4d1a296ac731d1ce9d5f241f064d56f90472a86c4d54b69a70ad0b5074333e8c

Sharing

Copy URL Twitter E-mail

General

Target

4d1a296ac731d1ce9d5f241f064d56f90472a86c4d54b69a70ad0b5074333e8c
Size

842KB
MD5

1069569e08d2f007dbc47e7d66dc05b0
SHA1

81eca841d1f10f46fab462f23feb7c61a2fba384
SHA256

4d1a296ac731d1ce9d5f241f064d56f90472a86c4d54b69a70ad0b5074333e8c
SHA512

80338f8cd9334a09b8c48b742cefcd67b2b94d622939130cdc9c4c885450e19949e97d775834d777e5f25914dc021410c347f68f4d77cae531d4ac884399b817
SSDEEP

12288:rfwNyDTFqc22AbQ1H3wSIj7FGz+PR+I7xw+jsJenrAzJS2LUfKMGqkfCAFNoYJ:rz/2zTSIfFGip1FOS0zakfzN

Score

N/A

Malware Config

Signatures

Files

4d1a296ac731d1ce9d5f241f064d56f90472a86c4d54b69a70ad0b5074333e8c
.exe windows x86

2f1e9cdf46b0bd972ae8b78e2a5bd9f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualUnlock
FlushFileBuffers
GetFullPathNameW
lstrlenW
VirtualFree
GlobalGetAtomNameW
DeleteCriticalSection
GetSystemDirectoryW
UnlockFile
GlobalAlloc
LockFile
ExitThread
ConvertDefaultLocale
FindFirstFileW
SetUnhandledExceptionFilter
GetWindowsDirectoryW
GetLocaleInfoW
SetHandleCount
SetThreadPriority
GetCurrentProcessId
FindClose
VirtualProtect
FormatMessageW
LocalAlloc
EnterCriticalSection
GetFileSize
GetStdHandle
GetConsoleCP
FileTimeToLocalFileTime
HeapReAlloc
GetFileTime
WideCharToMultiByte
GetUserDefaultUILanguage
GetProfileIntW
MulDiv
lstrcpyW
TlsFree
HeapQueryInformation
HeapAlloc
GetCurrentProcess
DeleteFileW
LoadResource
GlobalUnlock
LocalReAlloc
SetLastError
InterlockedExchange
InitializeCriticalSectionAndSpinCount
CreateEventW
GetNumberFormatW
GetTimeZoneInformation
GetFileAttributesExW
GetEnvironmentStringsW
InterlockedIncrement
GetFileSizeEx
LoadLibraryExW
GetStartupInfoW
GetCurrentThreadId
GetFileInformationByHandle
IsProcessorFeaturePresent
lstrcmpW
Sleep
GlobalAddAtomW
SuspendThread
IsDebuggerPresent
lstrlenA
IsValidLocale
CompareStringA
GetFileType
DuplicateHandle
GetPrivateProfileIntW
HeapDestroy
UnhandledExceptionFilter
GlobalFlags
FindResourceW
GetStartupInfoA
GlobalFree
GetTickCount
RaiseException
GetFileAttributesW
GlobalDeleteAtom
WriteFile
IsValidCodePage
GetUserDefaultLCID
GetOEMCP
TlsAlloc
InitializeCriticalSection
TlsGetValue
SetFilePointer
LockResource
TlsSetValue
WritePrivateProfileStringW
GetCurrentDirectoryW
FileTimeToSystemTime
GetVolumeInformationW
SetEnvironmentVariableA
QueryPerformanceCounter
VirtualQuery
GetTempFileNameW
SizeofResource
WaitForSingleObject
CompareStringW
PeekNamedPipe
GetProcessTimes
MoveFileExW
GetSystemInfo
GlobalSize
FlushInstructionCache
ExitProcess
GetCommandLineW
CreateMutexW
GetModuleFileNameW
WriteConsoleW
RtlUnwind
DeleteAtom
FindNextFileW
CreateThread
SearchPathW
HeapSize
LocalFree
GetProcAddress
GetACP
GetTempPathW
GetVersionExW
LoadLibraryW
GlobalHandle
SetErrorMode
GetThreadTimes
GetProcessWorkingSetSize
LeaveCriticalSection
VirtualLock
GetLongPathNameW
GlobalLock
GetProcessHeap
GetPrivateProfileStringW
GetSystemTimeAsFileTime
FreeResource
InterlockedCompareExchange
GlobalMemoryStatus
GetSystemDefaultUILanguage
InterlockedDecrement
lstrcmpiW
SetEndOfFile
GlobalFindAtomW
HeapFree
GlobalReAlloc
GetModuleHandleW
LoadLibraryA
GetLastError
HeapCreate
lstrcmpA
CloseHandle
FindResourceExW
GetLocaleInfoA
FreeEnvironmentStringsW
ResumeThread
ReleaseMutex
SetStdHandle
GetCurrentThread
GetDriveTypeW
GetVersion
GetThreadLocale
CopyFileW
CreateFileW
ReadFile
GetConsoleMode
EnumSystemLocalesA
MultiByteToWideChar
FreeLibrary
HeapSetInformation
FindFirstFileExW

