988984552a5108787547d7d9bb2758e2af03f633dd03efa6b5dfc96096fc62b8

Sharing

Copy URL

Twitter E-mail

General

Target

988984552a5108787547d7d9bb2758e2af03f633dd03efa6b5dfc96096fc62b8
Size

418KB
MD5

7f7bfa69b80ffcd49b2e6e3e75ecee20
SHA1

524bd7a9e13be01b0d11913a60b7830687e20eb3
SHA256

988984552a5108787547d7d9bb2758e2af03f633dd03efa6b5dfc96096fc62b8
SHA512

3460d0b45575d0687bebe2e51f655b5c0fe9af220b37984e13a6c37a28f56d111bc0f13e3d44aca90cb2a1d8e213db60ab649a14a54b5b51ebbb402e31c5b35e
SSDEEP

12288:1MMnMMMMMUx89g/k66So02ec/JdjYUsj7lIVzyt:1MMnMMMMMUSx66So9FcpFdt

Score

N/A

Malware Config

Signatures

Files

988984552a5108787547d7d9bb2758e2af03f633dd03efa6b5dfc96096fc62b8
.exe windows x86

c70f7793f85b149049588f4d7a03812e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

GetProcessImageFileNameW

advapi32

GetLengthSid
RegQueryValueExA
IsTextUnicode
RegisterTraceGuidsW
RegOpenKeyExW
RegEnumValueA
RegCreateKeyA
TraceEvent
RegOpenKeyExA
RegQueryValueExW
UnregisterTraceGuids
RegQueryInfoKeyW
GetTraceLoggerHandle
CryptDestroyHash
RegEnumKeyExW
RegSetValueExW
GetUserNameW
RegQueryValueW
SetThreadToken
CryptGetHashParam
ConvertStringSidToSidW
RegSetValueExA
GetTraceEnableFlags
RegEnumKeyW
ConvertSidToStringSidW
CryptReleaseContext
CryptHashData
RegEnumValueW
CreateProcessAsUserW
ImpersonateSelf
RegCreateKeyExW
CryptCreateHash
DuplicateTokenEx
RegDeleteValueA
RegCloseKey
OpenThreadToken
RegCreateKeyExA
RegOpenKeyW
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegDeleteKeyW
TraceMessage
RegDeleteKeyA
RegDeleteValueW
OpenProcessToken
SetTokenInformation
GetTraceEnableLevel
RegOpenCurrentUser
CryptAcquireContextW

gdi32

GetBkMode
SetTextColor
GetGlyphIndicesW
CreateFontIndirectA
CreatePatternBrush
CreateRectRgn
CreateCompatibleBitmap
GetStockObject
CreateDCA
GetObjectW
MoveToEx
GetTextExtentPoint32A
SetViewportExtEx
GetBrushOrgEx
DeleteEnhMetaFile
EqualRgn
CreateEnhMetaFileA
GetClipBox
RealizePalette
CreateFontW
LineTo
RectVisible
OffsetRgn
GetLayout
CreateMetaFileW
CreateBitmap
SetDCPenColor
GetDCOrgEx
CreateDIBSection
CombineRgn
SetTextAlign
SetBrushOrgEx
PatBlt
TextOutA
SetMapMode
DeleteDC
BitBlt
ExtCreateRegion
CreatePolygonRgn
CreateSolidBrush
CreateFontIndirectW
ExtTextOutW
GetTextMetricsW
GetDeviceCaps
OffsetWindowOrgEx
SetBkMode
SelectPalette
StretchBlt
SetViewportOrgEx
GetObjectA
GetDIBits
Rectangle
GetTextExtentPoint32W
TextOutW
GetTextAlign
SetBkColor
CreateCompatibleDC
SetWindowOrgEx
LPtoDP
CloseMetaFile
SetRectRgn
GetPixel
GetRegionData
IntersectClipRect
CloseEnhMetaFile
GetTextCharset
SetStretchBltMode
CreateDIBPatternBrushPt
SaveDC
SetPaletteEntries
RestoreDC
GetTextExtentExPointI
GetRgnBox
GetSystemPaletteEntries
CreatePalette
CreateHalftonePalette
SelectObject
DeleteObject
CreateRectRgnIndirect
SetLayout
PlayEnhMetaFile
StretchDIBits
SetWindowExtEx
GetBkColor
CreatePen
GetTextExtentPointW
CreateDCW
GetTextColor
GetPaletteEntries

