ba870f3acdc5743927469abe5de4a3934db5f1a83247bc22cc9b25e828b4d5ee

Sharing

Copy URL Twitter E-mail

General

Target

ba870f3acdc5743927469abe5de4a3934db5f1a83247bc22cc9b25e828b4d5ee
Size

987KB
MD5

a1e8441062c268138b062427774a0fe2
SHA1

77eb3304360f7818f2f019470596cc50a585247c
SHA256

ba870f3acdc5743927469abe5de4a3934db5f1a83247bc22cc9b25e828b4d5ee
SHA512

1c9c337502fa03fd3a65c2605d61bea99b5cbb41c373c4bd1c7d78072f1eae2f333e5fe1834d5e290570258ce600c78cc64676612590fbaa28a8aa95406c1f42
SSDEEP

24576:Ot3v3WYu9tEkJT44m/+LkmgYkmxFAXGIdTBOWG:MWmiA3dYkmcGIdlOWG

Score

N/A

Malware Config

Signatures

Files

ba870f3acdc5743927469abe5de4a3934db5f1a83247bc22cc9b25e828b4d5ee
.exe windows x86

959a51df8bd080a320d0787eaa0c898b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx
ImageList_Create
ImageList_ReplaceIcon

gdi32

GetObjectW
RoundRect
GetStockObject
Polyline
GetTextExtentPoint32W
SetBkMode
LineTo
MoveToEx
CreatePen
SetBkColor
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
DeleteObject
CreateFontW
CreateSolidBrush
CreateCompatibleBitmap
SetTextColor

winmm

timeGetTime

shlwapi

PathRemoveExtensionW
PathRemoveFileSpecW

winhttp

WinHttpGetIEProxyConfigForCurrentUser

kernel32

DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
QueueUserAPC
TerminateThread
InterlockedExchangeAdd
WaitForMultipleObjects
InterlockedDecrement
GetQueuedCompletionStatus
SetWaitableTimer
InterlockedExchange
InterlockedIncrement
PostQueuedCompletionStatus
InterlockedCompareExchange
SetLastError
LeaveCriticalSection
EnterCriticalSection
TlsFree
TlsAlloc
TlsSetValue
TlsGetValue
GetSystemTimeAsFileTime
GetProcessHeap
HeapFree
GetTickCount
Sleep
SleepEx
CreateEventW
HeapAlloc
CreateWaitableTimerW
DeleteFileW
SetFilePointerEx
WriteFile
SetFileAttributesW
MoveFileW
MoveFileExW
CreateFileW
DeviceIoControl
SetEndOfFile
FormatMessageW
LocalFree
lstrcpyW
GlobalAlloc
GlobalLock
GlobalFree
GlobalUnlock
lstrlenW
GetCommandLineW
LoadLibraryW
GetProcAddress
GetModuleFileNameW
GetUserDefaultUILanguage
GetFileAttributesW
GetVersionExW
OutputDebugStringW
SystemTimeToFileTime
OpenEventA
CreateIoCompletionPort
ResetEvent
GetCurrentProcessId
ResumeThread
FormatMessageA
WideCharToMultiByte
MultiByteToWideChar
IsDBCSLeadByteEx
GetLastError
CompareStringW
LCMapStringW
FoldStringW
GetLocaleInfoA
EnumSystemLocalesA
GetDateFormatW
GetCurrencyFormatW
GetLocaleInfoW
GetTimeFormatW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
SetEnvironmentVariableA
LoadLibraryA
GetModuleHandleA
IsValidLocale
GetUserDefaultLCID
GetCurrentDirectoryA
GetFullPathNameA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetFilePointer
SetHandleCount
ReadFile
GetTimeZoneInformation
GetStringTypeA
GetOEMCP
GetACP
HeapSize
VirtualAlloc
VirtualFree
HeapCreate
ExitProcess
GetModuleFileNameA
CompareStringA
GetStringTypeW
LCMapStringA
RtlUnwind
RaiseException
FindFirstFileA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
GetStartupInfoA
GetCommandLineA
HeapReAlloc
GetDateFormatA
GetTimeFormatA
GetCPInfo
CreateThread
ExitThread
GetStdHandle
GetFileType
WriteConsoleW
IsDebuggerPresent
VirtualQuery
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExpandEnvironmentStringsA
InitializeCriticalSection
WaitForSingleObject
GetCurrentThreadId
SetEvent
CreateEventA
CloseHandle
GetModuleHandleW
CreateFileA
IsValidCodePage
ReleaseSemaphore

