be492b7bfbae28e16338b1c37cdaa0c83a49eeeb6322408318111d7858083d6e

Sharing

Copy URL Twitter E-mail

General

Target

be492b7bfbae28e16338b1c37cdaa0c83a49eeeb6322408318111d7858083d6e
Size

170KB
MD5

752dae7b6efb5974612decd2176382b0
SHA1

c7908422d278e7ae55b33b3274111a6e4ce6769d
SHA256

be492b7bfbae28e16338b1c37cdaa0c83a49eeeb6322408318111d7858083d6e
SHA512

16392761f559693d82ce78b7aad2996de73641ec858b1c4edd0986f2daedbd774b743f3948b140cb2475f9a7ad77ba63052563363ff3065549af50d8faf9ad24
SSDEEP

3072:gT9tP6QtIULgNYkZCSoMu7rCEr7B01/LllgZA1DuzBa759gFXlJGInvrZnFy0GIj:mrV7/S3u7rH1SlSqx59

Score

N/A

Malware Config

Signatures

Files

be492b7bfbae28e16338b1c37cdaa0c83a49eeeb6322408318111d7858083d6e
.exe windows x86

ffb30e5d073d41c7343775a1a511b053

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegDeleteKeyA
LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteValueA
RegOpenKeyA
RegOpenKeyExA
OpenProcessToken
RegQueryValueExA

gdi32

SelectObject
SetWindowOrgEx
StretchBlt
CopyEnhMetaFileA
LineTo
GetEnhMetaFileHeader
GetWinMetaFileBits
GetPixel
CreateDIBSection
GetTextExtentPoint32A
CreateHalftonePalette
CreateSolidBrush
GetDeviceCaps
GetRgnBox
CreatePalette
SetBkMode
GetSystemPaletteEntries
CreateCompatibleDC
RealizePalette
GetCurrentPositionEx
GetTextMetricsA
CreateRectRgn
SelectPalette
GetPaletteEntries
SetStretchBltMode
RectVisible
UnrealizeObject
GetStockObject
SetPixel
CreateDIBitmap
SetViewportOrgEx
GetEnhMetaFilePaletteEntries
GetClipBox
MaskBlt
CreatePenIndirect
GetDIBits
SaveDC
CombineRgn
RestoreDC
SetWinMetaFileBits
SetBrushOrgEx
DeleteEnhMetaFile
CreateCompatibleBitmap
DeleteDC
DeleteObject
SetEnhMetaFileBits
PlayEnhMetaFile
SetTextColor
PatBlt
GetBrushOrgEx
GetObjectA
BitBlt
SetDIBColorTable
Polyline
GetDIBColorTable
GetBitmapBits
MoveToEx
GetEnhMetaFileBits
SetROP2
CreateFontIndirectA
IntersectClipRect
CreateBitmap
ExcludeClipRect
GetDCOrgEx
CreateBrushIndirect
GetWindowOrgEx
SetBkColor
Rectangle

user32

ShowWindow
UnregisterClassA
GetDC
GetSubMenu
SetWindowPos
CreateWindowExA
InflateRect
IsChild
SetWindowPlacement
DrawTextA
SetTimer
PeekMessageA
IntersectRect
IsRectEmpty
BeginPaint
FillRect
SetScrollInfo
GetCursor
SetClassLongA
IsDialogMessageA
EndPaint
CharNextA
KillTimer
wsprintfA
RemoveMenu
DispatchMessageA
GetTopWindow
GetScrollPos
ClientToScreen
GetWindowPlacement
GetWindowRect
GetActiveWindow
GetWindow
EnableScrollBar
GetWindowTextA
IsWindowVisible
GetKeyboardLayoutList
DrawEdge
GetFocus
SetForegroundWindow
CharLowerA
CreateMenu
DrawFrameControl
SetWindowsHookExA
RemovePropA
GetClipboardData
EnableWindow
SetRect
PostMessageA
GetSysColor
DefMDIChildProcA
RegisterClipboardFormatA
GetMenu
DeleteMenu
RegisterClassA
SetMenuItemInfoA
SetPropA
GetWindowDC
ShowOwnedPopups
MapWindowPoints
GetMenuItemID
GetMenuItemCount
CallNextHookEx
GetClientRect
InsertMenuA
SetScrollPos
GetIconInfo
EqualRect
MapVirtualKeyA
SendMessageA
IsZoomed
GetKeyboardType
LoadKeyboardLayoutA
WaitMessage
SetCapture
GetMenuItemInfoA
GetDesktopWindow
LoadBitmapA
ActivateKeyboardLayout
OemToCharA
WinHelpA
CallWindowProcA
DestroyCursor
IsWindow
GetKeyboardState
TranslateMessage
TrackPopupMenu
GetLastActivePopup
DrawIconEx
CreatePopupMenu
SetWindowLongA
InvalidateRect
GetCursorPos
DestroyIcon
GetMenuStringA
DestroyWindow
DestroyMenu
FrameRect
GetForegroundWindow
WindowFromPoint
ScreenToClient
IsWindowEnabled
FindWindowA
ShowCursor
UnhookWindowsHookEx
GetKeyState
LoadCursorA
GetScrollRange
ReleaseDC
SetScrollRange
SetCursor
ScrollWindow
CharLowerBuffA
EnumWindows
GetWindowThreadProcessId
LoadStringA
GetCapture
ShowScrollBar
CheckMenuItem
GetMenuState
DefWindowProcA
ExitWindowsEx
GetDCEx
EnumThreadWindows
DrawMenuBar
GetScrollInfo
GetKeyboardLayout
ReleaseCapture
InsertMenuItemA
PostQuitMessage
DrawFocusRect
CreateIcon
RedrawWindow
DrawIcon
MessageBoxA
IsIconic
SetFocus
SetActiveWindow
RegisterWindowMessageA
GetClassInfoA
DefFrameProcA
GetParent
SetMenu
GetWindowLongA
EnableMenuItem
GetKeyNameTextA
UpdateWindow
AdjustWindowRectEx
SystemParametersInfoA
LoadIconA
GetPropA
OffsetRect
GetSystemMenu
TranslateMDISysAccel
PtInRect
GetSystemMetrics

