bd0a5e971dc9a0ee61c596fc65edc1092079e46280b1b2dc65b26f3ca5b73746

Sharing

Copy URL Twitter E-mail

General

Target

bd0a5e971dc9a0ee61c596fc65edc1092079e46280b1b2dc65b26f3ca5b73746
Size

855KB
MD5

83037bae1646555bea204c38baa7804a
SHA1

fa4c9f6d20c82baedaee1ec3ecdb860b9f31a316
SHA256

bd0a5e971dc9a0ee61c596fc65edc1092079e46280b1b2dc65b26f3ca5b73746
SHA512

dd07609185192ca681a7a338b9b101f2606e6c455fdc646bb916c585a7d32cd0fed8a7bb1b7702fc3845f5a547dc69d372105a53c9c2d1d1a4f7375a77a1e56e
SSDEEP

24576:gUPjQ5YsQxwdnKL++faun/IOA5q5VD2Db:Vq3U/IO2q5l2/

Score

N/A

Malware Config

Signatures

Files

bd0a5e971dc9a0ee61c596fc65edc1092079e46280b1b2dc65b26f3ca5b73746
.exe windows x86

164be2af99fdf242393962f815aa2bd2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventW
GlobalAlloc
FreeResource
InterlockedExchange
GetFileTime
lstrcpynW
GetVersionExA
GetModuleHandleA
GetConsoleOutputCP
GetWindowsDirectoryW
ReadFile
FindNextFileW
GetSystemInfo
GetCommandLineA
GetVersionExW
SetUnhandledExceptionFilter
TlsAlloc
GetVolumeInformationW
GlobalFree
FreeEnvironmentStringsW
GetSystemDefaultLangID
FindResourceExW
CreateThread
SetFilePointer
WaitForSingleObject
WriteConsoleA
FlushFileBuffers
HeapDestroy
EnumUILanguagesW
RaiseException
DeleteCriticalSection
LockFile
ExitProcess
DeviceIoControl
VirtualAlloc
GetThreadLocale
GetStdHandle
FreeEnvironmentStringsA
TlsGetValue
WritePrivateProfileStringW
SizeofResource
GetPrivateProfileIntW
IsDebuggerPresent
GetCPInfo
GetStringTypeA
GlobalHandle
MulDiv
LCMapStringA
HeapReAlloc
LocalFree
CompareStringA
GetPrivateProfileStringW
OutputDebugStringW
LocalReAlloc
GetModuleFileNameW
SetHandleCount
GlobalAddAtomW
HeapSize
EnterCriticalSection
GetCommandLineW
InitializeCriticalSection
GetFileAttributesW
CreateFileW
WideCharToMultiByte
FindFirstFileW
MultiByteToWideChar
GlobalUnlock
lstrlenW
CreateProcessW
LeaveCriticalSection
GetSystemDirectoryA
lstrcatA
VirtualProtectEx
GetStartupInfoW
FormatMessageW
SetThreadPriority
GetStartupInfoA
WriteConsoleW
GlobalLock
GetTickCount
FileTimeToSystemTime
DuplicateHandle
LockResource
CreateFileA
GlobalFindAtomW
FindResourceW
LocalAlloc
EnumResourceLanguagesW
UnlockFile
GetLocaleInfoW
GetCurrentProcess
VirtualFree
GetTimeZoneInformation
GetOEMCP
LCMapStringW
GetProcessHeap
VirtualQuery
GetDateFormatW
HeapAlloc
HeapFree
GetFileType
ConvertDefaultLocale
LoadResource
TlsFree
UnhandledExceptionFilter
LoadLibraryA
TlsSetValue
Sleep
GetLastError
GetTimeFormatW
lstrcmpW
InterlockedDecrement
GetDriveTypeA
CloseHandle
GetCurrentThreadId
GetProcAddress
InterlockedIncrement
GlobalReAlloc
GetModuleHandleW
FindClose
LoadLibraryW
FileTimeToLocalFileTime
GetEnvironmentStrings
SetEnvironmentVariableA
GetConsoleCP
GetLocalTime
lstrlenA
RtlUnwind
GetEnvironmentStringsW
lstrcmpA
GetCurrentThread
GetModuleFileNameA
GetUserDefaultUILanguage
GlobalFlags
GetFullPathNameW
WriteFile
FreeLibrary
GlobalDeleteAtom
WaitForMultipleObjects
SetEndOfFile
ExitThread
TerminateProcess
HeapCreate
SetErrorMode
VirtualProtect
SetStdHandle
GetLocaleInfoA
GetCurrentDirectoryA
GetStringTypeW
QueryPerformanceCounter
SuspendThread
GetACP
CompareStringW
GetSystemTimeAsFileTime
GetFileSize
SetLastError
ResetEvent
ResumeThread
GetVersion
GetCurrentProcessId

