e618d1b02c56843d2bf5af4deac9d0daede2a13d265f817778e23980bf630648

Sharing

Copy URL Twitter E-mail

General

Target

e618d1b02c56843d2bf5af4deac9d0daede2a13d265f817778e23980bf630648
Size

851KB
MD5

6835aa78c5d060b89119b11310c12771
SHA1

db34a61db240acc73e9fc0c87ef69478114893fc
SHA256

e618d1b02c56843d2bf5af4deac9d0daede2a13d265f817778e23980bf630648
SHA512

3b0417961ece8401802c48cea037dcf6bf7d55df88760c31aa382635c5e5880cf20012121ae40d57a79426d2996b9ce6ed389171f52247f2a7ce9017c662d984
SSDEEP

24576:DSJBRpWv9XsWusNQJVnGXGeN84uxWJjoWVo5V:yDYXHW+N8tWZA

Score

N/A

Malware Config

Signatures

Files

e618d1b02c56843d2bf5af4deac9d0daede2a13d265f817778e23980bf630648
.exe windows x86

58e8ec3c05eb0dbb6e915a289584241b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryW
GetConsoleMode
CompareStringW
lstrcmpiW
InterlockedExchange
QueryPerformanceCounter
LCMapStringA
LoadResource
GetShortPathNameW
SetEvent
GetOEMCP
GetProcessIoCounters
HeapAlloc
InitializeCriticalSectionAndSpinCount
GetProcessHeap
GetCurrentThreadId
GetLocaleInfoA
GetModuleFileNameW
DuplicateHandle
WideCharToMultiByte
DeleteFileW
WriteConsoleA
ReadProcessMemory
GetCurrentThread
GlobalUnlock
MoveFileW
CreateEventW
SetPriorityClass
GetLastError
TlsSetValue
FormatMessageW
GetCurrentProcessId
GetComputerNameW
GetStartupInfoA
VirtualFree
VirtualFreeEx
FindFirstFileW
SetVolumeLabelW
GetFileAttributesW
GetSystemTimeAsFileTime
TlsFree
Process32FirstW
GetCPInfo
SetFileAttributesW
WaitForSingleObject
Sleep
SetEnvironmentVariableW
GetPrivateProfileStringW
FreeLibrary
CompareStringA
CreateFileW
SetStdHandle
OutputDebugStringW
FindNextFileW
CopyFileW
SystemTimeToFileTime
MulDiv
ReadFile
GetSystemInfo
TlsAlloc
GetConsoleOutputCP
GetConsoleCP
QueryPerformanceFrequency
GlobalMemoryStatusEx
WritePrivateProfileStringW
GetFullPathNameW
GetStartupInfoW
ExitProcess
VirtualProtect
GlobalLock
IsValidCodePage
GetLocalTime
GetPrivateProfileSectionNamesW
UnhandledExceptionFilter
DeleteCriticalSection
LockResource
LoadLibraryExW
GetStdHandle
GetPrivateProfileSectionW
GetFileType
SetFilePointer
SetHandleCount
RemoveDirectoryW
ResumeThread
GetDiskFreeSpaceExW
GetTimeZoneInformation
GetDiskFreeSpaceW
CreateToolhelp32Snapshot
GetDateFormatA
IsDebuggerPresent
RtlUnwind
DeviceIoControl
RaiseException
GetModuleFileNameA
GetTempFileNameW
HeapSize
VirtualAlloc
LocalFileTimeToFileTime
FindClose
TerminateThread
SetEnvironmentVariableA
OpenProcess
LCMapStringW
FileTimeToSystemTime
Beep
WritePrivateProfileSectionW
GetTimeFormatA
CreatePipe
FileTimeToLocalFileTime
GetCommandLineW
GetVersionExW
GetWindowsDirectoryW
CreateThread
SetLastError
SetUnhandledExceptionFilter
GetDriveTypeW
GetCurrentDirectoryW
GetSystemDirectoryW
GetTempPathW
ExitThread
GlobalAlloc
GetProcAddress
GetExitCodeProcess
SetFilePointerEx
SetErrorMode
SetCurrentDirectoryW
CloseHandle
CreateFileA
LoadLibraryA
GetEnvironmentVariableW
Process32NextW
GlobalFree
FlushFileBuffers
GetTickCount
SizeofResource
MultiByteToWideChar
EnterCriticalSection
HeapFree
HeapReAlloc
GetCurrentProcess
GetACP
GetStringTypeA
FreeEnvironmentStringsW
CreateProcessW
InterlockedIncrement
GetFileSize
SetFileTime
LeaveCriticalSection
GetModuleHandleA
SetEndOfFile
InterlockedDecrement
WriteConsoleW
TlsGetValue
WriteFile
TerminateProcess
CreateHardLinkW
GetEnvironmentStringsW
LoadLibraryW
GetModuleHandleW
FindResourceW