comctl32

ImageList_EndDrag
ImageList_GetIconSize
ImageList_SetBkColor
ImageList_DragMove
ImageList_BeginDrag
ImageList_Add
ImageList_Create
ImageList_Replace
ImageList_DrawEx
ImageList_Read
ImageList_DragEnter
ImageList_SetIconSize
ImageList_SetDragCursorImage
ImageList_DragLeave
ImageList_DragShowNolock
ImageList_GetImageCount
ImageList_GetBkColor
ImageList_Draw
ImageList_Remove
ImageList_Write
ImageList_GetDragImage
ord17
ImageList_ReplaceIcon
ImageList_Destroy

oleaut32

SysStringLen
SysReAllocStringLen
VariantChangeTypeEx
VariantCopyInd
SysAllocStringLen
VariantClear
SysFreeString

ole32

IsEqualGUID

kernel32

LeaveCriticalSection
RtlUnwind
LoadLibraryExA
GlobalUnlock
GetSystemInfo
GetOEMCP
GetCPInfo
lstrlenA
LocalFree
DeleteFileA
HeapFree
SetEvent
GetThreadLocale
GetModuleFileNameA
GetDiskFreeSpaceA
GetPrivateProfileStringA
CreateFileA
LoadLibraryA
GetEnvironmentStringsA
GetCommandLineA
Sleep
GlobalFree
FreeResource
CreateThread
GlobalLock
GetLocaleInfoA
SetLastError
SizeofResource
FreeLibrary
InterlockedIncrement
CloseHandle
GetStartupInfoA
GetStdHandle
FindFirstFileA
lstrcpyA
EnumCalendarInfoA
LockResource
TlsAlloc
GetCurrentProcess
SetThreadLocale
UnhandledExceptionFilter
GetCurrentProcessId
VirtualQuery
GetCurrentThreadId
SetEndOfFile
WideCharToMultiByte
HeapAlloc
lstrcpynA
GlobalHandle
WinExec
ExitProcess
LocalAlloc
MulDiv
TlsFree
GetSystemDirectoryA
SetFilePointer
GetFileSize
GetStringTypeW
GetVersionExA
GetModuleHandleA
VirtualFree
InterlockedDecrement
SetConsoleCtrlHandler
GlobalAddAtomA
SetErrorMode
FormatMessageA
RaiseException
SetHandleCount
lstrcmpA
GlobalReAlloc
LoadResource
EnterCriticalSection
FindResourceA
ReadFile
GetFileType
InitializeCriticalSection
GetTickCount
GetVersion
TlsSetValue
GetLastError
GetWindowsDirectoryA
CompareStringA
WaitForSingleObject
FindClose
GetProcessHeap
VirtualAlloc
TlsGetValue
WriteFile
GlobalAlloc
CreateEventA
GlobalDeleteAtom
GetProcAddress
GetACP
GetLocalTime
DeleteCriticalSection
MultiByteToWideChar

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ffb30e5d073d41c7343775a1a511b053

Headers

File Characteristics

Imports

advapi32

gdi32

user32

comctl32

oleaut32

ole32

kernel32

version

Sections

.text Size: 137KB - Virtual size: 137KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 13KB - Virtual size: 14KB

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 137KB - Virtual size: 137KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 13KB - Virtual size: 14KB

.rsrc
Size: 6KB - Virtual size: 6KB