bd33c4abf30238d69b3d169074d92e11ec546b285d1f8514620c6ca96931df93

Sharing

Copy URL Twitter E-mail

General

Target

bd33c4abf30238d69b3d169074d92e11ec546b285d1f8514620c6ca96931df93
Size

100KB
MD5

c07443f7fb10aef7aeb4c18e0e27e784
SHA1

60e63d31d19ca3311be8ca68ab05eb642c3406e2
SHA256

bd33c4abf30238d69b3d169074d92e11ec546b285d1f8514620c6ca96931df93
SHA512

11d6fc04be8dc2254f56e8418c1fccd1ce2aaef0b42844e5b492704d1847e81bb0bb4939939b9026e0b53d8384ca8911d08f69627080d0ada6b92ad98eb53cb0
SSDEEP

3072:zoWdTArDNfkdoSkERZ8Eaa7JWFV09DyZJo:hcrDNfgo87oAaho

Score

N/A

Malware Config

Signatures

Files

bd33c4abf30238d69b3d169074d92e11ec546b285d1f8514620c6ca96931df93
.exe windows x86

88ba943f208d2c57a6b9c6ba1138485e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DosDateTimeToFileTime
FileTimeToDosDateTime
LoadLibraryW
LoadLibraryA
GetProcAddress
GetWindowsDirectoryA
lstrcatA
CreateFileA

