b21b479b325b655be2aca76a28ede2bdf402aad2016f4c4f7b3834a6c7b18dbf

Sharing

Copy URL

Twitter E-mail

General

Target

b21b479b325b655be2aca76a28ede2bdf402aad2016f4c4f7b3834a6c7b18dbf
Size

134KB
MD5

1069182e2c103ba24a378a315a518350
SHA1

789586c8fa2fe7e07b7ed96397caa0f7519cb698
SHA256

b21b479b325b655be2aca76a28ede2bdf402aad2016f4c4f7b3834a6c7b18dbf
SHA512

6991be0f264460a2b3666785aaced057cd2ac0878a5742801f2a8c985da6d357bb9e995b42f2b3bf174fac72bd06b56ddeba7045424b989f4a9f5ecf34acfe2a
SSDEEP

3072:Ct7Y0bEmiwaMkK6jqamDTxKfZh4sOX5lgLykTKirK8Qz:cIAZkljyvUOX5ssir

Score

N/A

Malware Config

Signatures

Files

b21b479b325b655be2aca76a28ede2bdf402aad2016f4c4f7b3834a6c7b18dbf
.exe windows x86

0d4858850369f8876ba0735b53167017

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
TlsFree
GetStringTypeW
GetFileSize
lstrcmpiW
ExpandEnvironmentStringsW
FlushInstructionCache
FatalAppExitA
SetStdHandle
Sleep
HeapSize
CompareStringW
GetDateFormatW
CloseHandle
InterlockedIncrement
TlsGetValue
InterlockedDecrement
LCMapStringW
GetCPInfo
GetStringTypeA
lstrcpynA
GetCurrentProcessId
GetPrivateProfileIntW
LoadResource
TlsAlloc
WritePrivateProfileSectionW
IsDebuggerPresent
GetTempPathW
CreateFileW
GetLocaleInfoW
GetStartupInfoA
IsValidLocale
GetStartupInfoW
RaiseException
HeapReAlloc
WriteConsoleA
GetOEMCP
GetModuleHandleW
GetCurrentThread
GetVersionExW
GetCommandLineW
RtlUnwind
GetVersion
SetConsoleCtrlHandler
LockResource
CopyFileW
UnhandledExceptionFilter
HeapCreate
FormatMessageW
GetLastError
WinExec
lstrlenA
DebugBreak
MulDiv
CreateFileA
GlobalAlloc
FindFirstChangeNotificationW
GlobalSize
LCMapStringA
lstrlenW
GetModuleFileNameA
GetModuleHandleA
TerminateProcess
GetLocaleInfoA
ResetEvent
HeapDestroy
IsValidCodePage
SetHandleCount
GetPrivateProfileStringW
FreeEnvironmentStringsW
CreateThread
GetComputerNameW
CompareStringA
ExitProcess
GetEnvironmentStringsW
LoadLibraryW
TlsSetValue
FindResourceW
FreeLibrary
VirtualFree
EnterCriticalSection
GetConsoleMode
GetFileType
InterlockedCompareExchange
GetCurrentThreadId
GetFileAttributesExW
GetWindowsDirectoryW
lstrcpynW
LocalAlloc
lstrcatW
FindNextChangeNotification
GlobalUnlock
GetSystemDirectoryW
lstrcpyW
GetModuleFileNameW
WideCharToMultiByte
WaitForMultipleObjects
LoadLibraryExW
GetFileAttributesW
OpenEventW
GetACP
InitializeCriticalSection
WaitForSingleObject
GetDateFormatA
GetTempFileNameW
VirtualAlloc
SetUnhandledExceptionFilter
QueryPerformanceCounter
WriteConsoleW
SizeofResource
VirtualQuery
GlobalLock
WritePrivateProfileStringW
SetLastError
SystemTimeToTzSpecificLocalTime
GetStdHandle
HeapFree
IsProcessorFeaturePresent
ReadFile
LeaveCriticalSection
InterlockedExchange
GetConsoleOutputCP
GetCurrentProcess
ExpandEnvironmentStringsA
GetConsoleCP
lstrcmpW
HeapAlloc
LocalFree
DeleteCriticalSection
GetUserDefaultLCID
GetProcessHeap
GetSystemDefaultLangID
FileTimeToSystemTime
MultiByteToWideChar
EnumSystemLocalesA
GetProcAddress
OutputDebugStringW
InitializeCriticalSectionAndSpinCount
VerLanguageNameW
GetTimeFormatA

