f87bb3961ff116ca2064a92991ed08d1b920b8e19d25c0132c80e0459b71a3cf

Sharing

Copy URL Twitter E-mail

General

Target

f87bb3961ff116ca2064a92991ed08d1b920b8e19d25c0132c80e0459b71a3cf
Size

398KB
MD5

683f72257bcd36464322c141aabbd4b1
SHA1

9001b3dce77b70c3a10204146a00d0a5b303a596
SHA256

f87bb3961ff116ca2064a92991ed08d1b920b8e19d25c0132c80e0459b71a3cf
SHA512

4f15b19048bd5ab1728f9c5380fdc8850dbf2cebb2015e726c671354332a13d77cf69168612d7992f74f7e887f3d06a94628f1096c1294c35ab28751c715773d
SSDEEP

12288:jIvMNq/6t9Robzi+T26w8pf4DQkioaXZ:j4KXobz3nEU3jX

Score

N/A

Malware Config

Signatures

Files

f87bb3961ff116ca2064a92991ed08d1b920b8e19d25c0132c80e0459b71a3cf
.exe windows x86

fea7db6c754d7676b72eda592e4e9ae7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

GradientFill

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

LoadLibraryA
GetSystemDirectoryA
MultiByteToWideChar
WideCharToMultiByte
GlobalUnlock
GlobalLock
GlobalAlloc
LockResource
SizeofResource
LoadResource
FindResourceW
GetLastError
GetCurrentProcess
SetFileAttributesW
CloseHandle
ReadFile
GetFileSize
CreateFileW
WriteFile
GetEnvironmentVariableW
LocalFree
EnumResourceLanguagesW
EnumResourceNamesW
lstrlenW
GetSystemInfo
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetTickCount
MoveFileExW
GetSystemDirectoryW
CompareStringW
CompareStringA
FlushFileBuffers
CreateFileA
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetTimeZoneInformation
InterlockedExchange
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
Sleep
HeapReAlloc
VirtualAlloc
EnterCriticalSection
GetProcAddress
FreeLibrary
GetModuleFileNameW
GetUserDefaultLangID
SystemTimeToFileTime
GetModuleHandleW
FatalAppExitA
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapDestroy
HeapCreate
HeapAlloc
HeapFree

user32

CreateWindowExW
MessageBoxW
RegisterClassExW
LoadCursorW
SendMessageW
DrawTextW
DefWindowProcW
InvalidateRect
TrackMouseEvent
GetClientRect
SetWindowPos
DispatchMessageW
TranslateMessage
GetMessageW
UpdateWindow
ShowWindow
FillRect
ShowScrollBar
BeginPaint
EndPaint
DialogBoxParamW
ReleaseCapture
SetCapture
SetCursor
RegisterClassW
SetWindowTextW
LoadBitmapW
GetDlgItem
GetWindowRect
EndDialog
OpenClipboard
GetClipboardData
CloseClipboard
LoadIconW
ExitWindowsEx
MoveWindow
PostQuitMessage
DestroyWindow
SetScrollInfo
GetScrollInfo

gdi32

CreateSolidBrush
CreateCompatibleDC
DeleteObject
BitBlt
CreatePen
MoveToEx
LineTo
CreateFontW
SetTextColor
SelectObject
SetBkMode

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegCloseKey
LookupPrivilegeValueW
OpenProcessToken
SetNamedSecurityInfoW
SetEntriesInAclW
OpenSCManagerW
CreateServiceW
CloseServiceHandle
RegSetValueExW
RegQueryValueExW
RegEnumKeyExW
GetNamedSecurityInfoW
RegOpenKeyExW
RegEnumValueW
AdjustTokenPrivileges

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW

ole32

CreateStreamOnHGlobal

oleaut32

OleLoadPicture

shlwapi

PathIsDirectoryW
PathFileExistsW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.0e3c
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1oqp
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.15as
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.a9as
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.klkl
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.psi
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.teta
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ks1
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.1231
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.1237
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zetaa
Size: 355KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zeta0
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tetaX
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.1324
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.1724
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.9182
Size: 512B - Virtual size: 70B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.9381
Size: 512B - Virtual size: 158B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fea7db6c754d7676b72eda592e4e9ae7

Headers

DLL Characteristics

File Characteristics

Imports

msimg32

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 2KB - Virtual size: 2KB

.0e3c Size: 512B - Virtual size: 218B

.1oqp Size: 512B - Virtual size: 208B

.15as Size: 512B - Virtual size: 208B

.a9as Size: 512B - Virtual size: 206B

.klkl Size: 512B - Virtual size: 206B

.psi Size: 512B - Virtual size: 200B

.teta Size: 512B - Virtual size: 206B

.ks1 Size: 512B - Virtual size: 206B

.1231 Size: 512B - Virtual size: 206B

.1237 Size: 512B - Virtual size: 208B

.zetaa Size: 355KB - Virtual size: 354KB

.zeta0 Size: 512B - Virtual size: 206B

.tetaX Size: 512B - Virtual size: 206B

.1324 Size: 512B - Virtual size: 206B

.1724 Size: 512B - Virtual size: 206B

.9182 Size: 512B - Virtual size: 70B

.9381 Size: 512B - Virtual size: 158B

.rsrc Size: 16KB - Virtual size: 15KB

.reloc Size: 512B - Virtual size: 260B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 2KB - Virtual size: 2KB

.0e3c
Size: 512B - Virtual size: 218B

.1oqp
Size: 512B - Virtual size: 208B

.15as
Size: 512B - Virtual size: 208B

.a9as
Size: 512B - Virtual size: 206B

.klkl
Size: 512B - Virtual size: 206B

.psi
Size: 512B - Virtual size: 200B

.teta
Size: 512B - Virtual size: 206B

.ks1
Size: 512B - Virtual size: 206B

.1231
Size: 512B - Virtual size: 206B

.1237
Size: 512B - Virtual size: 208B

.zetaa
Size: 355KB - Virtual size: 354KB

.zeta0
Size: 512B - Virtual size: 206B

.tetaX
Size: 512B - Virtual size: 206B

.1324
Size: 512B - Virtual size: 206B

.1724
Size: 512B - Virtual size: 206B

.9182
Size: 512B - Virtual size: 70B

.9381
Size: 512B - Virtual size: 158B

.rsrc
Size: 16KB - Virtual size: 15KB

.reloc
Size: 512B - Virtual size: 260B