b94e382c65de2509e94f5935702d6ecdc644cb4bdcfcbdd41139a0e47bf87aab

Sharing

Copy URL Twitter E-mail

General

Target

b94e382c65de2509e94f5935702d6ecdc644cb4bdcfcbdd41139a0e47bf87aab
Size

1.4MB
MD5

b7d675e959b3e7ac86b53df69a9a631d
SHA1

379127926b934eed24bf66b96ec0fa2c0df06b7b
SHA256

b94e382c65de2509e94f5935702d6ecdc644cb4bdcfcbdd41139a0e47bf87aab
SHA512

d50f65116353a71bb0f972a9df8f0f26c9f18c41f9316c7e22cc88d565b568a426042a289ddc085e66127643f212865c596e7566937142e2a3244ae6e5061e37
SSDEEP

24576:TAOelaAts9cGtfeMW7bTZ5UECMVJH7OMBVahFz8r:TMttFTV/VOcCFAr

Score

N/A

Malware Config

Signatures

Files

b94e382c65de2509e94f5935702d6ecdc644cb4bdcfcbdd41139a0e47bf87aab
.exe windows x86

3c09d943fe440f713e90fd621d3c8af0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleMode
SetConsoleTitleW
FlushConsoleInputBuffer
FreeConsole
GetCurrentThreadId
ExpandEnvironmentStringsW
FindNextChangeNotification
EnterCriticalSection
LeaveCriticalSection
FindFirstChangeNotificationW
FindCloseChangeNotification
GetVersionExW
InitializeCriticalSection
DeleteCriticalSection
DeleteFileW
DeviceIoControl
GetDriveTypeW
SetLastError
GlobalReAlloc
RemoveDirectoryW
SetFileTime
GetConsoleMode
AllocConsole
WaitForSingleObject
GetStdHandle
SetCurrentDirectoryW
GetCurrentDirectoryW
ReadFile
FormatMessageW
CreateProcessW
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
GetConsoleCP
VirtualAlloc
GetFileSize
QueryPerformanceCounter
VirtualFree
HeapCreate
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
LoadLibraryA
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
GetStartupInfoA
SetHandleCount
LCMapStringA
LCMapStringW
RtlUnwind
RaiseException
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExitThread
HeapReAlloc
GetSystemTimeAsFileTime
GetStartupInfoW
ExitProcess
Sleep
GetFileType
SetStdHandle
CreateDirectoryW
OutputDebugStringW
GetVersion
CreateEventW
CreateSemaphoreW
ResetEvent
ReleaseSemaphore
SetEvent
CreateFileMappingW
MoveFileW
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
SetFilePointer
GetTimeFormatW
GetDateFormatW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
EnumSystemLocalesW
GlobalUnlock
GlobalLock
GlobalAlloc
MultiByteToWideChar
GetFileAttributesW
GetFileTime
GetFullPathNameW
FindClose
FindNextFileW
FindFirstFileW
CompareFileTime
WriteFile
WideCharToMultiByte
CreateFileW
CloseHandle
GetModuleHandleA
CreateThread
GetTickCount
GlobalFree
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceW
HeapFree
GetProcessHeap
HeapAlloc
FreeLibrary
GetProcAddress
LoadLibraryW
GetLastError
GetModuleHandleW
GetModuleFileNameW
GetCurrentProcessId
GetLocaleInfoW

