a4aa2237d356ddd40463170c34b7129bfaa8c541c27942f82869901de68fe0f5

Sharing

Copy URL Twitter E-mail

General

Target

a4aa2237d356ddd40463170c34b7129bfaa8c541c27942f82869901de68fe0f5
Size

854KB
MD5

6ca7d717bde88567138f541225ed140d
SHA1

aa7757ab629c0460afc707470dd77973a5a4bf9c
SHA256

a4aa2237d356ddd40463170c34b7129bfaa8c541c27942f82869901de68fe0f5
SHA512

9da951d8dd0602c1e85798521573abd8d2e741169d7aa4d907350a5f77897416c42958c2019427cf061bb8e5fa31254e564b82455c8d76bf7968736d7746a245
SSDEEP

12288:4eR2E1VMjgaJfaLU5R/CIcLyL/duKTsewidCfMUHN38IwgohB8/WdOXCt05pnV:4xEoDaKEycCyZffCIahB8/RX5

Score

N/A

Malware Config

Signatures

Files

a4aa2237d356ddd40463170c34b7129bfaa8c541c27942f82869901de68fe0f5
.exe windows x86

c543bc95442908755e5b0e7eae5ffaa8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
IsDebuggerPresent
SizeofResource
GetModuleFileNameA
LoadLibraryW
LCMapStringW
LeaveCriticalSection
GetCommandLineW
EnterCriticalSection
GetFileSize
MulDiv
OutputDebugStringW
SetErrorMode
SetEndOfFile
lstrcpynW
ConvertDefaultLocale
FileTimeToLocalFileTime
InterlockedDecrement
GlobalDeleteAtom
GetTickCount
LockResource
GlobalFindAtomW
SetLastError
lstrlenA
GetStartupInfoA
InterlockedExchange
GetTimeFormatW
FreeResource
GlobalReAlloc
WriteConsoleW
SetUnhandledExceptionFilter
CreateThread
TlsSetValue
HeapReAlloc
ResumeThread
GetProcessHeap
ReadFile
CreateFileA
lstrcmpA
GetStdHandle
LoadLibraryA
WideCharToMultiByte
GetCurrentProcess
GetCPInfo
GetFullPathNameW
VirtualQuery
GetStartupInfoW
FindClose
SetHandleCount
LoadResource
FlushFileBuffers
GetFileAttributesW
RaiseException
GetDriveTypeA
EnumResourceLanguagesW
GetProcAddress
WriteFile
SetFilePointer
GetDateFormatW
GetCurrentThread
lstrcatA
VirtualProtect
ResetEvent
UnhandledExceptionFilter
GetVolumeInformationW
FreeLibrary
GetFileTime
CreateEventW
SetEnvironmentVariableA
GlobalHandle
GetEnvironmentStrings
GetStringTypeA
LCMapStringA
TerminateProcess
GetWindowsDirectoryW
FindFirstFileW
GetVersion
GlobalFree
GetStringTypeW
GetCommandLineA
GetSystemTimeAsFileTime
MultiByteToWideChar
FreeEnvironmentStringsW
GetModuleHandleA
LocalReAlloc
FindNextFileW
VirtualFree
GetUserDefaultUILanguage
UnlockFile
FindResourceExW
CreateProcessW
GetPrivateProfileStringW
QueryPerformanceCounter
HeapCreate
lstrcmpW
CreateFileW
HeapDestroy
GetCurrentThreadId
VirtualProtectEx
SetStdHandle
GetCurrentDirectoryA
GetLastError
WaitForSingleObject
FindResourceW
GetEnvironmentStringsW
GlobalAddAtomW
GetPrivateProfileIntW
GlobalLock
GetConsoleCP
CloseHandle
GetLocalTime
GetConsoleOutputCP
GlobalUnlock
DeviceIoControl
CompareStringW
GetThreadLocale
GetSystemDirectoryA
lstrlenW
InitializeCriticalSection
HeapFree
HeapAlloc
SetThreadPriority
InterlockedIncrement
LocalFree
TlsFree
GetModuleFileNameW
GlobalAlloc
GetACP
EnumUILanguagesW
CompareStringA
ExitProcess
HeapSize
GetSystemDefaultLangID
DeleteCriticalSection
SuspendThread
GetModuleHandleW
VirtualAlloc
GetOEMCP
TlsGetValue
FileTimeToSystemTime
WaitForMultipleObjects
FormatMessageW
FreeEnvironmentStringsA
DuplicateHandle
GetTimeZoneInformation
GetVersionExW
GetVersionExA
GetLocaleInfoA
GetCurrentProcessId
GlobalFlags
RtlUnwind
LocalAlloc
TlsAlloc
GetSystemInfo
Sleep
WritePrivateProfileStringW

