0acb063f5b0137975254c6c153406d96fa34361937cf54bcb0faa75cb8878483

Sharing

Copy URL Twitter E-mail

General

Target

0acb063f5b0137975254c6c153406d96fa34361937cf54bcb0faa75cb8878483
Size

42KB
MD5

76c2340539b151320dfa325facf2071f
SHA1

6e99fcc85c6a1b178dba6fc4965042550a94f75a
SHA256

0acb063f5b0137975254c6c153406d96fa34361937cf54bcb0faa75cb8878483
SHA512

62a577fd5b34050a1639d65c9b805de4e499da301ad4e0ab51f1a5f398f36affc3ac0c1f89fd5e385878d7fd8b71f716fd00de6a43ea80f43efe257427bacf5c
SSDEEP

768:dI71mumV2QNZyYzLWsA9KbMlJdXr6MbE5qEj9fygnXQS:qgUuywLvyKbI7yj9fygnXQS

Score

N/A

Malware Config

Signatures

Files

0acb063f5b0137975254c6c153406d96fa34361937cf54bcb0faa75cb8878483
.exe windows x86

22fe6798bba8cd2339306d53a140135e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FatalAppExitW
FindFirstFileExA
FindVolumeMountPointClose
GetACP
GetAtomNameW
GetBinaryTypeA
GetBinaryTypeW
GetCalendarInfoW
GetCommMask
GetCommModemStatus
GetCompressedFileSizeA
GetComputerNameA
GetComputerNameW
GetConsoleAliasesA
GetConsoleAliasesW
GetConsoleMode
GetCurrencyFormatA
GetEnvironmentVariableA
GetFileAttributesExW
GetFileSize
GetLocalTime
GetNumberOfConsoleMouseButtons
GetPrivateProfileIntA
GetProfileIntA
GetProfileStringA
GetShortPathNameA
GetStartupInfoW
GetSystemDefaultLangID
GetVersionExW
GetVolumeInformationA
GetVolumeInformationW
GetVolumeNameForVolumeMountPointA
GetVolumePathNameA
GetVolumePathNameW
GlobalGetAtomNameA
GlobalHandle
HeapValidate
IsBadWritePtr
IsProcessorFeaturePresent
IsValidCodePage
ExpandEnvironmentStringsW
LoadModule
LocalLock
MapUserPhysicalPages
MoveFileExA
OpenProcess
OutputDebugStringW
PurgeComm
ReadConsoleA
ReadConsoleOutputAttribute
ReplaceFile
SearchPathA
SetCalendarInfoW
SetCommBreak
SetCommTimeouts
SetConsoleDisplayMode
SetConsoleTextAttribute
SetConsoleTitleA
SetCriticalSectionSpinCount
SetCurrentDirectoryW
SetEnvironmentVariableW
SetErrorMode
SetProcessShutdownParameters
SetTimeZoneInformation
SignalObjectAndWait
SystemTimeToTzSpecificLocalTime
Toolhelp32ReadProcessMemory
TransactNamedPipe
TransmitCommChar
UnregisterWait
VirtualAllocEx
VirtualLock
VirtualProtect
WriteConsoleInputW
WriteConsoleOutputCharacterW
_hwrite
_lclose
lstrcat
lstrcpyW
EnumUILanguagesA
EnumSystemCodePagesW
EnumResourceNamesW
EnumResourceLanguagesW
DnsHostnameToComputerNameA
DeleteFileW
DefineDosDeviceA
VirtualAlloc
CreatePipe
CreateMutexW
CreateDirectoryExA
CopyFileExA
ConvertThreadToFiber
BuildCommDCBAndTimeoutsA
BeginUpdateResourceW
AddConsoleAliasA
LoadLibraryA
GetProcAddress
ExitProcess
GetWindowsDirectoryA
CreateFileA
LCMapStringA