user32

IsMenu
MessageBoxA
SetMenuDefaultItem
SetWindowPos
SetRect
IsZoomed
SetUserObjectSecurity
CreateWindowExW
LoadCursorW
DeleteMenu
DrawFocusRect
ReleaseDC
FrameRect
GetWindowRect
LoadStringW
MoveWindow
CloseDesktop
AdjustWindowRectEx
GetWindowThreadProcessId
WindowFromPoint
GetCursorPos
OpenWindowStationW
ReleaseCapture
IsWindowEnabled
GetDlgCtrlID
GetAsyncKeyState
TranslateMessage
SetForegroundWindow
GetKeyboardState
GetMenuStringW
ShowWindow
GetClientRect
IsClipboardFormatAvailable
GetClipboardData
DrawFrameControl
GetWindowTextLengthW
DefDlgProcW
PeekMessageW
KillTimer
GetMonitorInfoW
SetProcessWindowStation
UnregisterHotKey
OpenDesktopW
IsCharLowerW
EnumWindows
CloseWindowStation
CharLowerBuffW
CreateAcceleratorTableW
LockWindowUpdate
FillRect
IsCharUpperW
IsWindowVisible
SetWindowTextW
EnableWindow
IsDlgButtonChecked
SendInput
GetSysColor
GetClassNameW
wsprintfW
SetMenu
keybd_event
PostQuitMessage
SetKeyboardState
GetWindowTextW
SetActiveWindow
ClientToScreen
SetClipboardData
DefWindowProcW
RegisterWindowMessageW
GetClassLongW
DrawTextW
BeginPaint
EnumChildWindows
TrackPopupMenuEx
FindWindowExW
CharNextW
GetSubMenu
AttachThreadInput
CopyRect
FlashWindow
DestroyAcceleratorTable
CharUpperBuffW
SetFocus
DestroyIcon
GetMenu
GetKeyState
SetWindowLongW
GetDC
LoadImageW
CheckMenuRadioItem
GetForegroundWindow
GetWindowLongW
CopyImage
DrawMenuBar
LoadIconW
GetFocus
PostMessageW
CloseClipboard
IsWindow
VkKeyScanW
MonitorFromRect
ScreenToClient
CreateMenu
TranslateAcceleratorW
MessageBoxW
GetCursorInfo
GetMenuItemCount
IsDialogMessageW
GetActiveWindow
SendMessageTimeoutW
IsIconic
EndPaint
SetCapture
CountClipboardFormats
ExitWindowsEx
GetWindowDC
DestroyWindow
SendDlgItemMessageW
BlockInput
MessageBeep
EndDialog
MonitorFromPoint
EnumThreadWindows
GetMessageW
SetLayeredWindowAttributes
RegisterClassExW
GetUserObjectSecurity
GetSystemMetrics
RedrawWindow
DispatchMessageW
FindWindowW
InflateRect
RegisterHotKey
PtInRect
GetMenuItemID
SetCursor
OpenClipboard
mouse_event
EmptyClipboard
DestroyMenu
CreateIconFromResourceEx
IsCharAlphaW
GetMenuItemInfoW
GetKeyboardLayoutNameW
SetTimer
SetMenuItemInfoW
GetDesktopWindow
GetCaretPos
GetDlgItem
DialogBoxParamW
GetParent
MapVirtualKeyW
SendMessageW
SystemParametersInfoW
CreatePopupMenu
InvalidateRect
InsertMenuItemW
GetProcessWindowStation

gdi32

Ellipse
CreateFontW
CreateCompatibleBitmap
SelectObject
LineTo
CreateDCW
StrokePath
EndPath
GetPixel
DeleteObject
BeginPath
SetPixel
GetTextFaceW
StretchBlt
CloseFigure
SetViewportOrgEx
GetObjectW
ExtCreatePen
CreatePen
MoveToEx
SetBkColor
DeleteDC
StrokeAndFillPath
GetStockObject
CreateCompatibleDC
GetDeviceCaps
AngleArc
SetBkMode
SetTextColor
Rectangle
RoundRect
CreateSolidBrush
GetTextExtentPoint32W
PolyDraw
GetDIBits