user32

UnhookWindowsHookEx
AppendMenuW
SetCursorPos
MessageBoxW
EndDialog
PeekMessageW
GetFocus
GetClassLongW
IsChild
GetDlgItem
GetForegroundWindow
GetCursorPos
GetWindowInfo
GetClassInfoW
UpdateWindow
TrackPopupMenu
MapWindowPoints
GetActiveWindow
PostThreadMessageW
AllowSetForegroundWindow
SetFocus
GetDesktopWindow
CallWindowProcW
CreateWindowExW
GetNextDlgGroupItem
CheckMenuItem
GetMessageTime
InflateRect
MapDialogRect
GetClassInfoExW
GetClassNameW
CharUpperW
GetNextDlgTabItem
SetWindowTextW
OffsetRect
GetMessagePos
GrayStringW
GetSubMenu
SendMessageW
IsDialogMessageW
SetActiveWindow
EndPaint
DefWindowProcW
GetMenu
RedrawWindow
GetSysColor
RegisterClipboardFormatW
GetMessageW
KillTimer
InvalidateRect
GetWindowThreadProcessId
BeginPaint
LoadMenuW
UnregisterClassW
WindowFromPoint
SetWindowPlacement
SetRectEmpty
GetWindowTextLengthW
LoadBitmapW
TranslateMessage
GetKeyState
GetCapture
SendDlgItemMessageW
SystemParametersInfoA
SetMenuItemBitmaps
ClientToScreen
RegisterClassW
DispatchMessageW
RemovePropW
PostMessageW
PtInRect
SetTimer
GetMenuItemID
FindWindowW
ScreenToClient
CallNextHookEx
SetRect
GetWindowRect
ReleaseCapture
CreateDialogIndirectParamW
GetMenuState
ExitWindowsEx
SetCapture
GetWindowLongW
SetWindowContextHelpId
GetDlgCtrlID
ValidateRect
DrawFocusRect
SetWindowPos
GetTopWindow
CopyRect
DrawTextExW
GetLastActivePopup
EnableMenuItem
SetWindowLongW
MoveWindow
IsWindow
AdjustWindowRectEx
LoadCursorW
GetSystemMenu
DestroyWindow
GetWindow
SetCursor
LoadIconW
GetWindowTextW
MessageBeep
SendDlgItemMessageA
IntersectRect
RegisterWindowMessageW
GetMenuItemCount
ReleaseDC
GetSysColorBrush
SetPropW
InvalidateRgn
GetWindowPlacement
TrackMouseEvent
GetWindowDC
RemoveMenu
CharNextW
SetForegroundWindow
PostQuitMessage
MsgWaitForMultipleObjects
UnregisterClassA
LoadMenuIndirectW
GetMenuCheckMarkDimensions
SetWindowsHookExW
EnableWindow
WinHelpW
ModifyMenuW
SetMenuDefaultItem
GetClientRect
InsertMenuW
TabbedTextOutW
IsIconic
ShowWindow
IsWindowVisible
GetParent
DestroyMenu
IsRectEmpty
DrawTextW
EqualRect
CopyAcceleratorTableW
GetPropW
GetDC
IsWindowEnabled
GetSystemMetrics

gdi32

StretchDIBits
GetTextColor
ExcludeClipRect
CreateBitmap
CreateSolidBrush
GetMapMode
SetBkColor
CreateCompatibleDC
DPtoLP
GetRgnBox
CreateCompatibleBitmap
SetViewportOrgEx
CreateFontIndirectW
GetViewportExtEx
GetPixel
RestoreDC
GetTextExtentPoint32W
PatBlt
PtVisible
CreateRectRgnIndirect
ExtSelectClipRgn
OffsetViewportOrgEx
SetViewportExtEx
SelectPalette
CreatePen
CreateBitmapIndirect
GetDeviceCaps
DeleteDC
RectVisible
ExtTextOutW
SaveDC
LineTo
ScaleWindowExtEx
StretchBlt
GetClipBox
SetPixel
SetMapMode
BitBlt
SetWindowExtEx
MoveToEx
DeleteObject
TextOutW
SelectObject
Polyline
GetWindowExtEx
GetObjectW
Escape
GetBkColor
GetStockObject
SetTextColor
SetBkMode
SetStretchBltMode
ScaleViewportExtEx

