eda8f3a3206256510d8ad362a5ffc15b7460d7d74415ab052f765814a189c231

Sharing

Copy URL Twitter E-mail

General

Target

eda8f3a3206256510d8ad362a5ffc15b7460d7d74415ab052f765814a189c231
Size

841KB
MD5

049a78235f8c912e25ba432f86216c00
SHA1

f24e1a91ed0c9b82259e2668bc3c28cd77bd53d7
SHA256

eda8f3a3206256510d8ad362a5ffc15b7460d7d74415ab052f765814a189c231
SHA512

f15a1baa4fcae326bbe758669b22d5260747bae939a135c665c0136b8ae371be2a64fc4ae3fb556cc53f9ea999c6e4fda75e9138f15470c68fe1a7b6ab0ce06b
SSDEEP

12288:7E7VkkZILECweDeWiPk/e5w43c3owu9pRZ6Gb3KAxD8TAKKX7Hos3rir8rLx0j8:Iq9Lk2ea4M14/8ED8MKKLH7g8n3

Score

N/A

Malware Config

Signatures

Files

eda8f3a3206256510d8ad362a5ffc15b7460d7d74415ab052f765814a189c231
.exe windows x86

c907299d68642537c05322ca5421018f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GlobalFlags
GetStdHandle
CopyFileW
MoveFileExW
SetEndOfFile
LockResource
InitializeCriticalSection
GlobalHandle
GlobalAddAtomW
WaitForSingleObject
QueryPerformanceCounter
CreateFileW
LoadLibraryW
TlsAlloc
lstrcmpW
GetModuleHandleW
FileTimeToLocalFileTime
GetThreadTimes
GetVersion
LeaveCriticalSection
IsDebuggerPresent
lstrlenA
Sleep
VirtualFree
ConvertDefaultLocale
FreeEnvironmentStringsW
SuspendThread
GetSystemDirectoryW
DeleteFileW
GetConsoleMode
GlobalLock
GetFileSize
VirtualQuery
GlobalSize
DeleteAtom
GetVersionExW
HeapSetInformation
SetStdHandle
GetProcessHeap
GetThreadLocale
GetProcessTimes
CreateMutexW
GetSystemTimeAsFileTime
TlsGetValue
VirtualUnlock
GlobalGetAtomNameW
GetSystemInfo
FreeResource
GetCommandLineW
FindNextFileW
HeapSize
SizeofResource
TlsFree
DeleteCriticalSection
lstrcmpA
IsValidCodePage
GetTempPathW
SetUnhandledExceptionFilter
GetStartupInfoA
ExitProcess
GlobalReAlloc
UnhandledExceptionFilter
LoadResource
FlushInstructionCache
GetWindowsDirectoryW
GetCurrentThread
HeapReAlloc
GlobalFindAtomW
FindFirstFileW
SetErrorMode
GetProcAddress
GetFileSizeEx
HeapDestroy
GetTickCount
lstrcmpiW
GetCurrentProcess
GetEnvironmentStringsW
FormatMessageW
WideCharToMultiByte
RaiseException
HeapCreate
GetConsoleCP
GetLongPathNameW
GetDriveTypeW
FreeLibrary
UnlockFile
GetCurrentProcessId
HeapFree
SetEnvironmentVariableA
GetModuleFileNameW
GetFullPathNameW
InterlockedCompareExchange
SearchPathW
ReleaseMutex
GetCurrentThreadId
IsValidLocale
FlushFileBuffers
GlobalAlloc
LocalReAlloc
InterlockedDecrement
lstrlenW
SetFilePointer
ExitThread
EnterCriticalSection
FileTimeToSystemTime
GetLocaleInfoW
GetUserDefaultLCID
GetUserDefaultUILanguage
GetFileInformationByHandle
FindResourceW
GetLocaleInfoA
GetSystemDefaultUILanguage
CloseHandle
CreateThread
FindFirstFileExW
CompareStringW
GetProfileIntW
VirtualAlloc
MultiByteToWideChar
LocalAlloc
PeekNamedPipe
ReadFile
CompareStringA
GetOEMCP
FindClose
GetFileTime
VirtualLock
GlobalMemoryStatus
SetHandleCount
GetFileType
WriteFile
InterlockedExchange
RtlUnwind
WritePrivateProfileStringW
SetLastError
GlobalUnlock
InterlockedIncrement
EnumSystemLocalesA
GetProcessWorkingSetSize
VirtualProtect
LoadLibraryExW
GlobalDeleteAtom
GetACP
GlobalFree
LockFile
HeapAlloc
FindResourceExW
DuplicateHandle
HeapQueryInformation
WriteConsoleW
TlsSetValue
LoadLibraryA
MulDiv
GetFileAttributesExW
GetVolumeInformationW
ResumeThread
GetStartupInfoW
CreateEventW
LocalFree
GetCurrentDirectoryW
GetFileAttributesW
IsProcessorFeaturePresent
GetTempFileNameW
GetNumberFormatW
GetPrivateProfileIntW
InitializeCriticalSectionAndSpinCount
lstrcpyW
GetLastError
GetTimeZoneInformation
GetStringTypeW
GetPrivateProfileStringW
SetThreadPriority