user32

TranslateAcceleratorW
TranslateMessage
DispatchMessageW
GetIconInfo
DeleteMenu
SendMessageW
LoadStringW
SetWindowLongW
CheckDlgButton
GetWindowLongW
IsDlgButtonChecked
SetMenuItemInfoW
SetMenu
DestroyIcon
CheckMenuItem
AdjustWindowRectEx
GetFocus
PostQuitMessage
GetForegroundWindow
GetWindowPlacement
GetMessageW
LoadAcceleratorsW
MessageBoxA
IsDialogMessageW
CloseClipboard
SetClipboardData
EndDialog
DialogBoxParamW
GetDC
SendDlgItemMessageA
IsWindow
CreateCursor
DialogBoxIndirectParamW
GetSystemMenu
MessageBeep
DrawTextExW
MoveWindow
ReleaseDC
GetDlgItem
GetSysColor
EmptyClipboard
OpenClipboard
CharUpperW
WindowFromPoint
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetMenuStringW
IsIconic
DestroyWindow
KillTimer
SetTimer
AppendMenuW
CreatePopupMenu
InsertMenuItemW
GetMenuItemCount
GetMenuItemInfoW
LoadIconW
ReleaseCapture
SetCapture
PtInRect
ScreenToClient
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetWindowTextA
CharUpperBuffA
SetFocus
IsWindowVisible
SetDlgItemInt
GetDlgItemInt
DestroyMenu
TrackPopupMenu
SetForegroundWindow
GetCursorPos
EnableMenuItem
GetSubMenu
LoadMenuW
GetSystemMetrics
ShowWindow
SendDlgItemMessageW
EnableWindow
IsWindowEnabled
LoadImageW
GetWindow
SetWindowTextA
GetWindowTextLengthW
GetWindowTextW
CallWindowProcW
SetCursor
GetClassNameW
PostMessageW
CreateWindowExW
SystemParametersInfoW
SetWindowPos
GetWindowRect
ClientToScreen
SetScrollInfo
GetScrollInfo
SetDlgItemTextW
GetAsyncKeyState
GetDlgItemTextW
SetWindowTextW
RegisterClassExW
LoadCursorW
GetClassInfoExW
DefWindowProcW
InvalidateRect
EndPaint
FillRect
BeginPaint
GetClientRect
GetParent
DrawFocusRect

gdi32

CreateBitmapIndirect
GetStockObject
CreatePen
SelectObject
GetTextExtentPoint32W
CreateSolidBrush
SetTextColor
SetBkColor
ExtTextOutW
Rectangle
DeleteObject
GetObjectW
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
MoveToEx
LineTo
SetTextAlign
BitBlt
CreateFontIndirectA
GetTextMetricsW
SetBkMode
TextOutW
DeleteDC

advapi32

RegCloseKey
RegEnumKeyExW
RegDeleteKeyW
RegEnumKeyW
RegCreateKeyExW
RegSetValueExW
IsTextUnicode
RegQueryValueExW
RegOpenKeyExW

shell32

SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteExW
ShellExecuteW
DragQueryFileW
DragAcceptFiles
SHGetFileInfoW

ole32

OleInitialize
PropVariantClear
CoTaskMemAlloc
ReleaseStgMedium
CoCreateInstance
RevokeDragDrop
DoDragDrop
RegisterDragDrop

oleaut32

SafeArrayCopy
SysStringLen
SafeArrayDestroy
SafeArrayRedim
SafeArrayPutElement
SafeArrayCreateVector
SysFreeString
SysAllocString

comctl32

PropertySheetW
ImageList_Create
ImageList_ReplaceIcon
ord17
CreatePropertySheetPageW

wininet

InternetCloseHandle
InternetGetConnectedState
HttpOpenRequestW
HttpQueryInfoW
HttpAddRequestHeadersW
HttpSendRequestW
InternetConnectW
InternetOpenW
InternetReadFile

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

comdlg32

GetOpenFileNameW
GetSaveFileNameW

Sections

.text
Size: 514KB - Virtual size: 514KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 825KB - Virtual size: 824KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c09d943fe440f713e90fd621d3c8af0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

wininet

version

comdlg32

Sections

.text Size: 514KB - Virtual size: 514KB

.rdata Size: 63KB - Virtual size: 62KB

.data Size: 19KB - Virtual size: 45KB

.rsrc Size: 825KB - Virtual size: 824KB

.text
Size: 514KB - Virtual size: 514KB

.rdata
Size: 63KB - Virtual size: 62KB

.data
Size: 19KB - Virtual size: 45KB

.rsrc
Size: 825KB - Virtual size: 824KB