438b44a4f6556ed77c397e26cf16eeb59618e47d32c290d7b5021d527ebb1e79

Sharing

Copy URL Twitter E-mail

General

Target

438b44a4f6556ed77c397e26cf16eeb59618e47d32c290d7b5021d527ebb1e79
Size

696KB
MD5

9bb5a0f1f1461793ede95566e432684c
SHA1

e9190df50da6b6d2c494f7d5853be8928ea7bf07
SHA256

438b44a4f6556ed77c397e26cf16eeb59618e47d32c290d7b5021d527ebb1e79
SHA512

c850c5a47a1ec3d5af874787b20c50b2462c82babe5d6475c10a6984d3d84980b0886cf0fa06763b9e41019cab7a99e2c2412b9ff57a6f51e18434d807ec7eae
SSDEEP

12288:1SmTOaNtiYGu2GAfEGjXqj+tytlrCCTQao7qznXQe4PBZ5EAgsOfdMNpoAvmoJtU:1nTliYaRffDIlhOqzmPKAg6DptU

Score

N/A

Malware Config

Signatures

Files

438b44a4f6556ed77c397e26cf16eeb59618e47d32c290d7b5021d527ebb1e79
.exe windows x86

61b44fa7b30bb9ce1d12919554b1fb00

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlFillMemory
GetVersionExW
SetFilePointer
SetVolumeLabelA
GetCommMask
GetProfileStringA
GlobalDeleteAtom
GlobalMemoryStatus
GlobalFree
DosDateTimeToFileTime
SetThreadPriorityBoost
SetEndOfFile
EndUpdateResourceA
SetSystemTime
GetFileSize
ConnectNamedPipe
WriteProfileSectionA
ReplaceFileA
CreateFileA
EnumLanguageGroupLocalesW
GetDevicePowerState
OutputDebugStringW
lstrlenA
DeleteAtom
ReleaseSemaphore
EnumCalendarInfoW
CompareStringW
EndUpdateResourceW
IsDBCSLeadByteEx
WaitNamedPipeA
SearchPathW
GlobalAlloc
QueueUserWorkItem

iphlpapi

GetAdaptersInfo

gdiplus

GdipAlloc
GdipDrawImageI
GdipGetImagePixelFormat
GdipGetImageWidth
GdipCreateBitmapFromStreamICM
GdipFree
GdipBitmapUnlockBits
GdipGetImagePalette
GdipCloneImage
GdipGetImagePaletteSize
GdipGetImageHeight
GdiplusShutdown
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipBitmapLockBits
GdiplusStartup
GdipCreateBitmapFromScan0

