f943474dd04105838b493c9376a5bad22bd56340454a291c33b5ce5495abc71a

Sharing

Copy URL Twitter E-mail

General

Target

f943474dd04105838b493c9376a5bad22bd56340454a291c33b5ce5495abc71a
Size

2.0MB
MD5

fb2ff8cbe5cf23f8662f6f09c3cad3dc
SHA1

3213e299662142a2ec0604e9fd324ff774bedf1f
SHA256

f943474dd04105838b493c9376a5bad22bd56340454a291c33b5ce5495abc71a
SHA512

36256268ba5367be12f269b3ac9a0623d4afdf01f3899e3a43f3c58dac1202aef3f84426e6fd990af5c8de02de7ada32a0071996ae83afe6d7b37d2be03a6fb0
SSDEEP

24576:RNLNchoBOqAuG1mSf4CjoXZ1+i8iNKRknJkGgLa9TLLZ1JsIsyxVF6V8/b:rynzHoXZ1T3KwsO9TfXzo8

Score

N/A

Malware Config

Signatures

Files

f943474dd04105838b493c9376a5bad22bd56340454a291c33b5ce5495abc71a
.exe windows x86

aa1702f743c5f761b1b345c359328166

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

CreateSemaphoreW
ReleaseSemaphore
GetStringTypeExW
WideCharToMultiByte
IsBadReadPtr
GetLocalTime
SystemTimeToFileTime
FileTimeToSystemTime
GetFileTime
GetSystemTime
GetFileSize
ReadFile
SetFilePointer
WriteFile
FlushFileBuffers
VirtualAlloc
VirtualFree
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapSize
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
HeapCreate
HeapDestroy
GetModuleFileNameA
CreateFileMappingW
GetTickCount
QueryPerformanceCounter
VirtualQuery
VirtualProtect
GetCPInfo
GetStartupInfoW
CreateThread
ExitThread
TerminateProcess
GetModuleHandleA
HeapReAlloc
RtlUnwind
ExitProcess
InterlockedCompareExchange
LoadLibraryA
LCMapStringW
LCMapStringA
GetUserDefaultLCID
GetVersionExA
MapViewOfFile
UnmapViewOfFile
CreateFileW
GetSystemInfo
MoveFileW
FindNextFileW
CopyFileW
IsBadWritePtr
Sleep
CreateEventW
GlobalSize
GetTempFileNameW
DeleteFileW
SetErrorMode
GetFileAttributesW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
GetStringTypeA
GetStringTypeW
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
IsBadCodePtr
GetOEMCP
SetStdHandle
CompareStringA
SetEvent
ResetEvent
ResumeThread
GetExitCodeThread
CompareStringW
lstrcpynA
GlobalHandle
GlobalFree
LoadLibraryW
SetEnvironmentVariableA
CreateFileA
GetLocaleInfoW
GetProcAddress
GetCurrentProcessId
LockResource
lstrcatW
GetTempPathW
GetCurrentDirectoryW
lstrlenA
FindFirstFileW
GetFullPathNameW
SetLastError
FindClose
lstrcpynW
lstrcmpiW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
GetModuleHandleW
GetModuleFileNameW
lstrcmpW
MulDiv
lstrcpyW
GlobalAlloc
GlobalLock
GlobalUnlock
InterlockedIncrement
ReleaseMutex
GetCurrentThreadId
GetLastError
GetEnvironmentStringsW
CreateMutexW
WaitForSingleObject
CloseHandle
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
lstrlenW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
SetEndOfFile
FreeEnvironmentStringsW
GetSystemTimeAsFileTime

