55c643d3dd516ad20eb3654482fb4e4e1042314a63de904cf6f766238080c01d

Sharing

Copy URL

Twitter E-mail

General

Target

55c643d3dd516ad20eb3654482fb4e4e1042314a63de904cf6f766238080c01d
Size

530KB
MD5

dd6ee19e4658eaa02f2430b80e99d9e8
SHA1

60c7ee3458f09f5bb06c764257a8faa5326b3de6
SHA256

55c643d3dd516ad20eb3654482fb4e4e1042314a63de904cf6f766238080c01d
SHA512

eb169615236c00bc614d9207946a93ce398404c70da2f042d53765ee3f98cf4c31f2c3d2aef6674bd0d12ef8663aa851b896145b6eb44e4cb0f0510908b09d8d
SSDEEP

6144:I71oxL/iHYRUqqNLkqufA64Bjbv1be33m5NIhTRnlo8TPnnHF0c258B2cYZkhVMo:IZVHpqUufANBi3m0RnuenHtxMkh+v

Score

N/A

Malware Config

Signatures

Files

55c643d3dd516ad20eb3654482fb4e4e1042314a63de904cf6f766238080c01d
.exe windows x86

1239ee536bdb7119b3a2fedc5480ecea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMenuState
InsertMenuW
SetClipboardData
SetWindowLongA
IsWindowUnicode
CreateAcceleratorTableW
FindWindowW
ReleaseCapture
RegisterClassExW
CreateDialogIndirectParamW
GetCapture
DragDetect
AppendMenuW
RegisterWindowMessageW
ShowCursor
IsWindow
DestroyCursor
CreateCursor
ScrollWindow
SetScrollInfo
InsertMenuItemW
LoadStringW
SetMenuItemInfoW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageA
GetMessageW
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetMonitorInfoW
SetForegroundWindow
SetWindowPlacement
CheckMenuRadioItem
EnableMenuItem
CheckMenuItem
DestroyAcceleratorTable
GetSubMenu
GetMenuItemID
ModifyMenuW
DialogBoxIndirectParamW
DialogBoxParamW
RemoveMenu
LoadIconW
DestroyIcon
mouse_event
GetDesktopWindow
GetDCEx
WindowFromPoint
PtInRect
LockWindowUpdate
SetDlgItemInt
MapWindowPoints
GetKeyState
TrackPopupMenu
GetWindowTextW
MessageBoxA
SetCapture
GetActiveWindow
IsChild
GetDlgCtrlID
RedrawWindow
GetCursorPos
SetWindowsHookExW
UnhookWindowsHookEx
SetParent
SetWindowTextW
LoadBitmapW
CallNextHookEx
CreatePopupMenu
CreateMenu
MonitorFromWindow
DestroyMenu
CallWindowProcA
CharUpperW
CharLowerW
DrawIcon
EndDialog
ScreenToClient
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
CreateDialogParamW
DrawFocusRect
FillRect
FrameRect
SetWindowLongW
GetWindowLongW
GetSysColor
GetClassNameW
PostQuitMessage
LoadMenuW
InflateRect
ClientToScreen
CallWindowProcW
IsWindowVisible
GetWindowRect
ShowWindow
SetWindowPos
SetClipboardViewer
ChangeClipboardChain
SendDlgItemMessageW
IsClipboardFormatAvailable
OpenClipboard
GetClipboardData
RegisterClipboardFormatW
CloseClipboard
MessageBoxW
RegisterClassW
BeginPaint
EndPaint
GetFocus
PostMessageW
LoadCursorW
SetCursor
DestroyWindow
CreateCaret
DestroyCaret
GetSystemMetrics
GetWindowPlacement
CreateWindowExW
GetScrollPos
GetScrollRange
UpdateWindow
DefWindowProcW
DrawFrameControl
GetMenu
ShowCaret
MessageBeep
DrawTextW
SetCaretPos
HideCaret
GetParent
ShowScrollBar
SetScrollRange
InvalidateRect
SetScrollPos
GetKeyboardState
ToAscii
wsprintfW
GetDC
DrawEdge
DrawTextExW
ReleaseDC
GetClientRect
MoveWindow
SetFocus
LoadImageW
DrawIconEx
GetDlgItem
SendMessageW
EnableWindow
SystemParametersInfoW
SetMenu
IsDialogMessageW
IsDialogMessageA
PeekMessageW
IsZoomed
DeleteMenu
RealChildWindowFromPoint
IsIconic
DrawMenuBar
GetMenuItemCount
GetMenuStringW
EmptyClipboard

comdlg32

GetOpenFileNameW
PrintDlgW
ChooseColorW
GetSaveFileNameW

shell32

DragFinish
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
Shell_NotifyIconW
SHGetSpecialFolderLocation
DragQueryPoint
ShellExecuteW
DragQueryFileW

ole32

CoUninitialize
CoInitialize

advapi32

RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
IsTextUnicode
RegQueryInfoKeyW
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW

gdi32

StartPage
StartDocW
DPtoLP
GetDeviceCaps
SetTextAlign
CreateFontIndirectW
GetPixel
SetTextColor
CreateSolidBrush
GetTextExtentPoint32W
GetROP2
SetROP2
GetStockObject
CreatePen
Rectangle
DeleteObject
SetBkMode
DeleteDC
SelectObject
ExtTextOutW
EndPage
EndDoc
EnumFontFamiliesExW
CreateBitmap
SetBrushOrgEx
PatBlt
OffsetWindowOrgEx
SetWindowOrgEx
SetBkColor
CreateCompatibleDC
GetObjectW
CreateCompatibleBitmap
BitBlt
CreateFontW
SaveDC
RestoreDC
MoveToEx
LineTo
CreateHatchBrush
GetTextMetricsW
GetTextExtentPointW
CreatePatternBrush

comctl32

ImageList_DragEnter
ImageList_GetImageInfo
_TrackMouseEvent
ImageList_Add
ImageList_DragShowNolock
ImageList_DragMove
ImageList_GetImageCount
ImageList_BeginDrag
ImageList_EndDrag
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
ImageList_SetIconSize
ImageList_Draw
InitCommonControlsEx

shlwapi

PathFindFileNameW
PathFindExtensionW
PathIsDirectoryW
PathMatchSpecW
PathRemoveFileSpecW
PathAppendW
PathAddExtensionW
PathIsRelativeW
PathStripPathW
PathFileExistsW
PathRemoveExtensionW
PathCompactPathExW

kernel32

ReadFile
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
RtlUnwind
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalFree
LoadLibraryW
GetProcAddress
CreateFileW
GetCurrentProcess
CloseHandle
GlobalFree
FreeLibrary
GetCurrentDirectoryW
SetCurrentDirectoryW
GetModuleHandleW
GetCurrentThreadId
GetLastError
GlobalLock
GlobalUnlock
GetFileAttributesW
SetFileAttributesW
MoveFileW
GetFullPathNameW
GetLongPathNameW
lstrcmpiW
DeleteFileW
lstrcpyW
lstrlenW
lstrcatW
lstrcmpW
MultiByteToWideChar
WideCharToMultiByte
VirtualAlloc
HeapReAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetLocaleInfoA
FileTimeToSystemTime
EnumSystemLocalesA
IsValidLocale
SetStdHandle
GetLocaleInfoW
SetEnvironmentVariableA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEndOfFile
GetDriveTypeA
CompareStringA
CompareStringW
HeapSize
LocalShrink
SetLastError
ConvertFiberToThread
GetCommandLineA
GetCommModemStatus
GlobalCompact
GetProcessTimes
FindFirstFileExW
GetCurrentProcessId
GetCommandLineW
IsWow64Process
ResetWriteWatch
CreateTimerQueue
TransmitCommChar
GetMailslotInfo
GetTapeStatus
GetModuleFileNameW
GetTapeParameters
CreateMemoryResourceNotification
GetProcessVersion
GetProcessPriorityBoost
SetMessageWaitingIndicator
CreateFiberEx
FlushInstructionCache
SetProcessWorkingSetSize
CreateIoCompletionPort
ConvertThreadToFiber
GetProcessAffinityMask
FileTimeToLocalFileTime
GetDriveTypeW
GetSystemTimeAsFileTime
GetModuleHandleA
ExitProcess
GetThreadTimes
FreeResource
WTSGetActiveConsoleSessionId
TlsSetValue
GetWriteWatch
GetCommMask
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeA
GetStringTypeW
TlsGetValue
TlsAlloc
TlsFree
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetCurrentDirectoryA
GetTimeFormatA
GetDateFormatA
WriteFile
GetModuleFileNameA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LocalUnlock
LoadLibraryA
HeapDestroy
HeapCreate
VirtualFree
GetTempPathW
LocalAlloc
LocalLock
FindResourceW
LoadResource
LockResource
SizeofResource
GetACP
MulDiv
GetLocalTime
GetDateFormatW
GetTimeFormatW
ExpandEnvironmentStringsW
GetVersionExW
GetSystemInfo
lstrcpynW
CopyFileW
TerminateThread
FindFirstFileW
FindNextFileW
FindClose
CreateMutexW
CreateThread
GlobalSize
CreateDirectoryW
WaitForSingleObject
ReleaseMutex
Sleep
GlobalAlloc
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
GetUserDefaultLCID

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 7.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 417KB - Virtual size: 417KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1239ee536bdb7119b3a2fedc5480ecea

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

shell32

ole32

advapi32

gdi32

comctl32

shlwapi

kernel32

Sections

.text Size: 35KB - Virtual size: 35KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 33KB - Virtual size: 7.6MB

.rsrc Size: 417KB - Virtual size: 417KB

.reloc Size: 26KB - Virtual size: 25KB

.text
Size: 35KB - Virtual size: 35KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 33KB - Virtual size: 7.6MB

.rsrc
Size: 417KB - Virtual size: 417KB

.reloc
Size: 26KB - Virtual size: 25KB