2a6392ff03fa893ec842a7b70333e46704abe8fb0e1e73737fcc9ddc6a2a16f3

Sharing

Copy URL Twitter E-mail

General

Target

2a6392ff03fa893ec842a7b70333e46704abe8fb0e1e73737fcc9ddc6a2a16f3
Size

1.1MB
MD5

d86c86941d956affdf511946301ee4f4
SHA1

615719d0b9680a4d0327989fe6268fbb27a24726
SHA256

2a6392ff03fa893ec842a7b70333e46704abe8fb0e1e73737fcc9ddc6a2a16f3
SHA512

5a20a05fdc55bff6e37c4cbbf1ccdd076d52a34cf8ade6f5c21db27a8d4cede33668aa419283930b641366ec8ccd971fbf4cca58e329c35f636813fc04f0ac1e
SSDEEP

24576:3irOnZrJM61qaEuwxYTVBkeBa99RXZbxuKs6Dwe+f:3irOnbNlkT9nuKr6

Score

N/A

Malware Config

Signatures

Files

2a6392ff03fa893ec842a7b70333e46704abe8fb0e1e73737fcc9ddc6a2a16f3
.exe windows x86

6d49e55576948f5545635e9babc66eea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventW
WaitForSingleObject
GetTickCount64
FreeResource
FindResourceW
SizeofResource
WideCharToMultiByte
LoadLibraryExW
CreateThread
LoadLibraryExA
InterlockedCompareExchange
FreeLibrary
GetLastError
GetProcAddress
DelayLoadFailureHook
UnmapViewOfFile
CreateFileA
IsProcessorFeaturePresent
GetSystemInfo
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OutputDebugStringA
VirtualAlloc
VirtualFree
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
GlobalLock
GlobalUnlock
GetDateFormatW
GlobalFree
GlobalAlloc
CreateFileW
CloseHandle
FindResourceExW
GetThreadLocale
HeapSetInformation
LoadResource
LockResource
LocalAlloc
GetTickCount
MulDiv
GetModuleHandleW
LocalFree
FormatMessageW
ExpandEnvironmentStringsW
DebugBreak
GetStdHandle
GetFileType
WriteConsoleW
InterlockedExchange
Sleep
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetVersionExW
LoadLibraryW
QueryPerformanceFrequency
MultiByteToWideChar
RaiseException
FlushInstructionCache
EnterCriticalSection
LeaveCriticalSection
SetLastError
GlobalDeleteAtom
GlobalAddAtomW
ExitProcess
SleepEx
OutputDebugStringW
SetCurrentDirectoryW
GetModuleFileNameW
RegisterApplicationRestart
GetCommandLineW
CreateMutexW
DeleteFileW
GetCurrentDirectoryW
GetFileSize
ReadFile
WriteFile
SetFilePointer
MoveFileExW
GetFileAttributesW
CreateDirectoryW
InterlockedIncrement
InterlockedDecrement

gdi32

CreateDIBSection
GetCharacterPlacementA
GetCharacterPlacementW
GetTextMetricsW
GetFontLanguageInfo
CreateFontIndirectW
GetGlyphOutlineA
GetObjectW
DeleteObject
GetStockObject
SetBkMode
GetDeviceCaps
CreateRoundRectRgn
GetObjectA
GetTextColor
DeleteDC
SaveDC
RestoreDC
AddFontResourceW
RemoveFontResourceW
CreateFontW
CreateSolidBrush
PatBlt
ExtTextOutW
CreateCompatibleDC
CreateBitmap
BitBlt
ExcludeClipRect
GetTextExtentPoint32W
SelectObject
SetTextColor
SetBkColor
GetTextMetricsA
CreateFontIndirectA
SetTextAlign
SetMapMode
ExtTextOutA
MoveToEx

user32

ModifyMenuW
DestroyMenu
SetMenu
DrawMenuBar
EnableMenuItem
LoadMenuW
GetSubMenu
LoadIconW
LoadAcceleratorsW
CheckMenuItem
GetMenu
SetFocus
SetWindowTextW
GetFocus
EnableWindow
GetClientRect
GetWindowRect
MapWindowPoints
BeginPaint
EndPaint
GetDC
ReleaseDC
SetDlgItemInt
LoadStringW
GetDlgItem
ShowWindow
GetProcessDefaultLayout
SendMessageW
PostMessageW
GetCursorPos
MonitorFromWindow
SetRect
GetKeyState
InvalidateRect
NotifyWinEvent
GetSystemMetrics
GetDoubleClickTime
SetWindowLongW
GetClassInfoExW
LoadCursorW
SetMenuInfo
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuItemCount
SetTimer
ShowCursor
TrackPopupMenu
FillRect
GetSysColor
EqualRect
UnionRect
GetMonitorInfoW
SetWindowPos
IsIconic
SendInput
SetWindowPlacement
IsWindowVisible
GetWindowPlacement
FindWindowW
SetDlgItemTextW
SetCursor
CallNextHookEx
SetForegroundWindow
OffsetRect
IsZoomed
EnumDisplayMonitors
RedrawWindow
DefWindowProcW
SetCapture
KillTimer
TrackMouseEvent
IsRectEmpty
IntersectRect
GetRawInputData
GetForegroundWindow
DrawFrameControl
PtInRect
ScreenToClient
DestroyWindow
PostQuitMessage
ReleaseCapture
GetSysColorBrush
SystemParametersInfoW
RegisterClassExW
CreateWindowExW
SetPropW
SetWindowsHookExW
RegisterClassW
RegisterWindowMessageW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
PeekMessageW
UnhookWindowsHookEx
RegisterRawInputDevices
BringWindowToTop
GetWindowLongW
DrawTextW
CallWindowProcW
GetParent
AdjustWindowRect
MessageBoxW
GetWindow
GetClassNameW
GetNextDlgGroupItem
GetDlgCtrlID
EndDialog
GetWindowTextW
DrawEdge
IsWindowEnabled
EnumChildWindows
SetWindowRgn
IsDialogMessageW
GetNextDlgTabItem
CreateDialogParamW
CreateDialogIndirectParamW
DialogBoxParamW
UnregisterClassA
SetClassLongW
MonitorFromRect