user32

ChildWindowFromPointEx
CloseWindow
CopyAcceleratorTableW
CopyIcon
wvsprintfW
wvsprintfA
wsprintfW
wsprintfA
keybd_event
WinHelpW
WinHelpA
WaitForInputIdle
VkKeyScanW
UnregisterHotKey
UnregisterDeviceNotification
UnloadKeyboardLayout
UnionRect
UnhookWindowsHookEx
UnhookWindowsHook
UnhookWinEvent
TranslateAcceleratorA
TrackPopupMenu
TabbedTextOutW
SwitchToThisWindow
SwitchDesktop
SetWindowsHookA
SetWindowTextA
SetWindowRgn
SetWindowLongA
SetUserObjectSecurity
ChildWindowFromPoint
SetTimer
SetShellWindow
SetScrollRange
SetScrollInfo
SetRectEmpty
SetRect
SetProcessWindowStation
SetMessageExtraInfo
SetMenuItemInfoW
SetMenuItemBitmaps
SetDlgItemTextA
SetCaretBlinkTime
SetCapture
SendNotifyMessageW
SendInput
SendDlgItemMessageA
ReplyMessage
ReleaseDC
RegisterWindowMessageW
RegisterShellHookWindow
RegisterDeviceNotificationW
RegisterClassW
RegisterClassExA
RedrawWindow
RealGetWindowClassW
RealChildWindowFromPoint
PostThreadMessageW
PostThreadMessageA
PostMessageW
CreateDesktopA
CheckRadioButton
CheckMenuRadioItem
CharUpperBuffA
CharUpperA
CharToOemBuffW
CharToOemBuffA
CreateDesktopW
CharPrevA
CharLowerW
ChangeDisplaySettingsA
CascadeWindows
CascadeChildWindows
CallMsgFilterA
CallMsgFilter
BeginDeferWindowPos
AttachThreadInput
AppendMenuA
SetUserObjectInformationA
AdjustWindowRectEx
PeekMessageA
PackDDElParam
OpenWindowStationW
OpenInputDesktop
OpenIcon
OpenDesktopA
OpenClipboard
OffsetRect
OemToCharW
OemToCharBuffA
OemToCharA
MsgWaitForMultipleObjects
MessageBoxW
MessageBoxIndirectW
MessageBeep
MapWindowPoints
MapVirtualKeyExW
MapVirtualKeyA
MapDialogRect
LoadStringA
LoadMenuW
LoadImageA
LoadIconA
LoadCursorA
LoadBitmapW
LoadAcceleratorsW
IsZoomed
IsWindowVisible
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessage
IsChild
IsCharUpperA
IsCharLowerW
InvertRect
InvalidateRgn
InsertMenuW
IMPSetIMEA
IMPQueryIMEW
GrayStringA
GetWindowThreadProcessId
GetWindowTextLengthW
GetWindowTextA
GetWindowRgn
GetWindowLongW
GetWindowLongA
GetWindowDC
GetWindowContextHelpId
GetUpdateRgn
GetUpdateRect
GetTitleBarInfo
GetTabbedTextExtentA
GetSysColorBrush
GetSubMenu
GetScrollRange
GetPropW
GetProcessDefaultLayout
GetOpenClipboardWindow
GetMouseMovePointsEx
GetMonitorInfoW
GetMonitorInfoA
GetMessageW
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuDefaultItem
GetMenuContextHelpId
GetMenuCheckMarkDimensions
GetLastInputInfo
GetKeyboardType
GetKeyboardLayoutNameA
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyNameTextW
GetKeyNameTextA
GetGUIThreadInfo
GetDlgItemTextW
GetDlgItemInt
GetDlgCtrlID
GetDCEx
GetComboBoxInfo
GetClipboardOwner
GetClipboardFormatNameA
GetClassWord
GetClassLongW
GetClassLongA
GetClassInfoExA
GetClassInfoA
GetCaretPos
GetCaretBlinkTime
GetCapture
GetAsyncKeyState
GetAncestor
GetAltTabInfoA
GetAltTabInfo
FindWindowW
FindWindowExW
ExitWindowsEx
ExcludeUpdateRgn
EnumWindowStationsW
EnumPropsExW
EnumPropsA
EnumDisplaySettingsW
EnumDisplaySettingsExW
EnumDisplayMonitors
EnumDisplayDevicesA
EnumDesktopsW
EnumClipboardFormats
EnumChildWindows
EndPaint
EndDialog
EndDeferWindowPos
EmptyClipboard
DrawTextExA
DrawStateA
DrawIconEx
DrawEdge
DragObject
DragDetect
DlgDirSelectExW
DlgDirSelectExA
DlgDirListComboBoxA
DlgDirListA
DispatchMessageA
DialogBoxParamW
DialogBoxParamA
DialogBoxIndirectParamW
DialogBoxIndirectParamA
DestroyMenu
DestroyIcon
DestroyCaret
DeferWindowPos
DefMDIChildProcW
DefDlgProcW
DdeSetQualityOfService
DdeQueryConvInfo
DdePostAdvise
DdeNameService
DdeKeepStringHandle
DdeInitializeA
DdeImpersonateClient
DdeGetData
DdeFreeDataHandle
DdeConnectList
DdeConnect
DdeCmpStringHandles
DdeClientTransaction
DdeAddData
DdeAccessData
DdeAbandonTransaction
CreateWindowExA
CreateMenu
CreateMDIWindowW
CreateIconFromResourceEx
CreateIconFromResource
CreateDialogParamW
CreateCursor

comdlg32

PrintDlgW
ChooseColorW
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
GetFileTitleW
ReplaceTextW
ReplaceTextA
GetOpenFileNameA
PrintDlgExW
PrintDlgExA
PrintDlgA
PageSetupDlgW
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
ChooseColorA

