d1c3e4ea77c5deabc0c82f2d891cba39203cfbca380f7e3d0914eb830a21e268

Sharing

Copy URL Twitter E-mail

General

Target

d1c3e4ea77c5deabc0c82f2d891cba39203cfbca380f7e3d0914eb830a21e268
Size

196KB
MD5

e70815bf15cd6908f3e79ede9410a9e0
SHA1

95540b93e21859baff8aa89c64db39c8f370c0e2
SHA256

d1c3e4ea77c5deabc0c82f2d891cba39203cfbca380f7e3d0914eb830a21e268
SHA512

8884d280b27d5a361dc5001cf14736a4343e142acac2c947707e26eacc475d37834d78046d0b4c33248160a4de200e0c01fd99756edea7db0cefdba2a070fa05
SSDEEP

3072:ImuHSjOf1bpCgghlbMO9iCdHaRP3HgyILDISreyFYH6DW:ImPoxghlbM16yWLDISSUK

Score

N/A

Malware Config

Signatures

Files

d1c3e4ea77c5deabc0c82f2d891cba39203cfbca380f7e3d0914eb830a21e268
.exe windows x86

221d9d84e37d005e812317d3543ffc7a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DdeGetLastError
DdeFreeDataHandle
DdeUnaccessData
DdeAccessData
DdeCreateDataHandle
DdeCreateStringHandleA
DdeClientTransaction
WindowFromPoint
WaitMessage
ValidateRect
UpdateWindow
UnregisterClassA
UnionRect
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
TabbedTextOutA
SystemParametersInfoA
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowRgn
SetWindowsHookExA
SetWindowTextA
SetWindowPos
SetWindowPlacement
DdeNameService
DdePostAdvise
DdeSetUserHandle
DdeQueryConvInfo
DdeDisconnect
DdeConnect
DdeUninitialize
CreateWindowExA
IsChild
SetWindowLongW
SetWindowLongA
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropA
SetParent
SetMenuItemInfoA
SetMenu
SetKeyboardState
SetForegroundWindow
SetFocus
SetCursor
SetClipboardViewer
SetClipboardData
SetClassLongA
SetCaretPos
SetCapture
SetActiveWindow
SendMessageW
SendMessageA
SendDlgItemMessageA
ScrollWindowEx
ScrollWindow
ScreenToClient
RemovePropA
DdeQueryStringA
DdeFreeStringHandle
DdeCmpStringHandles
CharNextA
MessageBoxA
LoadStringA
DestroyWindow
GetKeyboardType
ActivateKeyboardLayout
AdjustWindowRectEx
CharToOemA
CharUpperBuffA
CharLowerA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageA
PeekMessageW
PeekMessageA
OpenClipboard
OffsetRect
OemToCharA
MsgWaitForMultipleObjects
MessageBeep
MapWindowPoints
MapVirtualKeyA
MapDialogRect
LookupIconIdFromDirectoryEx
LoadMenuIndirectA
LoadKeyboardLayoutA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsDialogMessageA
IsClipboardFormatAvailable
DdeInitializeA
IsCharAlphaNumericA
IsCharAlphaA
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetUpdateRect
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetWindow
GetMessageTime
GetMessagePos
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameA
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItem
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameA
GetClassLongA
GetClassInfoA
GetCaretPos
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowA
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyMenu
DestroyIcon
DestroyCursor
DestroyCaret
DeleteMenu
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreatePopupMenu
CreateMenu
CreateIconFromResourceEx
CreateIcon
CreateDialogIndirectParamA
CreateCaret
CloseClipboard
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
ChangeClipboardChain
CallWindowProcA
CallNextHookEx
BringWindowToTop
BeginPaint
CharLowerBuffA

comdlg32

GetOpenFileNameA
ChooseColorA
FindTextA
ChooseFontA
GetSaveFileNameA

shell32

SHGetMalloc
SHGetFileInfoA
ShellExecuteA
ShellExecuteExA
SHBrowseForFolderA
SHChangeNotify
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHFileOperationA
SHGetDesktopFolder
SHGetDataFromIDListA

ole32

CoInitialize
CoUninitialize
CoCreateInstance
StringFromCLSID
CoTaskMemAlloc
CoTaskMemFree
OleInitialize
OleUninitialize
RegisterDragDrop
RevokeDragDrop
DoDragDrop
OleGetClipboard
ReleaseStgMedium
CLSIDFromString

advapi32

RegQueryInfoKeyA
RegFlushKey
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA

gdi32

CreateCompatibleDC
CreateDCA
CreateDIBSection
CreateDIBitmap
CreateFontIndirectA
CreateHalftonePalette
CreateICA
CreatePalette
GetPixel
GetRgnBox
GetStockObject
GetSystemPaletteEntries
GetTextExtentPoint32A
GetTextExtentPointA
GetTextMetricsA
GetWinMetaFileBits
GetWindowOrgEx
CreateCompatibleBitmap
LineTo
MaskBlt
MoveToEx
PatBlt
CreatePen
PolyPolyline
Polygon
Polyline
RealizePalette
RectVisible
Rectangle
RestoreDC
RoundRect
SaveDC
SelectClipRgn
SelectObject
SelectPalette
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileA
BitBlt
IntersectClipRect
CombineRgn
SetAbortProc
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBColorTable
SetEnhMetaFileBits
SetMapMode
SetPixel
SetROP2
SetStretchBltMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWinMetaFileBits
SetWindowExtEx
SetWindowOrgEx
StartDocA
StartPage
StretchBlt
StretchDIBits
UnrealizeObject
CreatePenIndirect
CreateRectRgn
CreateRoundRectRgn
CreateSolidBrush
DeleteDC
DeleteEnhMetaFile
DeleteObject
EndDoc
ExcludeClipRect
ExtCreatePen
ExtTextOutA
GdiFlush
GetBitmapBits
GetBrushOrgEx
GetClipBox
GetCurrentPositionEx
GetDCOrgEx
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetEnhMetaFileBits
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetNearestPaletteIndex
GetObjectA
GetObjectType
PlayEnhMetaFile
EndPage
GetPaletteEntries

opengl32

glLightModeli
glClear
glVertex2i
glColor3d
glDepthMask
glOrtho
glLoadMatrixd
glColor3us

comctl32

ImageList_LoadImageA
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_SetOverlayImage
ImageList_GetBkColor
ImageList_BeginDrag
ImageList_ReplaceIcon
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
ord17
_TrackMouseEvent
ImageList_EndDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_GetDragImage
ImageList_Read
ImageList_Write
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_SetBkColor

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

winmm

mciGetErrorStringA
timeGetTime
mciSendCommandA

winspool.drv

DocumentPropertiesA
EnumPrintersA
OpenPrinterA
ClosePrinter

kernel32

QueryPerformanceCounter
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
SetCurrentDirectoryA
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCurrentDirectoryA
GetCommandLineA
GetTickCount
FindFirstFileA
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringA
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
WritePrivateProfileStringA
FindNextVolumeW
CreateProcessA
GetCommMask
CloseHandle
CompareStringW
VirtualAlloc
VirtualFree
Sleep
GetACP
LocalAlloc
TlsGetValue
TlsSetValue
CreateDirectoryA
CreateEventA
CreateFileA
CreateFileMappingA
CreatePipe
CreateSemaphoreA
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
EnumCalendarInfoA
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindCloseChangeNotification
FindFirstChangeNotificationA
FindNextChangeNotification
FindNextFileA
FindResourceA
FlushViewOfFile
FormatMessageA
FreeResource
GetCPInfo
GetCurrentProcessId
GetDateFormatA
GetDiskFreeSpaceA
GetExitCodeThread
GetFileAttributesA
GetFileSize
GetFullPathNameA
GetLastError
GetLocalTime
GetProfileStringA
GetShortPathNameA
GetSystemDefaultLCID
GetSystemInfo
GetTempFileNameA
GetTempPathA
GetTimeFormatA
GetUserDefaultLCID
GetVersion
GetVersionExA
GetWindowsDirectoryA
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFree
GlobalLock
GlobalHandle
GlobalSize
GlobalUnlock
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadResource
LockResource
MapViewOfFile
MoveFileA
MoveFileExA
MulDiv
OpenSemaphoreA
ReadFile
ReleaseSemaphore
RemoveDirectoryA
ResetEvent
ResumeThread
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesA
SetFilePointer
SetThreadLocale
SetThreadPriority
SizeofResource
SystemTimeToFileTime
TerminateThread
UnmapViewOfFile
WaitForMultipleObjects
WaitForSingleObject
WinExec
lstrcmpA
lstrcpyA
lstrlenW
GetSystemTimeAsFileTime
HeapAlloc
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsAlloc
TlsFree
SetLastError
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapReAlloc
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
FreeLibrary

Sections

.text
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

221d9d84e37d005e812317d3543ffc7a

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

shell32

ole32

advapi32

gdi32

opengl32

comctl32

version

winmm

winspool.drv

kernel32

Sections

.text Size: 117KB - Virtual size: 116KB

.rdata Size: 30KB - Virtual size: 30KB

.data Size: 6KB - Virtual size: 14KB

.rsrc Size: 34KB - Virtual size: 33KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 117KB - Virtual size: 116KB

.rdata
Size: 30KB - Virtual size: 30KB

.data
Size: 6KB - Virtual size: 14KB

.rsrc
Size: 34KB - Virtual size: 33KB

.reloc
Size: 8KB - Virtual size: 7KB