user32

IsDlgButtonChecked
CreateDialogParamW
DialogBoxIndirectParamW
KillTimer
SetTimer
GetAsyncKeyState
PtInRect
TrackPopupMenuEx
ModifyMenuW
DrawFrameControl
InflateRect
GetMenuItemID
CallNextHookEx
SetWindowsHookExW
GetKeyState
CharLowerW
UnhookWindowsHookEx
SetRectEmpty
GetSystemMetrics
GetWindowDC
GetSysColorBrush
FrameRect
GetMessagePos
WindowFromPoint
ScreenToClient
MessageBeep
GetWindowThreadProcessId
IsWindowVisible
GetForegroundWindow
SystemParametersInfoW
GetActiveWindow
SetRect
DrawTextW
OffsetRect
GetDlgCtrlID
GetNextDlgTabItem
PostQuitMessage
DialogBoxParamW
SendDlgItemMessageW
EndDialog
GetMenuItemInfoW
GetSubMenu
TrackPopupMenu
CheckMenuRadioItem
EnableMenuItem
AppendMenuW
DeleteMenu
MonitorFromPoint
GetMonitorInfoW
SetMenuItemInfoW
GetMenuItemCount
LoadBitmapW
DestroyMenu
IsRectEmpty
CopyRect
LoadStringA
RemoveMenu
CreatePopupMenu
IsIconic
IntersectRect
SetMenuDefaultItem
GetCursorPos
SetDlgItemTextW
GetCapture
DrawFocusRect
AdjustWindowRectEx
EnableWindow
SetCursor
GetWindowRect
GetMenuStringW
TranslateAcceleratorW
InsertMenuW
IsMenu
UpdateWindow
MapWindowPoints
GetWindowPlacement
IsZoomed
SetMenu
GetMenu
PostMessageW
wsprintfW
FindWindowW
SetForegroundWindow
LoadMenuW
MessageBoxA
ScrollDC
GetClipboardData
OpenClipboard
CloseClipboard
IsClipboardFormatAvailable
MoveWindow
FindWindowExW
CharUpperW
ClientToScreen
DestroyCursor
DrawIconEx
EqualRect
UnionRect
IsDialogMessageW
MapDialogRect
SetWindowContextHelpId
SetDlgItemInt
LoadIconW
DestroyIcon
CheckDlgButton
LoadAcceleratorsW
CreateAcceleratorTableW
CharNextW
GetParent
GetClassNameW
SetWindowPos
RedrawWindow
GetDlgItem
SendMessageW
SetFocus
GetFocus
IsChild
DestroyAcceleratorTable
BeginPaint
EndPaint
CallWindowProcW
GetDesktopWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
GetClientRect
FillRect
SetCapture
ReleaseCapture
GetSysColor
CreateWindowExW
LoadImageW
DestroyWindow
RegisterWindowMessageW
GetClassInfoExW
LoadCursorW
RegisterClassExW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
MessageBoxW
DefWindowProcW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
LoadStringW
IsWindow
GetWindow
IsWindowEnabled
ShowWindow
GetWindowLongW
SetWindowLongW
wvsprintfW
UnregisterClassW
DrawEdge

gdi32

SetPixel
GetPixel
ExcludeClipRect
Rectangle
MoveToEx
TextOutW
CreatePen
LineTo
SaveDC
RestoreDC
Polyline
GetTextExtentPoint32W
PatBlt
RectVisible
StretchBlt
SetStretchBltMode
SetMapMode
Ellipse
SetDIBColorTable
GdiFlush
PlgBlt
IntersectClipRect
SelectClipRgn
SetViewportOrgEx
EnumFontFamiliesW
CreateBitmap
CreatePatternBrush
SetBrushOrgEx
CreateFontIndirectW
SetBkColor
ExtTextOutW
SetTextColor
SetBkMode
GetCurrentObject
CreateDIBSection
CreateFontW
CreateSolidBrush
GetStockObject
GetObjectW
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
SelectObject
SetTextCharacterExtra
DeleteObject

comdlg32

GetSaveFileNameW
ChooseColorW
GetOpenFileNameW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
RegDeleteKeyW

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation
DragQueryFileW
SHGetFileInfoW
DragFinish
DragAcceptFiles
ShellExecuteW
SHGetFolderPathW
SHBrowseForFolderW
SHBindToParent
SHGetDesktopFolder
SHCreateDirectoryExW

ole32

CLSIDFromProgID
CoGetClassObject
OleLockRunning
CoTaskMemAlloc
CLSIDFromString
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
ReleaseStgMedium
DoDragDrop
RevokeDragDrop
RegisterDragDrop
StringFromGUID2

oleaut32

OleCreateFontIndirect
SysAllocStringLen
SysAllocString
SysStringLen
SysStringByteLen
VariantClear
VariantInit
LoadRegTypeLi
LoadTypeLi
OleLoadPicture
DispCallFunc
VarUI4FromStr
SysFreeString

shlwapi

PathIsDirectoryW
PathCanonicalizeW
PathAppendW
PathFileExistsW
StrRetToBufW
PathFindNextComponentW
PathIsRootW
PathIsRelativeW

comctl32

ImageList_Destroy
ImageList_GetImageCount
ImageList_LoadImageW
InitCommonControlsEx
ord8
ImageList_Create
ImageList_DrawIndirect
ImageList_AddMasked
ImageList_Draw
_TrackMouseEvent
ImageList_SetBkColor
ImageList_GetIconSize
ImageList_Add
CreateStatusWindowW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 200KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 492KB - Virtual size: 491KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aa1702f743c5f761b1b345c359328166

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 200KB - Virtual size: 198KB

.data Size: 12KB - Virtual size: 21KB

.rsrc Size: 492KB - Virtual size: 491KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 200KB - Virtual size: 198KB

.data
Size: 12KB - Virtual size: 21KB

.rsrc
Size: 492KB - Virtual size: 491KB