user32

GetMenuItemInfoW
GetCaretPos
GetScrollInfo
GetMonitorInfoW
CloseClipboard
SetWindowPlacement
MessageBeep
GetNextDlgGroupItem
IntersectRect
GetLastActivePopup
UnregisterClassA
ShowWindow
GetDesktopWindow
NotifyWinEvent
DrawTextExW
GetMessageTime
GetFocus
GetActiveWindow
CreateDialogIndirectParamW
GetClassLongW
HideCaret
GetClassInfoW
IsMenu
EnumChildWindows
IsRectEmpty
CheckDlgButton
GetMessageW
DestroyCursor
LoadCursorW
InvertRect
LoadMenuW
SendMessageW
GetKeyboardState
GetPropW
SetFocus
CallWindowProcW
GetWindowTextLengthW
DrawEdge
FrameRect
PostThreadMessageW
GetKeyboardLayout
GetScrollPos
MapWindowPoints
AdjustWindowRectEx
DeferWindowPos
GetMenuCheckMarkDimensions
CreateAcceleratorTableW
CopyIcon
CheckMenuItem
TranslateMDISysAccel
GetWindowPlacement
GetDialogBaseUnits
WaitMessage
GetForegroundWindow
RedrawWindow
GetCapture
SendDlgItemMessageW
PostMessageW
SetCapture
SetWindowContextHelpId
OpenClipboard
InsertMenuItemW
IsWindow
CopyImage
GetScrollRange
GetIconInfo
BeginDeferWindowPos
SetScrollPos
WindowFromPoint
RemoveMenu
DestroyAcceleratorTable
SetWindowLongW
GetClassNameW
AppendMenuW
ShowOwnedPopups
GetSysColorBrush
BeginPaint
GetNextDlgTabItem
IsWindowEnabled
SetScrollInfo
GetWindowRect
RegisterClipboardFormatW
UnhookWindowsHookEx
CallNextHookEx
ClipCursor
UnregisterClassW
CreatePopupMenu
GetKeyNameTextW
GetDlgCtrlID
ReuseDDElParam
SetForegroundWindow
IsChild
GetSystemMenu
DrawFrameControl
DrawTextW
ScreenToClient
SetTimer
GetSubMenu
ClientToScreen
IsDialogMessageW
ReleaseCapture
SetWindowRgn
GetSystemMetrics
MapVirtualKeyW
GetQueueStatus
ModifyMenuW
DrawFocusRect
RegisterWindowMessageW
GetWindowLongW
GetDlgItemTextW
GetDC
InvalidateRect
GetTopWindow
SetClipboardData
CreateWindowExW
MapDialogRect
PeekMessageW
GetKeyState
UpdateLayeredWindow
LockWindowUpdate
SetRectEmpty
MoveWindow
DestroyMenu
ReleaseDC
GrayStringW
GetUpdateRect
DrawIcon
CharNextW
GetClassInfoExW
DispatchMessageW
OffsetRect
PostQuitMessage
MonitorFromPoint
SendDlgItemMessageA
SetPropW
IsIconic
EnableWindow
DeleteMenu
SetActiveWindow
SetLayeredWindowAttributes
DestroyIcon
IsWindowVisible
GetAsyncKeyState
ShowScrollBar
SystemParametersInfoW
PtInRect
UnpackDDElParam
CharUpperBuffW
FillRect
EnableScrollBar
CopyRect
MessageBoxW
DrawMenuBar
DefWindowProcW
GetWindow
EqualRect
SetWindowsHookExW
InflateRect
SetScrollRange
GetMenuDefaultItem
GetWindowTextW
SetCursor
LoadAcceleratorsW
SetMenuDefaultItem
GetMessagePos
GetProcessWindowStation
GetWindowRgn
InvalidateRgn
CreateMenu
GetMenuItemCount
GetMenuItemID
GetMenu
DestroyWindow
UnionRect
LoadBitmapW
WinHelpW
RealChildWindowFromPoint
UpdateWindow
SetMenu
CharUpperW
IsClipboardFormatAvailable
SubtractRect
ValidateRect
GetOpenClipboardWindow
GetClientRect
CreateIconFromResourceEx
EnumDisplayMonitors
ToUnicodeEx
ScrollWindow
DefMDIChildProcW
DefFrameProcW
MapVirtualKeyExW
GetWindowThreadProcessId
SetParent
DrawIconEx
EndDialog
SetDlgItemTextW
GetMenuState
GetSysColor
EndPaint
TranslateAcceleratorW
InsertMenuW
GetDlgItem
KillTimer
GetParent
SetCursorPos
EnableMenuItem
TrackPopupMenu
EmptyClipboard
RemovePropW
CreateIcon
TabbedTextOutW
IsCharLowerW
RegisterClassW
GetMenuStringW
GetDoubleClickTime
DrawStateW
MonitorFromWindow
LoadIconW
SetClassLongW
EndDeferWindowPos
SetMenuItemBitmaps
IsZoomed
SetRect
GetWindowDC
SetWindowTextW
SetWindowPos
EnumWindows
DialogBoxParamW
LoadImageW
TranslateMessage
GetCursorPos
DialogBoxIndirectParamW
GetClipboardViewer

