c7466964e815eaa1ee5eab55bbe22bc86476d75a5add9fe6d7b1b56dd5593e94

Sharing

Copy URL Twitter E-mail

General

Target

c7466964e815eaa1ee5eab55bbe22bc86476d75a5add9fe6d7b1b56dd5593e94
Size

308KB
MD5

635b4775fc1dc699f4cb4724f0da2702
SHA1

0ae377e0555a43e6b7c846399d3f4a3556c101af
SHA256

c7466964e815eaa1ee5eab55bbe22bc86476d75a5add9fe6d7b1b56dd5593e94
SHA512

6b8febaf26b37c85847257380470b636a316445f9ed8bbf6f9f1c5cfc89f31dd922b322575579f7563491cf05287d0fb948e7905ea538b04105e77c2e8db2a48
SSDEEP

6144:NTR40Jrxcr0QXqoPKqFlJg4WIr4+ubPlF6AOKv1JXrfI7gu/jyxi0aWUsZsIm0qQ:duGQ0LCKqlJ5WIXM6AFv1pfs52k0XZ+u

Score

N/A

Malware Config

Signatures

Files

c7466964e815eaa1ee5eab55bbe22bc86476d75a5add9fe6d7b1b56dd5593e94
.exe windows x86

139276fcd4f5a1fef6ba5371ce917ff0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowTextLengthA
TabbedTextOutW
TileWindows
LoadAcceleratorsA
GetListBoxInfo
LoadAcceleratorsW
BringWindowToTop
GetMenuItemID
AdjustWindowRectEx
IsRectEmpty
CreateWindowExW
RegisterClassExW
LoadIconW
LoadCursorW
SetWindowTextW
LoadBitmapW
ExitWindowsEx
GetSubMenu
GetMenuItemCount
GetMenuState
EnableWindow
IsWindowEnabled
GetLastActivePopup
InsertMenuItemW
DdeEnableCallback
SetFocus
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
SetActiveWindow
GetMessageTime
GetMessagePos
MapWindowPoints
UpdateWindow
GetMenu
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
SystemParametersInfoA
IsIconic
GetWindowPlacement
MessageBeep
IsChild
GetTopWindow
GetNextDlgTabItem
GetNextDlgGroupItem
ReleaseCapture
GetDesktopWindow
SetCapture
GetClientRect
GetWindowRect
SetCursor
SetRect
CopyAcceleratorTableW
OffsetRect
PtInRect
CharNextW
GetFocus
CopyIcon
MoveWindow
GetDlgCtrlID
IsWindow
IsDialogMessageW
SendDlgItemMessageW
GetDlgItem
CharUpperW
SetWindowsHookExW
CallNextHookEx
GetActiveWindow
GetKeyState
GetCursorPos
GetWindowTextW
GetSysColorBrush
UnhookWindowsHookEx
IntersectRect
CopyRect
GetSysColor
GetWindowDC
GetDC
ClientToScreen
RegisterClipboardFormatW
InvalidateRgn
MessageBoxW
LoadStringW
RedrawWindow
GetSystemMetrics
DrawStateW
PostThreadMessageW
InvalidateRect
SystemParametersInfoW
EndPaint
ReleaseDC
DrawTextW
BeginPaint
SetForegroundWindow
DestroyMenu
EndDialog
CreateDialogIndirectParamW
UnregisterClassA
EqualRect
ShowWindow
SetWindowPos
IsWindowVisible
ValidateRect
DefWindowProcW
GetWindowLongW
DestroyWindow
DispatchMessageW
TranslateMessage
GetMessageW
PostMessageW
PeekMessageW
SetWindowLongW
GrayStringW
DrawTextExW
PostQuitMessage
GetWindow
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
SendMessageW
GetParent

comdlg32

GetFileTitleW

shell32

ShellExecuteW
SHGetFolderPathW

oledlg

OleUIBusyW

ole32

CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
OleIsCurrentClipboard
CLSIDFromString
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CLSIDFromProgID
OleFlushClipboard
CoRegisterMessageFilter
CoTaskMemAlloc
CoTaskMemFree
CoRevokeClassObject

advapi32

RegEnumValueW
RegUnLoadKeyW
GetSecurityDescriptorSacl
RegQueryMultipleValuesW
IsTextUnicode
ObjectDeleteAuditAlarmA
LookupAccountSidW
AccessCheckByTypeResultListAndAuditAlarmW
RegNotifyChangeKeyValue
PrivilegedServiceAuditAlarmA
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
RegSetValueExW
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
AdjustTokenPrivileges
RegQueryValueExW
OpenProcessToken
RegOpenKeyW
RegEnumKeyW
RegQueryValueW
RegOpenKeyExW
LookupPrivilegeValueW

gdi32

SetBkMode
GetStockObject
DeleteObject
SetTextColor
SelectObject
ChoosePixelFormat
CreateDIBPatternBrushPt
GetObjectW
Chord
CreateCompatibleDC
CreateBrushIndirect
CreateDCW
CreateDCA
CreateDIBitmap
CloseFigure
GetDeviceCaps
SaveDC
RestoreDC
SetBkColor
SetMapMode
GetClipBox
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreateBitmap
ScaleViewportExtEx
DPtoLP
GetRgnBox
GetTextColor
GetBkColor
GetMapMode
CreateRectRgnIndirect
CreateFontIndirectW
CreateColorSpaceW
DeleteDC

opengl32

glLoadMatrixd
glMatrixMode
glColor4ub
glIndexs
glVertex2fv
glDeleteLists
glEvalCoord2d

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

shlwapi

PathIsUNCW
PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathAddBackslashW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

kernel32

GetExitCodeProcess
CreatePipe
GetFileAttributesA
CreateProcessA
MoveFileA
DeleteFileA
GetLogicalDriveStringsW
ResetEvent
FormatMessageA
GetThreadLocale
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
CompareStringA
lstrcmpW
GlobalDeleteAtom
SetErrorMode
GetModuleHandleW
FreeResource
GetCurrentProcessId
lstrlenA
GlobalFree
SetFilePointer
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
MulDiv
SetLastError
GetExitCodeThread
GetDriveTypeW
WideCharToMultiByte
CreateEventW
SetEvent
GetModuleHandleA
GetCurrentProcess
GetVersionExW
GetProcAddress
LoadLibraryExW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetDriveTypeA
GetCurrentDirectoryA
GetLocaleInfoW
GetSystemDefaultLCID
GetEnvironmentVariableW
GetCommandLineW
CreateDirectoryW
RemoveDirectoryW
GetSystemDirectoryW
GetWindowsDirectoryW
GetTempPathW
GetCurrentDirectoryW
GetDiskFreeSpaceExW
GetFullPathNameW
CopyFileW
DeleteFileW
SetFileAttributesW
GetFileAttributesW
MultiByteToWideChar
SetEndOfFile
LoadLibraryW
FreeLibrary
CreateFileW
CreateFileA
SetEnvironmentVariableW
SetEnvironmentVariableA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
IsValidLocale
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
FlushFileBuffers
LCMapStringA
IsValidCodePage
GetOEMCP
GetCPInfo
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapSize
SetStdHandle
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
ExitProcess
GetSystemTimeAsFileTime
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
RtlUnwind
RaiseException
GetLocaleInfoA
GetACP
GetTickCount
GlobalFlags
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GetFileTime
GetVolumeInformationW
DuplicateHandle
GetFileSize
UnlockFile
LockFile
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
GlobalAlloc
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
WriteFile
ReadFile
SetFilePointerEx
FindResourceExW
CreateMutexW
ReleaseMutex
GetCurrentThreadId
GetUserDefaultLCID
GetSystemDefaultLangID
SetCurrentDirectoryW
CreateThread
WaitForSingleObject
CloseHandle
GetModuleFileNameW
GetLastError
Sleep
FindResourceW
LoadResource
LockResource
ReplaceFileA
VirtualFreeEx
EnumSystemLocalesA
ExitThread
LocalLock
SetConsoleWindowInfo
GetFileType
OpenJobObjectA
SizeofResource
LCMapStringW

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 53.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 205KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

139276fcd4f5a1fef6ba5371ce917ff0

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

shell32

oledlg

ole32

advapi32

gdi32

opengl32

version

shlwapi

winspool.drv

kernel32

Sections

.text Size: 59KB - Virtual size: 58KB

.rdata Size: 38KB - Virtual size: 37KB

.data Size: 5KB - Virtual size: 53.5MB

.rsrc Size: 205KB - Virtual size: 204KB

.text
Size: 59KB - Virtual size: 58KB

.rdata
Size: 38KB - Virtual size: 37KB

.data
Size: 5KB - Virtual size: 53.5MB

.rsrc
Size: 205KB - Virtual size: 204KB