kernel32

VirtualAlloc

rtutils

TraceDumpExA
TraceDumpExW

user32

SetCapture
FindWindowExW
CopyRect
DdeCreateStringHandleW
SetMenuItemInfoW
SetPropW
CopyIcon
SetWindowPos
GetDlgItem
SystemParametersInfoW
GetClientRect
MapWindowPoints
TranslateMessage
OpenClipboard
SetActiveWindow
GetMenuItemCount
PeekMessageW
GetKeyNameTextW
InflateRect
MessageBoxW
GetMessagePos
FindWindowW
DestroyIcon
DdeFreeDataHandle
RegisterWindowMessageA
IsWindowVisible
SendMessageW
GetMessageTime
GetClipboardData
GetMenuDefaultItem
SetCursorPos
SetForegroundWindow
InsertMenuW
GetParent
GetWindowRect
ReleaseDC
GetTopWindow
CallNextHookEx
EnumThreadWindows
KillTimer
EndMenu
CallMsgFilterW
WaitMessage
IsDialogMessageW
SetScrollInfo
SetParent
GetClassInfoW
GetLastInputInfo
IsIconic
GetMenuStringW
DdeCreateDataHandle
EqualRect
GetFocus
GetAsyncKeyState
EnableMenuItem
EnumDesktopWindows
TrackPopupMenuEx
GetClipboardFormatNameW
GetSysColor
GetWindowRgnBox
GetWindowTextLengthW
DrawFrameControl
BeginPaint
UnregisterClassW
CharUpperW
MessageBeep
RemovePropW
GetMonitorInfoW
SetWindowRgn
GetWindowTextW
SendMessageTimeoutW
GetSystemMetrics
GetScrollInfo
OffsetRect
GetLastActivePopup
GetComboBoxInfo
GetWindowPlacement
DdeGetData
DestroyWindow
SetWindowLongA
DdeQueryStringW
TranslateAcceleratorW
EndDialog
GetCapture
WindowFromPoint
GetPropA
GetWindowLongW
EnumDisplaySettingsW
CreatePopupMenu
InsertMenuItemW
PtInRect
MonitorFromPoint
LoadMenuW
GetActiveWindow
CreateWindowExW
IntersectRect
CloseClipboard
CharPrevW
CheckMenuItem
GetMenuItemInfoW
DdeConnect
UpdateLayeredWindow
RegisterClassW
GetClassWord
CreateDialogParamW
EndPaint
DeferWindowPos
DispatchMessageA
LoadStringW
RemovePropA
ShowWindow
LoadStringA
CharLowerW
MessageBoxIndirectA
DestroyMenu
DispatchMessageW
MessageBoxExA
GetMenuItemID
TrackMouseEvent
ReleaseCapture
GetShellWindow
MsgWaitForMultipleObjectsEx
AllowSetForegroundWindow
SendDlgItemMessageW
RegisterClassExW
SetFocus
DrawTextW
IsDlgButtonChecked
MessageBoxIndirectW
InvalidateRect
SendNotifyMessageW
SetRectEmpty
CharNextW
DdeClientTransaction
LoadImageW
DestroyAcceleratorTable
DialogBoxParamW
GetDlgCtrlID
GetClassLongW
PostThreadMessageA
WaitForInputIdle
GetIconInfo
GetClassNameW
CharPrevA
CheckMenuRadioItem
DialogBoxIndirectParamW
LockSetForegroundWindow
DialogBoxParamA
PostThreadMessageW
CheckDlgButton
CharLowerBuffW
SetRect
GetWindowThreadProcessId
SetDlgItemInt
UnhookWindowsHookEx
GetNextDlgTabItem
FillRect
GetDC
IsRectEmpty
GetMessageA
MonitorFromWindow
PeekMessageA
IsMenu
SetMenuDefaultItem
BeginDeferWindowPos
DefWindowProcW
HideCaret
CheckRadioButton
DdeFreeStringHandle
VkKeyScanExW
MessageBoxExW
DdeDisconnect
MsgWaitForMultipleObjects
RemoveMenu
CreateMenu
SetCursor
SystemParametersInfoA
EnableWindow
AppendMenuW
FindWindowA
GetDesktopWindow
DialogBoxIndirectParamA
MonitorFromRect
GetDialogBaseUnits
SetDlgItemTextW
DdeUninitialize
CreateIconIndirect
DrawIconEx
ChildWindowFromPoint
SetClipboardData
MapDialogRect
CharNextA
MapVirtualKeyW
AdjustWindowRect
GetWindowLongA
RedrawWindow
IsWindow
WinHelpW
SetWindowPlacement
SetScrollPos
LoadIconW
PostMessageW
SetMenuItemBitmaps
GetMenuState
MoveWindow
LoadCursorW
GetPropW
GetForegroundWindow
IsChild
SetTimer
DdeNameService
SetWindowTextW
GetMenuItemInfoA
AnimateWindow
ShowOwnedPopups
LoadAcceleratorsW
CallWindowProcW
EndDeferWindowPos
ShowScrollBar
EnumChildWindows
GetCursor
GetKeyState
GetSystemMenu
TrackPopupMenu
RegisterClipboardFormatA
ShowCaret
IsHungAppWindow
PostMessageA
DefWindowProcA
GetClassInfoExW
wsprintfW
SendMessageA
SetWindowsHookExW
GetSubMenu
ScreenToClient
GetWindowInfo
GetSysColorBrush
LoadCursorA
IsWindowEnabled
DrawEdge
GetDlgItemTextW
LoadBitmapW
UnionRect
GetKeyboardLayout
IsWindowUnicode
PostQuitMessage
GetMessageW
AttachThreadInput
EnumWindows
CopyImage
DdeInitializeW
GetWindowDC
ChangeClipboardChain
SetMenu
SetWindowLongW
AdjustWindowRectEx
IsCharAlphaNumericW
EmptyClipboard
DeleteMenu
GetCursorPos
SetPropA
SendMessageTimeoutA
RegisterClipboardFormatW
RegisterWindowMessageW
NotifyWinEvent
GetProcessWindowStation
DrawTextExW
DrawFocusRect
GetWindow
SetClipboardViewer
GetAncestor
UpdateWindow
ClientToScreen
GetDoubleClickTime

