0b0dc7d0877561b82d3a488cadabe8790201887344b7801d32d8ce37a1f0afce

Sharing

Copy URL Twitter E-mail

General

Target

0b0dc7d0877561b82d3a488cadabe8790201887344b7801d32d8ce37a1f0afce
Size

332KB
MD5

b5583041d7df6c583468ec79c52b83e9
SHA1

aabfbacf6ad893cf6bb8e556c59f026413840958
SHA256

0b0dc7d0877561b82d3a488cadabe8790201887344b7801d32d8ce37a1f0afce
SHA512

0e9c72326f30715b3e580528039cb455ad19e040886ed4579f51374adf49687ccc0b037482beed1bd906d4ac0130f60e9e54615a9a6091f6c66cf961204034a3
SSDEEP

6144:b5zLDKy+lekLSR56OP77vltlSJypXZrbLBbDww6MPUUm+hKwWgQOVuDm+Na:lyyOek26OPvdtl8ypXZrbLBbDww6MPa0

Score

N/A

Malware Config

Signatures

Files

0b0dc7d0877561b82d3a488cadabe8790201887344b7801d32d8ce37a1f0afce
.exe windows x86

9eb058be6721ddcd02b0599aaa273714

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntW
WritePrivateProfileStringW
CreateFileW
GetLocalTime
Sleep
GetCurrentProcessId
MultiByteToWideChar
FindResourceW
SizeofResource
LockResource
LoadResource
GlobalAlloc
GlobalLock
GlobalUnlock
FindFirstFileW
FindNextFileW
lstrcmpW
SetLastError
SetEvent
CreateEventW
CreateThread
FlushInstructionCache
EnterCriticalSection
LeaveCriticalSection
RaiseException
lstrcmpiW
TerminateThread
CreateFileA
SetEndOfFile
GetModuleHandleA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapReAlloc
GetPrivateProfileStringW
QueryPerformanceCounter
HeapCreate
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleMode
GetConsoleCP
ReadFile
GetStartupInfoA
GetFileType
SetHandleCount
SetFilePointer
InitializeCriticalSectionAndSpinCount
GetStdHandle
WriteFile
HeapSize
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
RtlUnwind
GetStartupInfoW
GetSystemTimeAsFileTime
CreateDirectoryA
GetFileAttributesA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
ExitProcess
DeleteCriticalSection
InitializeCriticalSection
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
CreateDirectoryW
OutputDebugStringW
WinExec
GetModuleFileNameW
WideCharToMultiByte
GetModuleFileNameA
FreeLibrary
lstrlenW
GetCurrentThreadId
VirtualFreeEx
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
GetModuleHandleW
GetLastError
OpenProcess
GetCurrentProcess
lstrcpyW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
lstrcatW
ReleaseSemaphore
OpenSemaphoreW
CloseHandle
CreateMutexW
GetProcAddress
LoadLibraryW
GetTickCount

user32

SetWindowTextW
EnableWindow
CreateDialogParamW
IsWindow
PostMessageW
CallWindowProcW
RemovePropW
ScreenToClient
GetWindowDC
SetPropW
GetFocus
RedrawWindow
FindWindowW
GetSysColor
InflateRect
DrawFocusRect
SetForegroundWindow
LoadAcceleratorsW
GetSysColorBrush
GetSystemMetrics
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
GetWindowThreadProcessId
GetClassInfoW
LoadCursorW
RegisterClassW
IsWindowEnabled
IsDlgButtonChecked
GetWindowTextW
CreateWindowExW
CallNextHookEx
SendMessageW
SetWindowsHookExW
UnhookWindowsHookEx
GetWindowLongW
SetWindowLongW
DefWindowProcW
OffsetRect
PtInRect
IsRectEmpty
SetRect
ClientToScreen
wsprintfW
DestroyWindow
GetWindowRect
SetCapture
ReleaseCapture
InvalidateRect
TrackMouseEvent
UpdateWindow
GetClientRect
BeginPaint
EndPaint
IsWindowVisible
FillRect
DrawTextW
FrameRect
SetWindowPos
ShowWindow
UpdateLayeredWindow
SetWindowRgn
GetDC
ReleaseDC
RegisterWindowMessageW
LoadIconW
UnregisterClassA
RegisterClassExW
SetTimer
KillTimer
SetRectEmpty
IntersectRect
GetCursorPos
WindowFromPoint
GetClassNameW
SendDlgItemMessageW
CheckDlgButton
GetDlgItem
MoveWindow
SetClassLongW
GetClassLongW
GetPropW
GetWindow
MonitorFromWindow
GetMonitorInfoW
GetParent
MapWindowPoints
UnionRect
PostQuitMessage
FindWindowExW
GetForegroundWindow
SetFocus
SetActiveWindow
BringWindowToTop
SystemParametersInfoW

gdi32

DeleteDC
TextOutW
GetTextExtentPoint32W
CombineRgn
BitBlt
GetStockObject
SetBkMode
SelectObject
SetTextColor
CreateSolidBrush
DeleteObject
CreateRectRgn
CreateCompatibleDC
CreateCompatibleBitmap
GetPixel

advapi32

RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegDeleteValueW
RegSetValueExW
OpenProcessToken
RegQueryValueW
RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW

shell32

SHGetSpecialFolderPathW
ShellExecuteW

ole32

CreateStreamOnHGlobal

shlwapi

PathRemoveFileSpecA
PathRemoveFileSpecW
PathFileExistsW

psapi

GetModuleFileNameExW
EnumProcessModules

winmm

timeBeginPeriod

msimg32

GradientFill

ws2_32

gethostbyname
inet_ntoa

resloader

Rdb_LoadSkinRes

comctl32

InitCommonControlsEx

gdiplus

GdipCloneImage
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdiplusShutdown
GdiplusStartup
GdipRestoreGraphics
GdipSetClipRectI
GdipSaveGraphics
GdipFillRectangle
GdipCreateTexture2
GdipFillRectangleI
GdipTranslateTextureTransform
GdipCreateTexture2I
GdipGetImageWidth
GdipGetImageHeight
GdipDrawImageRectRect
GdipDisposeImage
GdipCreateFromHDC
GdipSetStringFormatFlags
GdipDrawString
GdipCloneBrush
GdipAlloc
GdipFree
GdipDeleteBrush
GdipCreateSolidFill
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteFont
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipLoadImageFromFile
GdipImageSelectActiveFrame
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipBitmapLockBits
GdipSetStringFormatTrimming
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipLoadImageFromFileICM

Sections

.text
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9eb058be6721ddcd02b0599aaa273714

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

psapi

winmm

msimg32

ws2_32

resloader

comctl32

gdiplus

Sections

.text Size: 272KB - Virtual size: 271KB

.rdata Size: 52KB - Virtual size: 52KB

.data Size: 12KB - Virtual size: 20KB

.rsrc Size: 57KB - Virtual size: 56KB

.text
Size: 272KB - Virtual size: 271KB

.rdata
Size: 52KB - Virtual size: 52KB

.data
Size: 12KB - Virtual size: 20KB

.rsrc
Size: 57KB - Virtual size: 56KB