gdi32

SetRectRgn
CreateEllipticRgn
SetViewportExtEx
ScaleViewportExtEx
GetBoundsRect
CreatePatternBrush
CreateFontW
SetLayout
CreateRectRgn
SetWindowOrgEx
GetBkMode
RoundRect
CreateSolidBrush
GetBkColor
PatBlt
GetObjectW
CreateFontIndirectW
SetBkColor
GetTextColor
SelectPalette
CreateRoundRectRgn
GetTextFaceW
GetRgnBox
DPtoLP
GetLayout
GetTextCharsetInfo
FrameRgn
RestoreDC
SetWindowExtEx
RealizePalette
CopyMetaFileW
GetViewportOrgEx
ExtSelectClipRgn
GetWindowOrgEx
SelectClipRgn
GetCurrentObject
GetTextExtentPoint32W
CreatePalette
ExtTextOutW
GetPixel
GetSystemPaletteEntries
ExtFloodFill
GetNearestPaletteIndex
CreateDIBitmap
MoveToEx
GetMapMode
SetPolyFillMode
SetDIBits
SetBitmapBits
OffsetWindowOrgEx
SetROP2
PtVisible
Rectangle
SetViewportOrgEx
SelectObject
CreateCompatibleBitmap
Ellipse
GetDeviceCaps
IntersectClipRect
LineTo
OffsetViewportOrgEx
SetPixel
CreatePen
Polyline
CreateCompatibleDC
GetWindowExtEx
ExcludeClipRect
GetViewportExtEx
StretchBlt
EnumFontFamiliesW
SetDIBitsToDevice
GetObjectType
GetTextMetricsW
SaveDC
GetTextExtentPointW
DeleteDC
OffsetRgn
CreateRectRgnIndirect
RectVisible
GetBitmapBits
ScaleWindowExtEx
CreateBitmap
Escape
EnumFontFamiliesExW
FillRgn
CreateDCW
DeleteObject
GetStockObject
LPtoDP
CreateDIBSection
PtInRegion
SetTextColor
SetDIBColorTable
CombineRgn
CreateHatchBrush
Polygon
TextOutW
GetPaletteEntries
SetPaletteEntries
CreatePolygonRgn
SetStretchBltMode
BitBlt
SetTextAlign
SetBkMode
SetMapMode
GetClipBox
SetPixelV