shell32

CheckEscapesW
CommandLineToArgvW
DoEnvironmentSubstA
DoEnvironmentSubstW
DragAcceptFiles
DragFinish
DragQueryFile
DragQueryFileA
DragQueryFileAorW
DragQueryFileW
DragQueryPoint
DuplicateIcon
ExtractAssociatedIconA
ExtractAssociatedIconExA
ExtractAssociatedIconExW
ExtractIconA
ExtractIconEx
ExtractIconExA
ExtractIconExW
ExtractIconW
FindExecutableA
FindExecutableW
SHAddToRecentDocs
SHAppBarMessage
SHBindToParent
SHBrowseForFolder
SHBrowseForFolderA
SHBrowseForFolderW
SHChangeNotify
SHCreateDirectoryExA
SHCreateDirectoryExW
SHCreateProcessAsUserW
SHEmptyRecycleBinA
SHEmptyRecycleBinW
SHFileOperation
SHFileOperationA
SHFileOperationW
SHFormatDrive
SHFreeNameMappings
SHGetDataFromIDListA
SHGetDataFromIDListW
SHGetDesktopFolder
SHGetDiskFreeSpaceA
SHGetDiskFreeSpaceExA
SHGetDiskFreeSpaceExW
SHGetFileInfo
SHGetFileInfoA
SHGetFileInfoW
SHGetFolderLocation
SHGetFolderPathA
SHGetFolderPathW
SHGetIconOverlayIndexA
SHGetIconOverlayIndexW
SHGetInstanceExplorer
SHGetMalloc
SHGetPathFromIDList
SHGetPathFromIDListA
SHGetPathFromIDListW
SHGetSettings
SHGetSpecialFolderLocation
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
SHInvokePrinterCommandA
SHInvokePrinterCommandW
SHIsFileAvailableOffline
SHLoadInProc
SHLoadNonloadedIconOverlayIdentifiers
SHPathPrepareForWriteA
SHPathPrepareForWriteW
SHQueryRecycleBinA
SHQueryRecycleBinW
ShellAboutA
ShellAboutW
ShellExecuteA
ShellExecuteEx
ShellExecuteExW
ShellExecuteW
ShellHookProc
WOWShellExecute
Shell_NotifyIconW
Shell_NotifyIconA