user32

SetFocus
EnableMenuItem
GetSysColorBrush
CopyRect
SendDlgItemMessageA
GetDlgItem
InflateRect
GetTopWindow
LoadMenuIndirectW
CharNextW
GetCursorPos
UnhookWindowsHookEx
IntersectRect
GetMenuItemCount
GetLastActivePopup
SetCapture
OffsetRect
IsIconic
GetMessageTime
GrayStringW
GetWindowThreadProcessId
MoveWindow
GetMenuCheckMarkDimensions
SetWindowsHookExW
ModifyMenuW
DrawFocusRect
SetCursor
InsertMenuW
GetCapture
EqualRect
SystemParametersInfoA
TabbedTextOutW
CallNextHookEx
SetActiveWindow
CheckMenuItem
GetWindowDC
GetSystemMenu
PtInRect
GetMessagePos
PostQuitMessage
LoadBitmapW
InvalidateRgn
EnableWindow
GetNextDlgTabItem
IsChild
RemoveMenu
KillTimer
WinHelpW
SetWindowContextHelpId
ShowWindow
ClientToScreen
IsDialogMessageW
DestroyMenu
IsWindow
SendMessageW
UnregisterClassW
AdjustWindowRectEx
ScreenToClient
MapWindowPoints
RedrawWindow
MsgWaitForMultipleObjects
GetWindowInfo
GetClassInfoExW
GetDlgCtrlID
GetWindowTextW
SetWindowLongW
CallWindowProcW
SetForegroundWindow
DefWindowProcW
GetForegroundWindow
GetSubMenu
RegisterClassW
UpdateWindow
DestroyWindow
GetSysColor
CreateWindowExW
LoadMenuW
GetDC
SetMenuItemBitmaps
SetWindowPlacement
GetMessageW
DispatchMessageW
GetWindow
MessageBoxW
MessageBeep
AppendMenuW
ExitWindowsEx
GetParent
CharUpperW
GetActiveWindow
SetTimer
MapDialogRect
CopyAcceleratorTableW
GetWindowTextLengthW
ReleaseCapture
PostMessageW
BeginPaint
SendDlgItemMessageW
SetPropW
GetWindowLongW
GetNextDlgGroupItem
ReleaseDC
GetPropW
SetWindowTextW
IsRectEmpty
RegisterClipboardFormatW
TrackPopupMenu
ValidateRect
SetWindowPos
PostThreadMessageW
GetMenuItemID
AllowSetForegroundWindow
TrackMouseEvent
DrawTextW
SetCursorPos
SetRectEmpty
GetFocus
GetClassInfoW
CreateDialogIndirectParamW
InvalidateRect
GetSystemMetrics
LoadIconW
UnregisterClassA
GetClassLongW
GetMenu
RegisterWindowMessageW
RemovePropW
WindowFromPoint
GetWindowRect
IsWindowEnabled
GetDesktopWindow
EndPaint
EndDialog
GetWindowPlacement
TranslateMessage
GetClassNameW
GetMenuState
IsWindowVisible
SetMenuDefaultItem
GetClientRect
SetRect
FindWindowW
GetKeyState
LoadCursorW
PeekMessageW
DrawTextExW

gdi32

SelectPalette
GetPixel
RectVisible
CreatePen
StretchBlt
LineTo
CreateSolidBrush
GetObjectW
CreateCompatibleDC
GetBkColor
TextOutW
SetViewportOrgEx
MoveToEx
CreateBitmapIndirect
PatBlt
GetMapMode
Polyline
SaveDC
GetDeviceCaps
SelectObject
GetWindowExtEx
RestoreDC
CreateRectRgnIndirect
GetStockObject
SetStretchBltMode
ScaleWindowExtEx
ScaleViewportExtEx
ExtSelectClipRgn
ExcludeClipRect
SetWindowExtEx
SetMapMode
SetPixel
OffsetViewportOrgEx
DPtoLP
SetViewportExtEx
GetRgnBox
CreateCompatibleBitmap
DeleteObject
DeleteDC
ExtTextOutW
SetBkColor
Escape
StretchDIBits
PtVisible
GetClipBox
CreateBitmap
GetTextColor
CreateFontIndirectW
SetTextColor
GetTextExtentPoint32W
BitBlt
SetBkMode
GetViewportExtEx

comdlg32

GetFileTitleW

advapi32

RegOpenKeyExW
StartServiceW
RegCloseKey
OpenProcessToken
RegSetValueExW
RegDeleteValueW
RegQueryValueExW
RegEnumKeyW
RegQueryValueW
RegEnumKeyExW
CloseServiceHandle
OpenServiceW
RegCreateKeyExW
RegCreateKeyW
AdjustTokenPrivileges
RegDeleteKeyW
OpenSCManagerW
LookupPrivilegeValueW
RegOpenKeyW
RegNotifyChangeKeyValue

shell32

ShellExecuteW
Shell_NotifyIconW
SHGetFolderPathW

ole32

CLSIDFromProgID
OleIsCurrentClipboard
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoUninitialize
CreateStreamOnHGlobal
StgOpenStorageOnILockBytes
CoTaskMemFree
CoGetClassObject
CLSIDFromString
CreateILockBytesOnHGlobal
OleFlushClipboard
StgCreateDocfileOnILockBytes
CoCreateInstance
PropVariantClear
CoInitialize
CoRevokeClassObject
CoTaskMemAlloc
CoRegisterMessageFilter

oleaut32

VariantChangeType
SysFreeString
SysStringLen
VariantCopy
VariantTimeToSystemTime
SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantClear
VariantInit
SysAllocStringLen
SafeArrayDestroy

shlwapi

PathStripToRootW
PathFindExtensionW
PathIsUNCW
PathFindFileNameW

winmm

waveInReset
waveInOpen
waveInUnprepareHeader
waveInStart
waveInStop
waveInGetNumDevs
waveInClose
waveInGetDevCapsW
waveInPrepareHeader
PlaySoundW
waveInAddBuffer

rpcrt4

UuidCreate

setupapi

SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW

gdiplus

GdipGetGenericFontFamilySansSerif
GdipCreateBitmapFromScan0
GdipCreateBitmapFromResource
GdipDeleteGraphics
GdipCreateFromHDC
GdipFillRectangleI
GdipAlloc
GdipCreateFontFamilyFromName
GdipSetTextRenderingHint
GdipDrawImageRectRect
GdipFree
GdipDrawImagePointRectI
GdipDisposeImage
GdipCreateFont
GdipCreateBitmapFromGraphics
GdipGetImageHeight
GdipDrawImageRect
GdipDrawString
GdipDrawImageRectI
GdipDeleteBrush
GdipCreateBitmapFromStream
GdipGetImageWidth
GdipDeleteFontFamily
GdipCreateSolidFill
GdipDrawImageI
GdipGetImageBounds
GdipFlush
GdipMeasureString
GdipGetImageGraphicsContext
GdipCloneImage
GdipCloneBrush
GdiplusStartup
GdipDeleteFont
GdipGetFontSize
GdipImageRotateFlip
GdipFillRectangle
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromHBITMAP

msvcrt

exit
fclose
fread
fopen

esent

JetTerm

Sections

.text
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.33
Size: - Virtual size: 5.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.11
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.22
Size: 282KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.44
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c543bc95442908755e5b0e7eae5ffaa8

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

winmm

rpcrt4

setupapi

gdiplus

msvcrt

esent

Sections

.text Size: 495KB - Virtual size: 495KB

.33 Size: - Virtual size: 5.4MB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 512B - Virtual size: 828B

.11 Size: 6KB - Virtual size: 5KB

.22 Size: 282KB - Virtual size: 282KB

.44 Size: 10KB - Virtual size: 9KB

.tls Size: 512B - Virtual size: 57B

.rsrc Size: 33KB - Virtual size: 32KB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 495KB - Virtual size: 495KB

.33
Size: - Virtual size: 5.4MB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 512B - Virtual size: 828B

.11
Size: 6KB - Virtual size: 5KB

.22
Size: 282KB - Virtual size: 282KB

.44
Size: 10KB - Virtual size: 9KB

.tls
Size: 512B - Virtual size: 57B

.rsrc
Size: 33KB - Virtual size: 32KB

.reloc
Size: 12KB - Virtual size: 12KB