user32

EndDialog
GetSysColorBrush
DrawIconEx
DestroyWindow
GetDC
LoadAcceleratorsW
InsertMenuW
RemoveMenu
SetForegroundWindow
ScreenToClient
IntersectRect
SetMenuItemInfoW
IsWindowVisible
GetMonitorInfoW
SetMenu
LoadMenuW
LoadStringW
CharLowerW
IsWindow
CharNextW
GetCursorPos
SetWindowPos
DragDetect
DialogBoxParamW
SetScrollPos
RegisterClassW
OpenClipboard
GetWindow
UpdateWindow
MapWindowPoints
PeekMessageW
LoadIconW
DrawTextW
ClientToScreen
FillRect
SetFocus
LoadCursorW
SetCaretPos
GetMenuItemInfoW
EmptyClipboard
KillTimer
ShowScrollBar
DrawFocusRect
CreatePopupMenu
WindowFromPoint
GetClassNameW
GetDlgItem
RegisterWindowMessageW
wvsprintfW
FindWindowW
UnregisterClassA
DeferWindowPos
GetMessageW
SetMenuDefaultItem
SetCursor
GetWindowTextLengthA
GetMenuItemCount
DefFrameProcW
RedrawWindow
EqualRect
TrackPopupMenu
GetScrollInfo
GetSystemMetrics
CopyRect
InvalidateRect
LockWindowUpdate
SetWindowsHookExW
OffsetRect
GetMenuStringW
GetWindowTextLengthW
GetSubMenu
RegisterClassExW
IsWindowEnabled
SendMessageW
IsChild
EnableMenuItem
SetCapture
GetActiveWindow
GetWindowPlacement
GetMenu
GetWindowLongW
GetDesktopWindow
BeginDeferWindowPos
PtInRect
MoveWindow
MessageBoxW
DrawMenuBar
PostQuitMessage
GetDoubleClickTime
IsClipboardFormatAvailable
LoadImageW
GetMessagePos
IsMenu
ReleaseCapture
SetTimer
GetWindowRect
InflateRect
UnhookWindowsHookEx
DestroyCaret
MessageBeep
CloseClipboard
CreateCaret
ReleaseDC
GetSystemMenu
TrackPopupMenuEx
SetClipboardData
AdjustWindowRectEx
CallNextHookEx
GetClassInfoW
SetWindowLongW
LoadBitmapW
GetKeyState
GetMenuItemID
GetWindowDC
DefMDIChildProcW
GetWindowTextW
EndPaint
GetDlgCtrlID
BringWindowToTop
SetWindowTextW
ModifyMenuW
DispatchMessageW
GetDlgItemTextW
ScrollWindowEx
AppendMenuW
ShowCaret
MonitorFromWindow
RegisterClipboardFormatW
CreateWindowExW
GetFocus
TranslateAcceleratorW
GetClassInfoExW
EnableWindow
SetParent
TranslateMessage
DestroyMenu
GetClassLongW
DefWindowProcW
ShowWindow
LoadStringA
SystemParametersInfoW
PostMessageW
GetMenuDefaultItem
UnregisterClassW
FrameRect
DrawFrameControl
EndDeferWindowPos
DrawEdge
GetDlgItemInt
SetScrollInfo
CallWindowProcW
GetWindowThreadProcessId
SetDlgItemInt
SetWindowPlacement
SetDlgItemTextW
GetClientRect
BeginPaint
SetRectEmpty
TranslateMDISysAccel
GetParent
GetCapture

gdi32

Rectangle
CreateRectRgn
PatBlt
DeleteDC
SetBkColor
CreateBitmap
GetTextMetricsW
CreateFontW
Polygon
GetTextExtentPoint32W
GetViewportOrgEx
GetClipRgn
RestoreDC
LineTo
DeleteObject
BitBlt
GetStockObject
CreatePalette
SaveDC
GetDeviceCaps
CreatePatternBrush
SelectObject
MoveToEx
SetViewportOrgEx
GetObjectW
CreatePen
LPtoDP
DPtoLP
Polyline
CreateFontIndirectW
TextOutW
IntersectClipRect
SetBkMode
SetTextColor
RealizePalette
CreateCompatibleBitmap
GetClipBox
SelectPalette
CreateDIBSection
SelectClipRgn
SetPolyFillMode
SetWindowOrgEx
CreateCompatibleDC
ExtTextOutW
GetTextExtentPointW
CreateSolidBrush
SetBrushOrgEx

comdlg32

GetSaveFileNameW
ChooseFontW
GetOpenFileNameW
ChooseColorW

advapi32

InitializeAcl
RegOpenKeyExW
CopySid
GetSecurityDescriptorOwner
RegEnumValueA
IsTextUnicode
GetSecurityDescriptorGroup
GetNamedSecurityInfoW
RegReplaceKeyW
GetSidSubAuthorityCount
GetTokenInformation
RegEnumKeyExW
RegSaveKeyW
MapGenericMask
SetSecurityDescriptorDacl
SetNamedSecurityInfoW
GetUserNameW
RegRestoreKeyW
RegDeleteValueW
RegSetValueExW
RegUnLoadKeyW
RegEnumValueW
GetLengthSid
RegCloseKey
RegSetKeySecurity
AdjustTokenPrivileges
GetSidIdentifierAuthority
GetSecurityDescriptorDacl
GetSidSubAuthority
RegDeleteKeyW
RegQueryValueExA
LookupPrivilegeValueW
RegCreateKeyExW
RegQueryInfoKeyW
RegGetKeySecurity
RegOpenKeyExA
GetSecurityDescriptorSacl
InitializeSecurityDescriptor
RegConnectRegistryW
RegQueryValueExW
RegLoadKeyW
GetSecurityDescriptorControl
OpenProcessToken

oleaut32

VarDecFromStr
VarI4FromStr
VarDecCmp
VarR8FromStr
SystemTimeToVariantTime
SysFreeString
VarUI4FromStr

msvcrt

_except_handler3
__setusermatherr
_setmbcp
_strnicmp
wcslen
exit
localtime
__CxxFrameHandler
_adjust_fdiv
__p__commode
_initterm
fclose
_acmdln
atol
__set_app_type
_stricmp
sprintf
fwrite
rand
__p__fmode
time
memmove
_XcptFilter
_controlfp
_exit
fopen
_onexit
strncmp
_purecall
__dllonexit
__getmainargs
_i64toa
_ftol
strchr
atoi
_CIcos

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d4858850369f8876ba0735b53167017

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

oleaut32

msvcrt

Sections

.text Size: 81KB - Virtual size: 80KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 23KB - Virtual size: 121KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 81KB - Virtual size: 80KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 23KB - Virtual size: 121KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB