aab508bd30a0f271c2ed8a3b9b0b7cc7955a606afb147a98fc85499d69617582

Sharing

Copy URL Twitter E-mail

General

Target

aab508bd30a0f271c2ed8a3b9b0b7cc7955a606afb147a98fc85499d69617582
Size

429KB
MD5

895e08a26461a6b2aa2b6f0e284126c3
SHA1

dd3366764ddbc93c54868e7a8cc3df2efa2bd7c0
SHA256

aab508bd30a0f271c2ed8a3b9b0b7cc7955a606afb147a98fc85499d69617582
SHA512

136f785c9385cf3f7c3c8d44d82ccdba7cd415a580bb01f713f6a3fe291b9bd81b7f050a09524b7f9fb0caf48eadb054df63024f2bac699daf5fc82f92567fde
SSDEEP

3072:UbKC0ZatikvPn4mDJij1rOvZo+5i45tlOeqpoziRrmV0BCJx2CU0IJH8Jlb:s05kL/ZoWkSWRrmVACx9UrSrb

Score

N/A

Malware Config

Signatures

Files

aab508bd30a0f271c2ed8a3b9b0b7cc7955a606afb147a98fc85499d69617582
.exe windows x86

788103b59f5735291b7e77b0ff5a39a6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextFileA
DeleteFileA
FindFirstFileA
Sleep
GetCurrentProcessId
GetCommandLineA
lstrcmpA
CompareStringW
CompareStringA
GetTimeZoneInformation
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
InitializeCriticalSectionAndSpinCount
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
FindClose
GetOEMCP
GetCPInfo
HeapSize
HeapReAlloc
VirtualAlloc
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetCurrentThread
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
RemoveDirectoryA
GetLocalTime
SystemTimeToFileTime
CompareFileTime
VirtualProtect
lstrcatA
CreateFileA
GetModuleFileNameA
FindResourceA
LoadResource
LockResource
GetFileSize
ReadFile
WideCharToMultiByte
SizeofResource
WriteFile
GetCurrentProcess
CloseHandle
GetACP
LoadLibraryA
OutputDebugStringA
GetProcAddress
lstrcmpiA
ExitProcess
lstrlenA
CreateMutexA
GetLastError
lstrcpyA
GetModuleHandleA
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
GetModuleHandleW
RtlUnwind
HeapAlloc
RaiseException
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
SetEnvironmentVariableA

user32

CopyRect
FrameRect
InflateRect
DrawTextA
DrawIconEx
GetDesktopWindow
GetWindowDC
ReleaseDC
GetSystemMetrics
CreatePopupMenu
InsertMenuItemA
MessageBeep
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
SetForegroundWindow
GetCursorPos
TrackPopupMenuEx
DestroyWindow
DialogBoxParamA
DefWindowProcA
GetDlgItemTextA
wsprintfA
FindWindowA
EnableWindow
PostMessageA
IsDlgButtonChecked
SendMessageA
UpdateWindow
SendDlgItemMessageA
GetDlgItem
SetClassLongA
GetSysColor
EndDialog
GetDlgCtrlID
RegisterHotKey
LoadCursorA
RegisterClassExA
CreateWindowExA
MessageBoxA
SetMenuDefaultItem
LoadMenuA
GetSubMenu
LoadIconA
UnregisterHotKey

gdi32

CreateSolidBrush
CreatePen
SetBkMode
MoveToEx
LineTo
GetStockObject
SelectObject
GetTextExtentPoint32A
CreateFontA
CreateBrushIndirect
SetBkColor
SetTextColor
DeleteObject

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetFileSecurityA
RegDeleteKeyA
RegOpenKeyA
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegDeleteValueA

shell32

ShellExecuteExA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
SHGetFolderPathA
Shell_NotifyIconA

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.my3win
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

788103b59f5735291b7e77b0ff5a39a6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 104KB - Virtual size: 104KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 11KB - Virtual size: 16KB

.my3win Size: 196KB - Virtual size: 196KB

.rsrc Size: 99KB - Virtual size: 98KB

.text
Size: 104KB - Virtual size: 104KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 11KB - Virtual size: 16KB

.my3win
Size: 196KB - Virtual size: 196KB

.rsrc
Size: 99KB - Virtual size: 98KB