7563e62eb56f4059f0facde4e1b6eb5a6ad0ab018608b42a2aa3e6aa830a66ba

Sharing

Copy URL Twitter E-mail

General

Target

7563e62eb56f4059f0facde4e1b6eb5a6ad0ab018608b42a2aa3e6aa830a66ba
Size

3.8MB
MD5

105b504f5be747f6fd6bf47d006e495a
SHA1

60f06cc483db78d61aa17b852987d522f8fccaa8
SHA256

7563e62eb56f4059f0facde4e1b6eb5a6ad0ab018608b42a2aa3e6aa830a66ba
SHA512

068a3243c6969e54d827e036fd4e915b15fb961745623e8b39e94a926f7eccf666ffea0beac3f02bcea93b07b339d57d300c600e15399a72ee97a0dd1d2f1372
SSDEEP

49152:PglLioCP10foV70uIQSd4Pd1FefbjWL5ehbmtdDWSRiTiFZKD4B:j2QeTjWFRi

Score

N/A

Malware Config

Signatures

Files

7563e62eb56f4059f0facde4e1b6eb5a6ad0ab018608b42a2aa3e6aa830a66ba
.exe windows x86

15568fb2dd8496c9afb259130768a337

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
DuplicateHandle
GetHandleInformation
GetCurrentProcess
lstrcmpiW
CompareStringW
GetUserDefaultUILanguage
FindResourceExW
FileTimeToLocalFileTime
GetFileAttributesW
GetFileAttributesExW
GetFileSizeEx
GetFileTime
GetCurrentDirectoryW
GetWindowsDirectoryW
GetTempFileNameW
VerSetConditionMask
VerifyVersionInfoW
GetTickCount
SearchPathW
GetModuleHandleExW
GetCommandLineW
HeapValidate
GetSystemInfo
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
CreateThread
ExitThread
ExitProcess
VirtualAlloc
VirtualQuery
GetStdHandle
GetFileType
OutputDebugStringW
WriteConsoleW
GetSystemTimeAsFileTime
SetStdHandle
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
WaitForSingleObjectEx
LockFile
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
HeapQueryInformation
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
LCMapStringW
SetEnvironmentVariableA
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
CreateFileW
GlobalFlags
VirtualProtect
GetProfileIntW
GetVersionExW
WaitForSingleObject
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
ResumeThread
SetThreadPriority
GetCurrentProcessId
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FileTimeToSystemTime
lstrcmpA
GetAtomNameW
GlobalGetAtomNameW
LoadLibraryA
LoadLibraryW
GetModuleHandleA
GetModuleFileNameW
OutputDebugStringA
CopyFileW
FormatMessageW
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
SetLastError
GetVolumeInformationW
GetStartupInfoW
GetFullPathNameW
FreeResource
lstrcpyW
GetTempPathA
CloseHandle
DeleteCriticalSection
lstrcatW
GetModuleFileNameA
DecodePointer
LockResource
GetTempFileNameA
HeapSize
GetProcAddress
GetLastError
RaiseException
GetTempPathW
lstrlenW
MultiByteToWideChar
MulDiv
SizeofResource
Sleep
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
OpenProcess
GetProcessHeap
GetModuleHandleW
HeapFree
HeapAlloc
LoadResource
FindResourceW
LoadLibraryExW
HeapReAlloc

user32

CheckDlgButton
CreateDialogIndirectParamW
EndDialog
SetRect
SetRectEmpty
ReleaseCapture
GetAsyncKeyState
RealChildWindowFromPoint
LoadAcceleratorsW
TranslateAcceleratorW
IntersectRect
DestroyIcon
LoadImageW
UnpackDDElParam
ReuseDDElParam
CharUpperW
CopyImage
SendDlgItemMessageA
GetClipboardFormatNameA
GetClipboardFormatNameW
IsRectEmpty
UnionRect
DrawIconEx
GetIconInfo
MessageBeep
EnumDisplayMonitors
CloseClipboard
SetClipboardData
EmptyClipboard
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetCursorPos
SetClassLongW
GetDoubleClickTime
CopyIcon
RegisterClipboardFormatW
CharUpperBuffW
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
SubtractRect
DestroyCursor
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
GetClassInfoExW
GetClassInfoW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
NotifyWinEvent
GetWindow
GetTopWindow
SetParent
GetDesktopWindow
WindowFromPoint
MapWindowPoints
HideCaret
GetClientRect
EnableScrollBar
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
LockWindowUpdate
RedrawWindow
ValidateRect
GetWindowRgn
SetWindowRgn
GetUpdateRect
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
GetSystemMenu
DrawMenuBar
SetCapture
GetCapture
GetActiveWindow
OpenClipboard
GetNextDlgTabItem
GetNextDlgGroupItem
IsZoomed
BringWindowToTop
IsIconic
IsWindowVisible
ShowOwnedPopups
IsChild
PostThreadMessageW
SystemParametersInfoW
InflateRect
DestroyMenu
MapVirtualKeyW
GetKeyNameTextW
CopyRect
ScreenToClient
ClientToScreen
GetSysColor
GetLastActivePopup
MessageBoxW
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
GetWindowTextLengthW
MapDialogRect
IsWindow
PostMessageW
LoadBitmapW
InvertRect
FrameRect
DrawFocusRect
TabbedTextOutW
DrawStateW
GrayStringW
DrawTextExW
DrawTextW
DrawIcon
SetMenuDefaultItem
GetMenuDefaultItem
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
SetMenuItemBitmaps
DeleteMenu
ModifyMenuW
EnableMenuItem
CheckMenuItem
CreatePopupMenu
CreateMenu
LoadMenuW
DrawFrameControl
DrawEdge
PeekMessageW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
IsMenu
DispatchMessageW
GetWindowThreadProcessId
DefWindowProcW
CallWindowProcW
SetWindowTextW
GetDlgCtrlID
SendMessageW
GetSystemMetrics
RegisterClassW
CreateWindowExW
FindWindowExW
GetSysColorBrush
ShowWindow
SetLayeredWindowAttributes
SetWindowLongW
GetDlgItem
ReleaseDC
GetWindowTextW
GetWindowLongW
InvalidateRect
OffsetRect
LoadIconW
IsDialogMessageW
TranslateMessage
GetDC
wsprintfW
BeginPaint
SetFocus
LoadCursorW
TrackMouseEvent
GetParent
GetKeyState
KillTimer
FillRect
GetWindowDC
PostQuitMessage
GetMessageW
GetWindowRect
SetTimer
SetCursor
MoveWindow
GetMenuCheckMarkDimensions
GetCursorPos
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetClassNameW
GetClassLongW
PtInRect
EndPaint
EqualRect
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ScrollWindow
TrackPopupMenu
SetMenu
GetFocus
GetMenu