comdlg32

GetFileTitleW
GetSaveFileNameW
GetOpenFileNameW

advapi32

RegEnumKeyW
RegQueryValueExA
RegOpenKeyExA
CheckTokenMembership
AllocateAndInitializeSid
RegCloseKey
FreeSid
CryptGenRandom
RegOpenKeyExW
RegQueryInfoKeyW
OpenProcessToken
RegEnumValueW
RegQueryValueW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
RegQueryValueExW
RegEnumKeyExW
GetTokenInformation

shell32

Shell_NotifyIconW
SHGetDesktopFolder
ShellExecuteExW
ExtractIconExW
DragQueryFileW
SHAppBarMessage
SHGetSpecialFolderLocation
ShellExecuteW
DuplicateIcon
SHBrowseForFolderW
DragFinish
SHGetPathFromIDListW
SHGetFileInfoW

ole32

CoTaskMemAlloc
CoFreeUnusedLibraries
OleIsCurrentClipboard
CoRegisterMessageFilter
OleCreateMenuDescriptor
RevokeDragDrop
CoGetClassObject
OleUninitialize
CLSIDFromProgID
CoCreateInstance
StringFromGUID2
OleDuplicateData
CoTaskMemRealloc
CoRegisterClassObject
StgOpenStorageOnILockBytes
CoInitializeEx
CoTaskMemFree
CoUninitialize
CLSIDFromString
CoCreateGuid
OleGetClipboard
OleTranslateAccelerator
RegisterDragDrop
CoInitialize
OleLockRunning
OleDestroyMenuDescriptor
CoLockObjectExternal
OleInitialize
CoRevokeClassObject
IsAccelerator
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
DoDragDrop
ReleaseStgMedium
OleFlushClipboard
CreateStreamOnHGlobal

oleaut32

VarUI4FromStr
VarBstrCmp
SafeArrayDestroy
VariantChangeType
LoadTypeLi
SysStringLen
SysAllocStringLen
VarBstrCat
VarBstrFromDate
VariantCopy
VariantInit
SysAllocString
OleCreateFontIndirect
SysStringByteLen
UnRegisterTypeLi
VariantClear
SysAllocStringByteLen
SysFreeString
SystemTimeToVariantTime
VariantTimeToSystemTime
RegisterTypeLi

comctl32

ord17
ImageList_DragMove
ImageList_GetIconSize
_TrackMouseEvent
InitCommonControlsEx
ImageList_DragShowNolock

shlwapi

PathRemoveFileSpecW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW

winmm

PlaySoundW

rpcrt4

UuidCreateNil

msimg32

TransparentBlt
AlphaBlend

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

oledlg

OleUIBusyW

gdiplus

GdipGetImagePalette
GdipGetImageGraphicsContext
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectI
GdipCloneImage
GdipCreateFromHDC
GdipFree
GdipAlloc
GdiplusShutdown
GdipCreateBitmapFromScan0
GdiplusStartup
GdipGetImagePaletteSize
GdipSetInterpolationMode
GdipGetImageHeight
GdipGetImageWidth
GdipDeleteGraphics
GdipGetImagePixelFormat
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipDisposeImage
GdipDrawImageI
GdipCreateBitmapFromStream

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

uxtheme

CloseThemeData
OpenThemeData

Sections

.text
Size: 543KB - Virtual size: 542KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 240KB - Virtual size: 5.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c907299d68642537c05322ca5421018f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

rpcrt4

msimg32

imm32

oledlg

gdiplus

oleacc

uxtheme

Sections

.text Size: 543KB - Virtual size: 542KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 240KB - Virtual size: 5.5MB

.tls Size: - Virtual size: 101B

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 543KB - Virtual size: 542KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 240KB - Virtual size: 5.5MB

.tls
Size: - Virtual size: 101B

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 16KB - Virtual size: 15KB