uxtheme

GetThemeMetric
GetThemeAppProperties
GetThemeFont
SetWindowTheme
GetThemeColor
IsThemeActive
GetThemePartSize
CloseThemeData
GetThemeBackgroundExtent
DrawThemeParentBackground
IsAppThemed
DrawThemeBackground
GetThemeBackgroundContentRect
GetThemeMargins
OpenThemeData

ddraw

DirectDrawCreate

ntdll

NtSetSystemInformation
RtlAdjustPrivilege
NtQuerySemaphore
RtlAddAccessAllowedObjectAce

shell32

SHGetSpecialFolderLocation
SHGetInstanceExplorer
SHGetFolderLocation
SHGetFileInfoW
ExtractIconExW
DragQueryFileW
SHGetDesktopFolder
SHPathPrepareForWriteW
SHCreateShellItem
SHGetFolderPathAndSubDirW
SHGetPathFromIDListA
SHSetLocalizedName
SHFileOperationW
Shell_NotifyIconA
SHGetSpecialFolderPathW
ShellExecuteA
SHChangeNotify
SHGetFolderPathW
ExtractAssociatedIconExW
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconW
SHGetPathFromIDListW
SHBindToParent
ExtractIconW
SHGetDataFromIDListW
SHBrowseForFolderW
SHAppBarMessage
ShellAboutW

Sections

.text
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 489KB - Virtual size: 488KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c70f7793f85b149049588f4d7a03812e

Headers

File Characteristics

Imports

psapi

advapi32

gdi32

kernel32

rtutils

user32

uxtheme

ddraw

ntdll

shell32

Sections

.text Size: 1024B - Virtual size: 1008B

.idata Size: 12KB - Virtual size: 12KB

.data Size: 5KB - Virtual size: 2.0MB

.rsrc Size: 489KB - Virtual size: 488KB

.rdata Size: 25KB - Virtual size: 24KB

.text
Size: 1024B - Virtual size: 1008B

.idata
Size: 12KB - Virtual size: 12KB

.data
Size: 5KB - Virtual size: 2.0MB

.rsrc
Size: 489KB - Virtual size: 488KB

.rdata
Size: 25KB - Virtual size: 24KB