitThread
GetFileInformationByHandle
HeapReAlloc
CreateDirectoryW
GetStartupInfoW
HeapSetInformation
GetSystemTimeAsFileTime
GetLastError
GetEnvironmentVariableW
SizeofResource
FreeResource
GetUserDefaultLangID
LockResource
LoadResource
FindResourceW
DeleteFileW
GetSystemInfo
HeapAlloc
GetCPInfo
DecodePointer
EncodePointer
HeapFree
LoadLibraryW
GetFileAttributesW
OutputDebugStringW
CloseHandle
FindResourceExW
GetUserDefaultLCID
SetEnvironmentVariableA
GetProcessHeap
VirtualQuery
InterlockedCompareExchange
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
GetPrivateProfileSectionW
FreeLibrary
GetProcAddress
SleepEx
MulDiv
lstrlenW
LocalFree
GlobalSize
CopyFileW
DeactivateActCtx
ReleaseActCtx
ActivateActCtx
InterlockedDecrement
CreateEventW
FindClose
GetModuleHandleW
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrcmpiW
CreateFileW
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetVolumeInformationW
GetFullPathNameW
lstrcmpW
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
GetCurrentThreadId
SetThreadPriority
ResumeThread
SetEvent
SuspendThread
InterlockedIncrement
GetCurrentProcessId
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalGetAtomNameW
lstrcmpA
GetFileAttributesExW
GetFileSizeEx
GetFileTime
GlobalFlags
InterlockedExchange
GetLocaleInfoW
GetUserDefaultUILanguage
GetCurrentDirectoryW
lstrcpyW
GetWindowsDirectoryW
GetNumberFormatW
GetTempFileNameW
GetTempPathW
InitializeCriticalSectionAndSpinCount
GetProfileIntW
SearchPathW
VirtualProtect

user32

GetScrollInfo
DeferWindowPos
EqualRect
GetParent
AdjustWindowRectEx
GetSysColor
RegisterClassW
GetClassInfoW
GetClassInfoExW
MessageBoxW
GetClientRect
UpdateWindow
ShowScrollBar
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
EnableWindow
SetMenu
TrackPopupMenu
ScrollWindow
MapWindowPoints
GetMonitorInfoW
MonitorFromWindow
GetMessagePos
GetMessageTime
DestroyWindow
GetTopWindow
GetDlgItem
EndDeferWindowPos
BeginDeferWindowPos
GetLastActivePopup
GetForegroundWindow
GetWindowTextW
GetWindowTextLengthW
SetFocus
IsWindow
GetFocus
RemovePropW
GetPropW
SetPropW
GetClassLongW
CallNextHookEx
SetWindowsHookExW
GetCapture
IsChild
WinHelpW
SendDlgItemMessageA
SendDlgItemMessageW
RegisterWindowMessageW
IsDialogMessageW
SetWindowTextW
MoveWindow
IsWindowEnabled
ValidateRect
GetActiveWindow
GetSysColorBrush
ReleaseDC
GetDC
GetWindowThreadProcessId
FillRect
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
ClientToScreen
GetWindowDC
CheckMenuItem
EnableMenuItem
ModifyMenuW
LoadBitmapW
GetMenuCheckMarkDimensions
GetMessageW
InflateRect
GetMenuItemInfoW
RealChildWindowFromPoint
GetDesktopWindow
PostQuitMessage
DestroyIcon
IntersectRect
SetRectEmpty
ShowOwnedPopups
DeleteMenu
EnumDisplayMonitors
SetLayeredWindowAttributes
RedrawWindow
GetMenuDefaultItem
IsRectEmpty
MapVirtualKeyW
SetCapture
GetAsyncKeyState
ReleaseCapture
InvertRect
DrawFocusRect
HideCaret
EnableScrollBar
NotifyWinEvent
MessageBeep
SetScrollInfo
OffsetRect
GetIconInfo
CopyImage
LoadImageW
GetNextDlgGroupItem
DrawIconEx
TranslateAcceleratorW
BringWindowToTop
InsertMenuItemW
LoadAcceleratorsW
LoadMenuW
ReuseDDElParam
UnpackDDElParam
SetRect
WindowFromPoint
IsZoomed
SetWindowRgn
SetParent
DestroyAcceleratorTable
SetClassLongW
GetSystemMenu
DrawStateW
DrawEdge
DrawFrameControl
CopyAcceleratorTableW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
SetCursorPos
LockWindowUpdate
GetKeyNameTextW
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
IsCharLowerW
MapVirtualKeyExW
UnionRect
UpdateLayeredWindow
MonitorFromPoint
IsMenu
CreateDialogIndirectParamW
PostThreadMessageW
WaitMessage
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
CreateMenu
SetMenuDefaultItem
IsClipboardFormatAvailable
FrameRect
GetUpdateRect
RegisterClipboardFormatW
CopyIcon
CharUpperBuffW
GetDoubleClickTime
SubtractRect
MapDialogRect
DrawIcon
DestroyCursor
GetWindowRgn
CheckDlgButton
IsDlgButtonChecked
SetDlgItemTextW
EndDialog
SetActiveWindow
PostMessageW
SetForegroundWindow
IsIconic
IsWindowVisible
FindWindowW
GetClassNameW
GetWindow
DefWindowProcW
CopyRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
CallWindowProcW
GetMenu
GetWindowLongW
SetWindowLongW
CharUpperW
UnhookWindowsHookEx
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
TranslateMessage
DispatchMessageW
LoadIconW
RegisterClassExW
CreateWindowExW
DestroyMenu
CreatePopupMenu
GetSystemMetrics
TrackPopupMenuEx
GetLastInputInfo
SetCursor
LoadCursorW
EnumChildWindows
SystemParametersInfoW
SetWindowPos
ShowWindow
InvalidateRect
BeginPaint
ScreenToClient
EndPaint
AdjustWindowRect
GetMenuItemCount
GetSubMenu
RemoveMenu
DialogBoxParamW
SetTimer
SendMessageW
GetKeyState
AppendMenuW
KillTimer
GetWindowRect
GetCursorPos
PtInRect
GetNextDlgTabItem
PeekMessageW
SetMenuItemBitmaps