user32

SetKeyboardState
GetMenuContextHelpId
GetDlgItemTextW
GetInputDesktop
DeleteMenu
GetWindowTextLengthW
RegisterWindowMessageW
GetNextDlgGroupItem
GetWindowRect
GetUserObjectInformationW
GetMenuItemCount
LoadCursorW
BroadcastSystemMessageA
AdjustWindowRect
IsWindowEnabled
LoadCursorA
GetWindowRgn
ValidateRect
IsZoomed
CheckMenuRadioItem
GetClassInfoExW
DispatchMessageW
GetActiveWindow
DrawEdge
SetPropA
EnumThreadWindows
DrawIconEx
GetParent
SetWindowRgn
CreateAcceleratorTableW
CharPrevW
SetWindowPlacement
GetCapture
DrawFocusRect
SetTimer
GetWindow
LoadImageA
DefWindowProcA
GetClassNameW
PostThreadMessageW
MsgWaitForMultipleObjects
OffsetRect
KillTimer
MapWindowPoints
MessageBoxIndirectA
RegisterClassExA
DestroyMenu
MessageBeep
SetFocus
DdeImpersonateClient
LoadStringA
GetDoubleClickTime
DrawAnimatedRects
MessageBoxIndirectW
SetParent
RedrawWindow
GetWindowDC
EnableWindow
OpenInputDesktop
CheckRadioButton
AllowSetForegroundWindow
TrackPopupMenuEx
ShowWindow
InvalidateRect
DestroyIcon
SetDlgItemInt
GetWindowPlacement
DialogBoxParamW
RemoveMenu
GetForegroundWindow
SetRect
SetCapture
GetMessageW
UnhookWindowsHookEx
SetWindowsHookExW
CreateWindowExW
SetWindowLongW
DeferWindowPos
GetKeyState
GetMenuItemID
LoadBitmapA
GetSysColor
IMPSetIMEW
GetThreadDesktop
SystemParametersInfoW
SetSystemCursor
SetCursor
InflateRect
TrackPopupMenu
PostMessageW
DrawTextExA
ScreenToClient
DrawMenuBar
GetLastInputInfo
CreateDialogParamW
DialogBoxParamA
GetLastActivePopup
MoveWindow
GetClassInfoExA
MapVirtualKeyExW
LoadImageW
GetUpdateRect
UnregisterClassW
SetWindowPos
LoadIconW
CreateCursor
ReplyMessage
DdeAccessData
GetMenuItemInfoW
SetMenu
DrawTextW
CheckDlgButton
SetCursorPos
FindWindowW
IsDialogMessageW
GetWindowTextW
BeginPaint
LoadStringW
SetWindowLongA
IsMenu
IsIconic
SubtractRect
GetSystemMetrics
OemToCharBuffA
GetMessageTime
UnionRect
InvalidateRgn
IsWindow
GetDesktopWindow
IsWindowVisible
ReleaseDC
GetAsyncKeyState
ClientToScreen
LoadBitmapW
UpdateWindow
IsClipboardFormatAvailable
CountClipboardFormats
CharNextA
FindWindowExW
BeginDeferWindowPos
PeekMessageW
SetMenuDefaultItem
GetClientRect
CharToOemW
GetScrollInfo
GetWindowLongW
GetDlgItem
GetSubMenu
CheckMenuItem
GetNextDlgTabItem
GetCursorPos
SetRectEmpty
SetDoubleClickTime
WindowFromDC
CharUpperA
SetWindowTextW
RegisterClassExW
GetPropA
FillRect
LoadIconA
PtInRect
InsertMenuItemW
AdjustWindowRectEx
GetMenu
CallNextHookEx
CharNextW
ModifyMenuW
DestroyAcceleratorTable
CreatePopupMenu
EndDialog
IsChild
EnumDesktopWindows
wsprintfW
SetForegroundWindow
SendNotifyMessageW
LoadMenuA
CopyAcceleratorTableA
ReleaseCapture
EndPaint
GetFocus
MessageBoxW
DestroyWindow
SendDlgItemMessageW
GetDC
GetMenuState
CharLowerBuffA
GetWindowLongA
EndDeferWindowPos
RemovePropA
IMPSetIMEA
CloseWindow
TileWindows
LoadMenuW
CreateIconFromResourceEx
SetDlgItemTextW
ShowCaret
PostQuitMessage
GetDlgItemInt
CloseDesktop
GetDialogBaseUnits
DefWindowProcW
GetDlgCtrlID
EnableMenuItem
IntersectRect
SendMessageW
TranslateMessage
RegisterClassW
EqualRect
CreateWindowExA
GetWindowModuleFileNameA
FlashWindow
RealChildWindowFromPoint
GetSysColorBrush
GetWindowTextLengthA
SetMenuItemInfoW
IsDlgButtonChecked
EnumChildWindows
CallWindowProcW

comdlg32

ChooseFontW
GetSaveFileNameW
GetOpenFileNameW

wininet

InternetSetStatusCallbackW
InternetCanonicalizeUrlW
HttpSendRequestW
GetUrlCacheEntryInfoW
HttpQueryInfoW
InternetCrackUrlW
InternetOpenUrlW
HttpOpenRequestW
InternetOpenA
InternetSetOptionA
InternetOpenW
InternetConnectW
InternetSetOptionW
InternetCloseHandle
InternetReadFile

shlwapi

wnsprintfW
StrStrIA
SHGetValueW
StrRChrW
wnsprintfA
StrTrimW
StrTrimA
StrCatBuffA
StrCmpIW
StrChrW
StrToIntExW
StrCmpNA
StrStrIW
StrCatBuffW
StrChrA
StrStrA
StrPBrkW
StrCpyNW
StrCmpNIW
StrCmpNW
StrRChrA
StrStrW

version

GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoA
GetFileVersionInfoW
VerQueryValueW
VerQueryValueA

cryptdll

MD5Final
MD5Update
MD5Init

msimg32

TransparentBlt
AlphaBlend

comctl32

CreateToolbarEx
ImageList_Remove
ImageList_DragMove
PropertySheetW
ImageList_BeginDrag
ImageList_EndDrag
ImageList_GetIcon
CreateStatusWindowW
ImageList_Destroy
ImageList_AddMasked
ImageList_Create
ImageList_Draw
ImageList_DragEnter
ImageList_DrawEx
ImageList_Add
ImageList_DragLeave

Sections

.text
Size: 225KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 234KB - Virtual size: 662KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61b44fa7b30bb9ce1d12919554b1fb00

Headers

File Characteristics

Imports

kernel32

iphlpapi

gdiplus

user32

comdlg32

wininet

shlwapi

version

cryptdll

msimg32

comctl32

Sections

.text Size: 225KB - Virtual size: 225KB

.data Size: 234KB - Virtual size: 662KB

.edata Size: 5KB - Virtual size: 5KB

.rdata Size: 9KB - Virtual size: 8KB

.rsrc Size: 220KB - Virtual size: 220KB

.text
Size: 225KB - Virtual size: 225KB

.data
Size: 234KB - Virtual size: 662KB

.edata
Size: 5KB - Virtual size: 5KB

.rdata
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 220KB - Virtual size: 220KB