601724c500be91cce54b10ef6b4fed2e14380238f0353f963e9fd373f38887fe

Sharing

Copy URL Twitter E-mail

General

Target

601724c500be91cce54b10ef6b4fed2e14380238f0353f963e9fd373f38887fe
Size

309KB
MD5

1add0560ea5e4a4e19f6b570cf421de1
SHA1

05151f00c83f5401b9d0c3a61c275ef8c1458dc3
SHA256

601724c500be91cce54b10ef6b4fed2e14380238f0353f963e9fd373f38887fe
SHA512

c0477e4d1f54bf59f5b6bd2160978ef8c63daffb2e9601717d95c42d0b3c5835437db12a615884e5ba42b41c51cd43a5602ebc5b53040e02631c3f33f585ef0c
SSDEEP

6144:LlbMqaJu8EsyHawnxRohs7Pb0l95K6gVXjiuWAAFwivei/qoL/O:zaYsy5xRohI0l95XCgAAF1vworO

Score

N/A

Malware Config

Signatures

Files

601724c500be91cce54b10ef6b4fed2e14380238f0353f963e9fd373f38887fe
.exe windows x86

5cabbd80224538c1df0be2c3d60c2e38

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetForegroundWindow
LoadBitmapW
GetAncestor
InflateRect
RemovePropW
PtInRect
IsWindowVisible
TranslateMessage
MessageBoxW
GetWindowPlacement
RegisterClipboardFormatW
GetWindowDC
InvalidateRect
SetFocus
GetLastInputInfo
FillRect
IsWindow
GetClientRect
SendMessageW
EnableWindow
BringWindowToTop
GetCursorPos
RegisterWindowMessageW
CallWindowProcW
PostMessageW
ReleaseCapture
ReleaseDC
LoadIconW
GetDC
DrawFocusRect
GetParent
CopyImage
GetIconInfo
MessageBeep
GetDesktopWindow
RedrawWindow
ShowWindow
SetRect
GetDlgItem
SetCapture
FrameRect
GetPropW
SetPropW
SetWindowPos
GetWindowTextW
CopyRect
GetWindowThreadProcessId
GetSysColorBrush
OffsetRect
LoadImageW
MsgWaitForMultipleObjects
CreateIconIndirect
DispatchMessageW
KillTimer
MapDialogRect
PeekMessageW
ScreenToClient
GetSystemMetrics
SetForegroundWindow
GetWindowLongW
IntersectRect
SetWindowLongW
FindWindowW
GetWindowRect
DestroyWindow
UpdateWindow
GetCursor
CreateWindowExW
SetTimer
SystemParametersInfoW
DrawTextW
LoadCursorW
SetCursor
AttachThreadInput
GetSysColor
DestroyIcon
GetKeyState
ClientToScreen
GetFocus

kernel32

FlushFileBuffers
ReleaseMutex
FormatMessageW
GetProcessTimes
LocalFree
GetShortPathNameW
LoadResource
GetFileSizeEx
GetProcessHeap
CreateFileW
SetUnhandledExceptionFilter
OpenMutexW
LeaveCriticalSection
DeleteCriticalSection
GetLogicalDrives
LocalAlloc
WriteFile
InitializeCriticalSectionAndSpinCount
SetFileAttributesW
UnmapViewOfFile
GetCommandLineW
lstrlenW
ResetEvent
OpenProcess
RemoveDirectoryW
SetNamedPipeHandleState
ResumeThread
CreateMutexW
DeleteFileW
FindFirstFileW
WaitForSingleObject
FreeLibrary
SetFilePointerEx
GlobalAlloc
VirtualQuery
GetSystemTimeAsFileTime
CreateFileMappingW
OpenEventW
LocalUnlock
ExpandEnvironmentStringsW
FindNextFileW
OpenFileMappingW
SetFilePointer
MoveFileW
CreateProcessW
lstrcpyW
CloseHandle
GlobalFree
FormatMessageA
UnhandledExceptionFilter
SetFileTime
WaitNamedPipeW
WaitForMultipleObjects
GetModuleHandleW
GetCurrentThreadId
GetSystemInfo
LockResource
RaiseException
HeapAlloc
GetDiskFreeSpaceExW
GetDriveTypeW
WideCharToMultiByte
MapViewOfFile
FindResourceW
QueryDosDeviceW
DuplicateHandle
ReadFile
MoveFileExW
CreateEventW
CreateDirectoryW
IsDebuggerPresent
FindClose
SetLastError
GlobalLock
GetLocalTime
GetFileTime
GlobalMemoryStatus
EnterCriticalSection
GlobalUnlock
PeekNamedPipe
LocalLock
HeapFree
CopyFileW
VirtualAllocEx