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegNotifyChangeKeyValue
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyExW

shell32

SHGetFileInfoW
SHFileOperationW
SHGetSpecialFolderPathW
SHAppBarMessage
Shell_NotifyIconW
ShellExecuteW
FindExecutableW
SHBrowseForFolderW
DragQueryFileW
DragFinish
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetDesktopFolder

ole32

CreateStreamOnHGlobal
CoTaskMemFree
StringFromCLSID
CLSIDFromProgID
CoUninitialize
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoInitialize
CoInitializeEx
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
DoDragDrop
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoCreateInstance

oleaut32

VariantTimeToSystemTime
SysFreeString
VarBstrFromDate
SysAllocString
VariantClear
VariantInit
SysStringLen
SystemTimeToVariantTime
VariantChangeType
SysAllocStringLen

msimg32

TransparentBlt
AlphaBlend

comctl32

ImageList_GetIconSize

shlwapi

PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW
PathRemoveFileSpecW

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundW

gdi32

SetTextAlign
MoveToEx
LineTo
ExcludeClipRect
GetWindowExtEx
BitBlt
GetPixel
PtVisible
IntersectClipRect
GetTextFaceW
SetPixelV
SetPaletteEntries
ExtFloodFill
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
LPtoDP
GetLayout
GetRgnBox
RectVisible
Rectangle
SetPixel
StretchBlt
SetDIBColorTable
Polygon
Ellipse
Polyline
CreateEllipticRgn
GetTextColor
CreatePolygonRgn
CreateRoundRectRgn
CreateDIBSection
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
GetBkColor
GetClipBox
SetMapMode
GetTextCharsetInfo
EnumFontFamiliesW
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
CreateFontIndirectW
GetTextExtentPoint32W
CreateRectRgnIndirect
SetRectRgn
CombineRgn
SetLayout
DeleteObject
SelectClipRgn
CreateRectRgn
EnumFontFamiliesExW
GetViewportExtEx
PatBlt
DPtoLP
CreateCompatibleBitmap
CreateDIBitmap
GetTextMetricsW
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
GetStockObject
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateBitmap
OffsetRgn
CreateCompatibleDC
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetObjectW
SetBkColor
SetTextColor
CreateDCW
CopyMetaFileW
GetDeviceCaps

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

comdlg32

GetFileTitleW

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 322KB - Virtual size: 322KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a1ab0a63586922a028667c31deeb9320

Headers

DLL Characteristics

File Characteristics

Imports

sqlite3

ws2_32

wldap32

gdiplus

version

kernel32

user32

advapi32

shell32

ole32

oleaut32

msimg32

comctl32

shlwapi

oleacc

imm32

winmm

gdi32

winspool.drv

comdlg32

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 322KB - Virtual size: 322KB

.data Size: 25KB - Virtual size: 57KB

.rsrc Size: 166KB - Virtual size: 165KB

.reloc Size: 184KB - Virtual size: 183KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 322KB - Virtual size: 322KB

.data
Size: 25KB - Virtual size: 57KB

.rsrc
Size: 166KB - Virtual size: 165KB

.reloc
Size: 184KB - Virtual size: 183KB