ole32

UtConvertDvtd32toDvtd16
UtGetDvtd32Info
WdtpInterfacePointer_UserSize
WriteClassStm
WriteStringStream
StringFromGUID2
StringFromCLSID
StgSetTimes
StgPropertyLengthAsVariant
StgOpenStorage
StgOpenPropStg
StgIsStorageILockBytes
StgIsStorageFile
StgGetIFillLockBytesOnILockBytes
StgCreateStorageEx
StgCreateDocfile
StgConvertVariantToProperty
StgConvertPropertyToVariant
SetConvertStg
STGMEDIUM_UserFree
SNB_UserSize
SNB_UserFree
RevokeDragDrop
ReleaseStgMedium
ReadFmtUserTypeStg
PropVariantCopy
PropVariantClear
PropStgNameToFmtId
ProgIDFromCLSID
OpenOrCreateStream
OleUninitialize
OleTranslateAccelerator
OleSetMenuDescriptor
OleSetContainedObject
OleSetClipboard
OleSetAutoConvert
OleSaveToStream
OleSave
OleRun
OleRegGetUserType
OleRegEnumVerbs
OleNoteObjectVisible
OleMetafilePictFromIconAndLabel
OleLockRunning
OleLoad
OleIsCurrentClipboard
OleInitialize
OleGetIconOfFile
OleGetIconOfClass
OleGetAutoConvert
OleDuplicateData
OleDoAutoConvert
OleCreateStaticFromData
OleCreateMenuDescriptor
OleCreateLinkToFileEx
OleCreateLinkToFile
OleCreateLinkFromDataEx
OleCreateLinkFromData
OleCreateLinkEx
OleCreateFromFileEx
OleCreateFromData
OleCreateEx
OleCreateEmbeddingHelper
OleCreateDefaultHandler
OleConvertOLESTREAMToIStorageEx
OleConvertOLESTREAMToIStorage
OleConvertIStorageToOLESTREAMEx
OleConvertIStorageToOLESTREAM
MonikerRelativePathTo
IsAccelerator
HkOleRegisterObject
HWND_UserUnmarshal
HWND_UserSize
HWND_UserFree
HPALETTE_UserSize
HPALETTE_UserMarshal
HPALETTE_UserFree
HMETAFILE_UserSize
HMETAFILEPICT_UserFree
HMENU_UserUnmarshal
HMENU_UserSize
HICON_UserMarshal
HGLOBAL_UserSize
HGLOBAL_UserMarshal
HGLOBAL_UserFree
HENHMETAFILE_UserUnmarshal
HENHMETAFILE_UserSize
HENHMETAFILE_UserMarshal
HDC_UserUnmarshal
HDC_UserMarshal
HDC_UserFree
HBRUSH_UserUnmarshal
HBRUSH_UserSize
HBRUSH_UserMarshal
HBRUSH_UserFree
HBITMAP_UserUnmarshal
HBITMAP_UserSize
HBITMAP_UserFree
HACCEL_UserUnmarshal
HACCEL_UserSize
HACCEL_UserFree
GetRunningObjectTable
GetHookInterface
GetHGlobalFromStream
GetHGlobalFromILockBytes
GetConvertStg
FreePropVariantArray
EnableHookObject
DoDragDrop
DllGetClassObjectWOW
DllDebugObjectRPCHook
DcomChannelSetHResult
CreateStreamOnHGlobal
CreateStdProgressIndicator
CreateObjrefMoniker
CreateItemMoniker
CreateILockBytesOnHGlobal
CreateFileMoniker
CreateDataCache
CreateDataAdviseHolder
CreateClassMoniker
CreateAntiMoniker
CoWaitForMultipleHandles
CoUnmarshalHresult
CoUnloadingWOW
CoUninitialize
CoTreatAsClass
CoTestCancel
CoTaskMemAlloc
CoSwitchCallContext
CoSuspendClassObjects
CoSetProxyBlanket
CoSetCancelObject
CoRevokeMallocSpy
CoResumeClassObjects
CoRegisterSurrogateEx
CoRegisterSurrogate
CoRegisterPSClsid
CoRegisterMessageFilter
CoRegisterMallocSpy
CoRegisterClassObject
CoReactivateObject
CoQueryReleaseObject
CoQueryProxyBlanket
CoQueryClientBlanket
CoQueryAuthenticationServices
CoMarshalInterThreadInterfaceInStream
CoMarshalHresult
CoLockObjectExternal
CoLoadLibrary
CoIsOle1Class
CoInstall
CoInitializeSecurity
CoInitializeEx
CoInitialize
CoImpersonateClient
CoGetTreatAsClass
CoGetStdMarshalEx
CoGetStandardMarshal
CoGetObject
CoGetMarshalSizeMax
CoGetInstanceFromIStorage
CoGetInstanceFromFile
CoGetCurrentProcess
CoGetCurrentLogicalThreadId
CoGetClassVersion
CoGetClassObject
CoGetCallerTID
CoGetCallContext
CoGetApartmentID
CoFreeLibrary
CoFileTimeNow
CoEnableCallCancellation
CoDisconnectObject
CoDisableCallCancellation
CoDeactivateObject
CoCreateObjectInContext
CoCreateInstance
CoAddRefServerProcess
CLSIDFromString
CLSIDFromProgID
CLIPFORMAT_UserSize
CLIPFORMAT_UserMarshal
BindMoniker
CoCreateInstanceEx

