21f596cae35b2cb7e61c1a93bfa60ebf590d60b9b9f936f820aec96932ca11c7

Sharing

Copy URL

Twitter E-mail

General

Target

21f596cae35b2cb7e61c1a93bfa60ebf590d60b9b9f936f820aec96932ca11c7
Size

104KB
MD5

8a996e195337c68d3c4b0a82a285f70b
SHA1

5bf78a6cd73e20393960a4187833028bee179dd6
SHA256

21f596cae35b2cb7e61c1a93bfa60ebf590d60b9b9f936f820aec96932ca11c7
SHA512

1048e3ad53334a78df1c975d184cb09ffd43b0acc29d9eacf5dd6f4a458ec459de72dbcb1a2e1adfd76abc99b7fa24f07f13f6021462459b4dd69b65e1519960
SSDEEP

3072:2LW4zkZdRzUvQ7OCtdg3QFAL6V8FQIwZ4n:2W4zkf6JmDlIr

Score

N/A

Malware Config

Signatures

Files

21f596cae35b2cb7e61c1a93bfa60ebf590d60b9b9f936f820aec96932ca11c7
.exe windows x86

d0c13a0906e2033afadb76dd3ff5d8e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

nddeapi

ord505
ord610
ord613
ord510
ord612
ord611

clusapi

OfflineClusterGroup

imagehlp

UpdateDebugInfoFileEx

comdlg32

FindTextW
ChooseFontW
GetFileTitleW
ChooseColorA

urlmon

IsAsyncMoniker

resutils

ResUtilEnumResources

comctl32

ImageList_Merge
ImageList_Draw

wininet

HttpQueryInfoA
HttpSendRequestA
InternetGetLastResponseInfoA
InternetQueryDataAvailable
InternetCrackUrlA
GopherGetAttributeW
FindCloseUrlCache
InternetCreateUrlA
InternetSetDialState
FindNextUrlCacheEntryA
ReadUrlCacheEntryStream
InternetConnectA
HttpSendRequestExA
GetUrlCacheEntryInfoExW
FtpGetFileW
InternetOpenUrlW
GopherFindFirstFileA
FtpDeleteFileA
InternetQueryOptionW
GopherGetLocatorTypeW
InternetReadFile
InternetConfirmZoneCrossing

user32

GetScrollPos
ClientToScreen
EnableMenuItem
TranslateMDISysAccel
SetCapture
IsRectEmpty
SetRectEmpty
GetWindowThreadProcessId
DdeConnect
OemToCharA
GetDCEx
SetActiveWindow
ChangeDisplaySettingsA
FillRect
LoadIconA
DestroyAcceleratorTable
IsWindowUnicode
ValidateRect
CreateMenu
AppendMenuW
AdjustWindowRect
DefDlgProcW
CallNextHookEx
GetMenuState
GetKeyboardLayoutList
SetCaretPos
RemovePropW
InSendMessage
GetParent
DialogBoxParamW
SetCursorPos
GetClipboardFormatNameA
FindWindowA
LoadImageW
GetSubMenu
MessageBoxA
KillTimer
CharLowerBuffA
keybd_event
IsWindowVisible
SendMessageW
DialogBoxIndirectParamA
DrawAnimatedRects
SetKeyboardState
EnumDesktopsA
GetSystemMetrics
CopyImage

wsock32

getsockname

imm32

ImmGetOpenStatus
ImmInstallIMEA
ImmDestroyContext
ImmSetCompositionStringA

setupapi

SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassImageListExW
SetupDiSetSelectedDriverA
SetupDiDeleteDevRegKey
SetupDecompressOrCopyFileA
SetupDiGetHwProfileListExA
SetupDiGetINFClassW
SetupDiClassNameFromGuidW
SetupSetPlatformPathOverrideA
SetupGetFileCompressionInfoA
SetupDiInstallClassExW
SetupLogFileA
SetupDiClassNameFromGuidExA
SetupRemoveFileLogEntryA
SetupGetInfInformationA
SetupDecompressOrCopyFileW
SetupDiGetClassDescriptionExW
SetupDiRemoveDevice
SetupSetDirectoryIdExW
SetupQueryFileLogW
SetupDiGetDriverInstallParamsW
SetupCloseInfFile
SetupGetBinaryField
SetupInitializeFileLogA
SetupDiGetClassDevPropertySheetsA
SetupPromptForDiskW
SetupFindFirstLineW
SetupInstallServicesFromInfSectionA
SetupQuerySourceListW
SetupCloseFileQueue
SetupDiGetHwProfileList
SetupAdjustDiskSpaceListA
SetupQueryFileLogA
SetupQueueRenameA
SetupAddInstallSectionToDiskSpaceListW
SetupDiCreateDeviceInfoListExW
SetupSetSourceListW
SetupDiOpenDeviceInterfaceRegKey
SetupAddSectionToDiskSpaceListA
SetupLogFileW
SetupAddSectionToDiskSpaceListW
SetupDiGetClassDevsA
SetupQueryInfVersionInformationW
SetupRemoveFileLogEntryW
SetupDiOpenDevRegKey
SetupDiCreateDeviceInfoList
SetupLogErrorW
SetupGetFieldCount
SetupDiGetClassDescriptionExA
SetupRemoveFromDiskSpaceListA
SetupDiAskForOEMDisk
SetupQueueCopyA
SetupCopyOEMInfW
SetupGetFileCompressionInfoW
SetupDiGetDeviceInstanceIdA
SetupDiOpenClassRegKey
SetupDiGetSelectedDriverA
SetupInstallServicesFromInfSectionExA
SetupQueueRenameW

msvcrt

_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

advapi32

LsaRemoveAccountRights
LockServiceDatabase
CreateProcessAsUserW
RegFlushKey
RegEnumKeyA
AllocateLocallyUniqueId
AddAccessDeniedAce
LookupAccountNameW
GetSecurityDescriptorSacl

rpcrt4

RpcMgmtSetServerStackSize

kernel32

FreeConsole
FindFirstFileA
GetLocaleInfoW
FindFirstFileW
GlobalFlags
GetTempPathW
FindAtomA
GetDateFormatW
HeapCreate
DosDateTimeToFileTime
GetAtomNameW
FindFirstChangeNotificationA
EnumSystemLocalesA
DebugBreak
GlobalLock
FormatMessageW
GetProfileStringW
GetProcessAffinityMask
GetExitCodeProcess
GetModuleFileNameW
CreateDirectoryA
CloseHandle
DefineDosDeviceW
GetVersion
CreateMutexW
FindCloseChangeNotification
CreateSemaphoreW
CreateFileA
GetModuleFileNameA
FindClose
FlushFileBuffers
AddAtomW
GetWindowsDirectoryA
CreateDirectoryW
GetFileInformationByHandle
GetSystemInfo
AreFileApisANSI
GetProfileStringA
GetCurrentThreadId
FreeEnvironmentStringsW
GetNumberFormatW
GetStringTypeW
GetModuleHandleA
GetStartupInfoA
GetLogicalDriveStringsW

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d0c13a0906e2033afadb76dd3ff5d8e3

Headers

File Characteristics

Imports

nddeapi

clusapi

imagehlp

comdlg32

urlmon

resutils

comctl32

wininet

user32

wsock32

imm32

setupapi

msvcrt

advapi32

rpcrt4

kernel32

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 3.3MB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 3.3MB