9250659efe50726f1adf0b0cdcaea3dfdfae71355a2095a8255d1cdd2f0594b6

Sharing

Copy URL Twitter E-mail

General

Target

9250659efe50726f1adf0b0cdcaea3dfdfae71355a2095a8255d1cdd2f0594b6
Size

345KB
MD5

69fcea0b49b16a821fe436ea36de7427
SHA1

e2cbf5883baddcec6a698c558d2e4bb5f989af75
SHA256

9250659efe50726f1adf0b0cdcaea3dfdfae71355a2095a8255d1cdd2f0594b6
SHA512

3ba7f761644824759b19ce31882e5c13881ebb90e154462c8598fe93d3c1a3d76b7680dd4ad127e1ed5eb144b6792386aa8818200cccc33f4147f37652ef4afb
SSDEEP

6144:oIVIl/yAOgKSf2R99lsCH9wtXCiYYgEzaBlP+//fPh8s4vCQ927Wo6ri:lVIlqhoUbGhXYzE+P+WGQsqoYi

Score

N/A

Malware Config

Signatures

Files

9250659efe50726f1adf0b0cdcaea3dfdfae71355a2095a8255d1cdd2f0594b6
.exe windows x86

c397ab14c9467a6bfa6e11d50a9a6823

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcW
RegisterClassExW
CreateWindowExW
DefWindowProcW
LoadStringW
ReleaseDC
GetDC
InflateRect
EnumChildWindows
PtInRect
UnionRect
CopyRect
ScreenToClient
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
IsZoomed
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
PostMessageW
DrawFrameControl
ChildWindowFromPoint
SetDlgItemTextW
DialogBoxParamW
MoveWindow
SetWindowTextW
GetDlgItem
EndDialog
DialogBoxIndirectParamW
GetScrollInfo
SetScrollInfo
GetParent
GetClassLongW
SetWindowLongW
GetWindowLongW
OffsetRect
IntersectRect
DefFrameProcW
FillRect
GetSysColorBrush
GetSysColor
MapWindowPoints
GetCursorPos
GetWindowRect
GetClientRect
SendMessageW
WaitForInputIdle
ShowWindow
SetFocus
GetMenu
CheckMenuItem
GetSubMenu
InsertMenuW
GetPropW
SetPropW
ScrollWindowEx
ValidateRect
InvalidateRect
GetUpdateRgn
GetUpdateRect
EndPaint
BeginPaint
UpdateWindow
DrawTextW
GetSystemMetrics
SetTimer
ReleaseCapture
SetCapture
GetCapture
DeleteMenu
SetForegroundWindow
MessageBoxW
SetCursor
FindWindowW
FindWindowExW
GetWindowThreadProcessId
LoadCursorW
LoadIconW
DestroyIcon
EnumDisplaySettingsW
GetKeyState
GetFocus
SetWindowPos

comdlg32

PrintDlgW
ChooseColorW
GetSaveFileNameW
GetOpenFileNameW
FindTextW
ChooseFontW

shell32

SHGetSpecialFolderLocation
SHGetFileInfoW
ShellExecuteExW
Shell_NotifyIconW
SHGetMalloc
SHBrowseForFolderW
ShellExecuteW
SHGetPathFromIDListW

ole32

CoTaskMemFree
CoInitialize
CoUninitialize
CoGetInterfaceAndReleaseStream
CoSetProxyBlanket
CoMarshalInterThreadInterfaceInStream
CoCreateInstance

advapi32

RegDeleteValueW
RegOpenKeyExA
RegQueryValueExA
LookupPrivilegeNameW
SetKernelObjectSecurity
IsValidSecurityDescriptor
GetKernelObjectSecurity
CreateProcessAsUserW
RegConnectRegistryW
RegCloseKey
AddAccessAllowedAce
AddAce
InitializeAcl
GetSidSubAuthorityCount
GetSidSubAuthority
GetSidIdentifierAuthority
IsValidSid
SetTokenInformation
QueryServiceConfigW
CopySid
GetLengthSid
RevertToSelf
OpenProcessToken
GetTokenInformation
AdjustTokenPrivileges
EqualSid
AllocateAndInitializeSid
SetServiceObjectSecurity
QueryServiceObjectSecurity
MapGenericMask
RegCreateKeyW
StartServiceW
QueryServiceStatus
FreeSid
GetAce
LookupAccountSidW
LookupAccountNameW
LookupPrivilegeValueW
ImpersonateLoggedOnUser
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyW
RegEnumValueW
RegLoadKeyW
RegOpenKeyW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegUnLoadKeyW
RegQueryValueW
CryptAcquireContextW
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CloseServiceHandle
OpenSCManagerW
OpenServiceW
ControlService
RegOpenKeyExW

comctl32

ImageList_Create
ImageList_Destroy
InitCommonControlsEx
ImageList_Add
ImageList_ReplaceIcon
CreateToolbarEx
CreatePropertySheetPageW
CreateStatusWindowW
PropertySheetW
ImageList_DrawEx

shlwapi

ColorHLSToRGB
ColorRGBToHLS
UrlUnescapeW

kernel32

EnterCriticalSection
GetStartupInfoA
GetCommandLineA
LeaveCriticalSection
GetCurrentThreadId
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProcAddress
IsDebuggerPresent
WaitForSingleObject
CreateMutexA
GetLastError
CreateThread
CloseHandle
VirtualAlloc
RtlUnwind
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapAlloc
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
ReadFile
RaiseException
SetFilePointer
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
ReleaseMutex

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 218KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c397ab14c9467a6bfa6e11d50a9a6823

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

shell32

ole32

advapi32

comctl32

shlwapi

kernel32

Sections

.text Size: 74KB - Virtual size: 73KB

.rdata Size: 38KB - Virtual size: 37KB

.data Size: 14KB - Virtual size: 134KB

.rsrc Size: 218KB - Virtual size: 217KB

.text
Size: 74KB - Virtual size: 73KB

.rdata
Size: 38KB - Virtual size: 37KB

.data
Size: 14KB - Virtual size: 134KB

.rsrc
Size: 218KB - Virtual size: 217KB