user32

SetMenu
PtInRect
GetClassLongW
GetPropW
CharNextW
MoveWindow
GetMessageTime
GetFocus
DrawStateW
DialogBoxIndirectParamW
CharUpperBuffW
RegisterClassW
IsWindow
DeferWindowPos
AppendMenuW
SetMenuDefaultItem
IsRectEmpty
RealChildWindowFromPoint
ValidateRect
DestroyMenu
PostThreadMessageW
GetWindowRgn
LoadIconW
UnpackDDElParam
SetWindowPlacement
MapWindowPoints
CopyIcon
TranslateAcceleratorW
GetNextDlgTabItem
KillTimer
CreatePopupMenu
GetClipboardViewer
SetClipboardData
GetWindowTextLengthW
DeleteMenu
IsWindowVisible
GetMenuCheckMarkDimensions
InsertMenuItemW
CreateIconFromResourceEx
EnumChildWindows
SystemParametersInfoW
DrawIconEx
GetDlgItemTextW
DrawFocusRect
InvalidateRgn
SetParent
CallNextHookEx
EnumDisplayMonitors
IsClipboardFormatAvailable
CreateWindowExW
GetMenu
ScreenToClient
FrameRect
EnumWindows
GetWindowThreadProcessId
WinHelpW
GetScrollInfo
GetLastActivePopup
GetClientRect
SetRectEmpty
InflateRect
GetMenuItemCount
CreateMenu
SetWindowPos
IsDialogMessageW
SetScrollRange
IsIconic
GetScrollPos
MessageBoxW
DrawTextW
SetWindowContextHelpId
CallWindowProcW
DrawEdge
DestroyWindow
UnregisterClassA
IntersectRect
EndPaint
CharUpperW
CheckMenuItem
GetSysColor
DrawFrameControl
LoadAcceleratorsW
IsWindowEnabled
GetDlgItem
SetWindowRgn
SetTimer
SetRect
GetMessageW
DestroyCursor
ShowScrollBar
GetOpenClipboardWindow
ClientToScreen
DefFrameProcW
EmptyClipboard
DrawTextExW
PeekMessageW
TranslateMessage
UnregisterClassW
MonitorFromPoint
SendDlgItemMessageA
CheckDlgButton
SetLayeredWindowAttributes
ModifyMenuW
TranslateMDISysAccel
ScrollWindow
GetScrollRange
SubtractRect
AdjustWindowRectEx
GetMessagePos
GetKeyState
SetScrollPos
DefWindowProcW
GetTopWindow
GetWindowTextW
ShowOwnedPopups
GetNextDlgGroupItem
DrawMenuBar
WindowFromPoint
IsChild
GetSystemMenu
MessageBeep
EnableMenuItem
SendMessageW
HideCaret
CloseClipboard
GetMenuState
ShowWindow
DefMDIChildProcW
PostQuitMessage
GetActiveWindow
GetMenuStringW
LoadImageW
GetForegroundWindow
EndDeferWindowPos
EndDialog
GetCapture
OpenClipboard
DrawIcon
GetQueueStatus
SetWindowsHookExW
UpdateLayeredWindow
GetWindow
RemovePropW
ReuseDDElParam
ReleaseCapture
GetCursorPos
TabbedTextOutW
RedrawWindow
InsertMenuW
EnableScrollBar
GetClassInfoExW
ClipCursor
GetIconInfo
GetDoubleClickTime
CreateDialogIndirectParamW
GrayStringW
GetSysColorBrush
GetWindowRect
SetPropW
EnableWindow
GetUpdateRect
IsMenu
RegisterClipboardFormatW
SendDlgItemMessageW
IsCharLowerW
LoadMenuW
InvalidateRect
UnionRect
GetDlgCtrlID
LoadBitmapW
OffsetRect
IsZoomed
DialogBoxParamW
BeginPaint
SetScrollInfo
FillRect
SetCapture
EqualRect
CreateIcon
SetFocus
SetWindowTextW
SetActiveWindow
GetWindowLongW
GetClassNameW
CopyRect
RegisterWindowMessageW
RemoveMenu
SetForegroundWindow
WaitMessage
GetSystemMetrics
GetMonitorInfoW
GetDialogBaseUnits
GetDesktopWindow
TrackPopupMenu
DispatchMessageW
GetClassInfoW
GetParent
CopyImage
GetKeyNameTextW
SetCursor
GetMenuItemID
MapDialogRect
GetWindowPlacement
SetWindowLongW
BeginDeferWindowPos
MonitorFromWindow
PostMessageW
GetWindowDC
GetSubMenu
LoadCursorW
SetMenuItemBitmaps
UnhookWindowsHookEx
MapVirtualKeyW
GetProcessWindowStation
MapVirtualKeyExW
DestroyIcon
ReleaseDC
GetCaretPos
UpdateWindow
GetAsyncKeyState
SetDlgItemTextW
InvertRect
GetDC
GetMenuItemInfoW