comdlg32

GetFileTitleW

advapi32

RegEnumKeyExW
RegQueryValueW
AdjustTokenPrivileges
RegOpenKeyW
LookupPrivilegeValueW
StartServiceW
OpenProcessToken
OpenSCManagerW
CloseServiceHandle
RegDeleteValueW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
OpenServiceW
RegNotifyChangeKeyValue
RegQueryValueExW
RegEnumKeyW
RegCreateKeyW
RegCloseKey

shell32

ShellExecuteW
SHGetFolderPathW
Shell_NotifyIconW

ole32

CoGetClassObject
StgOpenStorageOnILockBytes
CoUninitialize
OleFlushClipboard
PropVariantClear
OleInitialize
OleIsCurrentClipboard
StgCreateDocfileOnILockBytes
CoTaskMemAlloc
OleUninitialize
CLSIDFromProgID
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoCreateInstance
CreateStreamOnHGlobal
CoInitialize
CreateILockBytesOnHGlobal
CoRevokeClassObject
CLSIDFromString
CoTaskMemFree

oleaut32

VariantCopy
SysFreeString
SafeArrayDestroy
OleCreateFontIndirect
SystemTimeToVariantTime
SysStringLen
SysAllocStringLen
VariantInit
VariantTimeToSystemTime
VariantChangeType
SysAllocString
VariantClear

comctl32

_TrackMouseEvent

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW

winmm

waveInGetNumDevs
waveInReset
waveInAddBuffer
waveInOpen
waveInPrepareHeader
waveInGetDevCapsW
waveInClose
PlaySoundW
waveInUnprepareHeader
waveInStart
waveInStop

rpcrt4

UuidCreate

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces

gdiplus

GdipSetTextRenderingHint
GdipCreateBitmapFromResource
GdipDrawImageRectI
GdipCreateSolidFill
GdipDrawImageRect
GdiplusStartup
GdipGetImageWidth
GdipDeleteFont
GdipDeleteBrush
GdipFillRectangle
GdipGetImageBounds
GdipCreateBitmapFromScan0
GdipDrawString
GdipCloneBrush
GdipCloneImage
GdipDeleteFontFamily
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectRect
GdipGetGenericFontFamilySansSerif
GdipCreateBitmapFromGraphics
GdipGetImageHeight
GdipDrawImagePointRectI
GdipFillRectangleI
GdipMeasureString
GdipCreateFont
GdipFree
GdipGetFontSize
GdipDeleteGraphics
GdipCreateFromHDC
GdipDisposeImage
GdipDrawImageI
GdipCreateHBITMAPFromBitmap
GdipImageRotateFlip
GdipGetImageGraphicsContext
GdipAlloc
GdipCreateBitmapFromStream
GdipCreateFontFamilyFromName
GdipFlush

msvcrt

exit
fclose
fread
fopen

oleacc

ObjectFromLresult

esent

JetTerm

Sections

.text
Size: 529KB - Virtual size: 529KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.33
Size: - Virtual size: 5.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.11
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.22
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

164be2af99fdf242393962f815aa2bd2

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

rpcrt4

version

setupapi

gdiplus

msvcrt

oleacc

esent

Sections

.text Size: 529KB - Virtual size: 529KB

.33 Size: - Virtual size: 5.4MB

.rdata Size: 23KB - Virtual size: 22KB

.data Size: 512B - Virtual size: 828B

.11 Size: 7KB - Virtual size: 6KB

.22 Size: 248KB - Virtual size: 247KB

.tls Size: 512B - Virtual size: 57B

.rsrc Size: 33KB - Virtual size: 33KB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 529KB - Virtual size: 529KB

.33
Size: - Virtual size: 5.4MB

.rdata
Size: 23KB - Virtual size: 22KB

.data
Size: 512B - Virtual size: 828B

.11
Size: 7KB - Virtual size: 6KB

.22
Size: 248KB - Virtual size: 247KB

.tls
Size: 512B - Virtual size: 57B

.rsrc
Size: 33KB - Virtual size: 33KB

.reloc
Size: 12KB - Virtual size: 12KB