d55f90e65447091521db7b121f03bcd924657bc65bea3e5ef77b74a3dfa84a3e

Sharing

Copy URL Twitter E-mail

General

Target

d55f90e65447091521db7b121f03bcd924657bc65bea3e5ef77b74a3dfa84a3e
Size

528KB
MD5

fbf148b0a10dd0628bbeeb2b55f462e2
SHA1

7e581302816fc692abc54f5f563abcc1ebff904f
SHA256

d55f90e65447091521db7b121f03bcd924657bc65bea3e5ef77b74a3dfa84a3e
SHA512

fd297eb0f0f30b791c87b2f65f55710afc59bec27669760797a6dde40a2660b59a255a7d184534657c0df47597bfddfb05c77a7c6dc495db1063e3815cee1954
SSDEEP

12288:0Ljj6unXwqYQNMEV+FxUbPynI9TbgUph:A3XJDNMEWxUeI9TbNp

Score

N/A

Malware Config

Signatures

Files

d55f90e65447091521db7b121f03bcd924657bc65bea3e5ef77b74a3dfa84a3e
.exe windows x86

4b637a78b49b75f61ab1e4770b9da21c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
GetCommandLineA
GetStartupInfoA
RtlUnwind
RaiseException
ExitThread
CreateThread
HeapReAlloc
ExitProcess
HeapSize
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
SetUnhandledExceptionFilter
VirtualFree
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
InterlockedExchangeAdd
GetFileSizeEx
UnhandledExceptionFilter
GetOEMCP
GetCurrentDirectoryA
GetCPInfo
LocalFileTimeToFileTime
SetErrorMode
GlobalFlags
SystemTimeToFileTime
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedIncrement
GetModuleHandleW
GetModuleFileNameW
FileTimeToLocalFileTime
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetDiskFreeSpaceA
GetTempFileNameA
GetFileTime
SetFileTime
GlobalAddAtomA
GetPrivateProfileIntA
FreeResource
GetCurrentProcessId
GlobalDeleteAtom
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
CompareStringA
lstrcmpA
CreateFileA
GetFullPathNameA
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiA
GetThreadLocale
GetStringTypeExA
CreateEventA
SuspendThread
SetEvent
GetCurrentThreadId
SetLastError
FormatMessageA
LocalFree
MulDiv
GlobalUnlock
GlobalLock
GlobalSize
GetModuleHandleA
ResumeThread
GetCurrentThread
GetShortPathNameA
VirtualQuery
TerminateProcess
FindNextFileA
FileTimeToSystemTime
GetDriveTypeA
GetCurrentProcess
GetComputerNameA
GetTickCount
GetVolumeInformationA
GlobalMemoryStatus
GetVersionExA
lstrlenA
InterlockedDecrement
MoveFileA
DeleteFileA
FindClose
FindFirstFileA
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
GetFileAttributesA
FreeLibrary
GetProcAddress
LoadLibraryA
GlobalFree
GlobalAlloc
OpenProcess
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
ReleaseMutex
GetModuleFileNameA
GetLastError
CreateMutexA
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
WaitForSingleObject
InterlockedExchange
Sleep
GetStringTypeW

user32

GetNextDlgGroupItem
InvalidateRgn
SetRect
CopyAcceleratorTableA
CharNextA
PostThreadMessageA
DeleteMenu
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
GrayStringA
DrawTextExA
TabbedTextOutA
IsZoomed
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
GetDesktopWindow
TranslateAcceleratorA
ReleaseCapture
SetCapture
ClientToScreen
SetWindowRgn
DrawIcon
FillRect
IsRectEmpty
RegisterWindowMessageA
WinHelpA
GetCapture
GetClassLongA
GetPropA
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
GetNextDlgTabItem
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetClientRect
GetClassInfoExA
GetClassInfoA
GetSysColor
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
UpdateWindow
SetTimer
KillTimer
EnableWindow
CopyRect
CallWindowProcA
PtInRect
GetMenu
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
InvalidateRect
IsIconic
AdjustWindowRectEx
GetWindowRect
IsChild
ShowOwnedPopups
SetCursor
GetWindowTextLengthA
SetFocus
ShowWindow
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
GetDlgItem
MessageBeep
DestroyIcon
EndDialog
CreateDialogIndirectParamA
InflateRect
GetMenuItemInfoA
GetSystemMenu
SetParent
WindowFromPoint
UnregisterClassA
SetPropA
RemovePropA
SetMenu
ExitWindowsEx
DrawTextA
GetWindowTextA
GetClassNameA
GetWindowThreadProcessId
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
IsWindow
SetWindowLongA
MoveWindow
SendMessageA
GetSubMenu
GetMenuItemCount
InsertMenuA
GetMenuItemID
AppendMenuA
GetMenuStringA
GetMenuState
ValidateRect
GetCursorPos
PeekMessageA
GetKeyState
IsWindowVisible
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
CallNextHookEx
SetWindowsHookExA
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
RegisterClipboardFormatA
PostMessageA
PostQuitMessage
CharUpperA
GetSystemMetrics
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem

gdi32

GetMapMode
CreateRectRgnIndirect
GetTextColor
GetBkColor
CreateSolidBrush
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
GetRgnBox
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
IntersectClipRect
ExcludeClipRect
SetMapMode
RestoreDC
SaveDC
GetTextExtentPoint32A
GetTextMetricsA
Ellipse
LPtoDP
CreateEllipticRgn
SetBkColor
GetClipBox
CreateBitmap
GetStockObject
CreateDIBitmap
CreateCompatibleBitmap
ExtTextOutA
BitBlt
TextOutA
CreateCompatibleDC
GetObjectA
CreateDCA
GetDeviceCaps
CreateFontIndirectA
SelectObject
SetTextColor
DeleteDC
SetBkMode
DeleteObject
RectVisible

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegDeleteValueA
RegQueryValueExA
RegCloseKey
RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyA
RegSetValueA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegOpenKeyExA

shell32

ShellExecuteA
DragFinish
DragQueryFileA
ExtractIconA
SHGetFileInfoA

comctl32

InitCommonControlsEx

shlwapi

PathIsUNCA
PathFindExtensionA
PathFindFileNameA
PathFileExistsA
PathStripToRootA
PathRemoveFileSpecW

oledlg

ord8

ole32

CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
CoTaskMemFree
CreateStreamOnHGlobal
CoSetProxyBlanket
CoUninitialize
StgOpenStorage
StgIsStorageFile
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoInitializeEx
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoTaskMemAlloc
CoCreateInstance

oleaut32

VariantClear
VariantChangeType
VariantCopy
SysAllocStringByteLen
SafeArrayDestroy
OleCreateFontIndirect
SysStringLen
VariantInit
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
SysFreeString

winmm

timeGetTime

ws2_32

recvfrom
__WSAFDIsSet
select
ioctlsocket
setsockopt
send
accept
listen
bind
connect
getsockopt
htons
socket
closesocket
WSASetLastError
sendto
recv
ntohl
inet_ntoa
inet_addr
WSAAsyncSelect
WSAStartup
WSACleanup
gethostbyname

avicap32

capCreateCaptureWindowA
capGetDriverDescriptionA

msvfw32

ICCompressorFree
ICSeqCompressFrameEnd
ICClose
ICSendMessage

psapi

EnumProcessModules
GetModuleFileNameExA

iphlpapi

GetAdaptersInfo
GetTcpTable
SetTcpEntry

gdiplus

GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipSaveImageToStream
GdipCloneImage
GdipDisposeImage
GdipAlloc
GdipFree
GdiplusShutdown

Sections

.text
Size: 351KB - Virtual size: 350KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 540KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4b637a78b49b75f61ab1e4770b9da21c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

winmm

ws2_32

avicap32

msvfw32

psapi

iphlpapi

gdiplus

Sections

.text Size: 351KB - Virtual size: 350KB

.rdata Size: 94KB - Virtual size: 94KB

.data Size: 13KB - Virtual size: 540KB

.rsrc Size: 26KB - Virtual size: 26KB

.reloc Size: 42KB - Virtual size: 41KB

.text
Size: 351KB - Virtual size: 350KB

.rdata
Size: 94KB - Virtual size: 94KB

.data
Size: 13KB - Virtual size: 540KB

.rsrc
Size: 26KB - Virtual size: 26KB

.reloc
Size: 42KB - Virtual size: 41KB