gdi32

GetTextExtentPointW
PtVisible
GetWindowExtEx
CreateFontIndirectW
CombineRgn
GetStockObject
StretchBlt
GetBoundsRect
SetBkColor
SetPixel
SetPixelV
EnumFontFamiliesW
GetLayout
SetViewportOrgEx
CreatePatternBrush
LPtoDP
GetBitmapBits
GetClipBox
CreateSolidBrush
SetStretchBltMode
SetWindowOrgEx
GetPaletteEntries
CreateRectRgnIndirect
GetObjectType
GetNearestPaletteIndex
ExtFloodFill
Polyline
IntersectClipRect
GetTextExtentPoint32W
ExtSelectClipRgn
SetROP2
SetMapMode
SelectObject
CreateBitmap
OffsetViewportOrgEx
RestoreDC
CreateRoundRectRgn
GetViewportExtEx
CreateDCW
PtInRegion
SetDIBits
SetTextColor
SelectClipRgn
CreateHatchBrush
BitBlt
GetTextMetricsW
GetCurrentObject
CreateEllipticRgn
GetTextCharsetInfo
SetPaletteEntries
DeleteDC
DPtoLP
TextOutW
GetObjectW
ScaleViewportExtEx
GetTextFaceW
CreateRectRgn
ExcludeClipRect
CreatePolygonRgn
GetBkColor
Rectangle
SetDIBitsToDevice
OffsetWindowOrgEx
GetPixel
MoveToEx
CreatePen
SetLayout
SetBitmapBits
Polygon
GetDeviceCaps
LineTo
RoundRect
PatBlt
CreateDIBitmap
SetDIBColorTable
GetTextColor
GetBkMode
SetPolyFillMode
Escape
FillRgn
CreateDIBSection
SetRectRgn
CreateCompatibleBitmap
ScaleWindowExtEx
SetBkMode
SetTextAlign
SetViewportExtEx
CreateCompatibleDC
OffsetRgn
GetMapMode
DeleteObject
RectVisible
Ellipse
GetWindowOrgEx
CreatePalette
RealizePalette
GetSystemPaletteEntries
GetRgnBox
ExtTextOutW
GetViewportOrgEx
SetWindowExtEx
FrameRgn
CopyMetaFileW
SelectPalette
CreateFontW
SaveDC
EnumFontFamiliesExW

