70a4985608ad9ac25fe42c1a0d870f21499fad5088c89b63783b28de2e25bd89

Sharing

Copy URL Twitter E-mail

General

Target

70a4985608ad9ac25fe42c1a0d870f21499fad5088c89b63783b28de2e25bd89
Size

1.2MB
MD5

d6d31a6d36b3fd557065fcf0c0414fd6
SHA1

4a7f2df15e92b5d19aaa63a6795f871cc2587c54
SHA256

70a4985608ad9ac25fe42c1a0d870f21499fad5088c89b63783b28de2e25bd89
SHA512

8c03c3dbea33bd73e071ffebbc94020b503d6f18dec96fd829bd4d7935981e12657409fa937aef30fefde0fbca12c0efec5a4f97959f8a809d24a97470927b85
SSDEEP

24576:KDXpiprWOCqEJMxk3hbMYDreb2zGgIOWtHtZR4d6ap:KD5itCqEJMAhbMmr0JBR1tZ6d6ap

Score

N/A

Malware Config

Signatures

Files

70a4985608ad9ac25fe42c1a0d870f21499fad5088c89b63783b28de2e25bd89
.exe windows x86

a8684521b1e360df73bf87a907c0008f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FatalExit
SearchPathA
GetVolumeInformationW
WaitCommEvent
GetFileAttributesA
MultiByteToWideChar
ExitProcess
GlobalAlloc
GetCurrencyFormatW
GetFileSize
IsBadWritePtr
QueryPerformanceCounter
SetHandleCount
FindAtomA
_hread
GetVersion
GlobalMemoryStatus
SetProcessPriorityBoost
GetThreadPriorityBoost
PostQueuedCompletionStatus
_lclose
GetDefaultCommConfigA
GetVolumePathNameA
CreateFileA
lstrcmpW
GetStartupInfoW
WaitNamedPipeW
GetCurrentDirectoryW
RtlUnwind
SetTimeZoneInformation
GetEnvironmentVariableA
GetDriveTypeA

shlwapi

StrStrW
StrChrW
StrCpyNW
StrTrimW
wnsprintfW
wnsprintfA
StrCmpNIW
StrStrIA
StrPBrkW
StrChrA
StrCmpIW
StrCmpNA
StrStrIW
StrCatBuffA
SHGetValueW
StrRChrA
StrTrimA
StrStrA
StrCatBuffW
StrToIntExW
StrCmpNW
StrRChrW

gdiplus

GdipGetImageHeight
GdipBitmapUnlockBits
GdipGetImageWidth
GdipFree
GdipCreateBitmapFromStreamICM
GdipGetImagePaletteSize
GdipDeleteGraphics
GdipDrawImageI
GdipCloneImage
GdiplusStartup
GdipCreateBitmapFromStream
GdipCreateBitmapFromFileICM
GdipGetImageGraphicsContext
GdipAlloc
GdipDisposeImage
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipGetImagePalette
GdipBitmapLockBits
GdiplusShutdown
GdipGetImagePixelFormat

