fbe7ff558c021228f4e688ede77dd39af5717829f00bc5af38751775bfac2ab8

Sharing

Copy URL Twitter E-mail

General

Target

fbe7ff558c021228f4e688ede77dd39af5717829f00bc5af38751775bfac2ab8
Size

225KB
MD5

078f02732aa7e2f368e15f0f89ecb723
SHA1

0504d42b190798bd89cb7fe8e4da92e61116f169
SHA256

fbe7ff558c021228f4e688ede77dd39af5717829f00bc5af38751775bfac2ab8
SHA512

c0f02231b46871ba86f6b65f360e0f3931e84c38d709aab4c7bc803252aacbd22576075700adaf95bc2104df14e0cdae42f81f5a6c81ea3072845fd35a3e4d5f
SSDEEP

3072:94/LkixsTB6kiov4ZHwJaKy3PxLzyoewoZBqDekHaEWjncdbQB+eNa7+D:WtG6kKV6GxLzyCoPqDBHzWjyG+eo7

Score

N/A

Malware Config

Signatures

Files

fbe7ff558c021228f4e688ede77dd39af5717829f00bc5af38751775bfac2ab8
.exe windows x86

dd3d981c4ded3ad77963a499aec2a73c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatW
GetWindowsDirectoryW
GetProcessHeap
CreateFileW
GetProcAddress
lstrcmpi
lstrcmpW
_lopen
_llseek
_lclose
WriteTapemark
WritePrivateProfileSectionW
WritePrivateProfileSectionA
WriteFileGather
WriteFileEx
WriteFile
WriteConsoleOutputCharacterA
WriteConsoleOutputA
VirtualFreeEx
VerifyVersionInfoW
UpdateResourceW
UnlockFile
TryEnterCriticalSection
SystemTimeToTzSpecificLocalTime
Sleep
SignalObjectAndWait
SetWaitableTimer
SetVolumeMountPointW
SetTapeParameters
SetLocalTime
SetHandleCount
SetFileAttributesW
SetErrorMode
SetConsoleTitleW
SetConsoleDisplayMode
SetConsoleActiveScreenBuffer
ResetEvent
ReleaseMutex
ReadConsoleW
QueryPerformanceCounter
QueryInformationJobObject
QueryDosDeviceW
Process32NextW
PeekConsoleInputW
PeekConsoleInputA
OpenSemaphoreA
OpenEventA
LocalHandle
LocalFileTimeToFileTime
IsDBCSLeadByteEx
HeapDestroy
GlobalHandle
GetTickCount
GetThreadLocale
GetTempPathW
GetTempFileNameA
GetTapePosition
GetSystemTimeAdjustment
GetSystemTime
GetSystemInfo
GetStartupInfoW
GetProcessVersion
GetProcessShutdownParameters
GetPrivateProfileStringA
GetPrivateProfileSectionW
GetDriveTypeW
GetDiskFreeSpaceA
GetCurrentThreadId
GetCurrentDirectoryW
GetCurrencyFormatA
GetComputerNameW
GetComputerNameExA
GetCompressedFileSizeA
GetAtomNameW
AllocConsole
FindFirstVolumeMountPointW
FindFirstVolumeA
FindFirstFileExA
FindAtomW
EscapeCommFunction
EnumTimeFormatsA
EnumResourceNamesA
EnumCalendarInfoA
DnsHostnameToComputerNameW
DisableThreadLibraryCalls
DeleteFileA
DefineDosDeviceW
CreateTimerQueue
CreateNamedPipeA
CreateEventW
CreateEventA
CreateDirectoryExW
ContinueDebugEvent
CompareStringW
CommConfigDialogA
CallNamedPipeW
Beep
AreFileApisANSI
LoadLibraryA