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegConnectRegistryW
GetAclInformation
RegCreateKeyExW
GetLengthSid
InitiateSystemShutdownExW
RegDeleteValueW
CreateProcessWithLogonW
OpenThreadToken
OpenSCManagerW
AddAce
RegSetValueExW
RegOpenKeyExW
CreateProcessAsUserW
SetSecurityDescriptorDacl
GetSecurityDescriptorDacl
OpenProcessToken
LockServiceDatabase
RegEnumKeyExW
AdjustTokenPrivileges
LogonUserW
CopySid
RegCloseKey
GetTokenInformation
UnlockServiceDatabase
GetAce
LookupPrivilegeValueW
InitializeSecurityDescriptor
RegEnumValueW
RegDeleteKeyW
CloseServiceHandle
DuplicateTokenEx
RegQueryValueExW
InitializeAcl
GetUserNameW

shell32

SHGetFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ExtractIconExW
DragQueryFileW
SHBrowseForFolderW
SHFileOperationW
DragQueryPoint
DragFinish
SHEmptyRecycleBinW
ShellExecuteW
SHGetDesktopFolder
ShellExecuteExW
SHGetMalloc
Shell_NotifyIconW

ole32

CLSIDFromProgID
CreateStreamOnHGlobal
MkParseDisplayName
CoCreateInstance
IIDFromString
CoTaskMemFree
StringFromCLSID
CoTaskMemAlloc
StringFromIID
CoInitializeSecurity
OleInitialize
CreateBindCtx
CoCreateInstanceEx
CoUninitialize
OleSetMenuDescriptor
CoSetProxyBlanket
OleSetContainedObject
OleUninitialize
CoInitialize
CLSIDFromString

oleaut32

OACreateTypeLib2
OleLoadPicture
GetActiveObject
SafeArrayAccessData
SafeArrayAllocData
VariantCopy
SafeArrayGetVartype
SafeArrayAllocDescriptorEx
LoadRegTypeLi
SafeArrayDestroyDescriptor
VariantInit
VarR8FromDec
SafeArrayUnaccessData
SysAllocString
VariantClear
VariantTimeToSystemTime

comctl32

InitCommonControlsEx
ImageList_DragMove
ImageList_Remove
ImageList_DragEnter
ImageList_Create
ImageList_Destroy
ImageList_EndDrag
ImageList_DragLeave
ImageList_ReplaceIcon
ImageList_BeginDrag
ImageList_SetDragCursorImage

shlwapi

SHQueryInfoKeyA

winmm

waveOutSetVolume
timeGetTime
mciSendStringW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

wininet

InternetReadFile
InternetQueryDataAvailable
InternetCloseHandle
InternetQueryOptionW
HttpQueryInfoW
InternetOpenUrlW
FtpGetFileSize
HttpSendRequestW
HttpOpenRequestW
InternetCrackUrlW
InternetConnectW
InternetSetOptionW
FtpOpenFileW
InternetOpenW

wsock32

WSACleanup
bind
gethostbyname
closesocket
listen
connect
sendto
WSAStartup
gethostname
inet_addr
htons
ntohs
ioctlsocket
send
__WSAFDIsSet
accept
socket
recv
select
WSAGetLastError
recvfrom
setsockopt

mpr

WNetGetConnectionW
WNetAddConnection2W
WNetUseConnectionW
WNetCancelConnection2W

psapi

EnumProcesses
EnumProcessModules
GetProcessMemoryInfo
GetModuleBaseNameW

userenv

CreateEnvironmentBlock
LoadUserProfileW
DestroyEnvironmentBlock
UnloadUserProfile

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.kyul
Size: - Virtual size: 5.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 495KB - Virtual size: 494KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 299KB - Virtual size: 299KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

58e8ec3c05eb0dbb6e915a289584241b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

version

wininet

wsock32

mpr

psapi

userenv

Sections

.text Size: 9KB - Virtual size: 8KB

.kyul Size: - Virtual size: 5.4MB

.rdata Size: 495KB - Virtual size: 494KB

.data Size: 299KB - Virtual size: 299KB

.tls Size: 512B - Virtual size: 57B

.rsrc Size: 33KB - Virtual size: 33KB

.reloc Size: 13KB - Virtual size: 12KB

.text
Size: 9KB - Virtual size: 8KB

.kyul
Size: - Virtual size: 5.4MB

.rdata
Size: 495KB - Virtual size: 494KB

.data
Size: 299KB - Virtual size: 299KB

.tls
Size: 512B - Virtual size: 57B

.rsrc
Size: 33KB - Virtual size: 33KB

.reloc
Size: 13KB - Virtual size: 12KB