e7b43716a14ae2c43b4bee68bf7f9607ef25fdb267c44502723f2da050f1f556

Sharing

Copy URL Twitter E-mail

General

Target

e7b43716a14ae2c43b4bee68bf7f9607ef25fdb267c44502723f2da050f1f556
Size

287KB
MD5

1aced0c2032bdb89eef21ee679b1b495
SHA1

96ea60823735f3554bcf579d6429581bdc9e315a
SHA256

e7b43716a14ae2c43b4bee68bf7f9607ef25fdb267c44502723f2da050f1f556
SHA512

905cc588f8464cd537405a9e6653aa431f90c6ecb48d685c29cc47ef27e325eb1e95f86c3cbed6d2835b58bb19571af96cc5bf01089b9b38611666310584e1a1
SSDEEP

6144:ttwxm2tOHRMdTBUnUBK2MflHHiezy85dEJkMsOD:KAHRBU6HHiemwEJb

Score

N/A

Malware Config

Signatures

Files

e7b43716a14ae2c43b4bee68bf7f9607ef25fdb267c44502723f2da050f1f556
.exe windows x86

b3f3781dff9137e502d8d7dff04790ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
CreateFileMappingA
GetFileType
InterlockedPushEntrySList
GlobalUnlock
SetFilePointer
FlushFileBuffers
MulDiv
GetACP
HeapDestroy
GetFileSize
IsDebuggerPresent
GlobalAlloc
FindNextFileW
LoadResource
lstrlenW
FindResourceW
SwitchToThread
CreateFileW
CloseHandle
FlushInstructionCache
MapViewOfFile
LocalFree
ExpandEnvironmentStringsW
FindFirstFileW
FindResourceExW
VirtualAlloc
SetUnhandledExceptionFilter
SizeofResource
DeleteCriticalSection
WideCharToMultiByte
RaiseException
GetFileAttributesExW
TlsAlloc
GetModuleHandleW
LeaveCriticalSection
InterlockedPopEntrySList
DeleteFileW
IsValidCodePage
GetProcessHeap
FormatMessageW
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
LockResource
UnhandledExceptionFilter
HeapSize
UnmapViewOfFile
GlobalLock
GetCurrentThreadId
TlsGetValue
ReadFile
IsProcessorFeaturePresent
HeapAlloc
FindClose
WriteFile
EnterCriticalSection
CreateDirectoryW
lstrcmpiW
SetEndOfFile
TlsFree
SetLastError
FreeLibrary
lstrcmpW
TlsSetValue
HeapReAlloc
GetFullPathNameW
CreateFileA
HeapFree
VirtualFree
QueryPerformanceCounter

shell32

SHGetFolderPathW

gdi32

CreateFontIndirectW
GetDeviceCaps
BitBlt
DeleteDC
GetStockObject
LineTo
CreatePen
CreateSolidBrush
GetObjectW
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
MoveToEx
CreateDCA
CreateDIBSection
CreateFontIndirectExA
CreateMetaFileW
CreateICA
UpdateICMRegKeyA
CreatePalette
CreateColorSpaceA
TranslateCharsetInfo

crypt32

PFXImportCertStore
CryptMemFree
PFXExportCertStoreEx
CertCreateSelfSignCertificate
CertOpenStore
CryptAcquireCertificatePrivateKey
CertAddCertificateContextToStore
CertFreeCertificateContext
CryptMemAlloc
CertStrToNameW
CertEnumCertificatesInStore
CertCloseStore

ole32

CoGetClassObject
CoCreateFreeThreadedMarshaler
CoCreateGuid
OleUninitialize
StringFromGUID2
CreateStreamOnHGlobal
OleInitialize
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
OleLockRunning
CLSIDFromString
CLSIDFromProgID

wininet

InternetCanonicalizeUrlW
InternetCrackUrlW

comctl32

ImageList_Destroy
ImageList_LoadImageW

user32

SetCursorPos
MonitorFromWindow
SendDlgItemMessageW
IntersectRect
ScreenToClient
GetWindow
CreateAcceleratorTableW
MoveWindow
IsWindow
GetWindowRect
ClientToScreen
IsDlgButtonChecked
SetCursor
SendMessageW
SetWindowPos
ShowWindow
GetDlgItem
CreateWindowExW
GetWindowTextLengthW
GetActiveWindow
UnhookWindowsHookEx
DialogBoxIndirectParamW
IsChild
CallWindowProcW
SetTimer
CharNextW
EnableWindow
PtInRect
GetDlgItemTextW
RegisterWindowMessageW
ReleaseDC
GetClassInfoExW
RegisterClassExW
DestroyWindow
GetClientRect
SetFocus
GetFocus
UpdateWindow
LoadCursorW
wsprintfW
SetWindowLongW
IsWindowEnabled
RedrawWindow
SendMessageA
DrawTextExW
GetSysColor
GetWindowInfo
CheckDlgButton
InvalidateRect
GetCursorPos
GetDesktopWindow
SetDlgItemTextW
GetClassNameW
EndPaint
CallNextHookEx
MessageBoxW
EndDialog
DefWindowProcW
KillTimer
MapWindowPoints
DestroyAcceleratorTable
SetWindowTextW
SetWindowsHookExW
DialogBoxParamW
GetMonitorInfoW
GetSystemMetrics
LoadStringW
InvalidateRgn
GetParent
SetCapture
FillRect
GetDC
ReleaseCapture
GetDlgCtrlID
PostMessageW
UnregisterClassA
GetWindowLongW
GetWindowTextW
BeginPaint

advapi32

RegDeleteKeyW
CryptGenKey
CryptExportKey
RegEnumKeyW
RegOpenKeyExW
CryptAcquireContextW
CryptGetProvParam
RegSetValueExW
RegQueryValueExW
CryptEnumProvidersW
CryptGetUserKey
CryptReleaseContext
RegQueryInfoKeyW
RegDeleteValueW
RegCreateKeyExW
RegEnumKeyExW
RegCloseKey
CryptDestroyKey

secur32

GetUserNameExW

oleaut32

OleCreateFontIndirect
SysAllocString
VariantChangeType
SafeArrayGetElement
SysFreeString
VariantInit
UnRegisterTypeLi
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayDestroy
SafeArrayLock
VarUI4FromStr
VariantClear
CreateErrorInfo
RegisterTypeLi
VarBstrCat
SysAllocStringLen
DispCallFunc
GetErrorInfo
SetErrorInfo
SafeArrayGetVartype
LoadTypeLi
SysStringByteLen
SafeArrayGetDim
SysAllocStringByteLen
LoadRegTypeLi
SysStringLen
SafeArrayUnlock

mprdim

ServiceMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 254KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b3f3781dff9137e502d8d7dff04790ad

Headers

File Characteristics

Imports

kernel32

shell32

gdi32

crypt32

ole32

wininet

comctl32

user32

advapi32

secur32

oleaut32

mprdim

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 254KB - Virtual size: 1.2MB

.rsrc Size: 8KB - Virtual size: 21KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 254KB - Virtual size: 1.2MB

.rsrc
Size: 8KB - Virtual size: 21KB