6e9f22ebcbc2cc494789af1ad13a00f3442013233f1410895e48e848d585c2b2

Sharing

Copy URL Twitter E-mail

General

Target

6e9f22ebcbc2cc494789af1ad13a00f3442013233f1410895e48e848d585c2b2
Size

281KB
MD5

151b47627b83dc129c1c42c6c4173552
SHA1

6470378687048b5154dbab803fb3ae584c7f4d2e
SHA256

6e9f22ebcbc2cc494789af1ad13a00f3442013233f1410895e48e848d585c2b2
SHA512

e921141e130eed1c5a93bc59d35eb04650eb1b8e1834a77d462a9bd93fcf5f06c1ab08e2448c46b78d38b212cfc3dda2c48565b522cfa91777a2e4349ee8a8e0
SSDEEP

6144:8LjNVAQq73ts4IMvc6eFrhUBHzeDPHLRc5:8nAlTts4JChyzerHtc5

Score

N/A

Malware Config

Signatures

Files

6e9f22ebcbc2cc494789af1ad13a00f3442013233f1410895e48e848d585c2b2
.exe windows x86

23f99ed004dec4de9f827d939eb879d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsRelativeW
PathFindFileNameW
PathRemoveExtensionW
PathCanonicalizeW
PathIsURLW
PathStripToRootW
PathStripPathW
PathIsRootW
PathFileExistsW

gdi32

DeleteDC
SetViewportOrgEx
SetWindowExtEx
CreateMetaFileW
RestoreDC
SetTextAlign
SaveDC
CloseMetaFile
CreateFontIndirectW
LPtoDP
GetDeviceCaps
SetWindowOrgEx
CreateRectRgnIndirect
TextOutW
DeleteMetaFile
DeleteObject
SetMapMode

kernel32

GlobalAlloc
EnumResourceNamesW
FlushInstructionCache
FreeLibrary
lstrlenA
LeaveCriticalSection
RaiseException
RemoveDirectoryW
IsDebuggerPresent
lstrlenW
LoadResource
GetSystemTimeAsFileTime
ExpandEnvironmentStringsW
GetACP
TlsGetValue
VirtualFree
GetCurrentThreadId
GetProcessHeap
InterlockedPopEntrySList
UnhandledExceptionFilter
GlobalUnlock
MulDiv
LocalAlloc
IsProcessorFeaturePresent
FindResourceExW
WaitForSingleObject
IsValidCodePage
SetFileAttributesA
CreateFileMappingW
OutputDebugStringW
DeleteCriticalSection
GlobalLock
GetShortPathNameW
GetModuleHandleW
GetComputerNameW
CreateFileA
TlsAlloc
CreateFileW
CopyFileW
SetThreadPriority
GetSystemDefaultLCID
GetFileSize
FindResourceW
GetCurrentDirectoryW
CreateDirectoryW
HeapReAlloc
InterlockedPushEntrySList
HeapDestroy
CopyFileA
VirtualAlloc
HeapFree
FindNextFileW
ReadFile
FindClose
FindFirstFileW
MapViewOfFile
EnterCriticalSection
LockResource
WideCharToMultiByte
UnmapViewOfFile
HeapSize
SwitchToThread
SetFileAttributesW
TlsSetValue
HeapAlloc
TlsFree
CreateThread
CreateEventW
CloseHandle
lstrcmpW
SetUnhandledExceptionFilter
SizeofResource
SetLastError
GetFullPathNameW
InitializeCriticalSectionAndSpinCount
CompareFileTime
VirtualAllocEx

oleaut32

SysStringByteLen
SysStringLen
SysAllocString
VariantInit
RegisterTypeLi
VariantChangeType
SafeArrayLock
SysFreeString
GetErrorInfo
VarBstrCat
LoadTypeLi
DispCallFunc
SysAllocStringByteLen
SafeArrayCreate
SafeArrayUnaccessData
SafeArrayCopy
VariantClear
SafeArrayDestroy
LoadRegTypeLi
SafeArrayGetUBound
VarBstrCmp
SysAllocStringLen
SafeArrayGetElement
VariantCopy
SafeArrayGetVartype
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayUnlock
OleCreatePropertyFrame
UnRegisterTypeLi

user32

RegisterClassExW
MonitorFromWindow
OffsetRect
MessageBoxExW
GetParent
LoadCursorW
SetFocus
IntersectRect
GetMonitorInfoW
EnableWindow
GetMenu
PtInRect
MapWindowPoints
CharToOemBuffA
UnionRect
IsWindowEnabled
EndDialog
EndPaint
CharNextW
IsChild
SendMessageA
BeginPaint
MapDialogRect
GetClassNameW
SetWindowRgn
SetCursor
GetWindowRect
InvalidateRect
UnhookWindowsHookEx
CreateWindowExW
DefWindowProcW
SendMessageW
UnregisterClassA
CallNextHookEx
EqualRect
PostMessageW
GetWindowLongW
GetDC
DestroyWindow
ShowWindow
SetWindowPos
GetKeyState
AdjustWindowRectEx
SetWindowTextW
SetWindowContextHelpId
CallWindowProcW
GetClientRect
GetFocus
ReleaseDC
GetClassInfoExW
GetWindow
SetWindowLongW
GetWindowTextLengthW
GetWindowTextW
IsWindow
SetWindowsHookExW

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExA
RegCreateKeyExW
RegEnumKeyExW
RegSetValueExW

ole32

CoTaskMemAlloc
ProgIDFromCLSID
CLSIDFromProgID
IIDFromString
OleRegEnumVerbs
CreateDataAdviseHolder
CoCreateInstance
StringFromGUID2
OleRegGetMiscStatus
CreateStreamOnHGlobal
CreateOleAdviseHolder
CLSIDFromString
OleRegGetUserType
StringFromCLSID
CoCreateGuid
CoTaskMemFree

userenv

GetProfileType
UnloadUserProfile
FreeGPOListW
GetAllUsersProfileDirectoryW
DllGetClassObject
UnregisterGPNotification

loadperf

InstallPerfDllW

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 248KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23f99ed004dec4de9f827d939eb879d4

Headers

File Characteristics

Imports

shlwapi

gdi32

kernel32

oleaut32

user32

advapi32

ole32

userenv

loadperf

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 248KB - Virtual size: 249KB

.rsrc Size: 11KB - Virtual size: 11KB

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 248KB - Virtual size: 249KB

.rsrc
Size: 11KB - Virtual size: 11KB