user32

EmptyClipboard
SetClipboardData
CloseClipboard
RegisterWindowMessageW
SendDlgItemMessageW
OpenClipboard
GetWindowLongW
EnumChildWindows
GetWindowInfo
GetParent
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetSysColorBrush
OffsetRect
InflateRect
CopyRect
SetWindowPos
SetParent
GetMenuItemInfoW
GetMenuItemCount
CheckMenuItem
AppendMenuW
DrawIconEx
GetIconInfo
DrawTextW
GetMessagePos
ClientToScreen
EnableMenuItem
GetWindowTextLengthW
IsDlgButtonChecked
LoadIconW
SendMessageW
SetWindowTextW
GetDlgItem
EndDialog
DialogBoxParamW
LoadImageW
LoadCursorW
DestroyIcon
BeginPaint
GetClientRect
CallWindowProcW
EndPaint
MoveWindow
CreateWindowExW
SetWindowLongW
InvalidateRect
SetFocus
GetWindowTextW
GetFocus
FillRect
LoadMenuW
GetSubMenu
SetMenuItemInfoW
TrackPopupMenu
DestroyMenu
SetCursor
GetKeyState
KillTimer
ScreenToClient
SetTimer
DrawTextExW
GetDC
ReleaseDC
SetScrollInfo
GetScrollInfo
GetMessageW
LoadAcceleratorsW
FindWindowW
PostQuitMessage
DestroyWindow
GetSysColor
ReleaseCapture
SetCapture
MessageBoxW
GetLastActivePopup
DrawMenuBar
SetMenu
GetMenu
RemoveMenu
GetCursorPos
PostMessageW
ShowWindow
IsZoomed
SetForegroundWindow
IsIconic
ShowWindowAsync
EndDeferWindowPos
DeferWindowPos
GetWindowRect
BeginDeferWindowPos
UpdateWindow
IsWindowVisible
RegisterClassExW
DefWindowProcW
ScrollWindow

advapi32

RegCreateKeyExW
CryptDestroyHash
CryptCreateHash
CryptAcquireContextA
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
RegQueryValueExW
CryptReleaseContext
CryptGetHashParam
CryptHashData

shell32

SHGetFolderPathW
ShellExecuteW
SHBindToParent
SHParseDisplayName
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteA
Shell_NotifyIconW
SHFileOperationW
ord155
SHOpenFolderAndSelectItems
ord190
ord74

ole32

OleUninitialize
OleInitialize
ReleaseStgMedium
CoCreateGuid
StringFromCLSID
RegisterDragDrop
RevokeDragDrop
DoDragDrop
CoCreateInstance
CoTaskMemFree

ws2_32

getpeername
htons
recv
socket
getsockopt
bind
getsockname
connect
send
__WSAFDIsSet
WSASocketW
WSASend
setsockopt
ioctlsocket
WSASetLastError
WSAGetLastError
closesocket
WSAStartup
WSACleanup
getaddrinfo
freeaddrinfo
select
ntohs

Sections

.text
Size: 654KB - Virtual size: 654KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

959a51df8bd080a320d0787eaa0c898b

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

gdi32

winmm

shlwapi

winhttp

kernel32

user32

advapi32

shell32

ole32

ws2_32

Sections

.text Size: 654KB - Virtual size: 654KB

.rdata Size: 178KB - Virtual size: 177KB

.data Size: 38KB - Virtual size: 48KB

.rsrc Size: 61KB - Virtual size: 61KB

.reloc Size: 54KB - Virtual size: 53KB

.text
Size: 654KB - Virtual size: 654KB

.rdata
Size: 178KB - Virtual size: 177KB

.data
Size: 38KB - Virtual size: 48KB

.rsrc
Size: 61KB - Virtual size: 61KB

.reloc
Size: 54KB - Virtual size: 53KB