comdlg32

GetSaveFileNameW
GetFileTitleW
GetOpenFileNameW

advapi32

CheckTokenMembership
RegCreateKeyExW
RegEnumKeyW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
AllocateAndInitializeSid
RegDeleteKeyW
CryptGenRandom
RegOpenKeyExA
GetTokenInformation
RegQueryValueExA
RegOpenKeyExW
FreeSid
RegQueryInfoKeyW
OpenProcessToken
RegEnumValueW
RegEnumKeyExW
RegQueryValueW

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteExW
SHGetDesktopFolder
DragQueryFileW
ShellExecuteW
ExtractIconExW
DuplicateIcon
SHGetSpecialFolderLocation
SHGetFileInfoW
SHAppBarMessage
Shell_NotifyIconW
DragFinish

ole32

CoTaskMemRealloc
OleDuplicateData
OleFlushClipboard
OleGetClipboard
CLSIDFromString
CreateStreamOnHGlobal
CoLockObjectExternal
CoRevokeClassObject
DoDragDrop
CoRegisterMessageFilter
OleIsCurrentClipboard
CoTaskMemAlloc
CoCreateInstance
RevokeDragDrop
OleUninitialize
CreateILockBytesOnHGlobal
CLSIDFromProgID
CoRegisterClassObject
CoGetClassObject
CoCreateGuid
CoTaskMemFree
CoInitializeEx
CoInitialize
OleInitialize
OleTranslateAccelerator
ReleaseStgMedium
RegisterDragDrop
IsAccelerator
StringFromGUID2
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoUninitialize
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
CoFreeUnusedLibraries

oleaut32

VarBstrCat
VariantCopy
SysAllocStringLen
VarBstrFromDate
VariantClear
LoadTypeLi
VarBstrCmp
UnRegisterTypeLi
VariantTimeToSystemTime
OleCreateFontIndirect
SysStringLen
SysStringByteLen
RegisterTypeLi
VariantChangeType
VariantInit
SystemTimeToVariantTime
VarUI4FromStr
SysAllocString
SafeArrayDestroy
SysFreeString
SysAllocStringByteLen

comctl32

ord17
InitCommonControlsEx
ImageList_GetIconSize
ImageList_DragMove
ImageList_DragShowNolock
_TrackMouseEvent

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW

winmm

PlaySoundW

rpcrt4

NdrProxyErrorHandler

msimg32

TransparentBlt
AlphaBlend

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

gdiplus

GdipCreateBitmapFromHBITMAP
GdiplusShutdown
GdipGetImageWidth
GdipCreateFromHDC
GdipGetImageHeight
GdipDeleteGraphics
GdipGetImagePaletteSize
GdipSetInterpolationMode
GdipDisposeImage
GdipCreateBitmapFromScan0
GdipGetImagePalette
GdipBitmapLockBits
GdipDrawImageRectI
GdipFree
GdipGetImageGraphicsContext
GdiplusStartup
GdipDrawImageI
GdipBitmapUnlockBits
GdipCloneImage
GdipAlloc
GdipGetImagePixelFormat
GdipCreateBitmapFromStream

uxtheme

CloseThemeData
OpenThemeData

Sections

.text
Size: 545KB - Virtual size: 545KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 240KB - Virtual size: 5.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2f1e9cdf46b0bd972ae8b78e2a5bd9f9

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

rpcrt4

msimg32

imm32

gdiplus

uxtheme

Sections

.text Size: 545KB - Virtual size: 545KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 240KB - Virtual size: 5.5MB

.tls Size: - Virtual size: 101B

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 15KB - Virtual size: 15KB

.text
Size: 545KB - Virtual size: 545KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 240KB - Virtual size: 5.5MB

.tls
Size: - Virtual size: 101B

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 15KB - Virtual size: 15KB