3cbe2680d40b346ce394677a06a040eec8d87b44f84fc15a042f2ecf2a93d744

Sharing

Copy URL Twitter E-mail

General

Target

3cbe2680d40b346ce394677a06a040eec8d87b44f84fc15a042f2ecf2a93d744
Size

360KB
MD5

017102ceff350e5219c3eb6cc4dc43f9
SHA1

2c069f1c7f184b8e1bbfc441ca9aeef526195c7e
SHA256

3cbe2680d40b346ce394677a06a040eec8d87b44f84fc15a042f2ecf2a93d744
SHA512

d797193b3bc955f91f789948f626c53f8ee2087d399392b08e7b3af67688ae28c0a7ea686292d5597509d89641446e5619b0d859cd1c813324a0a873cbdf7e1f
SSDEEP

6144:JqIC5R+Gv5DAf6LZnr8mSCn42dnd0Hk0wtFYHcSkM8+f6j1pyv//WK:Ji+GxDZnAmzn42pfZCvf6Qm

Score

N/A

Malware Config

Signatures

Files

3cbe2680d40b346ce394677a06a040eec8d87b44f84fc15a042f2ecf2a93d744
.exe windows x86

edf2912ec52d5af4502d8e15bb53f09a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
CoInitialize
CoInitializeSecurity
CoGetClassObject
CoRevokeClassObject
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
OleIsCurrentClipboard
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
OleUninitialize
OleFlushClipboard

user32

IsChild
WinHelpW
SendDlgItemMessageA
SendDlgItemMessageW
LoadIconW
RegisterWindowMessageW
IsDialogMessageW
SetWindowTextW
MoveWindow
GetWindowDC
BeginPaint
EndPaint
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
GetDesktopWindow
GetSysColorBrush
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
DestroyMenu
UnregisterClassW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
ScreenToClient
EqualRect
GetDlgCtrlID
InvertRect
CallWindowProcW
SystemParametersInfoA
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetWindow
SetActiveWindow
MapDialogRect
SetWindowPos
RegisterClipboardFormatW
GetLastActivePopup
IsWindowEnabled
SetWindowsHookExW
CallNextHookEx
GetClassLongW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
UnregisterClassA
PostQuitMessage
CharUpperW
IsRectEmpty
PostMessageW
IntersectRect
GetMonitorInfoW
GetWindowThreadProcessId
GetParent
CopyRect
WindowFromPoint
EnumDisplayMonitors
MonitorFromRect
GetSystemMetrics
SetRect
RegisterClassExW
GetMenuInfo
GetForegroundWindow
GetDlgItem
GetTopWindow
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
DrawIconEx
GetIconInfo
UpdateWindow
PostThreadMessageW
DestroyWindow
IsZoomed
GetAsyncKeyState
IsIconic
UnregisterHotKey
RegisterHotKey
SetWindowRgn
OffsetRect
SetWindowLongW
LoadCursorW
SetCursor
PtInRect
GetCursorPos
GetWindowLongW
UnhookWindowsHookEx
GetMessageTime
SetTimer
KillTimer
ReleaseDC
GetDC
GetMessagePos
MapWindowPoints
ReleaseCapture
GetCapture
SystemParametersInfoW
DefWindowProcW
RedrawWindow
ClientToScreen
GetWindowRect
CreateIconFromResource
CreateIconFromResourceEx
GetMenu
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetMessageW
GetWindowTextW
GetSubMenu
GetMenuItemID
SetWindowContextHelpId
GetMenuItemCount
SetFocus
SetForegroundWindow
ShowWindow
InvalidateRect
DrawMenuBar
GetClientRect
SetCapture
IsWindow
DestroyIcon
SetMenu
wsprintfW
MessageBoxW
SendMessageW
EnableWindow
GetSysColor
ValidateRect

advapi32

GetUserNameW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegQueryValueExW
RegOpenKeyExW
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
RegCloseKey
GetSidSubAuthority
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyW
RegQueryValueW
RegCreateKeyExW
RegSetValueExW

oleaut32

VariantCopy
SysAllocString
VariantClear
VariantInit
SystemTimeToVariantTime
VariantTimeToSystemTime
SysFreeString
SafeArrayDestroy
OleCreateFontIndirect
SysStringLen
VariantChangeType
SysAllocStringLen

shell32

ord155
ord716
SHGetSpecialFolderLocation
SHChangeNotify
ShellExecuteExW
SHGetDesktopFolder
SHGetFileInfoW
DragAcceptFiles
DragQueryFileW
DragFinish
SHGetPathFromIDListW
SHGetMalloc
Shell_NotifyIconW
SHBrowseForFolderW
SHFileOperationW
ord190
ord162

