9fde0fc7cbf009a6f48015ea27b8b074253af1714c092f5df4f7869450f4fccb

Sharing

Copy URL Twitter E-mail

General

Target

9fde0fc7cbf009a6f48015ea27b8b074253af1714c092f5df4f7869450f4fccb
Size

1.7MB
MD5

ea48b9023468304e61b02a29f2c240a5
SHA1

5dca123b665cf34d34a9c88232c1fd84c95f9254
SHA256

9fde0fc7cbf009a6f48015ea27b8b074253af1714c092f5df4f7869450f4fccb
SHA512

259fa6a6c19ee6eb30854aa1e99eec9548bc7d5db386b6be18c3aee36a423b2947e1480aefb2978402e07a7dbd3bcaacb31cc657f908b10c4c65fd0bfe376351
SSDEEP

24576:K7+WBmIww303qRXBJSB2ZExMbKQhx9IhkHhKhTZIfqx:BimIDzo2qx

Score

N/A

Malware Config

Signatures

Files

9fde0fc7cbf009a6f48015ea27b8b074253af1714c092f5df4f7869450f4fccb
.exe windows x86

507a616d8f42234a0dbfef73d4ec3f31

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathStripToRootW
PathFindExtensionW
PathIsUNCW
PathFindFileNameW
PathRemoveFileSpecW
PathCombineW
PathFileExistsW
PathCompactPathW

gdiplus

GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromHBITMAP
GdipSetImageAttributesColorMatrix
GdipSetImageAttributesColorKeys
GdipCreateSolidFill
GdipDisposeImage
GdipResetWorldTransform
GdipFillRectangleI
GdipDrawImagePointsI
GdipDrawImageRectRectI
GdipCloneImage
GdiplusStartup
GdipLoadImageFromFile
GdipDeleteGraphics
GdipDeleteBrush
GdipDisposeImageAttributes
GdipCreateFromHDC
GdipAlloc
GdipFree
GdipCreateImageAttributes

kernel32

GlobalAddAtomW
FreeResource
MulDiv
LocalFree
FormatMessageW
GlobalUnlock
GlobalLock
GlobalAlloc
InterlockedDecrement
SetThreadPriority
SuspendThread
GetModuleHandleA
lstrcmpA
lstrlenA
InterlockedExchange
CompareStringA
GetLocaleInfoW
EnumResourceLanguagesW
GetVersion
ConvertDefaultLocale
GetCurrentThread
GlobalGetAtomNameW
GetCurrentProcessId
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
InterlockedIncrement
GetThreadLocale
FileTimeToSystemTime
GlobalFindAtomW
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
GetFullPathNameW
SetErrorMode
FileTimeToLocalFileTime
GetFileTime
GetTickCount
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
RtlUnwind
ExitProcess
HeapReAlloc
RaiseException
ExitThread
CreateThread
HeapSize
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GlobalDeleteAtom
CompareStringW
LoadLibraryA
MultiByteToWideChar
GetVersionExA
GlobalFree
VirtualProtect
GetLogicalDriveStringsW
CreateProcessW
GetExitCodeProcess
GetCurrentThreadId
GetTempPathW
ReleaseSemaphore
Sleep
ResumeThread
FindFirstChangeNotificationW
FindNextChangeNotification
FindCloseChangeNotification
GetModuleFileNameW
GetVersionExW
FreeLibrary
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
OpenEventW
OpenMutexW
CreateMutexW
ReleaseMutex
ResetEvent
CreateEventW
WaitForMultipleObjects
SetEvent
WaitForSingleObject
CreateDirectoryW
WriteFile
lstrcpynW
GetFileAttributesW
SetFileAttributesW
CreateFileW
GetFileSize
ReadFile
CloseHandle
GetShortPathNameW
WideCharToMultiByte
FindFirstFileW
lstrcmpW
DeleteFileW
FindNextFileW
FindClose
RemoveDirectoryW
lstrlenW
GetVolumeInformationW
GetLocalTime
GetDriveTypeW
GetLastError
SetLastError
GetProcAddress
GetModuleHandleW
LoadLibraryW
lstrcpyW
FindResourceW
LoadResource
LockResource
SizeofResource
WritePrivateProfileStringW

user32

CreateDialogIndirectParamW
ValidateRect
TranslateMessage
GetMessageW
FillRect
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
PostQuitMessage
SetCursor
ShowOwnedPopups
SetWindowContextHelpId
TranslateAcceleratorW
SetMenu
BringWindowToTop
SetRectEmpty
CreatePopupMenu
InsertMenuItemW
LoadAcceleratorsW
DestroyMenu
LoadMenuW
ReuseDDElParam
UnpackDDElParam
GetMenuItemInfoW
SystemParametersInfoW
GetSysColorBrush
UnregisterClassW
CharUpperW
CharNextW
CopyAcceleratorTableW
IsRectEmpty
SetRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatW
PostThreadMessageW
GetNextDlgTabItem
EndDialog
MoveWindow
SetWindowTextW
IsDlgButtonChecked
SetDlgItemTextW
GetDlgItemTextW
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
RemovePropW
GetWindowTextW
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
TrackPopupMenu
GetKeyState
UpdateWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetCapture
GetActiveWindow
MapDialogRect
ShowWindow
GetFocus
SetFocus
GetWindowLongW
GetDlgItem
IsWindowEnabled
ReleaseCapture
SetCapture
GetSystemMetrics
TrackMouseEvent
SetPropW
WaitForInputIdle
EnumThreadWindows
RegisterWindowMessageW
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
IsWindow
FindWindowW
SetWindowRgn
LoadBitmapW
IsDialogMessageW
IsWindowVisible
GetClientRect
wsprintfW
ScreenToClient
LoadCursorW
GetDesktopWindow
GetWindow
GetPropW
SetForegroundWindow
SetWindowPos
SetActiveWindow
PostMessageW
InflateRect
GetCursorPos
GetParent
KillTimer
SetTimer
InvalidateRect
GetWindowRect
OffsetRect
PtInRect
CopyRect
GetSysColor
LoadIconW
ReleaseDC
GetDC
SendMessageW
EnableWindow
UnregisterClassA

gdi32

DeleteObject
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
GetDeviceCaps
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetWindowExtEx
ScaleWindowExtEx
CreatePalette
DeleteDC
CreatePatternBrush
GetStockObject
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
CreateSolidBrush
CreateRectRgnIndirect
CreateRoundRectRgn
CreateFontIndirectW
GetTextMetricsW
GetObjectW
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
ExtSelectClipRgn
GetTextExtentPoint32W
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetMalloc
DragQueryFileW
DragFinish
SHGetFileInfoW

oledlg

OleUIBusyW

ole32

CoInitialize
CoUninitialize
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree

oleaut32

SysAllocString
OleCreateFontIndirect
SysFreeString
SysStringLen
VariantInit
VariantChangeType
VariantClear
VariantCopy
SysAllocStringLen
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime

Sections

.text
Size: 296KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

507a616d8f42234a0dbfef73d4ec3f31

Headers

File Characteristics

Imports

shlwapi

gdiplus

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

oledlg

ole32

oleaut32

Sections

.text Size: 296KB - Virtual size: 292KB

.rdata Size: 76KB - Virtual size: 72KB

.data Size: 16KB - Virtual size: 29KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.rrdata Size: 68KB - Virtual size: 68KB

.text
Size: 296KB - Virtual size: 292KB

.rdata
Size: 76KB - Virtual size: 72KB

.data
Size: 16KB - Virtual size: 29KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

.rrdata
Size: 68KB - Virtual size: 68KB