ac8b7aef9d7c928985de97ead6ab32dd7de4a2b1d9da3be2f7a75e70eb614512

Sharing

Copy URL Twitter E-mail

General

Target

ac8b7aef9d7c928985de97ead6ab32dd7de4a2b1d9da3be2f7a75e70eb614512
Size

720KB
MD5

1b5a7e255882875b18f0d8f1bf318930
SHA1

f86585ce3fc90224eebada0164ee01f17f95cc3f
SHA256

ac8b7aef9d7c928985de97ead6ab32dd7de4a2b1d9da3be2f7a75e70eb614512
SHA512

3d800cb3e601ca4fb4447aa83ccd2067100aae4ed1616644d2e5342b629f30b20e690cb1b27436676fcf394f2d8a8cfe915bc0bc341246e7631188e446e9fc0c
SSDEEP

12288:jrg3B4lXY47y3hx8PSZ6c8c5L4c/w6DMYsUYpjjx9sTs+Lixxcw9e1g3u0/lGFln:fLlXYLWSZ6Fch5lRTjVw9eqlGz3Yvq

Score

N/A

Malware Config

Signatures

Files

ac8b7aef9d7c928985de97ead6ab32dd7de4a2b1d9da3be2f7a75e70eb614512
.exe windows x86

de0b3fc2067469471ec72122434269cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
GlobalFlags
GetFileTime
SetErrorMode
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
RtlUnwind
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
ExitProcess
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
GlobalHandle
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GlobalReAlloc
TlsGetValue
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GetModuleHandleA
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
WritePrivateProfileStringW
FreeResource
GetCurrentProcessId
GlobalAddAtomW
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
lstrcmpW
GetModuleHandleW
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
MulDiv
SetLastError
CopyFileW
GetExitCodeProcess
CreateThread
CreateProcessW
Sleep
GetTickCount
GetModuleFileNameW
GetFileAttributesW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
SetFilePointer
SetEndOfFile
LoadLibraryW
FreeLibrary
CreateEventW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalFree
GetDiskFreeSpaceExW
GetPrivateProfileIntW
GetPrivateProfileStringW
TerminateProcess
GetTempPathW
CreateDirectoryW
WideCharToMultiByte
CreateFileW
GetFileSize
ReadFile
WriteFile
FindFirstFileW
FindNextFileW
DeleteFileW
FindClose
RemoveDirectoryW
lstrlenW
InterlockedDecrement
GetVersionExW
GetModuleFileNameA
MultiByteToWideChar
GetProcAddress
lstrlenA
ResetEvent
SetEvent
CreateMutexW
GetLastError
GetCommandLineW
CloseHandle
WaitForSingleObject
FindResourceW
LoadResource
LockResource
FreeEnvironmentStringsW
SizeofResource

user32

PostThreadMessageW
CharNextW
ReleaseCapture
SetCapture
GetSysColorBrush
CharUpperW
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextW
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
RegisterClipboardFormatW
SetForegroundWindow
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
ScreenToClient
EqualRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetSysColor
DestroyMenu
UnhookWindowsHookEx
GetWindow
SetWindowContextHelpId
MapDialogRect
DrawIcon
EnableMenuItem
UnregisterClassA
SendMessageW
GetSystemMenu
IsIconic
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
MessageBoxW
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
UnregisterClassW
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
IsRectEmpty
MapWindowPoints
CopyAcceleratorTableW
GetWindowRect
GetClientRect
EnableWindow
LoadIconW
GetSystemMetrics
SetCursor
SetWindowPos
LoadCursorW
UpdateWindow
InvalidateRect
IsWindow
PostMessageW
LoadImageW
DrawTextW
SetRect
CopyRect
PtInRect
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
PostQuitMessage
CheckMenuItem
ModifyMenuW
GetParent
GetFocus
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ValidateRect
GetCursorPos
PeekMessageW
GetKeyState
IsWindowVisible
GetActiveWindow

gdi32

ExtSelectClipRgn
DeleteDC
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetRgnBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
CreateCompatibleDC
SetMapMode
SetBkMode
SetBkColor
GetClipBox
ExtTextOutW
CreateBitmap
GetBkMode
GetCurrentPositionEx
GetDeviceCaps
SaveDC
GetTextExtentPoint32W
RestoreDC
GetStockObject
CreateFontIndirectW
GetTextColor
SetTextColor
GetObjectW
DeleteObject
BitBlt
SelectObject

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegCloseKey
RegOpenKeyW
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumValueW

shell32

ShellExecuteW
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHBrowseForFolderW
CommandLineToArgvW

comctl32

ord17

shlwapi

PathFindFileNameW
UrlUnescapeW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoLoadLibrary
CoFreeLibrary
CoSetProxyBlanket
CoCreateInstance
CoInitializeSecurity
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoInitialize

oleaut32

SysFreeString
SysStringLen
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString

ws2_32

htons
htonl

wininet

InternetCanonicalizeUrlW
HttpOpenRequestW
InternetConnectW
HttpSendRequestW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpQueryInfoW
HttpAddRequestHeadersW
InternetErrorDlg
InternetQueryDataAvailable
InternetCrackUrlW
InternetQueryOptionW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 368KB - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 232KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

de0b3fc2067469471ec72122434269cb

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

wininet

version

Sections

.text Size: 368KB - Virtual size: 365KB

.rdata Size: 100KB - Virtual size: 99KB

.data Size: 16KB - Virtual size: 30KB

.rsrc Size: 232KB - Virtual size: 228KB

.text
Size: 368KB - Virtual size: 365KB

.rdata
Size: 100KB - Virtual size: 99KB

.data
Size: 16KB - Virtual size: 30KB

.rsrc
Size: 232KB - Virtual size: 228KB