user32

TrackPopupMenu
MessageBeep
GetMessageW
MoveWindow
SetParent
LoadIconA
LoadCursorW
EnumChildWindows
GetKeyState
CopyRect
DefWindowProcW
GetClientRect
DestroyAcceleratorTable
UpdateWindow
CreatePopupMenu
SetFocus
SetForegroundWindow
CloseDesktop
SetDlgItemTextW
IsClipboardFormatAvailable
SetCaretBlinkTime
RegisterClassExA
DestroyCursor
GetMenu
InsertMenuItemW
AdjustWindowRect
GetNextDlgTabItem
ModifyMenuW
GetMenuBarInfo
GetMonitorInfoA
DragObject
ClientToScreen
DispatchMessageW
RegisterClassExW
RegisterWindowMessageW
EnumClipboardFormats
CreateWindowExW
ShowScrollBar
DdeEnableCallback
DrawFocusRect
GetWindow
GetDlgCtrlID
MessageBoxIndirectA
SetCapture
GetScrollInfo
SetPropA
GetDlgItem
AdjustWindowRectEx
ChildWindowFromPointEx
SetWindowTextW
GetParent
LookupIconIdFromDirectory
ShowWindow
LoadImageA
CreateWindowExA
DdeNameService
LoadStringW
EnumThreadWindows
SendDlgItemMessageW
GetWindowTextLengthW
SetWindowPlacement
SetWindowLongA
GetForegroundWindow
GetClassInfoW
GetMenuContextHelpId
CreateDialogParamW
EqualRect
VkKeyScanW
CharUpperBuffW
ArrangeIconicWindows
SendMessageCallbackW
SetMessageExtraInfo
DrawEdge
EnableMenuItem
PostMessageW
SetCursor
KillTimer
DialogBoxIndirectParamA
ScreenToClient
SetRect
IsIconic
SetScrollRange
DeleteMenu
DrawMenuBar
RemoveMenu
GetCursorPos
CheckMenuItem
GetMenuItemInfoW
EnableWindow
IsWindow
RegisterClassW
CheckRadioButton
SetWindowsHookExW
SendMessageW
GetMenuItemCount
LoadIconW
GetMessageTime
DialogBoxParamW
GetSysColor
ToAscii
PackDDElParam
SetMenuDefaultItem
ReleaseCapture
GetMenuState
LoadCursorA
SystemParametersInfoW
RealGetWindowClassW
GetWindowLongA
GetFocus
DrawAnimatedRects
BeginPaint
IsZoomed
FlashWindow
ScrollDC
GetDoubleClickTime
GetUserObjectInformationW
IsWindowVisible
TranslateAcceleratorW
WINNLSEnableIME
GetWindowTextW
PostQuitMessage
CreateAcceleratorTableW
CreateIconIndirect
GetDlgItemInt
IsDlgButtonChecked
TranslateMessage
GetClassNameW
GetSysColorBrush
GetDialogBaseUnits
SetDlgItemInt
CharPrevW
DestroyWindow
DrawIconEx
UnhookWindowsHookEx
RedrawWindow
SetTimer
GetSubMenu
ActivateKeyboardLayout
PeekMessageW
GetWindowLongW
GetWindowDC
GetSystemMetrics
UnionRect
EndDeferWindowPos
BeginDeferWindowPos
MsgWaitForMultipleObjects
RemovePropA
CloseClipboard
SetRectEmpty
DrawFrameControl
InflateRect
GetWindowTextA
GetKeyboardLayout
DeferWindowPos
IsChild
IntersectRect
IsWindowEnabled
CallWindowProcW
DrawTextW
CharUpperA
GetKeyNameTextW
SetWindowTextA
IMPSetIMEA
SetMenu
MessageBoxExW
GetAsyncKeyState
GetDesktopWindow
OffsetRect
GetClassInfoExW
MessageBoxW
MapVirtualKeyExA
OemToCharA
DefDlgProcA
SetMenuItemInfoW
GetMenuDefaultItem
GetWindowRect
OpenInputDesktop
LoadMenuA
ExcludeUpdateRgn
DestroyIcon
GetDlgItemTextW
InvalidateRgn
MapWindowPoints
GetMenuItemID
EndDialog
FindWindowExW
FindWindowW
GetPropA
SetWindowsHookA
SetWindowRgn
ReleaseDC
GetProcessDefaultLayout
EndPaint
SwitchDesktop
GetCursorInfo
LoadImageW
LoadBitmapA
CheckMenuRadioItem
GetCapture
MessageBoxIndirectW
GetLastActivePopup
UnregisterClassW
FlashWindowEx
FillRect
wsprintfW
GetActiveWindow
CreateAcceleratorTableA
TrackPopupMenuEx
WindowFromDC
ShowCaret
LoadMenuW
CallNextHookEx
SetCursorPos
LoadBitmapW
SubtractRect
SetWindowPos
PostThreadMessageW
ValidateRect
GetLastInputInfo
LoadStringA
GetUpdateRect
IsDialogMessageW
SetScrollPos
IsMenu
GetGuiResources
ClipCursor
CheckDlgButton
GetDC
DdeCreateDataHandle
GetWindowPlacement
DestroyMenu
GetClassInfoExA
CloseWindow
InvalidateRect
CharNextW
SetWindowLongW
PtInRect

iphlpapi

GetAdaptersInfo

comctl32

ImageList_Create
ImageList_Destroy
PropertySheetW
ImageList_BeginDrag
CreateToolbarEx
ImageList_Draw
ImageList_DrawEx
ImageList_EndDrag
ImageList_Add
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
CreateStatusWindowW
ImageList_AddMasked
ImageList_GetIcon
ImageList_Remove

comdlg32

ChooseFontW
GetSaveFileNameW
GetOpenFileNameW

cryptdll

MD5Final
MD5Init
MD5Update

msimg32

TransparentBlt
AlphaBlend

wininet

InternetReadFile
InternetCanonicalizeUrlW
InternetSetStatusCallbackW
InternetCrackUrlW
GetUrlCacheEntryInfoW
InternetOpenUrlW
InternetSetOptionW
InternetCloseHandle
HttpOpenRequestW
HttpQueryInfoW
HttpSendRequestW
InternetOpenW
InternetOpenA
InternetSetOptionA
InternetConnectW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA

Sections

.text
Size: 400KB - Virtual size: 399KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 402KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.arch
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8684521b1e360df73bf87a907c0008f

Headers

File Characteristics

Imports

kernel32

shlwapi

gdiplus

user32

iphlpapi

comctl32

comdlg32

cryptdll

msimg32

wininet

version

Sections

.text Size: 400KB - Virtual size: 399KB

.data Size: 402KB - Virtual size: 1.1MB

.arch Size: 5KB - Virtual size: 5KB

.rdata Size: 9KB - Virtual size: 9KB

.rsrc Size: 404KB - Virtual size: 404KB

.reloc Size: 2KB - Virtual size: 4KB

.text
Size: 400KB - Virtual size: 399KB

.data
Size: 402KB - Virtual size: 1.1MB

.arch
Size: 5KB - Virtual size: 5KB

.rdata
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 404KB - Virtual size: 404KB

.reloc
Size: 2KB - Virtual size: 4KB