069da4e65030951bef3019e284e535ef2d81c35d29382de5b1b60ffed43f2d13

Sharing

Copy URL Twitter E-mail

General

Target

069da4e65030951bef3019e284e535ef2d81c35d29382de5b1b60ffed43f2d13
Size

260KB
MD5

badc67991e3ae5d5795949bda22224a9
SHA1

347e97f639391d2577a032c32d1fc508ab5e04fa
SHA256

069da4e65030951bef3019e284e535ef2d81c35d29382de5b1b60ffed43f2d13
SHA512

f4f51983acf79a87603e6c338bbc95de138290812cebad3a4d558d800cfc432f8698fc59ba58d5363a71a253c797909665685e5279ef5adb0190f9e14686abe7
SSDEEP

6144:IJX4Lw7jinVgIzwRQvSyESEIR9iGWRD5Y14vC8a2ZD3SgBiOjpKJ:Q4LbzRSnkREGr1442ZDPBiMQJ

Score

N/A

Malware Config

Signatures

Files

069da4e65030951bef3019e284e535ef2d81c35d29382de5b1b60ffed43f2d13
.exe windows x86

7042fef542df87e290949650ca575442

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

RpcProtseqVectorFreeW
RpcErrorSaveErrorInfo
NdrSimpleStructBufferSize
NdrByteCountPointerUnmarshall
RpcServerRegisterIf2
RpcEpRegisterW
NdrSimpleTypeUnmarshall
RpcNetworkIsProtseqValidW
NdrEncapsulatedUnionMarshall
RpcFreeAuthorizationContext
I_RpcBindingInqSecurityContext

oleaut32

DosDateTimeToVariantTime
VarI2FromUI4
ClearCustData
VarParseNumFromStr
SafeArrayGetElemsize
VarUI2FromI8
GetErrorInfo
VarI8FromCy
VarR8FromStr
VarI2FromI1

ole32

CoCreateFreeThreadedMarshaler
CoRegisterMessageFilter
StgOpenPropStg
MkParseDisplayName
OleNoteObjectVisible
GetRunningObjectTable
CoCreateInstance
CoCancelCall

shell32

Shell_NotifyIconW
ord64
ExtractAssociatedIconExW
SHEmptyRecycleBinW
ord154
ord27
ord59
SHGetFolderPathAndSubDirW
ord162

opengl32

glPolygonOffset
glPopMatrix
glColor3i
glGetIntegerv
glTexCoord3dv
glTexCoord2d
glRasterPos3fv
glRasterPos3f
glInterleavedArrays
glRotated
glColor4fv

msvcrt

sprintf
isspace
swscanf
_time64
iswspace
iswxdigit
strchr
sscanf
isxdigit
towupper
islower
_mbctoupper
toupper

shlwapi

PathRemoveArgsA
ord158
PathIsNetworkPathW
PathIsUNCW
PathIsFileSpecA
PathAddExtensionA
ord8
PathParseIconLocationA
ord29
ChrCmpIA
PathQuoteSpacesW
PathAddExtensionW
PathAppendA
PathIsSameRootW
PathCanonicalizeW

comctl32

ImageList_Write
CreatePropertySheetPageW
ImageList_Read
CreateStatusWindowW
DestroyPropertySheetPage
CreatePropertySheetPageA
ord6
ImageList_AddMasked
ImageList_SetIconSize
ImageList_ReplaceIcon
ImageList_Remove
ImageList_Draw

kernel32

GetCurrentDirectoryW
GetTimeFormatW
GetPrivateProfileStringW
GetSystemWindowsDirectoryW
OpenSemaphoreW
SetFileApisToOEM
VerifyVersionInfoW
IsBadStringPtrA
GetEnvironmentVariableA
FreeLibrary
GetDriveTypeW
LCMapStringW
GetFileAttributesExW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LocalAlloc
RaiseException
GetProcAddress
InterlockedExchange
GetLastError
LoadLibraryA
TerminateProcess

user32

SetWindowsHookExW
DestroyWindow
GetSysColor
GetWindowTextLengthW
OpenIcon
DrawIconEx
IsClipboardFormatAvailable
ShowScrollBar
SwitchDesktop
IsDlgButtonChecked
GetDesktopWindow
CheckMenuRadioItem
OpenWindowStationA
IsWindowEnabled
GetMenuItemCount

gdi32

EndPage
EnumFontFamiliesExW
GetTextExtentPoint32W
SetViewportOrgEx
SetPaletteEntries
CreateDIBitmap
TextOutW
GetStockObject
AddFontResourceW
CreateDCW
StretchBlt
SetTextColor
GetTextColor

comdlg32

ChooseColorW
GetFileTitleA
FindTextW
PrintDlgExW
ChooseFontA
GetSaveFileNameA
ChooseColorA
GetFileTitleW
PrintDlgA
ChooseFontW
GetOpenFileNameW

advapi32

CryptDuplicateKey
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
CredWriteDomainCredentialsA
ControlTraceW
SetTokenInformation
SaferGetLevelInformation
RegDeleteKeyW
LookupAccountSidW

Exports

Exports

?ManeScowNormGlambearAbysWedschayJoysBansluv@@YGKACU_GUID@@U1@UtagLOGFONTW@@UtagPOINT@@PCUtagBITMAP@@PCJ@Z
ArksNaosStatSpaswhidgranWeltDunkis
BollPhutSoilTaliFlopSlagMissColdMuonNabeCarlLustdopeAndsabbeis
Deedaves
GinkzincOrleWickSuedtegg
HalmFeckfuckHamsSnitBogy
MaulSineGagsbamssinhCapsJubeTeedMoueSkimLagssax
PeretoftSyphlanehidpa

Sections

.text
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7042fef542df87e290949650ca575442

Headers

DLL Characteristics

File Characteristics

Imports

rpcrt4

oleaut32

ole32

shell32

opengl32

msvcrt

shlwapi

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

Exports

Exports

Sections

.text Size: - Virtual size: 4KB

.rdata Size: 246KB - Virtual size: 245KB

.CRT Size: 512B - Virtual size: 8B

.reloc Size: 13KB - Virtual size: 12KB

.text
Size: - Virtual size: 4KB

.rdata
Size: 246KB - Virtual size: 245KB

.CRT
Size: 512B - Virtual size: 8B

.reloc
Size: 13KB - Virtual size: 12KB