gdi32

GetTextColor
GetTextExtentPoint32W
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
OffsetRgn
PatBlt
CreateDCW
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateEllipticRgn
CreateFontIndirectW
CreateHatchBrush
CreatePalette
CreatePen
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
Ellipse
Escape
ExtFloodFill
FillRgn
FrameRgn
GetBkColor
GetRgnBox
GetStockObject
CreateFontW
CreateCompatibleDC
SelectObject
DeleteObject
SetBkMode
ExcludeClipRect
GetDeviceCaps
DeleteDC
GetTextMetricsW
BitBlt
EnumFontFamiliesW
GetPixel
GetBoundsRect
GetPaletteEntries
GetObjectType
GetNearestPaletteIndex
CreatePatternBrush
CopyMetaFileW
SetDIBColorTable
CreateDIBSection
GetTextCharsetInfo
CreateDIBitmap
GetSystemPaletteEntries
EnumFontFamiliesExW
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
MoveToEx
SetTextAlign
SetTextColor
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkColor
SelectPalette
ExtSelectClipRgn
SelectClipRgn
PtInRegion
PtVisible
SaveDC
RestoreDC
LineTo
IntersectClipRect
GetClipBox
RectVisible
Rectangle
RealizePalette
RoundRect
SetPaletteEntries
SetPixel
SetPixelV
StretchBlt
SetRectRgn
GetObjectW
TextOutW
ExtTextOutW
CreatePolygonRgn
DPtoLP
LPtoDP
Polygon
Polyline
GetTextFaceW

shell32

DragQueryFileW
SHAppBarMessage
SHBrowseForFolderW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteW
DragFinish
SHGetFileInfoW

msimg32

AlphaBlend
TransparentBlt

shlwapi

PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
StrFormatKBSizeW
PathIsUNCW
UrlEscapeW
PathStripToRootW

uxtheme

CloseThemeData
OpenThemeData
GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
DrawThemeBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeParentBackground
DrawThemeText
GetThemeColor

ws2_32

socket
connect
WSAStartup
htons
WSACleanup
send
gethostbyname
closesocket

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegSetValueExW

ole32

OleLockRunning
OleCreateMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
DoDragDrop
CreateStreamOnHGlobal
CoInitialize
CoInitializeEx
CoUninitialize
CoDisconnectObject
CoCreateInstance
ReleaseStgMedium
OleDuplicateData
OleDestroyMenuDescriptor

oleaut32

SysAllocStringLen
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SysFreeString
VariantClear
VariantCopy
VariantChangeType
VarBstrFromDate
LoadTypeLi
VariantInit
SysAllocString

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 421KB - Virtual size: 421KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 383KB - Virtual size: 383KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 192KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rnqgozf
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

15568fb2dd8496c9afb259130768a337

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

msimg32

shlwapi

uxtheme

ws2_32

oleacc

gdiplus

imm32

winmm

winspool.drv

advapi32

ole32

oleaut32

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rdata Size: 421KB - Virtual size: 421KB

.data Size: 22KB - Virtual size: 62KB

.rsrc Size: 383KB - Virtual size: 383KB

.reloc Size: 192KB - Virtual size: 193KB

rnqgozf Size: - Virtual size: 4KB

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 421KB - Virtual size: 421KB

.data
Size: 22KB - Virtual size: 62KB

.rsrc
Size: 383KB - Virtual size: 383KB

.reloc
Size: 192KB - Virtual size: 193KB

rnqgozf
Size: - Virtual size: 4KB