3704a67b4c27604e03280adce7283702044fcf6b0675f63f7bbaa8f7690dac31

Sharing

Copy URL Twitter E-mail

General

Target

3704a67b4c27604e03280adce7283702044fcf6b0675f63f7bbaa8f7690dac31
Size

132KB
MD5

a8232ce4f1b87d04c8abb9410abedf97
SHA1

db6707902a97c830e744503306959b55009fc9e2
SHA256

3704a67b4c27604e03280adce7283702044fcf6b0675f63f7bbaa8f7690dac31
SHA512

cfdbfee9dc1cfa02aa88be6c8b3ce7570b8d9af237d606e1398283b23f8e9dd07e87ff39ade7cc424c29bd0ffa8542b2ddd0e0215f23b897b24a90c799912efd
SSDEEP

1536:ByCj2KQKtZzlRQ96YOeFqmDlAwCM2BVQRr0nhS6L7kxxsLyAXpGP9EEiMxZCsl+/:jTzl/eD6E64UyAXpG1EEiMxf4VXx4E

Score

N/A

Malware Config

Signatures

Files

3704a67b4c27604e03280adce7283702044fcf6b0675f63f7bbaa8f7690dac31
.exe windows x86

d056bf6b21e4e82d6cc390d9fe09c609

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathW
TlsSetValue
LocalAlloc
GetDateFormatA
GetModuleHandleA
TlsFree
lstrcmpiW
EnumSystemLocalesA
GetCPInfo
HeapAlloc
LocalFree
GetOEMCP
GetUserDefaultLCID
GetModuleFileNameA
InterlockedDecrement
FreeEnvironmentStringsW
GlobalLock
CreateThread
VirtualAlloc
ResetEvent
WriteConsoleW
GetStringTypeA
EnterCriticalSection
WaitForMultipleObjects
GetCurrentProcess
GetLocaleInfoA
MulDiv
GetACP
HeapSize
InitializeCriticalSection
CompareStringA
GlobalAlloc
CloseHandle
lstrlenW
SystemTimeToTzSpecificLocalTime
FindFirstChangeNotificationW
GetFileSize
GetModuleHandleW
WriteConsoleA
GetDateFormatW
GetStringTypeW
InterlockedIncrement
GetProcessHeap
GetVersion
IsDebuggerPresent
FindNextChangeNotification
InterlockedCompareExchange
GetFileType
GetModuleFileNameW
TlsAlloc
GetTimeFormatA
IsValidLocale
DeleteCriticalSection
GetCurrentThread
InterlockedExchange
WinExec
DebugBreak
lstrcmpW
TlsGetValue
GetStartupInfoW
CopyFileW
GetCurrentProcessId
IsProcessorFeaturePresent
ExpandEnvironmentStringsW
lstrlenA
ExpandEnvironmentStringsA
GetPrivateProfileStringW
LoadLibraryExW
LCMapStringA
GetConsoleOutputCP
LoadLibraryW
OutputDebugStringW
GetTempFileNameW
WaitForSingleObject
LCMapStringW
HeapFree
SetConsoleCtrlHandler
CompareStringW
LockResource
GlobalUnlock
GetConsoleMode
GetConsoleCP
SetHandleCount
lstrcpynW
SizeofResource
OpenEventW
lstrcpyW
GetStartupInfoA
SetEvent
WideCharToMultiByte
FlushInstructionCache
ReadFile
WritePrivateProfileSectionW
GetFileAttributesW
LeaveCriticalSection
GetCommandLineW
WritePrivateProfileStringW
GetLastError
VirtualQuery
LoadLibraryA
GetComputerNameW
UnhandledExceptionFilter
lstrcpynA
HeapCreate
RtlUnwind
FreeLibrary
LoadResource
VerLanguageNameW
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
GetStdHandle
lstrcatW
SetUnhandledExceptionFilter
CreateFileA
GetCurrentThreadId
CreateFileW
GetVersionExW
GetProcAddress
QueryPerformanceCounter
Sleep
VirtualFree
GetSystemDirectoryW
FileTimeToSystemTime
FindResourceW
SetLastError
GetPrivateProfileIntW
SetStdHandle
FormatMessageW
GetEnvironmentStringsW
IsValidCodePage
TerminateProcess
RaiseException
HeapDestroy
GetLocaleInfoW
GetFileAttributesExW
GetWindowsDirectoryW
HeapReAlloc
GlobalSize
FatalAppExitA
ExitProcess
GetSystemDefaultLangID

