143b352e85e20d6efac2394429db4d484df17712d4193869a012a22542216c78

Sharing

Copy URL Twitter E-mail

General

Target

143b352e85e20d6efac2394429db4d484df17712d4193869a012a22542216c78
Size

549KB
MD5

cbe4cae4a7050bd21a2476305519c71a
SHA1

7ecb6350d834b5983ba6e260d7339a74b698cabf
SHA256

143b352e85e20d6efac2394429db4d484df17712d4193869a012a22542216c78
SHA512

08ffd91908ada987c078e52747650ddad83d2aa0209608aa9b9dc4a64626f949e751f20567d240be1053315eac2de47ee62151c3d46a25ba65f930c543483e78
SSDEEP

6144:KTyKR0Er7A1yZ2UsN35P1cwSm5JBQ7UPxXrIKIH0B3JVNvUcGO+ydPbrJrFE4B3Y:KT7FsNt8mxgUPlrXeA3Vr+ydPRGBp

Score

N/A

Malware Config

Signatures

Files

143b352e85e20d6efac2394429db4d484df17712d4193869a012a22542216c78
.exe windows x86

5578e086d17eec54a554faede6989661

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
DeleteCriticalSection
LeaveCriticalSection
RaiseException
EnterCriticalSection
CloseHandle
CreateThread
Sleep
WaitForSingleObject
CreateProcessW
GetTickCount
GetTempPathW
DebugBreak
OutputDebugStringW
GetThreadLocale
GetStringTypeExW
OutputDebugStringA
DeleteFileW
GetPrivateProfileIntW
GetPrivateProfileSectionNamesW
GetPrivateProfileSectionW
lstrlenA
WideCharToMultiByte
GetFileSize
SetFilePointer
HeapAlloc
HeapFree
GetProcessHeap
ReadFile
CreateFileW
CreateEventW
GlobalFree
ResumeThread
FreeResource
LockResource
SetEvent
ResetEvent
GetModuleHandleA
DisableThreadLibraryCalls
GetModuleFileNameA
GetLocalTime
OpenMutexA
lstrcmpA
MoveFileW
GetProcAddress
LoadLibraryA
DeviceIoControl
SetFileTime
SystemTimeToFileTime
GetWindowsDirectoryW
WriteFile
SetEndOfFile
FindClose
FindFirstFileW
GetDiskFreeSpaceW
GetDriveTypeW
GetVolumeInformationW
lstrcpynW
lstrcmpiA
GetSystemInfo
VirtualProtect
GetLastError
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
InterlockedCompareExchange
ExitThread
GetStartupInfoW
RtlUnwind
GetSystemTimeAsFileTime
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapSize
HeapDestroy
HeapCreate
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
QueryPerformanceCounter
GetCurrentProcessId
GetOEMCP
GetTimeZoneInformation
GetModuleHandleW
lstrlenW
GetUserDefaultLCID
VirtualQuery
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
CompareStringA
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
lstrcmpiW
FreeLibrary
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
SetLastError
FlushInstructionCache
GetCurrentProcess
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
lstrcmpW
InitializeCriticalSection
CompareStringW
HeapReAlloc
SetEnvironmentVariableA

advapi32

RegCloseKey
RegDeleteKeyW
RegOpenKeyA
RegQueryValueExA
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW

comctl32

InitCommonControlsEx

gdi32

CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
BitBlt
SelectObject
DeleteDC
DeleteObject
GetObjectW
GetDeviceCaps
GetStockObject

ole32

CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
OleInitialize
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
StringFromGUID2
OleUninitialize
CoUninitialize
CoInitialize
CoInitializeEx

oleaut32

SysStringByteLen
OleCreateFontIndirect
OleLoadPicture
VarUI4FromStr
SysStringLen
VariantInit
VariantClear
SysAllocString
SysFreeString
LoadTypeLi
LoadRegTypeLi
SysAllocStringLen

shell32

ShellExecuteExW
Shell_NotifyIconW

shlwapi

StrCpyW
StrStrIA

user32

TrackPopupMenu
AppendMenuW
MonitorFromPoint
CreatePopupMenu
CharLowerW
LoadStringW
GetMonitorInfoW
GetCursorPos
wvsprintfW
GetSystemMetrics
LoadImageW
IsDialogMessageW
PostQuitMessage
CharNextW
CreateDialogParamW
DestroyWindow
CallWindowProcW
SetRect
GetUpdateRect
RegisterClassExA
LoadCursorA
UnregisterClassA
DefWindowProcA
GetWindowLongA
SetWindowLongA
CreateWindowExA
CharNextA
PostMessageA
PeekMessageA
MessageBoxA
LoadIconW
LoadCursorW
GetClassInfoExW
RegisterClassExW
CreateWindowExW
GetWindowLongW
RegisterWindowMessageW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
DestroyAcceleratorTable
GetSysColor
BeginPaint
GetClientRect
FillRect
EndPaint
GetDC
ReleaseDC
IsChild
GetFocus
SetFocus
GetWindow
IsWindow
SendMessageW
RedrawWindow
GetClassNameW
GetParent
SetWindowPos
CreateAcceleratorTableW
ClientToScreen
ScreenToClient
MoveWindow
SetCapture
ReleaseCapture
InvalidateRect
InvalidateRgn
GetDesktopWindow
DefWindowProcW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
CloseWindow
PostMessageW
MessageBoxW
ShowWindow
KillTimer
GetDlgItem
SetTimer
SystemParametersInfoW
GetWindowRect
MapWindowPoints
SetWindowLongW

wininet

InternetCreateUrlA
InternetCombineUrlA
InternetGetCookieA
InternetCrackUrlA
InternetGetConnectedState

winmm

timeGetTime

ws2_32

gethostbyname
ntohs
inet_ntoa
accept
WSACancelAsyncRequest
inet_addr
WSAAsyncGetHostByName
closesocket
socket
listen
connect
WSASetLastError
htons
setsockopt
WSAAsyncSelect
WSAGetLastError
ioctlsocket
gethostname
getsockname
getpeername
send
recv
bind
WSAStartup
WSACleanup
shutdown

Sections

.text
Size: 444KB - Virtual size: 442KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5578e086d17eec54a554faede6989661

Headers

File Characteristics

Imports

kernel32

advapi32

comctl32

gdi32

ole32

oleaut32

shell32

shlwapi

user32

wininet

winmm

ws2_32

Sections

.text Size: 444KB - Virtual size: 442KB

.rdata Size: 80KB - Virtual size: 77KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 4KB - Virtual size: 51KB

.text
Size: 444KB - Virtual size: 442KB

.rdata
Size: 80KB - Virtual size: 77KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 4KB - Virtual size: 51KB