86ecce68e72fb86d2c8a35eb6e67c8eae520dda16737bb3917b567d37887c0ef

Sharing

Copy URL Twitter E-mail

General

Target

86ecce68e72fb86d2c8a35eb6e67c8eae520dda16737bb3917b567d37887c0ef
Size

1.6MB
MD5

64024b40c0f4f56bc74a7ce42a5f00c1
SHA1

c8b6e1dc7a2a72f0bbe5e2dafb60412dc3069098
SHA256

86ecce68e72fb86d2c8a35eb6e67c8eae520dda16737bb3917b567d37887c0ef
SHA512

e9c846397c0533f179ac0e7fc12b5a988d35819d3b996b4475da9131c9921018f71d0120ea6e80b85adcd133a6ca831fc3003a6e8871e390938a41153e9accdb
SSDEEP

49152:AzL5PSdj7gIwee5+nsEe0FhNCpZwgPzEr8oGPJ4Ka60hKp:AzdSd/gIw95+nsEeuhNCPwgPIgZP7

Score

N/A

Malware Config

Signatures

Files

86ecce68e72fb86d2c8a35eb6e67c8eae520dda16737bb3917b567d37887c0ef
.exe windows x86

1df379da0649b78685267eeb148e7449

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
GetACP
MultiByteToWideChar
FileTimeToDosDateTime
GetSystemTime
SystemTimeToFileTime
DosDateTimeToFileTime
FileTimeToLocalFileTime
Sleep
ResumeThread
SetEndOfFile
SetFileTime
WriteFile
ReadFile
GetFileSize
SetFilePointer
CreateMutexW
ReleaseMutex
GetWindowsDirectoryW
GetTempFileNameW
MoveFileExW
SetFileAttributesW
GetLongPathNameW
SearchPathW
GetTempPathW
GetFullPathNameW
GetComputerNameW
GetLocalTime
GetVersionExW
LockResource
FindResourceW
LoadResource
DeviceIoControl
FormatMessageW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
OpenEventW
GetDiskFreeSpaceExW
UpdateResourceW
EndUpdateResourceW
BeginUpdateResourceW
EnumResourceTypesW
FindResourceExW
LoadLibraryExW
EnumResourceLanguagesW
EnumResourceNamesW
ReleaseSemaphore
CreateSemaphoreW
ResetEvent
TerminateThread
WaitForSingleObject
GetDiskFreeSpaceW
GetStdHandle
GlobalMemoryStatus
GetSystemInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
GetThreadLocale
GetLocaleInfoA
InterlockedExchange
GetVersionExA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetVolumeInformationW
SetErrorMode
GetDriveTypeW
GetFileTime
CreateFileW
ReadProcessMemory
WriteProcessMemory
VirtualAllocEx
OpenProcess
GlobalSize
FileTimeToSystemTime
VirtualFreeEx
OutputDebugStringA
GetLogicalDriveStringsW
LoadLibraryA
GetTickCount
DeleteCriticalSection
InitializeCriticalSection
LocalFree
LocalAlloc
MoveFileW
RemoveDirectoryW
FindNextFileW
CreateDirectoryW
GlobalUnlock
GlobalAlloc
GlobalLock
GlobalFree
RaiseException
SetLastError
GetCurrentThreadId
lstrlenW
FlushInstructionCache
lstrcmpiW
GetCurrentProcess
CompareStringW
FreeLibrary
GetProcAddress
LoadLibraryW
CreateProcessW
GetLastError
SetCurrentDirectoryW
DeleteFileW
WaitForMultipleObjects
FindCloseChangeNotification
FindFirstChangeNotificationW
SetEvent
LeaveCriticalSection
EnterCriticalSection
FindClose
FindFirstFileW
CloseHandle
CreateEventW
GetCurrentDirectoryW
GetModuleFileNameW
CopyFileW
GetModuleHandleW
GetFileAttributesW
SystemTimeToTzSpecificLocalTime
CreateFileMappingW

user32

LoadCursorW
SetCursor
GetDlgItem
SetWindowTextW
SendDlgItemMessageW
wsprintfW
UnregisterClassA
GetMessageW
IsDialogMessageW
GetClassNameW
TranslateMessage
DispatchMessageW
CheckMenuItem
GetMenuState
ExitWindowsEx
MessageBoxW
GetCursorInfo
ShowCursor
GetWindowPlacement
SetWindowPlacement
DeleteMenu
GetIconInfo
CopyIcon
CreateIconIndirect
ScrollWindowEx
SetScrollInfo
IsMenu
GetScrollInfo
SetScrollPos
ClientToScreen
InsertMenuItemW
TrackPopupMenuEx
GetMenuItemInfoW
GetMenuItemCount
DrawStateW
GetSubMenu
InflateRect
DrawIconEx
DrawFrameControl
RegisterClassExW
GetClassInfoExW
SetDlgItemInt
MessageBeep
GetDlgItemInt
GetMonitorInfoW
MonitorFromPoint
GetCursor
EnableMenuItem
GetTopWindow
SetDlgItemTextW
IsChild
GetSystemMetrics
SetParent
GetWindowThreadProcessId
FindWindowExW
WindowFromPoint
KillTimer
SetTimer
EqualRect
LoadBitmapW
CreateDialogParamW
GetWindowDC
PeekMessageW
PostMessageW
GetClassLongW
MoveWindow
TrackPopupMenu
RegisterClassW
RegisterClipboardFormatW
SetClipboardData
EmptyClipboard
DestroyWindow
ScreenToClient
GetCursorPos
SetRectEmpty
EndPaint
BeginPaint
DrawFocusRect
FillRect
GetFocus
PtInRect
ReleaseCapture
GetCapture
CallWindowProcW
GetDlgCtrlID
SetCapture
DefWindowProcW
GetWindow
MapWindowPoints
CreateWindowExW
OffsetRect
CharNextW
GetClientRect
DrawTextW
GetWindowTextLengthW
GetWindowTextW
IsWindowEnabled
SetWindowPos
GetPropW
SetPropW
RedrawWindow
SystemParametersInfoW
GetParent
EndDialog
SetWindowLongW
DialogBoxParamW
EnableWindow
UpdateWindow
SetFocus
PostQuitMessage
GetWindowRect
GetWindowLongW
IsWindowVisible
InvalidateRect
LoadImageW
GetActiveWindow
SendMessageW
GetKeyState
DestroyMenu
SetMenu
GetMenu
CloseClipboard
GetClipboardData
GetSysColor
DestroyIcon
LoadIconW
PostThreadMessageW
OpenClipboard
ReleaseDC
DrawTextExW
GetDC
GetDesktopWindow
AppendMenuW
CreatePopupMenu
CreateMenu
BringWindowToTop
SetForegroundWindow
ShowWindow
IsIconic
IsWindow
CopyRect

gdi32

SetStretchBltMode
BeginPath
CreateCompatibleBitmap
FillPath
TextOutW
EndPath
CreatePen
PathToRegion
GetBkColor
SetViewportOrgEx
GetTextMetricsW
GetTextExtentPoint32W
CreateSolidBrush
LineTo
MoveToEx
BitBlt
PatBlt
SetROP2
CreatePatternBrush
CreateBitmap
SetBkMode
GetStockObject
CreateFontIndirectW
SelectObject
GetObjectW
ExtTextOutW
SetBkColor
SetTextColor
StretchBlt
DeleteObject
DeleteDC
CreateCompatibleDC

comdlg32

CommDlgExtendedError
ChooseFontW
GetSaveFileNameW
GetOpenFileNameW

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExW
GetUserNameW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegOpenKeyW
RegCreateKeyW
RegQueryValueExW

shell32

SHChangeNotify
SHGetMalloc
FindExecutableW
SHGetPathFromIDListW
SHFileOperationW
Shell_NotifyIconW
ord74
ord28
ShellExecuteW
SHGetDesktopFolder
ShellExecuteExW
DragFinish
DragQueryFileW
SHGetSpecialFolderLocation
SHGetFileInfoW

ole32

CoInitialize
DoDragDrop
RevokeDragDrop
OleRun
CoCreateInstance
ReleaseStgMedium
RegisterDragDrop
OleUninitialize
OleInitialize
CoTaskMemFree
CoUninitialize

oleaut32

VariantClear
GetErrorInfo

shlwapi

StrRetToBufW
SHAutoComplete

msimg32

TransparentBlt

msvcr80

srand
rand
_wtof
_wrename
_errno
towupper
_vsnwprintf
__RTDynamicCast
_wtoi64
strrchr
atof
strstr
wcscmp
strchr
tolower
atoi
towlower
_snwprintf
abs
wcsstr
memcmp
strcpy
malloc
free
_wtoi
wcscpy
wcscpy_s
_purecall
wcscat
wcsncpy_s
_waccess
_endthreadex
_beginthreadex
wcsncmp
_time64
swscanf
sscanf
memcpy
memset
sprintf
strlen
_itow
??0exception@std@@QAE@XZ
_fileno
??_V@YAXPAX@Z
memcpy_s
_wcsicmp
_vswprintf
wcschr
wcsncpy
??0exception@std@@QAE@ABV01@@Z
_recalloc
strcmp
_rotl
isalpha
_wcsnicmp
fread
_wfopen_s
fclose
feof
fgetc
fwrite
_wchmod
_CxxThrowException
__CxxFrameHandler3
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
??1exception@std@@UAE@XZ
??2@YAPAXI@Z
??0exception@std@@QAE@ABQBD@Z
wcslen
_invalid_parameter_noinfo
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson
_controlfp_s
_wcsupr
_stricmp
_isatty
__iob_func
?what@exception@std@@UBEPBDXZ
wcsrchr
memmove_s
??3@YAXPAX@Z
swprintf_s
memmove

comctl32

ImageList_GetImageCount
PropertySheetW
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_Remove
ImageList_Destroy
ImageList_SetBkColor
ImageList_Create
_TrackMouseEvent
InitCommonControlsEx
CreateStatusWindowW
CreatePropertySheetPageW
DestroyPropertySheetPage
ImageList_Add
ImageList_GetIconSize
ord8
ImageList_LoadImageW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 287KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1df379da0649b78685267eeb148e7449

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

msimg32

msvcr80

comctl32

version

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 226KB - Virtual size: 225KB

.data Size: 26KB - Virtual size: 30KB

.rsrc Size: 287KB - Virtual size: 288KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 226KB - Virtual size: 225KB

.data
Size: 26KB - Virtual size: 30KB

.rsrc
Size: 287KB - Virtual size: 288KB