msvcrt

qsort
_vsnwprintf_s
?_set_new_mode@@YAHH@Z
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
_CIlog
memmove
_controlfp
_except_handler4_common
memmove_s
_wcsnicmp
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_localtime64_s
wcscspn
wcsspn
_wcstoui64
_vscwprintf
_errno
strncmp
_unlock
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_callnewh
_CxxThrowException
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
??0exception@@QAE@XZ
floor
wcstod
wcstol
clock
srand
wcsstr
_snwprintf_s
wcscat_s
memcpy
_wtoi
swprintf_s
wcstoul
_ftol2
wcsncmp
wcschr
wcscpy_s
_time64
_wcsicmp
malloc
_ftol2_sse
_CIatan
wcsncpy_s
__CxxFrameHandler3
rand
memset
wcsncat_s
realloc
free
_purecall
_CIacos
_CIatan2
_CIsin
_CIsqrt
_finite
_strdup
setlocale
iswpunct
iswdigit
iswalpha
iswspace

ntdll

WinSqmAddToStream
WinSqmIncrementDWORD

shell32

SHSetLocalizedName
SHGetFolderPathW
ShellExecuteW
ShellAboutW
SHGetFolderPathEx
CommandLineToArgvW

gdiplus

GdipCloneBrush
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipCreateRegionHrgn
GdipSetClipRegion
GdipSetClipRectI
GdipDrawImageRectRectI
GdipDrawImagePointRectI
GdipMeasureString
GdipDrawString
GdipFillRegion
GdipFillRectangleI
GdipDrawImageRectI
GdipDrawImageI
GdipGetDpiY
GdipCreateFromHDC
GdipGetImageHeight
GdipGetImageWidth
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawRectangleI
GdiplusShutdown
GdiplusStartup
GdipDisposeImage
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCloneImage
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipDeleteBrush
GdipCreatePen1
GdipDeletePen
GdipCreateStringFormat
GdipDeleteStringFormat
GdipDeleteRegion
GdipDeleteFont
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipImageRotateFlip
GdipCreateBitmapFromScan0
GdipSetImageAttributesWrapMode
GdipCreateSolidFill
GdipCreateLineBrushFromRectI
GdipSetPenDashStyle
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipSetStringFormatHotkeyPrefix
GdipGetImageGraphicsContext
GdipGetDC
GdipReleaseDC
GdipSetTextRenderingHint
GdipDrawLineI
GdipDrawRectangle

advapi32

GetUserNameW

oleaut32

VariantInit
SysStringLen
SysAllocString
SysFreeString
VariantClear

ole32

CreateStreamOnHGlobal
CoInitialize
CoUninitialize
CoCreateInstance

shlwapi

PathCombineW
PathFileExistsW

comctl32

InitCommonControlsEx

secur32

GetUserNameExW

d3d9

Direct3DCreate9

dsound

ord11

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime

oleacc

AccessibleChildren
CreateStdAccessibleProxyW
LresultFromObject
AccessibleObjectFromWindow

xinput9_1_0

XInputGetState

wtsapi32

WTSRegisterSessionNotification
WTSUnRegisterSessionNotification

slc

SLGetWindowsInformationDWORD

usp10

ScriptItemize
ScriptBreak

Sections

.text
Size: 785KB - Virtual size: 784KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 119KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d49e55576948f5545635e9babc66eea

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

user32

msvcrt

ntdll

shell32

gdiplus

advapi32

oleaut32

ole32

shlwapi

comctl32

secur32

d3d9

dsound

winmm

oleacc

xinput9_1_0

wtsapi32

slc

usp10

Sections

.text Size: 785KB - Virtual size: 784KB

.data Size: 119KB - Virtual size: 142KB

.rsrc Size: 193KB - Virtual size: 193KB

.reloc Size: 42KB - Virtual size: 41KB

.text
Size: 785KB - Virtual size: 784KB

.data
Size: 119KB - Virtual size: 142KB

.rsrc
Size: 193KB - Virtual size: 193KB

.reloc
Size: 42KB - Virtual size: 41KB