user32

SetWindowTextA
SetWindowsHookA
SetWindowsHookExA
SwitchDesktop
TileWindows
ToAsciiEx
ToUnicode
TrackMouseEvent
VkKeyScanExA
WindowFromDC
keybd_event
AttachThreadInput
BeginDeferWindowPos
BeginPaint
BroadcastSystemMessageW
CallMsgFilter
CallMsgFilterW
ChangeDisplaySettingsExW
CharToOemA
CloseClipboard
CloseWindowStation
CopyImage
CreateDialogIndirectParamW
CreateIcon
CreateIconFromResourceEx
DdeConnect
DdeCreateDataHandle
DdeDisconnect
DdeFreeStringHandle
DdeGetData
DdeGetLastError
DdeInitializeW
DefDlgProcW
DefFrameProcA
DestroyAcceleratorTable
DlgDirListComboBoxA
DlgDirSelectComboBoxExW
DragDetect
DrawFrameControl
DrawIconEx
EnableScrollBar
EndPaint
EnumDisplaySettingsExA
EnumThreadWindows
FindWindowExA
FindWindowW
FlashWindow
FreeDDElParam
GetAltTabInfoA
GetCaretPos
GetClassInfoA
GetDialogBaseUnits
GetDlgItem
GetGUIThreadInfo
GetIconInfo
GetLastInputInfo
GetMenuStringA
GetNextDlgGroupItem
GetPriorityClipboardFormat
GetWindowTextA
HiliteMenuItem
IMPSetIMEW
IntersectRect
InvalidateRect
IsDialogMessage
IsDialogMessageA
IsWindowVisible
LoadMenuIndirectA
MapVirtualKeyW
MessageBoxExA
MessageBoxExW
ModifyMenuW
MonitorFromRect
MsgWaitForMultipleObjectsEx
OpenWindowStationA
PostMessageW
PostQuitMessage
PostThreadMessageW
RemovePropW
SendInput
SendMessageTimeoutW
SetCapture
SetClassLongA
SetClassWord
SetWindowLongW
SetWinEventHook
SetTimer
SetProcessWindowStation
SetProcessDefaultLayout
SetMenuDefaultItem
SetLastErrorEx
SetKeyboardState
SetDlgItemTextW
SetClipboardData

comdlg32

ChooseColorW
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
GetFileTitleW
GetOpenFileNameA
GetOpenFileNameW
GetSaveFileNameA
GetSaveFileNameW
PageSetupDlgA
PageSetupDlgW
PrintDlgA
PrintDlgExA
PrintDlgExW
PrintDlgW
ReplaceTextA
ReplaceTextW
ChooseColorA

shell32

ExtractIconW
ExtractIconExW
ExtractIconExA
ExtractAssociatedIconW
ExtractAssociatedIconExW
ExtractAssociatedIconExA
DuplicateIcon
DragFinish
DragAcceptFiles
DoEnvironmentSubstA
FindExecutableA
WOWShellExecute
Shell_NotifyIconW
Shell_NotifyIconA
Shell_NotifyIcon
ShellHookProc
ShellExecuteW
ShellExecuteExW
ShellExecuteExA
ShellAboutW
ShellAboutA
SHQueryRecycleBinW
SHQueryRecycleBinA
SHPathPrepareForWriteW
SHPathPrepareForWriteA
SHGetSpecialFolderPathA
SHGetSettings
SHGetPathFromIDListW
SHGetPathFromIDList
SHGetMalloc
SHGetInstanceExplorer
SHGetIconOverlayIndexW
SHGetFolderPathW
SHGetFileInfoW
SHGetFileInfoA
SHGetFileInfo
SHGetDataFromIDListW
SHGetDataFromIDListA
SHFormatDrive
SHFileOperationA
SHFileOperation
SHEmptyRecycleBinW
SHEmptyRecycleBinA
SHCreateDirectoryExA
SHBrowseForFolderA
SHAppBarMessage
SHAddToRecentDocs
FindExecutableW

