db95ae019450c34d5c87b673d71c6b766c57fbd75aff9edaa72d3f7046c20bd7

Sharing

Copy URL Twitter E-mail

General

Target

db95ae019450c34d5c87b673d71c6b766c57fbd75aff9edaa72d3f7046c20bd7
Size

1.5MB
MD5

8682dbd48c8805c8d0341deac88fa016
SHA1

bb49ae028be2a3dbb5fc46f809a6260f4fddaa2a
SHA256

db95ae019450c34d5c87b673d71c6b766c57fbd75aff9edaa72d3f7046c20bd7
SHA512

c0d597fe2870229945039e063d943b66fac205da499e48f58cdc335d73d012e8dab0a645d2d6bcde1e3aeaa0ec084dd8729dc515c81211308a14ccd8e091eb24
SSDEEP

24576:mJVdmkG3X2LIj4HRh/GPFqVNcuG1if/aPeijHvbXPbSXJ1RlO6ck19ISlBO:mJJI2LIj4xNYkVNc5YaPJHvbXPbSX/RM

Score

N/A

Malware Config

Signatures

Files

db95ae019450c34d5c87b673d71c6b766c57fbd75aff9edaa72d3f7046c20bd7
.exe windows x86

1db5e77f0c106ecab3c344c66d631920

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

htonl
ntohl
htons

kernel32

lstrcatW
MultiByteToWideChar
MoveFileW
CreateProcessW
GetFileSize
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
SetFilePointer
GetCurrentThreadId
LoadLibraryW
FreeLibrary
GetVersionExW
MulDiv
GlobalReAlloc
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
InterlockedExchange
GetLocalTime
GetModuleFileNameA
DeleteCriticalSection
InitializeCriticalSection
InterlockedCompareExchange
GetSystemDefaultLangID
VirtualQuery
InterlockedIncrement
GetSystemInfo
InterlockedDecrement
LoadLibraryA
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
RaiseException
GetVersionExA
GetACP
GetLocaleInfoA
GetThreadLocale
TerminateProcess
UnhandledExceptionFilter
lstrlenW
IsDebuggerPresent
ExitThread
CreateThread
GetDiskFreeSpaceExW
GetSystemTimeAsFileTime
RtlUnwind
LCMapStringA
LCMapStringW
GetCPInfo
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
ExitProcess
GetOEMCP
IsValidCodePage
HeapCreate
VirtualFree
VirtualAlloc
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
lstrcpynW
GetTempPathW
GetProcAddress
LockResource
GetProcessHeap
GetLocaleInfoW
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FreeResource
SizeofResource
FindResourceExW
LoadResource
SetStdHandle
FindResourceW
GetModuleHandleW
WriteFile
GetLongPathNameW
ReadFile
CreateFileW
GetCurrentProcess
GetFileAttributesW
GetEnvironmentVariableW
GetLogicalDrives
Sleep
CreateEventW
GetLastError
GetModuleFileNameW
ReleaseMutex
GetPrivateProfileIntW
WaitForSingleObject
CloseHandle
GetPrivateProfileStringW
CreateMutexW
WritePrivateProfileStringW
DeleteFileW
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
GetStartupInfoW

user32

GetParent
MapWindowPoints
GetWindow
GetClassNameW
GetCursorPos
PostMessageW
InflateRect
GetSysColor
FillRect
DrawTextW
ScreenToClient
WindowFromPoint
EnableWindow
ClientToScreen
GetAncestor
FindWindowA
RegisterWindowMessageW
IsIconic
GetDesktopWindow
SendMessageTimeoutW
SetCursor
SetCaretPos
HideCaret
ShowCaret
SystemParametersInfoW
CreateCaret
IsZoomed
EndPaint
SetWindowRgn
GetWindowRect
GetActiveWindow
IsWindowVisible
FindWindowExW
BeginPaint
GetWindowTextW
IsRectEmpty
GetSystemMenu
InvalidateRect
GetMenuState
UnionRect
DrawIconEx
GetSystemMetrics
SetWindowPos
GetClassInfoExW
EqualRect
CopyRect
GetClientRect
KillTimer
SetTimer
GetKeyState
GetCapture
ReleaseCapture
SetCapture
IntersectRect
ReleaseDC
GetDC
OffsetRect
PtInRect
RegisterClassExW
LoadCursorW
DefWindowProcW
SetWindowLongW
UnhookWindowsHookEx
CreateWindowExW
SetWindowsHookExW
GetClassInfoW
CallNextHookEx
IsWindow
CallWindowProcW
GetWindowLongW
PostQuitMessage
ShowWindow
SetRect
UpdateWindow
DestroyWindow
LoadImageW
UpdateLayeredWindow
UnregisterClassA
SendMessageW
DispatchMessageW
TranslateMessage
GetMessageW
MessageBoxW
SetFocus

gdi32

GetTextMetricsW
ExcludeClipRect
CreateRectRgn
SetBkMode
GetStockObject
CreatePen
DeleteDC
SelectObject
CreateDIBSection
BitBlt
DeleteObject
GetObjectW
GetDeviceCaps
ExtCreateRegion
CombineRgn
CreateSolidBrush
SetTextColor
GetTextExtentPoint32W
SetBkColor
ExtTextOutW
Rectangle
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontIndirectW

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

shell32

SHBrowseForFolderW
SHGetFolderPathW
SHGetPathFromIDListW
SHGetMalloc

ole32

CoCreateInstance
CreateStreamOnHGlobal
CoInitialize
CoUninitialize

shlwapi

PathGetDriveNumberW
PathFileExistsW

comctl32

InitCommonControlsEx
_TrackMouseEvent

imm32

ImmReleaseContext

gdiplus

GdipCloneImage
GdipDrawImageRectRectI
GdipDrawImageRectI
GdipBitmapUnlockBits
GdipCloneBitmapAreaI
GdipSetWorldTransform
GdipCreateHBITMAPFromBitmap
GdipRotateMatrix
GdipCreateBitmapFromScan0
GdipTranslateMatrix
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipDeleteMatrix
GdipGraphicsClear
GdipCreateMatrix
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipGetImagePixelFormat
GdipDisposeImage
GdipAlloc
GdipFree
GdiplusShutdown
GdiplusStartup
GdipGetImageHeight
GdipGetImageWidth
GdipBitmapLockBits

msimg32

AlphaBlend

Sections

.text
Size: 348KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 556KB - Virtual size: 553KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1db5e77f0c106ecab3c344c66d631920

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

comctl32

imm32

gdiplus

msimg32

Sections

.text Size: 348KB - Virtual size: 346KB

.rdata Size: 64KB - Virtual size: 61KB

.data Size: 12KB - Virtual size: 20KB

.rsrc Size: 556KB - Virtual size: 553KB

.text
Size: 348KB - Virtual size: 346KB

.rdata
Size: 64KB - Virtual size: 61KB

.data
Size: 12KB - Virtual size: 20KB

.rsrc
Size: 556KB - Virtual size: 553KB