shell32

SHGetFolderPathW
SHGetFileInfoW
SHFileOperationW
ShellExecuteExW
CommandLineToArgvW
ShellExecuteW
DragQueryFileW
SHBrowseForFolderW
SHGetPathFromIDListW
SHCreateDirectoryExW
SHGetFolderLocation

comctl32

ImageList_GetIconSize
ImageList_DrawEx
_TrackMouseEvent
InitCommonControlsEx
CreateStatusWindow
CreatePropertySheetPageW
ImageList_SetOverlayImage
ImageList_Merge
ImageList_DragMove
ImageList_GetImageCount
CreateUpDownControl
ImageList_Read
ShowHideMenuCtl
ImageList_LoadImage
FlatSB_GetScrollPos
ImageList_DragLeave

gdi32

CreateCompatibleDC
DeleteObject
CreateSolidBrush
GetDIBits
GetDeviceCaps
CreateDIBSection
CreatePen
BitBlt
SetTextColor
LineTo
CreateCompatibleBitmap
GetStockObject
SetBkColor
SetBkMode
SetTextJustification
SetStretchBltMode
MoveToEx
GetPixel
GetTextExtentPoint32W
SetPixel
GetCurrentObject
TextOutW
CreateFontIndirectW
GetTextFaceW
DeleteDC
GetTextMetricsW
GetObjectW
StretchBlt
SelectObject

msimg32

GradientFill
AlphaBlend

ole32

CoInitialize
OleUninitialize
OleRun
CoTaskMemFree
CoCreateInstance
OleInitialize
PropVariantClear
CoUninitialize
CoInitializeEx
CoTaskMemAlloc

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

advapi32

GetSidSubAuthority
SetSecurityDescriptorSacl
AllocateAndInitializeSid
InitializeAcl
CryptGetHashParam
RegQueryValueW
FreeSid
CryptAcquireContextW
RegQueryInfoKeyW
SetNamedSecurityInfoW
GetLengthSid
RegSetValueExW
InitializeSecurityDescriptor
AddAccessAllowedAce
CryptCreateHash
RegCreateKeyExW
CryptHashData
GetAce
RegEnumValueW
GetSidIdentifierAuthority
GetSidSubAuthorityCount
CryptReleaseContext
SetSecurityDescriptorDacl
CryptDestroyHash
GetAclInformation
ImpersonateLoggedOnUser
AddAce
LogonUserW
SetEntriesInAclW
RegCloseKey
RegEnumKeyExW
GetNamedSecurityInfoW
CryptGenRandom
RegQueryValueExW
GetUserNameW
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegDeleteValueW
RegOpenKeyExW

oleaut32

SysStringLen
VarUdateFromDate
SafeArrayUnlock
VariantCopy
SafeArrayGetDim
DispCallFunc
SafeArrayGetUBound
LoadRegTypeLi
LoadTypeLi
SystemTimeToVariantTime
SysStringByteLen
GetErrorInfo
SafeArrayDestroy
SysAllocString
VariantClear
SafeArrayGetLBound
VariantTimeToSystemTime
SysAllocStringByteLen
SysFreeString
VariantInit

psapi

EnumProcesses
GetModuleFileNameExA
EnumProcessModules

shlwapi

PathAppendW
PathIsDirectoryEmptyW
PathRemoveBlanksW
PathStripPathW
PathFindExtensionW
PathFileExistsW
PathFindFileNameW
PathRemoveExtensionW
PathRemoveFileSpecW
PathIsUNCW
SHDeleteEmptyKeyW
PathIsUNCServerShareW
PathIsDirectoryW
SHDeleteKeyW
PathFileExistsA
PathUnquoteSpacesW
SHCreateStreamOnFileW

els

DllRegisterServer

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 57KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 158KB - Virtual size: 982KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5cabbd80224538c1df0be2c3d60c2e38

Headers

File Characteristics

Imports

user32

kernel32

shell32

comctl32

gdi32

msimg32

ole32

version

advapi32

oleaut32

psapi

shlwapi

els

Sections

.text Size: 22KB - Virtual size: 22KB

.bss Size: 57KB - Virtual size: 123KB

.reloc Size: 158KB - Virtual size: 982KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 57KB - Virtual size: 360KB

.rsrc Size: 4KB - Virtual size: 6KB

.text
Size: 22KB - Virtual size: 22KB

.bss
Size: 57KB - Virtual size: 123KB

.reloc
Size: 158KB - Virtual size: 982KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 57KB - Virtual size: 360KB

.rsrc
Size: 4KB - Virtual size: 6KB