ole32

UtGetDvtd32Info
UtConvertDvtd32toDvtd16
StringFromCLSID
StgOpenStorage
StgCreatePropStg
SetConvertStg
STGMEDIUM_UserSize
STGMEDIUM_UserFree
ReleaseStgMedium
ReadFmtUserTypeStg
ReadClassStg
OpenOrCreateStream
OleSave
OleRegGetUserType
OleNoteObjectVisible
OleLoadFromStream
OleIsCurrentClipboard
OleGetIconOfClass
OleFlushClipboard
OleDraw
OleDoAutoConvert
OleCreateMenuDescriptor
OleCreateFromDataEx
OleCreate
OleConvertOLESTREAMToIStorage
MonikerRelativePathTo
IsAccelerator
IIDFromString
HWND_UserUnmarshal
HMETAFILE_UserUnmarshal
HMETAFILE_UserMarshal
HMETAFILE_UserFree
HMETAFILEPICT_UserUnmarshal
HMENU_UserMarshal
HICON_UserFree
HGLOBAL_UserUnmarshal
HGLOBAL_UserFree
HENHMETAFILE_UserMarshal
HENHMETAFILE_UserFree
HDC_UserSize
HBRUSH_UserMarshal
WdtpInterfacePointer_UserUnmarshal
HBITMAP_UserSize
HACCEL_UserSize
HACCEL_UserMarshal
GetHGlobalFromILockBytes
GetConvertStg
GetClassFile
FreePropVariantArray
DcomChannelSetHResult
CreateStreamOnHGlobal
CreateGenericComposite
CreateAntiMoniker
CoWaitForMultipleHandles
CoUnloadingWOW
CoTaskMemFree
CoSuspendClassObjects
CoSetProxyBlanket
CoSetCancelObject
CoRevokeMallocSpy
CoRevokeClassObject
CoRevertToSelf
CoResumeClassObjects
CoRegisterClassObject
CoRegisterChannelHook
CoReactivateObject
CoQueryReleaseObject
CoQueryAuthenticationServices
CoLockObjectExternal
CoIsOle1Class
CoIsHandlerConnected
CoInitializeEx
CoGetTreatAsClass
CoGetStandardMarshal
CoGetInterfaceAndReleaseStream
CoEnableCallCancellation
CoDisconnectObject
CoDeactivateObject
CoCreateInstance
CoCreateGuid
CoBuildVersion
CLSIDFromProgID
CLIPFORMAT_UserSize
HBRUSH_UserFree

oleaut32

VarR4FromR8
VarR4FromI1
VarR4FromBool
VarR4CmpR8
VarOr
VarNeg
VarI4FromR4
VarI4FromDisp
VarI4FromDec
VarI4FromDate
VarI4FromBool
VarI2FromR4
VarI2FromI4
VarI2FromI1
VarI2FromDisp
VarI1FromUI4
VarI1FromR8
VarI1FromI2
VarFormatNumber
VarFormatFromTokens
VarDecFromDate
VarDecCmp
VarDateFromUdateEx
VarDateFromUI4
VarDateFromUI2
VarDateFromUI1
VarDateFromStr
VarDateFromR4
VarDateFromI2
VarDateFromDec
VarCySu
VarCyNeg
VarCyInt
VarCyFromR4
VarCyFromI2
VarCyFromBool
VarBstrFromI4
VarBstrFromI1
VarBstrCmp
VarBstrCat
VarBoolFromCy
VarAdd
VARIANT_UserFree
SysStringLen
SysAllocStringLen
SysAllocString
SafeArraySetIID
SafeArrayPutElement
SafeArrayGetDim
SafeArrayAllocDescriptorEx
SafeArrayAllocData
RegisterTypeLi
RegisterActiveObject
OleSavePictureFile
OleLoadPictureFileEx
OleLoadPictureFile
LHashValOfNameSysA
DosDateTimeToVariantTime
CreateErrorInfo
BSTR_UserSize
BSTR_UserFree
VariantCopy
VariantClear
VariantChangeType
VarUdateFromDate
VarUI4FromUI1
VarUI4FromR4
VarUI2FromR8
VarUI2FromR4
VarUI2FromI4
VarUI2FromI2
VarUI2FromDec
VarR4FromUI4
VarR8FromDec
VarR8FromI1
VarR8FromI2
VarR8FromR4
VarRound
VarUI1FromBool
VarUI1FromI1
VarUI1FromI2
VarUI4FromI4

shlwapi

StrChrW
StrCmpNA
StrCmpNIA
StrCmpNIW
StrCmpNW
StrRChrIA
StrRChrIW
StrRChrW
StrStrIW
StrStrW
StrChrIW

msvcrt

memcpy

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

22fe6798bba8cd2339306d53a140135e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

shell32

ole32

oleaut32

shlwapi

msvcrt

Sections

.text Size: 27KB - Virtual size: 26KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 208B

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 27KB - Virtual size: 26KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 208B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB