e7f8482ed6ad7f1b476022b7b61843fd96af0865a3522b5f3ca42c3a39382fd8

Sharing

Copy URL Twitter E-mail

General

Target

e7f8482ed6ad7f1b476022b7b61843fd96af0865a3522b5f3ca42c3a39382fd8
Size

4.3MB
MD5

0cfa566522675d8eff2e884278bf60ef
SHA1

c2213a1b37f437f06a6d4918019f387f614cc318
SHA256

e7f8482ed6ad7f1b476022b7b61843fd96af0865a3522b5f3ca42c3a39382fd8
SHA512

92403befb1008a4492a3c9f092a7410fd66b026d41fec1f355d901accae69e2088c51d29984979607b4e0c51a47aff1cab578fbef431793d47c6cbe7a57b3886
SSDEEP

98304:Z9n8G5NpoYVTQnmClG7UCh76n4khO6NF1XRQzg0nrR0xexcg:4AXmXuR0xex1

Score

N/A

Malware Config

Signatures

Files

e7f8482ed6ad7f1b476022b7b61843fd96af0865a3522b5f3ca42c3a39382fd8
.exe windows x86

4f46cadde340e71acad0b7314822ff54

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDevicePropertyW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList

hid

HidD_GetAttributes
HidD_GetHidGuid

d3d11

D3D11CreateDevice

kernel32

GetTempFileNameA
GetUserDefaultLCID
WaitForSingleObjectEx
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
ReadConsoleW
GetFileAttributesExW
CreateProcessW
GetExitCodeProcess
SetFilePointerEx
GetConsoleOutputCP
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
GetACP
GetTickCount64
SetStdHandle
HeapQueryInformation
MoveFileExW
DeleteFileW
GetCommandLineW
GetCommandLineA
PeekNamedPipe
GetFileType
GetFileInformationByHandle
CreateFileW
GetTimeZoneInformation
VirtualQuery
VirtualAlloc
GetSystemInfo
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
QueryPerformanceFrequency
RtlUnwind
GetStringTypeW
LCMapStringEx
RaiseException
OutputDebugStringW
GetProfileIntA
SearchPathA
GetWindowsDirectoryA
VerifyVersionInfoA
lstrcpyA
VerSetConditionMask
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
lstrcmpiA
DuplicateHandle
GetVolumeInformationA
UnlockFile
SetFilePointer
FindResourceExW
SetEndOfFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
DeleteFileA
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
GlobalFlags
LocalReAlloc
GlobalHandle
GlobalReAlloc
SetErrorMode
TlsSetValue
TlsGetValue
TlsAlloc
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
GetVersionExA
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
GetSystemDirectoryW
EncodePointer
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
LocalAlloc
LoadLibraryExW
GetModuleHandleA
GetModuleFileNameW
OutputDebugStringA
SuspendThread
SetLastError
FormatMessageA
MulDiv
LocalFree
GlobalSize
GetThreadPriority
SetThreadPriority
GetCurrentThread
LoadLibraryW
FreeLibrary
GetProcessAffinityMask
GetModuleHandleW
CreateSemaphoreW
CreateEventW
ReleaseSemaphore
WriteConsoleW
GetConsoleMode
CopyFileA
CreateDirectoryA
GetModuleFileNameA
CreateProcessA
GetStartupInfoA
SetConsoleTitleA
SetCurrentConsoleFontEx
GetCurrentConsoleFont
GetStdHandle
AllocConsole
ExitProcess
InitializeCriticalSection
DeviceIoControl
GlobalFree
GlobalLock
GlobalAlloc
WriteProcessMemory
VirtualProtect
GetProcAddress
LoadLibraryA
GetLocalTime
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
SetUnhandledExceptionFilter
ReadFile
WriteFile
CreateFileA
WaitNamedPipeA
CloseHandle
ConnectNamedPipe
CreateNamedPipeA
GetOverlappedResult
GetProcessHeap
DecodePointer
HeapAlloc
HeapReAlloc
HeapSize
HeapFree
GlobalUnlock
FindResourceA
WaitForMultipleObjects
CreateThread
ResumeThread
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
InitializeCriticalSectionEx
EnterCriticalSection
LeaveCriticalSection
FindResourceW
LoadResource
SetEnvironmentVariableW
LockResource
SizeofResource
WideCharToMultiByte
GetLastError
CreateEventA
CreateMutexA
ResetEvent
ReleaseMutex
SetEvent
WaitForSingleObject
Sleep
GetCurrentDirectoryW
GetTempPathA
TlsFree
GetCurrentDirectoryA
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW

user32

InflateRect
GetMenuItemInfoA
ReuseDDElParam
UnpackDDElParam
LoadImageA
DestroyIcon
OffsetRect
IntersectRect
SetRectEmpty
SetCursor
InsertMenuItemA
DestroyMenu
CreatePopupMenu
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
ReleaseCapture
BringWindowToTop
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
DrawStateA
IsDialogMessageA
SetWindowTextA
SendDlgItemMessageA
CheckDlgButton
MoveWindow
ShowWindow
SetMenuItemInfoA
GetMenuCheckMarkDimensions
EnableMenuItem
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
GetWindow
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
PtInRect
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SystemParametersInfoA
ScrollWindow
RedrawWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetFocus
SetFocus
GetDlgCtrlID
GetDlgItem
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
UnionRect
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExA
GetClassInfoExA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExA
ValidateRect
GetKeyState
GetActiveWindow
PeekMessageA
MonitorFromPoint
SetParent
SetRect
LoadImageW
DrawEdge
DrawFrameControl
DrawFocusRect
IsZoomed
DispatchMessageA
TranslateMessage
GetMessageA
GetLastActivePopup
GetWindowThreadProcessId
GetParent
GetWindowLongA
MessageBoxA
IsWindowEnabled
FillRect
GetSysColor
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
GetWindowDC
PostQuitMessage
ShowOwnedPopups
GetKeyNameTextA
MapVirtualKeyA
GetSysColorBrush
RealChildWindowFromPoint
CharUpperA
CopyImage
GetAsyncKeyState
MapDialogRect
SetLayeredWindowAttributes
LoadCursorW
TrackMouseEvent
SetCapture
GetSystemMenu
DeleteMenu
TabbedTextOutA
GrayStringA
SetWindowRgn
MessageBeep
WindowFromPoint
NotifyWinEvent
GetMenuDefaultItem
SetMenuDefaultItem
IsRectEmpty
UpdateLayeredWindow
SetScrollPos
EnableScrollBar
DrawIconEx
GetDisplayConfigBufferSizes
QueryDisplayConfig
GetMonitorInfoA
EnumDisplaySettingsA
EnumDisplayMonitors
GetDesktopWindow
MonitorFromWindow
GetDC
ReleaseDC
GetCursorInfo
GetIconInfo
DestroyCursor
SetTimer
UnregisterClassA
GetSystemMetrics
LoadCursorA
EnableWindow
KillTimer
UnregisterHotKey
RegisterHotKey
LoadMenuW
LoadAcceleratorsW
GetSubMenu
LoadBitmapW
SetMenuItemBitmaps
CheckMenuItem
LoadIconA
GetCursorPos
SetForegroundWindow
GetClassInfoA
PostMessageA
InvalidateRect
FindWindowA
SendMessageA
IsWindowVisible
UpdateWindow
GetMenuStringA
GetMenuState
GetMenuItemID
GetMenuItemCount
InsertMenuA
AppendMenuA
RemoveMenu
DrawTextA
DrawTextExA
GetKeyboardLayout
GetKeyboardState
ToAsciiEx
GetWindowRgn
GetComboBoxInfo
CreateMenu
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
MapVirtualKeyExA
IsCharLowerA
GetDoubleClickTime
DrawIcon
InvertRect
HideCaret
GetNextDlgGroupItem
WaitMessage
PostThreadMessageA
FrameRect
CopyIcon
ModifyMenuA
CharUpperBuffA
RegisterClipboardFormatA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
SetClassLongA
LockWindowUpdate
SetCursorPos
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
SetWindowPlacement

gdi32

CopyMetaFileA
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateSolidBrush
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
SetDIBColorTable
CreateCompatibleBitmap
CreateFontIndirectA
GetTextExtentPoint32A
CreateFontA
GetCharWidthA
StretchDIBits
GetTextMetricsA
CreateRectRgnIndirect
PatBlt
CombineRgn
SetRectRgn
DPtoLP
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
GetBkColor
EnumFontFamiliesExA
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
SetPixel
GetRgnBox
OffsetRgn
Rectangle
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
LPtoDP
RoundRect
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
GetViewportOrgEx
SetPixelV
GetTextFaceA
RealizePalette
SelectPalette
GetStockObject
GetDeviceCaps
CreateDCA
GetBitmapBits
CreateBitmap
StretchBlt
DeleteDC
BitBlt
SetStretchBltMode
SelectObject
CreateCompatibleDC
DeleteObject
CreateDIBSection
ScaleWindowExtEx
CreateRectRgn
GetObjectA

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegEnumKeyA
RegSetValueExA
RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

shell32

SHGetSpecialFolderPathA
SHCreateDirectoryExA
Shell_NotifyIconA
DragQueryFileA
DragFinish
SHGetFileInfoA
SHGetPathFromIDListA
SHBrowseForFolderA
SHAppBarMessage
ShellExecuteA
SHGetDesktopFolder
SHGetSpecialFolderLocation

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionA
UrlUnescapeA
PathFindFileNameA
PathIsUNCA
PathStripToRootA
StrFormatKBSizeA
PathRemoveFileSpecW

uxtheme

IsAppThemed
DrawThemeText
DrawThemeParentBackground
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
OpenThemeData
CloseThemeData
GetThemePartSize
GetThemeColor
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme

ole32

RegisterDragDrop
RevokeDragDrop
OleGetClipboard
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleLockRunning
CreateStreamOnHGlobal
DoDragDrop
CoDisconnectObject
CoInitialize
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoInitializeEx
OleTranslateAccelerator
CoLockObjectExternal

oleaut32

SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
LoadTypeLi
VariantCopy
VarBstrFromDate
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringByteLen
SysAllocStringLen
SysFreeString

urlmon

URLDownloadToFileA

gdiplus

GdipGetImagePalette
GdipSetInterpolationMode
GdipCreateFromHDC
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipAlloc
GdipFree
GdipDisposeImage
GdiplusShutdown
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdipGetImagePaletteSize
GdiplusStartup

dbghelp

MiniDumpWriteDump
MakeSureDirectoryPathExists

ws2_32

send
recv
connect
closesocket
htons
inet_addr
socket
WSAStartup

wininet

HttpQueryInfoA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetSetStatusCallback
InternetGetLastResponseInfoA
InternetCloseHandle
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetConnectA
InternetOpenA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetGetConnectedState
DeleteUrlCacheEntry

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 599KB - Virtual size: 598KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 485KB - Virtual size: 485KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f46cadde340e71acad0b7314822ff54

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

hid

d3d11

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

urlmon

gdiplus

dbghelp

ws2_32

wininet

oleacc

imm32

winmm

Sections

.text Size: 3.0MB - Virtual size: 3.0MB

.rdata Size: 599KB - Virtual size: 598KB

.data Size: 23KB - Virtual size: 2.2MB

.rsrc Size: 485KB - Virtual size: 485KB

.reloc Size: 171KB - Virtual size: 171KB

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 599KB - Virtual size: 598KB

.data
Size: 23KB - Virtual size: 2.2MB

.rsrc
Size: 485KB - Virtual size: 485KB

.reloc
Size: 171KB - Virtual size: 171KB