oleaut32

BSTR_UserSize
BSTR_UserUnmarshal
ClearCustData
CreateTypeLib2
DispCallFunc
DosDateTimeToVariantTime
GetActiveObject
GetAltMonthNames
GetErrorInfo
LHashValOfNameSys
LHashValOfNameSysA
LPSAFEARRAY_Size
LPSAFEARRAY_Unmarshal
LPSAFEARRAY_UserSize
LoadTypeLi
OACreateTypeLib2
OaBuildVersion
OleCreateFontIndirect
OleCreatePictureIndirect
OleIconToCursor
OleLoadPictureEx
OleLoadPictureFileEx
OleLoadPicturePath
RegisterActiveObject
RegisterTypeLi
SafeArrayAllocDescriptor
SafeArrayAllocDescriptorEx
SafeArrayCopyData
SafeArrayCreateEx
SafeArrayGetElemsize
SafeArrayGetIID
SafeArrayGetLBound
SafeArrayGetVartype
SafeArraySetIID
SafeArrayUnaccessData
SysAllocStringLen
SysReAllocString
SysReAllocStringLen
SysStringByteLen
SystemTimeToVariantTime
UnRegisterTypeLi
VARIANT_UserFree
VarAbs
VarAdd
VarBoolFromDisp
VarBoolFromI4
VarBoolFromR8
VarBoolFromUI1
VarBstrCmp
VarBstrFromBool
VarBstrFromCy
VarBstrFromDate
VarBstrFromI1
VarBstrFromR4
VarBstrFromUI1
VarCat
VarCmp
VarCyAdd
VarCyCmp
VarCyFromDate
VarCyFromStr
VarCyFromUI1
VarCyRound
VarDateFromCy
VarDateFromDec
VarDateFromDisp
VarDateFromI2
VarDateFromI4
VarDateFromR8
VarDateFromUI2
VarDateFromUI4
VarDateFromUdate
VarDateFromUdateEx
VarDecAbs
VarDecAdd
VarDecCmpR8
VarDecDiv
VarDecFix
VarDecFromCy
VarDecFromDate
VarDecFromI2
VarDecFromR8
VarDecFromUI2
VarDecMul
VarDecRound
VarDecSu
VarFormatCurrency
VarFormatDateTime
VarFormatFromTokens
VarFormatPercent
VarI1FromBool
VarI1FromDate
VarI1FromDec
VarI1FromDisp
VarI1FromI4
VarI1FromR8
VarI1FromStr
VarI2FromBool
VarI2FromCy
VarI2FromDisp
VarI2FromI1
VarI2FromI4
VarI2FromR4
VarI2FromStr
VarI2FromUI1
VarI2FromUI2
VarI4FromBool
VarI4FromDate
VarI4FromDec
VarI4FromR4
VarImp
VarMod
VarNeg
VarNot
VarNumFromParseNum
VarOr
VarPow
VarR4FromBool
VarR4FromCy
VarR4FromDec
VarR4FromDisp
VarR4FromI1
VarR4FromI2
VarR4FromR8
VarR4FromUI2
VarR8FromDate
VarR8FromDisp
VarR8FromI1
VarR8FromStr
VarR8FromUI2
VarR8FromUI4
VarR8Pow
VarSu
VarUI1FromBool
VarUI1FromDate
VarUI1FromDec
VarUI1FromDisp
VarUI1FromR4
VarUI1FromUI2
VarUI1FromUI4
VarUI2FromBool
VarUI2FromCy
VarUI2FromDate
VarUI2FromDec
VarUI2FromDisp
VarUI2FromI2
VarUI2FromI4
VarUI4FromBool
VarUI4FromCy
VarUI4FromDec
VarUI4FromDisp
VarUI4FromStr
VarUI4FromUI2
VarUdateFromDate
VarWeekdayName
VariantChangeType
VariantCopy
VariantCopyInd
VariantTimeToSystemTime

shlwapi

StrChrA
StrChrIW
StrChrW
StrCmpNA
StrCmpNIA
StrCmpNIW
StrCmpNW
StrRChrA
StrRChrIA
StrRChrIW
StrRChrW
StrRStrIA
StrStrA
StrStrIA
StrStrIW
StrStrW
StrChrIA

msvcrt

memcpy

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data6
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data5
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

88ba943f208d2c57a6b9c6ba1138485e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

shell32

ole32

oleaut32

shlwapi

msvcrt

Sections

.text Size: 67KB - Virtual size: 67KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 512B - Virtual size: 220B

.data6 Size: 1024B - Virtual size: 1000B

.data5 Size: 1024B - Virtual size: 1000B

.data4 Size: 1024B - Virtual size: 1000B

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 1024B - Virtual size: 1000B

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 67KB - Virtual size: 67KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 512B - Virtual size: 220B

.data6
Size: 1024B - Virtual size: 1000B

.data5
Size: 1024B - Virtual size: 1000B

.data4
Size: 1024B - Virtual size: 1000B

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 5KB - Virtual size: 4KB