kernel32

SetEnvironmentVariableA
Sleep
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateToolhelp32Snapshot
Process32FirstW
OpenProcess
CloseHandle
Process32NextW
ExpandEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetOEMCP
GetProcAddress
LoadLibraryW
FormatMessageW
LocalFree
FreeLibrary
GetLastError
SizeofResource
LockResource
SetLastError
LoadResource
lstrlenW
FindResourceW
GetCurrentProcess
GetProcessHeap
GetSystemTimeAsFileTime
FileTimeToSystemTime
InterlockedDecrement
GetModuleFileNameW
GetCurrentProcessId
SetProcessWorkingSetSize
SetPriorityClass
CreateFileW
WriteFile
WaitForSingleObject
EnumResourceTypesW
EnumResourceNamesW
FindResourceExW
EnumResourceLanguagesW
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
FreeResource
VirtualAlloc
VirtualFree
DeleteFileW
RemoveDirectoryW
CopyFileW
GetVolumeInformationW
GetFileInformationByHandle
GetFileAttributesW
GetTempPathW
SetFileAttributesW
GetTempFileNameW
FindFirstFileW
FindNextFileW
FindClose
GetDiskFreeSpaceW
SetFileTime
MoveFileExW
SuspendThread
CreateThread
TerminateThread
ResumeThread
GetThreadPriority
SetThreadPriority
HeapAlloc
HeapFree
GlobalAddAtomW
lstrcpyW
GetUserDefaultUILanguage
GetSystemDefaultLangID
GetTimeZoneInformation
FileTimeToLocalFileTime
LocalFileTimeToFileTime
ReadFile
GetModuleHandleW
GetVersionExW
SetFilePointerEx
FlushFileBuffers
SetEndOfFile
EnumSystemCodePagesW
GetCPInfoExW
TerminateProcess
GetCurrentThreadId
GetFileSize
SetFilePointer
GetStdHandle
CreateDirectoryW
GetFullPathNameW
GetSystemInfo
DeleteCriticalSection
CreateEventW
SetEvent
ResetEvent
WaitForMultipleObjects
GlobalAlloc
lstrcmpW
GlobalLock
InterlockedExchange
CompareStringA
GetLocaleInfoW
lstrcmpA
GetVersion
ConvertDefaultLocale
GetCurrentThread
GlobalDeleteAtom
GetTickCount
GlobalFree
GetVersionExA
LoadLibraryA
CompareStringW
GlobalFindAtomW
GetModuleHandleA
MulDiv
GlobalUnlock
WritePrivateProfileStringW
GlobalFlags
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
GetThreadLocale
LockFile
UnlockFile
DuplicateHandle
lstrlenA
SetErrorMode
GetFileTime
GetStartupInfoW
GetFileType
GetDriveTypeW
RtlUnwind
RaiseException
HeapReAlloc
ExitThread
ExitProcess
HeapSize
VirtualProtect
VirtualQuery
SetUnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
CreateFileA
QueryPerformanceCounter
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
SetStdHandle
GetCurrentDirectoryA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetDriveTypeA
HeapCreate

gdi32

ExtTextOutW
TextOutW
RectVisible
PtVisible
Escape
EndDoc
GetPaletteEntries
StartDocW
StartPage
EndPage
GetBkColor
CreateDCW
SetViewportOrgEx
GetDeviceCaps
GetCurrentObject
DeleteDC
SetDIBColorTable
GetDIBColorTable
SetViewportExtEx
SelectObject
CreateDIBSection
GetStretchBltMode
GetTextExtentPoint32W
StretchBlt
SetBkMode
CreateBitmap
GetClipBox
GetStockObject
SetBkColor
CreateSolidBrush
CreateCompatibleDC
GetRgnBox
GetTextColor
DPtoLP
GetMapMode
CreateRectRgnIndirect
GetObjectW
SetTextColor
CreateFontIndirectW
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
BitBlt
ScaleViewportExtEx
OffsetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
ExcludeClipRect
SetMapMode
DeleteObject
SaveDC
SetStretchBltMode
RestoreDC

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

comctl32

InitCommonControlsEx

shlwapi

PathStripToRootW
PathFindFileNameW
PathFindExtensionW
StrFormatByteSizeW
PathIsUNCW

oledlg

OleUIBusyW

urlmon

URLDownloadToCacheFileW

wininet

InternetGetConnectedState

Sections

.text
Size: 237KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

edf2912ec52d5af4502d8e15bb53f09a

Headers

DLL Characteristics

File Characteristics

Imports

ole32

user32

advapi32

oleaut32

shell32

kernel32

gdi32

comdlg32

winspool.drv

comctl32

shlwapi

oledlg

urlmon

wininet

Sections

.text Size: 237KB - Virtual size: 236KB

.rdata Size: 54KB - Virtual size: 53KB

.data Size: 19KB - Virtual size: 41KB

.rsrc Size: 44KB - Virtual size: 44KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 237KB - Virtual size: 236KB

.rdata
Size: 54KB - Virtual size: 53KB

.data
Size: 19KB - Virtual size: 41KB

.rsrc
Size: 44KB - Virtual size: 44KB

.reloc
Size: 5KB - Virtual size: 4KB