user32

DragDetect
DispatchMessageA
DestroyMenu
DefMDIChildProcW
DefFrameProcA
DdeSetQualityOfService
DdeQueryStringW
DdeNameService
DdeCreateStringHandleW
DdeAbandonTransaction
CreatePopupMenu
CreateIconFromResourceEx
CreateIconFromResource
CreateDialogParamW
CopyAcceleratorTableA
CheckRadioButton
CharUpperA
CharToOemBuffA
CharLowerBuffW
CallWindowProcW
CallWindowProcA
CallMsgFilterA
BroadcastSystemMessageW
BroadcastSystemMessageA
BeginPaint
DragObject
DrawFocusRect
DrawStateA
DrawTextA
EnableMenuItem
EndDialog
EnumClipboardFormats
EnumDesktopsA
EnumPropsA
FlashWindow
GetCapture
GetCaretPos
GetClassInfoW
GetClassLongW
GetClassNameA
GetClipCursor
GetClipboardFormatNameA
GetClipboardViewer
GetCursor
GetFocus
GetListBoxInfo
GetMenuItemCount
GetMenuItemRect
GetMenuStringA
GetScrollPos
GetThreadDesktop
GetWindowDC
GetWindowPlacement
GetWindowThreadProcessId
IMPQueryIMEW
InflateRect
InsertMenuW
IsWindow
KillTimer
LoadCursorFromFileW
LoadIconW
LoadImageA
LoadKeyboardLayoutA
LoadMenuA
MapVirtualKeyExA
MapVirtualKeyW
MapWindowPoints
MsgWaitForMultipleObjects
OpenInputDesktop
PackDDElParam
PeekMessageA
RedrawWindow
RegisterClassExA
RegisterHotKey
SendInput
SendMessageA
SetActiveWindow
SetCaretPos
SetClassWord
SetKeyboardState
SetMenu
VkKeyScanExA
UnregisterDeviceNotification
UnregisterClassW
UnhookWindowsHook
TranslateMDISysAccel
TrackMouseEvent
SystemParametersInfoA
SwitchToThisWindow
SetWindowPos
SetPropA
SetMenuItemInfoA

gdi32

FlattenPath
AbortPath
AngleArc
Arc
CheckColorsInGamut
ColorCorrectPalette
CreateBitmap
CreateBitmapIndirect
CreateColorSpaceA
CreatePolyPolygonRgn
EngAssociateSurface
EngCreateBitmap
EngDeletePath
EngFillPath
EngStretchBlt
EngStrokePath
EngUnlockSurface
EnumObjects
ExcludeClipRect
ExtEscape
ExtFloodFill
FONTOBJ_pvTrueTypeFontFile
FONTOBJ_pxoGetXform
FixBrushOrgEx
GdiAddGlsRecord
GdiCleanCacheDC
GdiConsoleTextOut
GdiConvertMetaFilePict
GdiConvertPalette
GdiConvertRegion
GdiCreateLocalMetaFilePict
GdiEntry3
GdiEntry7
GdiGetLocalBrush
GdiGetSpoolMessage
GdiPrinterThunk
GdiProcessSetup
GdiQueryFonts
GdiQueryTable
GdiReleaseLocalDC
GdiSwapBuffers
GetBrushOrgEx
GetCharABCWidthsI
GetColorSpace
GetDCOrgEx
GetDIBits
GetDeviceGammaRamp
GetEnhMetaFilePixelFormat
GetGlyphIndicesA
GetGlyphOutline
GetLogColorSpaceW
GetMetaFileBitsEx
GetMetaRgn
GetMiterLimit
GetObjectType
GetStockObject
GetTextCharsetInfo
GetTextExtentPointA
GetTextExtentPointI
GetTextMetricsA
IntersectClipRect
InvertRgn
NamedEscape
PATHOBJ_bEnum
PaintRgn
PlayMetaFile
PolyBezier
PolyTextOutA
PolyTextOutW
QueryFontAssocStatus
RealizePalette
Rectangle
RemoveFontMemResourceEx
RemoveFontResourceA
RemoveFontResourceExW
RemoveFontResourceTracking
ResetDCA
STROBJ_dwGetCodePage
SetBitmapDimensionEx
SetEnhMetaFileBits
SetMapMode
SetMapperFlags
SetMiterLimit
SetTextColor
SetWinMetaFileBits
SetWindowOrgEx
SwapBuffers
UpdateColors
UpdateICMRegKeyA
WidenPath
XLATEOBJ_cGetPalette
XLATEOBJ_iXlate
AbortDoc