user32

AdjustWindowRectEx
CharLowerW
GetParent
EndDeferWindowPos
IsWindow
SetWindowLongW
PostMessageW
GetScrollInfo
LoadIconW
DefFrameProcW
FindWindowW
LoadStringW
DragDetect
MoveWindow
GetClassInfoW
CreateWindowExW
MonitorFromWindow
GetClassLongW
MessageBeep
SetTimer
SetRectEmpty
GetWindowRect
GetDoubleClickTime
GetCapture
BeginDeferWindowPos
GetWindow
CallNextHookEx
InflateRect
ShowCaret
GetDlgItem
GetDesktopWindow
DispatchMessageW
EmptyClipboard
EndPaint
GetActiveWindow
ScreenToClient
CopyRect
SetScrollInfo
DrawFrameControl
SendMessageW
GetDlgItemTextW
GetMenuItemInfoW
OpenClipboard
SetFocus
FillRect
LockWindowUpdate
BeginPaint
TrackPopupMenuEx
ModifyMenuW
ScrollWindowEx
RegisterWindowMessageW
LoadMenuW
RemoveMenu
GetMessagePos
GetMessageW
SetWindowLongA
DestroyCaret
InsertMenuW
PostQuitMessage
TranslateMessage
RegisterClassW
TranslateMDISysAccel
wvsprintfW
RegisterClipboardFormatW
IsClipboardFormatAvailable
DrawMenuBar
GetWindowTextW
GetSysColorBrush
LoadAcceleratorsW
GetClassInfoExW
PtInRect
SetMenuItemInfoW
DrawTextW
GetWindowLongW
SetParent
GetCursorPos
SetWindowPos
MessageBoxW
UnhookWindowsHookEx
GetWindowTextLengthW
EnableMenuItem
DefWindowProcW
LoadImageW
UpdateWindow
EndDialog
LoadCursorW
SetCapture
SetDlgItemInt
MapWindowPoints
DrawEdge
GetMenuItemID
CreatePopupMenu
RedrawWindow
GetMenuItemCount
GetClientRect
DrawFocusRect
GetDlgCtrlID
RegisterClassExW
OffsetRect
DestroyWindow
GetDlgItemInt
SetMenuDefaultItem
EqualRect
SetScrollPos
GetWindowDC
LoadStringA
GetWindowPlacement
CreateCaret
GetClassNameW
InvalidateRect
SetMenu
LoadBitmapW
TrackPopupMenu
SetCaretPos
FrameRect
IsWindowEnabled
DeferWindowPos
ReleaseDC
ShowWindow
GetSystemMetrics
TranslateAcceleratorW
GetSubMenu
UnregisterClassW
DefMDIChildProcW
DrawIconEx
ClientToScreen
GetDC
SetCursor
BringWindowToTop
DialogBoxParamW
IsChild
GetMenuDefaultItem
IntersectRect
IsMenu
SystemParametersInfoW
SetWindowPlacement
KillTimer
EnableWindow
SetWindowTextW
ShowScrollBar
CloseClipboard
PeekMessageW
GetKeyState
CharNextW
SetDlgItemTextW
WindowFromPoint
AppendMenuW
ReleaseCapture
GetFocus
UnregisterClassA
SetWindowsHookExW
GetMenuStringW
GetMenu
SetClipboardData
GetSystemMenu
GetMonitorInfoW
SetForegroundWindow
IsWindowVisible
DestroyMenu
CallWindowProcW
GetWindowThreadProcessId

gdi32

MoveToEx
GetDeviceCaps
GetClipRgn
SelectObject
CreatePalette
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreateCompatibleDC
GetTextMetricsW
GetObjectW
DeleteDC
PatBlt
CreateFontW
Rectangle
IntersectClipRect
LineTo
Polygon
GetStockObject
LPtoDP
SelectClipRgn
GetTextExtentPointW
SetPolyFillMode
BitBlt
CreateFontIndirectW
SetViewportOrgEx
CreateCompatibleBitmap
SaveDC
SetBrushOrgEx
CreatePen
Polyline
GetClipBox
CreateBitmap
SetBkColor
SelectPalette
DeleteObject
ExtTextOutW
DPtoLP
GetViewportOrgEx
GetTextExtentPoint32W
SetBkMode
SetTextColor
RestoreDC
SetWindowOrgEx
TextOutW
RealizePalette
CreateDIBSection

comdlg32

GetOpenFileNameW
ChooseColorW
ChooseFontW
GetSaveFileNameW

advapi32

GetSecurityDescriptorGroup
GetSidIdentifierAuthority
OpenProcessToken
RegQueryValueExA
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegGetKeySecurity
GetSecurityDescriptorDacl
RegUnLoadKeyW
RegSetKeySecurity
RegReplaceKeyW
RegOpenKeyExA
InitializeAcl
AdjustTokenPrivileges
GetSecurityDescriptorControl
RegEnumKeyExW
RegConnectRegistryW
RegCloseKey
GetLengthSid
RegSaveKeyW
GetSidSubAuthorityCount
CopySid
RegDeleteValueW
IsTextUnicode
RegRestoreKeyW
RegCreateKeyExW
RegEnumValueA
SetSecurityDescriptorDacl
RegQueryValueExW
GetUserNameW
GetSecurityDescriptorSacl
LookupPrivilegeValueW
RegDeleteKeyW
GetNamedSecurityInfoW
RegLoadKeyW
MapGenericMask
RegOpenKeyExW
GetTokenInformation
SetNamedSecurityInfoW
InitializeSecurityDescriptor
GetSidSubAuthority
GetSecurityDescriptorOwner

oleaut32

VarDecCmp
VarUI4FromStr
VarR8FromStr
VarI4FromStr
SysFreeString
VarDecFromStr
SystemTimeToVariantTime

msvcrt

wcslen
_setmbcp
atol
__dllonexit
_XcptFilter
rand
sprintf
_except_handler3
__p__commode
fclose
_exit
_initterm
__getmainargs
_controlfp
_stricmp
fwrite
strncmp
_purecall
exit
localtime
_ftol
__CxxFrameHandler
strchr
memmove
_strnicmp
_adjust_fdiv
time
_acmdln
_onexit
__set_app_type
atoi
__p__fmode
_i64toa
__setusermatherr
fopen
_CIcos

Sections

.text
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d056bf6b21e4e82d6cc390d9fe09c609

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

oleaut32

msvcrt

Sections

.text Size: 78KB - Virtual size: 77KB

.rdata Size: 25KB - Virtual size: 25KB

.data Size: 23KB - Virtual size: 121KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 78KB - Virtual size: 77KB

.rdata
Size: 25KB - Virtual size: 25KB

.data
Size: 23KB - Virtual size: 121KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB