af557264caf92303814bb369dc75f3c3a5f14c9b9a1d098d3d1249e5a03905bc

Sharing

Copy URL

Twitter E-mail

General

Target

af557264caf92303814bb369dc75f3c3a5f14c9b9a1d098d3d1249e5a03905bc
Size

8.1MB
MD5

5b190803539cbf54e01ab916bc9e5775
SHA1

41655ef05ecd8fd23bb7353ae899befc28b4cfa8
SHA256

af557264caf92303814bb369dc75f3c3a5f14c9b9a1d098d3d1249e5a03905bc
SHA512

cd39a20a1fab5cb839a3f6e9ccc02cc98db2605598f399f57e206ed93f322119986f77e67739eec859e022d90da848be0c569535d59cdf1e55e80abc91c3e234
SSDEEP

196608:VYB0G/rIPtsjCrEkOg9N1dXGR2JA7Qx2r:iB9IPts2rEA9N1dXGR2JAc

Score

N/A

Malware Config

Signatures

Files

af557264caf92303814bb369dc75f3c3a5f14c9b9a1d098d3d1249e5a03905bc
.exe windows x64

03f6ed709703b9f233fe694aca131ba6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

shlwapi

PathRemoveFileSpecW
PathFindFileNameW
PathCanonicalizeW
PathGetArgsW
PathCompactPathW
PathIsDirectoryEmptyW
PathIsUNCW
PathStripToRootW
SHDeleteKeyW
PathGetDriveNumberW
PathIsRootW
SHCreateStreamOnFileW
StrStrIW
SHStrDupW
PathCompactPathExW
StrRetToBufW
PathIsDirectoryW
PathRelativePathToW
SHAutoComplete
PathFindExtensionW

setupapi

SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
CM_Query_And_Remove_SubTreeW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
CM_Request_Device_EjectW
CM_Get_Parent

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

CopyFileW
GetProcessId
lstrcatW
GlobalReAlloc
SuspendThread
GetLongPathNameW
DisableThreadLibraryCalls
FindFirstFileW
FindNextFileW
FindClose
FreeResource
GetCPInfo
lstrcmpiW
FlushInstructionCache
SetFileAttributesW
RemoveDirectoryW
GetShortPathNameW
GetFileTime
SetFilePointerEx
MoveFileExW
GetOEMCP
FileTimeToDosDateTime
IsValidCodePage
FindFirstFileExW
SetCurrentDirectoryW
GetVolumeInformationW
GetLogicalDrives
CreateIoCompletionPort
PostQueuedCompletionStatus
GetQueuedCompletionStatus
ReadDirectoryChangesW
VirtualFree
VirtualAlloc
GetDiskFreeSpaceExW
GetVersion
GlobalMemoryStatus
LCMapStringW
LocalAlloc
LocalLock
LocalUnlock
lstrcpynW
GetFileType
VirtualQuery
IsDebuggerPresent
TerminateProcess
GetModuleHandleExW
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
EncodePointer
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GlobalGetAtomNameW
lstrcmpA
GetProfileIntW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalHandle
LocalReAlloc
GlobalFlags
SetErrorMode
GetUserDefaultLCID
GetCommandLineW
VirtualProtect
ExitThread
IsProcessorFeaturePresent
GetConsoleMode
ReadConsoleW
GetConsoleCP
RtlUnwindEx
RtlLookupFunctionEntry
RtlPcToFileHeader
HeapQueryInformation
GetStdHandle
GetStartupInfoW
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
GetStringTypeW
GetTimeZoneInformation
SetStdHandle
WriteConsoleW
EnumSystemLocalesW
SetEnvironmentVariableA
CreateMutexA
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
DosDateTimeToFileTime
WaitForMultipleObjects
CreateThread
GetExitCodeThread
UpdateResourceW
FindResourceExW
BeginUpdateResourceW
EndUpdateResourceW
DecodePointer
InitializeCriticalSectionAndSpinCount
DeleteFileA
AreFileApisANSI
GetTempPathA
GetVersionExA
GetFileAttributesExW
GetDiskFreeSpaceA
CreateFileMappingA
LoadLibraryA
GetDiskFreeSpaceW
EnterCriticalSection
LockFileEx
HeapSize
GetTempPathW
FlushFileBuffers
HeapValidate
HeapCreate
GetFileAttributesA
HeapDestroy
GetVersionExW
FormatMessageW
FormatMessageA
UnlockFileEx
OutputDebugStringW
WaitForSingleObjectEx
LockFile
UnlockFile
SetEndOfFile
HeapCompact
CreateFileA
HeapReAlloc
GetFullPathNameA
GetFullPathNameW
HeapFree
GetProcessHeap
HeapAlloc
lstrcpyW
GetModuleHandleA
GetModuleFileNameW
SetProcessPriorityBoost
SetUnhandledExceptionFilter
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
SetPriorityClass
GetPriorityClass
SetThreadPriority
GetThreadPriority
ExitProcess
ExpandEnvironmentStringsW
OpenEventW
OpenMutexW
CreateMutexW
ReleaseMutex
IsBadReadPtr
IsBadWritePtr
UnmapViewOfFile
FlushViewOfFile
CreateFileMappingW
MapViewOfFile
OpenFileMappingW
DeviceIoControl
DebugBreak
LocalFree
SetFileTime
GlobalFree
GetTimeFormatW
GetDateFormatW
FileTimeToLocalFileTime
QueryPerformanceCounter
QueryPerformanceFrequency
GetFileInformationByHandle
FileTimeToSystemTime
GetSystemTimeAsFileTime
GetLocalTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetLastError
ResetEvent
GetSystemTime
CompareStringW
CreateDirectoryW
GetTempFileNameW
GetDriveTypeW
GetSystemTimes
GetSystemInfo
GetExitCodeProcess
CreateProcessW
RaiseException
ResumeThread
MoveFileW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
LoadLibraryExW
IsValidLocale
GetACP
GetCurrentDirectoryW
GlobalSize
Sleep
VerifyVersionInfoW
VerSetConditionMask
CompareFileTime
GetModuleHandleW
DeleteFileW
GetFileAttributesW
lstrlenA
WinExec
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
OutputDebugStringA
WideCharToMultiByte
lstrlenW
SetEvent
GetFileSizeEx
GetFileSize
LeaveCriticalSection
TryEnterCriticalSection
SwitchToThread
GetTickCount
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSection
CreateEventW
WriteFile
ReadFile
SetFilePointer
CreateFileW
MultiByteToWideChar
GetWindowsDirectoryW
GetSystemDirectoryW
QueryDosDeviceW
TerminateThread
WaitForSingleObject
GetCurrentProcessId
OpenProcess
DuplicateHandle
FreeLibrary
GetProcAddress
LoadLibraryW
CloseHandle
GetCurrentThread
GetCurrentProcess
FindResourceW
LoadResource
LockResource
SizeofResource
GetLastError
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetUserDefaultLangID

user32

RealChildWindowFromPoint
NotifyWinEvent
IsZoomed
CharUpperW
IsClipboardFormatAvailable
ReuseDDElParam
UnpackDDElParam
TranslateAcceleratorW
LoadAcceleratorsW
GetMessageW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
CheckRadioButton
GetDlgItemTextW
SetDlgItemInt
GetScrollInfo
SetScrollInfo
GetTopWindow
AdjustWindowRectEx
SetPropW
GetScrollRange
SetScrollRange
GetScrollPos
ValidateRect
SetMenu
GetMenu
DeferWindowPos
SetWindowPlacement
GetWindowPlacement
GetClassInfoExW
GetMessageTime
GetMenuStringW
SendDlgItemMessageA
ShowOwnedPopups
PrintWindow
GetWindowDC
LockWindowUpdate
FindWindowExW
wvsprintfW
RemovePropW
GetPropW
WaitMessage
IsDialogMessageW
CreateDialogIndirectParamW
WinHelpW
GetLastActivePopup
MsgWaitForMultipleObjects
PostQuitMessage
CreateAcceleratorTableW
DestroyAcceleratorTable
CreateCursor
EndDialog
EnableMenuItem
DialogBoxIndirectParamW
GetDialogBaseUnits
ShowWindow
GetWindowTextLengthW
SetWindowTextW
ChildWindowFromPoint
LoadStringW
MonitorFromWindow
MonitorFromPoint
IsWindowEnabled
GetSystemMenu
GetDCEx
GetClassLongPtrW
CharPrevW
CharNextW
UnionRect
GetNextDlgTabItem
RegisterClassExW
DeleteMenu
GetMenuState
ModifyMenuW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
InsertMenuItemW
CloseWindow
GetComboBoxInfo
GetForegroundWindow
IntersectRect
GetDoubleClickTime
ClipCursor
GetClipCursor
InvertRect
SetWindowRgn
RegisterClipboardFormatA
SetClassLongW
TabbedTextOutA
GetTabbedTextExtentA
InvalidateRect
DrawTextW
GetClientRect
GetClassLongW
ShowScrollBar
EnableScrollBar
SetScrollPos
MapWindowPoints
CreateMenu
GetKeyNameTextW
MapVirtualKeyW
LoadBitmapW
SetMenuItemInfoW
GetMenuItemInfoW
RegisterClipboardFormatW
EndDeferWindowPos
BeginDeferWindowPos
EndPaint
BeginPaint
CreateWindowExW
DestroyWindow
CopyImage
DrawAnimatedRects
FindWindowW
GetMenuItemID
GetSubMenu
LoadMenuW
UnregisterClassW
GetDlgCtrlID
SetCursorPos
WindowFromDC
GetCursorPos
DestroyCursor
CreateIconIndirect
TrackPopupMenu
SetWindowLongPtrW
GetMenuItemCount
GetWindowLongPtrW
CallWindowProcW
ToUnicodeEx
ToAsciiEx
GetKeyboardState
VkKeyScanExW
IsRectEmpty
AllowSetForegroundWindow
EnumWindows
GetClassNameW
wsprintfW
SetMenuDefaultItem
SetActiveWindow
RealGetWindowClassW
SetForegroundWindow
IsMenu
GetWindowThreadProcessId
WindowFromPoint
RegisterClassW
SetMenuInfo
DrawMenuBar
RedrawWindow
DrawIcon
EqualRect
GetIconInfo
DrawIconEx
MoveWindow
EnumChildWindows
GetWindow
GetWindowLongW
SetWindowLongW
ClientToScreen
InsertMenuW
DestroyMenu
TrackPopupMenuEx
MessageBeep
MapDialogRect
DrawStateW
SetFocus
GetActiveWindow
GetAsyncKeyState
IsIconic
GetWindowTextW
IsDlgButtonChecked
CheckDlgButton
SetDlgItemTextW
PeekMessageW
LoadIconW
IsChild
PostThreadMessageW
BringWindowToTop
GetFocus
GetDesktopWindow
KillTimer
SetTimer
MessageBoxW
ShowCaret
SetCaretPos
HideCaret
PtInRect
SetRectEmpty
SystemParametersInfoW
RegisterWindowMessageW
LoadCursorW
CopyIcon
GetClassInfoW
DefWindowProcW
IsWindowVisible
PostMessageW
DestroyCaret
CreateCaret
GetKeyState
GetSystemMetrics
SetCapture
ReleaseCapture
GetParent
IsWindow
SendMessageW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetCursor
CreatePopupMenu
AppendMenuW
ScreenToClient
SetRect
EnableWindow
UpdateWindow
TabbedTextOutW
DrawTextExW
GrayStringW
GetSysColor
GetTabbedTextExtentW
TranslateMessage
DispatchMessageW
FillRect
GetCursor
SetParent
GetDC
ReleaseDC
DestroyIcon
LoadImageW
SetWindowPos
GetWindowRect
GetDlgItem
CopyRect
InflateRect
DrawEdge
DrawFrameControl
GetClipboardData
MapVirtualKeyExW
GetKeyboardLayout
GetMessagePos
GetCapture
GetSysColorBrush
FrameRect
DrawFocusRect
OffsetRect
GetMonitorInfoW

gdi32

DPtoLP
GetCharWidthW
CreateCompatibleBitmap
GetBkColor
BitBlt
GetDeviceCaps
SetRectRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetTextAlign
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SelectPalette
GetObjectW
CreateFontIndirectW
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
CreateSolidBrush
DeleteObject
Rectangle
Polygon
CreatePalette
RealizePalette
GetStockObject
CreateFontW
CreatePatternBrush
GetCharABCWidthsW
SelectObject
StretchBlt
ExtSelectClipRgn
SaveDC
RestoreDC
OffsetClipRgn
IntersectClipRect
GetClipBox
ExcludeClipRect
CopyMetaFileW
SelectClipRgn
SetTextJustification
SetBkMode
LineTo
MoveToEx
SetViewportExtEx
FrameRgn
FillRgn
OffsetRgn
CreateRoundRectRgn
GetTextColor
SetBrushOrgEx
GetBrushOrgEx
GetWindowOrgEx
GetDIBColorTable
CreateDIBSection
GetBkMode
SetPixel
StretchDIBits
SetViewportOrgEx
GetViewportOrgEx
CombineRgn
CreateRectRgn
CreatePolygonRgn
GetCurrentObject
SetTextColor
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateRectRgnIndirect
CreateBitmap
Ellipse
PatBlt
CreateDCW
SetPixelV
GetPixel
RoundRect
SetBkColor
DeleteDC
GetTextExtentPoint32A
GetTextExtentPoint32W
CreatePen
GetTextMetricsW
TextOutA
CreateCompatibleDC

msimg32

AlphaBlend
GradientFill

comdlg32

CommDlgExtendedError

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

EqualSid
RegDeleteValueW
RegDeleteKeyW
RegFlushKey
RegCreateKeyExW
EnumDependentServicesW
QueryServiceStatus
ControlService
EnumServicesStatusExW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
GetTokenInformation
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegQueryValueW
RegOpenKeyExW
OpenThreadToken
OpenProcessToken
PrivilegeCheck
AdjustTokenPrivileges
LookupPrivilegeValueW
RegEnumKeyW
IsTextUnicode
GetUserNameW
FreeSid
RegEnumKeyExW
AllocateAndInitializeSid
RegEnumValueW

shell32

SHGetFolderPathW
SHGetSpecialFolderPathW
SHGetMalloc
Shell_NotifyIconW
SHAppBarMessage
SHGetSpecialFolderLocation
SHBindToParent
ord727
SHGetDesktopFolder
SHGetPathFromIDListW
ord2
ord4
ExtractIconW
ExtractIconExW
SHGetFileInfoW
ShellExecuteW
DragFinish
SHFileOperationW
ShellExecuteExW
SHBrowseForFolderW
DragQueryFileW
DragAcceptFiles
DuplicateIcon
ord155

comctl32

_TrackMouseEvent
ImageList_ReplaceIcon
ImageList_Draw
ord17
ImageList_GetIcon
ImageList_Add
ImageList_DrawEx
InitCommonControlsEx
ImageList_SetBkColor
ImageList_GetImageCount
ImageList_AddMasked
ImageList_Remove
ImageList_GetImageInfo
ImageList_GetIconSize
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_DragMove
ImageList_SetDragCursorImage
ImageList_EndDrag
ImageList_DragLeave
ImageList_Destroy

uxtheme

DrawThemeParentBackground
EnableThemeDialogTexture
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
IsAppThemed

ole32

CreateStreamOnHGlobal
CoTaskMemAlloc
CoTaskMemFree
OleInitialize
OleUninitialize
ReleaseStgMedium
CoUninitialize
CoInitializeEx
RegisterDragDrop
RevokeDragDrop
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
CoInitialize
CoLockObjectExternal
CoFreeUnusedLibraries
OleGetClipboard
OleDuplicateData
CoCreateInstance
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
GetHGlobalFromILockBytes
CoCreateGuid
CLSIDFromString
CoRegisterMessageFilter

oleaut32

VarDateFromStr
VariantTimeToSystemTime
SystemTimeToVariantTime
SysFreeString
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
SysAllocString

oledlg

OleUIBusyW

ws2_32

WSAStartup
WSACleanup
WSASetLastError

userenv

UnloadUserProfile

dbghelp

MiniDumpWriteDump

wininet

HttpQueryInfoW
HttpEndRequestW
HttpSendRequestExW
HttpAddRequestHeadersA
HttpOpenRequestW
InternetCloseHandle
InternetConnectW
InternetOpenW
InternetWriteFile

psapi

GetModuleFileNameExW

wtsapi32

WTSRegisterSessionNotification
WTSUnRegisterSessionNotification

netapi32

NetServerGetInfo
NetApiBufferFree
NetShareEnum

winmm

PlaySoundW

mpr

WNetGetConnectionW
WNetAddConnection3W
WNetGetProviderNameW
WNetGetLastErrorW
WNetOpenEnumW
WNetEnumResourceW
WNetCloseEnum

oleacc

LresultFromObject
CreateStdAccessibleObject

gdiplus

GdipCreateBitmapFromFileICM
GdipCreateBitmapFromHBITMAP
GdipSaveImageToFile
GdipCloneImage
GdipGetImageEncoders
GdipDisposeImage
GdipGetImageEncodersSize
GdipAlloc
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStreamICM
GdipFree
GdiplusShutdown
GdiplusStartup

Sections

.text
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 237KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 432KB - Virtual size: 431KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

03f6ed709703b9f233fe694aca131ba6

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

setupapi

version

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

uxtheme

ole32

oleaut32

oledlg

ws2_32

userenv

dbghelp

wininet

psapi

wtsapi32

netapi32

winmm

mpr

oleacc

gdiplus

Sections

.text Size: 5.4MB - Virtual size: 5.4MB

.rdata Size: 1.8MB - Virtual size: 1.8MB

.data Size: 134KB - Virtual size: 202KB

.pdata Size: 237KB - Virtual size: 237KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 432KB - Virtual size: 431KB

.reloc Size: 84KB - Virtual size: 83KB

.text
Size: 5.4MB - Virtual size: 5.4MB

.rdata
Size: 1.8MB - Virtual size: 1.8MB

.data
Size: 134KB - Virtual size: 202KB

.pdata
Size: 237KB - Virtual size: 237KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 432KB - Virtual size: 431KB

.reloc
Size: 84KB - Virtual size: 83KB