shell32

SHGetDiskFreeSpaceExA
ShellExecuteW
ShellExecuteExW
ShellExecuteExA
ShellExecuteEx
ShellAboutW
ShellAboutA
SHQueryRecycleBinW
SHPathPrepareForWriteA
SHLoadNonloadedIconOverlayIdentifiers
SHLoadInProc
SHInvokePrinterCommandA
CheckEscapesW
CommandLineToArgvW
DoEnvironmentSubstA
DragAcceptFiles
DragFinish
DragQueryFileA
DragQueryFileAorW
DragQueryFileW
DuplicateIcon
ExtractAssociatedIconExA
ExtractAssociatedIconExW
ExtractIconA
ExtractIconExA
ExtractIconExW
FindExecutableW
SHAppBarMessage
SHBindToParent
SHBrowseForFolder
SHBrowseForFolderA
SHCreateDirectoryExW
SHCreateProcessAsUserW
SHEmptyRecycleBinA
SHEmptyRecycleBinW
SHFileOperationA
SHFileOperationW
SHGetDataFromIDListA
SHGetDataFromIDListW
SHGetSpecialFolderPathW
SHGetFileInfo
SHGetFileInfoA
SHGetFileInfoW
SHGetFolderLocation
SHGetFolderPathA
SHGetFolderPathW
SHGetIconOverlayIndexA
SHGetIconOverlayIndexW
SHGetInstanceExplorer
SHGetMalloc
SHGetPathFromIDList
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetSpecialFolderPathA
Shell_NotifyIcon

ole32

CoMarshalInterThreadInterfaceInStream
CoMarshalInterface
CoQueryReleaseObject
CoRegisterMessageFilter
CoResumeClassObjects
CoSetCancelObject
CoSuspendClassObjects
CoTaskMemFree
CoUninitialize
CreateBindCtx
CreateDataAdviseHolder
CreateOleAdviseHolder
CreateStdProgressIndicator
DllGetClassObjectWOW
FreePropVariantArray
GetClassFile
GetConvertStg
GetHGlobalFromILockBytes
GetHGlobalFromStream
HACCEL_UserFree
HACCEL_UserMarshal
HBITMAP_UserSize
HBRUSH_UserFree
HBRUSH_UserMarshal
HDC_UserMarshal
HDC_UserSize
HDC_UserUnmarshal
HENHMETAFILE_UserFree
HICON_UserUnmarshal
HMENU_UserMarshal
HMETAFILEPICT_UserMarshal
HMETAFILEPICT_UserSize
HMETAFILEPICT_UserUnmarshal
HMETAFILE_UserFree
HMETAFILE_UserMarshal
HWND_UserFree
HWND_UserSize
OleCreate
OleCreateEmbeddingHelper
OleCreateFromFile
OleCreateFromFileEx
OleCreateLinkFromData
OleCreateLinkToFile
OleCreateStaticFromData
OleDoAutoConvert
OleGetAutoConvert
OleIsRunning
OleLoad
OleLoadFromStream
OleMetafilePictFromIconAndLabel
OleRegEnumFormatEtc
OleRegEnumVerbs
OleRegGetMiscStatus
OleSetClipboard
OleUninitialize
ProgIDFromCLSID
PropStgNameToFmtId
PropVariantCopy
ReadFmtUserTypeStg
ReleaseStgMedium
SNB_UserMarshal
SetConvertStg
StgConvertPropertyToVariant
StgConvertVariantToProperty
StgGetIFillLockBytesOnFile
UtGetDvtd32Info
WriteOleStg
CoLoadLibrary
CoIsOle1Class
CoInitializeWOW
CoImpersonateClient
CoGetObject
CoGetMarshalSizeMax
CoEnableCallCancellation
CoDosDateTimeToFileTime
CoDeactivateObject
CoCreateInstanceEx
CLIPFORMAT_UserUnmarshal
CoGetCallContext

shlwapi

StrChrIA
StrChrIW
StrChrW
StrCmpNA
StrCmpNIA
StrCmpNW
StrRChrA
StrRChrIA
StrRStrIW
StrStrIA
StrStrIW

Sections

.text
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

kiii1
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

kiii2
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kiii3
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kiii4
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd3d981c4ded3ad77963a499aec2a73c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

shlwapi

Sections

.text Size: 182KB - Virtual size: 181KB

.data Size: 512B - Virtual size: 588B

kiii1 Size: 5KB - Virtual size: 4KB

kiii2 Size: 5KB - Virtual size: 4KB

.kiii3 Size: 5KB - Virtual size: 4KB

.kiii4 Size: 5KB - Virtual size: 4KB

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 182KB - Virtual size: 181KB

.data
Size: 512B - Virtual size: 588B

kiii1
Size: 5KB - Virtual size: 4KB

kiii2
Size: 5KB - Virtual size: 4KB

.kiii3
Size: 5KB - Virtual size: 4KB

.kiii4
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 3KB - Virtual size: 2KB