ad689a08e3a042175f7abc8ab8a1aae61ad81fc897c235b93db65c0a88bb93ab

Sharing

Copy URL Twitter E-mail

General

Target

ad689a08e3a042175f7abc8ab8a1aae61ad81fc897c235b93db65c0a88bb93ab
Size

840KB
MD5

32b02d27cb2e615a92d94dd99921b040
SHA1

720e9484284624e9820a5063f6c51850df4afa4b
SHA256

ad689a08e3a042175f7abc8ab8a1aae61ad81fc897c235b93db65c0a88bb93ab
SHA512

b67b190a17470b14279edf31991180fc331c57e389338f6f64e87d19cce21717ddc92bcfaf1f25dca33712977c2fc0e53f9b9a7fff57a8579fe5283e435f986d
SSDEEP

24576:5Ryw5ciSx4+K6UMXVSdCFD2g+bk+to48WM03C6IXkHGs:XysZSxjUeL5zl+9M0K

Score

N/A

Malware Config

Signatures

Files

ad689a08e3a042175f7abc8ab8a1aae61ad81fc897c235b93db65c0a88bb93ab
.exe windows x86

e621fc0bda5d8b57a26a69ad53a1613b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

lstrcmpW
FindFirstFileExW
UnlockFile
FindResourceW
GlobalFlags
WriteFile
HeapDestroy
TlsSetValue
GetDriveTypeW
GetTimeZoneInformation
GetLongPathNameW
CompareStringA
GetProcAddress
GetStdHandle
SizeofResource
CompareStringW
GlobalMemoryStatus
FindFirstFileW
LoadResource
EnterCriticalSection
GetEnvironmentStringsW
CopyFileW
PeekNamedPipe
SetFilePointer
FileTimeToLocalFileTime
GetWindowsDirectoryW
SetThreadPriority
GetFileInformationByHandle
GlobalSize
GetLocaleInfoW
GetConsoleCP
GetFileAttributesExW
GetCurrentThreadId
SetHandleCount
ExitProcess
GetFullPathNameW
lstrcmpiW
CreateEventW
CreateThread
GetPrivateProfileIntW
ExitThread
HeapFree
GetModuleHandleW
lstrcmpA
LockFile
SetUnhandledExceptionFilter
HeapSetInformation
VirtualProtect
GetStartupInfoW
GetSystemDefaultUILanguage
InterlockedExchange
GetTempFileNameW
GlobalGetAtomNameW
LoadLibraryA
GetSystemInfo
IsDebuggerPresent
GlobalHandle
GetFileSize
GetTempPathW
WideCharToMultiByte
GetProfileIntW
HeapQueryInformation
GetFileAttributesW
GlobalDeleteAtom
GetSystemDirectoryW
GlobalFindAtomW
FindResourceExW
SetLastError
InterlockedIncrement
LoadLibraryExW
VirtualUnlock
SearchPathW
GetSystemTimeAsFileTime
Sleep
InterlockedDecrement
RaiseException
GetTickCount
SetStdHandle
HeapReAlloc
GetFileType
GetVolumeInformationW
InterlockedCompareExchange
GetCommandLineW
SetEndOfFile
WaitForSingleObject
GetUserDefaultLCID
ReleaseMutex
InitializeCriticalSection
GetThreadTimes
MoveFileExW
GetFileSizeEx
GetCurrentThread
QueryPerformanceCounter
GetFileTime
ReadFile
lstrlenW
GetCurrentProcessId
GetLocaleInfoA
GetStartupInfoA
ResumeThread
DeleteFileW
GetVersionExW
LeaveCriticalSection
GlobalFree
LoadLibraryW
TlsAlloc
FreeEnvironmentStringsW
UnhandledExceptionFilter
HeapAlloc
SetErrorMode
IsValidCodePage
TlsGetValue
WritePrivateProfileStringW
VirtualQuery
GetProcessWorkingSetSize
VirtualFree
CloseHandle
RtlUnwind
GetCurrentDirectoryW
LocalReAlloc
LocalFree
GetVersion
GetCurrentProcess
GetPrivateProfileStringW
SetEnvironmentVariableA
EnumSystemLocalesA
GetLastError
TlsFree
FormatMessageW
IsProcessorFeaturePresent
LocalAlloc
FlushInstructionCache
MulDiv
FreeLibrary
DuplicateHandle
WriteConsoleW
GetOEMCP
GetNumberFormatW
GlobalReAlloc
GlobalAlloc
CreateMutexW
InitializeCriticalSectionAndSpinCount
IsValidLocale
FlushFileBuffers
GetThreadLocale
lstrcpyW
GetProcessTimes
HeapCreate
FindNextFileW
ConvertDefaultLocale
GlobalUnlock
MultiByteToWideChar
HeapSize
GetUserDefaultUILanguage
GetModuleFileNameW
GlobalLock
DeleteCriticalSection
VirtualLock
GetConsoleMode
lstrlenA
CreateFileW
FindClose
GetACP
FileTimeToSystemTime
GetProcessHeap
LockResource
FreeResource
DeleteAtom
SuspendThread
GlobalAddAtomW

user32

WindowFromPoint
SetWindowContextHelpId
GetMessagePos
SetCursor
SubtractRect
UnregisterClassW
CharNextW
GetMenuState
EnumDisplayMonitors
SetRectEmpty
SetWindowPlacement
LoadCursorW
ClipCursor
CharUpperBuffW
WinHelpW
CopyImage
EnumWindows
GetLastActivePopup
SetWindowRgn
GetUpdateRect
SetFocus
UnregisterClassA
FillRect
RealChildWindowFromPoint
GetMessageTime
ShowScrollBar
GetActiveWindow
GetMessageW
DeleteMenu
IsMenu
GetTopWindow
IsZoomed
SetParent
GetWindowPlacement
CharUpperW
GetForegroundWindow
DrawIconEx
DrawStateW
DefFrameProcW
IsRectEmpty
SetScrollInfo
SetWindowLongW
EndPaint
EqualRect
SetRect
BeginDeferWindowPos
InflateRect
SystemParametersInfoW
IsWindow
CloseClipboard
IsDialogMessageW
PeekMessageW
EnableWindow
CheckMenuItem
RemovePropW
GetDlgCtrlID
AppendMenuW
MonitorFromWindow
GetClassNameW
GetOpenClipboardWindow
GetMenu
UnionRect
UpdateWindow
GetMenuItemCount
ScreenToClient
TabbedTextOutW
GetIconInfo
DispatchMessageW
InvalidateRect
SetMenuItemBitmaps
SetActiveWindow
SetScrollRange
GetDialogBaseUnits
GetMenuCheckMarkDimensions
EndDialog
CreateDialogIndirectParamW
DestroyCursor
GetWindowRgn
GetPropW
SendMessageW
MoveWindow
IsChild
TranslateMDISysAccel
SetDlgItemTextW
SetForegroundWindow
SetPropW
ClientToScreen
UpdateLayeredWindow
GetParent
CreateIcon
GetMenuStringW
GetWindowRect
DrawFrameControl
GetWindowDC
GetScrollPos
CreatePopupMenu
ReuseDDElParam
PostMessageW
GetSubMenu
InsertMenuW
IsClipboardFormatAvailable
GetSystemMenu
SetTimer
GetFocus
LoadIconW
GetClassInfoExW
InvertRect
DrawTextExW
SetWindowPos
RegisterClipboardFormatW
GetMenuItemID
AdjustWindowRectEx
SetMenu
GetDesktopWindow
LoadImageW
ModifyMenuW
GetMenuItemInfoW
GetWindow
GetDC
CopyRect
GetWindowThreadProcessId
DrawFocusRect
MonitorFromPoint
SetScrollPos
LoadAcceleratorsW
OffsetRect
LoadMenuW
BeginPaint
RegisterWindowMessageW
DrawEdge
InvalidateRgn
RedrawWindow
FrameRect
GetClipboardViewer
CreateIconFromResourceEx
MapDialogRect
SetClipboardData
GetProcessWindowStation
GetKeyNameTextW
RemoveMenu
GetWindowTextW
MapVirtualKeyExW
ShowWindow
SetWindowsHookExW
DeferWindowPos
ReleaseDC
SetWindowTextW
TranslateAcceleratorW
EmptyClipboard
CallWindowProcW
KillTimer
EnableMenuItem
GetScrollRange
GetSysColorBrush
GetWindowLongW
EnableScrollBar
MapWindowPoints
GetWindowTextLengthW
IsWindowEnabled
TranslateMessage
OpenClipboard
EnumChildWindows
GetAsyncKeyState
GrayStringW
DialogBoxParamW
GetKeyState
GetClassInfoW
RegisterClassW
DrawTextW
ShowOwnedPopups
DefMDIChildProcW
EndDeferWindowPos
GetDlgItem
PtInRect
UnhookWindowsHookEx
CallNextHookEx
IntersectRect
SetCapture
InsertMenuItemW
GetDoubleClickTime
SetMenuDefaultItem
PostQuitMessage
ValidateRect
IsIconic
DestroyIcon
LoadBitmapW
GetScrollInfo
GetDlgItemTextW
MapVirtualKeyW
GetCaretPos
SetLayeredWindowAttributes
GetClassLongW
GetClientRect
PostThreadMessageW
DrawMenuBar
GetQueueStatus
ReleaseCapture
GetNextDlgTabItem
CheckDlgButton
DialogBoxIndirectParamW
UnpackDDElParam
CreateMenu
CopyIcon
TrackPopupMenu
ScrollWindow
CreateWindowExW
DefWindowProcW
DrawIcon
GetCapture
HideCaret
WaitMessage
GetMonitorInfoW
GetSystemMetrics
DestroyMenu
GetNextDlgGroupItem

gdi32

CreateCompatibleBitmap
EnumFontFamiliesW
GetCurrentObject
Ellipse
RectVisible
FillRgn
DPtoLP
SetBitmapBits
SetBkMode
OffsetWindowOrgEx
GetBkMode
GetClipBox
CreatePatternBrush
ScaleWindowExtEx
RealizePalette
GetWindowOrgEx
GetViewportExtEx
ExcludeClipRect
GetObjectType
SetTextColor
CopyMetaFileW
GetBoundsRect
SelectPalette
LPtoDP
GetRgnBox
SelectObject
OffsetViewportOrgEx
CreatePen
PtVisible
MoveToEx
SetBkColor
SetWindowExtEx
RoundRect
SetROP2
EnumFontFamiliesExW
BitBlt
TextOutW
CreateRectRgn
GetTextExtentPointW
CreateDIBitmap
OffsetRgn
GetNearestPaletteIndex
GetPaletteEntries
Rectangle
PtInRegion
Escape
CreateFontIndirectW
SetDIBits
RestoreDC
GetLayout
SetDIBColorTable
CreateFontW
ScaleViewportExtEx
SetDIBitsToDevice
SetStretchBltMode
CreateEllipticRgn
GetStockObject
GetTextExtentPoint32W
GetWindowExtEx
StretchBlt
CreateHatchBrush
CombineRgn
SetPixel
CreateBitmap
CreateDCW
GetPixel
GetMapMode
DeleteDC
GetTextMetricsW
LineTo
GetBkColor
GetViewportOrgEx
CreateCompatibleDC
ExtFloodFill
SetPaletteEntries
CreateRectRgnIndirect
SetViewportExtEx
GetBitmapBits
SetRectRgn
CreateSolidBrush
ExtTextOutW
DeleteObject
SetMapMode
GetDeviceCaps
GetSystemPaletteEntries
SetPixelV
GetTextColor
CreatePalette
GetTextCharsetInfo
Polyline
SelectClipRgn
CreatePolygonRgn
SetLayout
IntersectClipRect
SetTextAlign
SetWindowOrgEx
SetViewportOrgEx
SaveDC
PatBlt
ExtSelectClipRgn
FrameRgn
GetTextFaceW
CreateRoundRectRgn
CreateDIBSection
Polygon
SetPolyFillMode
GetObjectW

comdlg32

GetOpenFileNameW
GetFileTitleW
GetSaveFileNameW

advapi32

RegDeleteValueW
RegOpenKeyExA
RegSetValueExW
GetTokenInformation
RegEnumKeyW
RegQueryValueExA
RegEnumKeyExW
AllocateAndInitializeSid
RegEnumValueW
CryptGenRandom
OpenProcessToken
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegQueryValueW
CheckTokenMembership
RegQueryValueExW
RegQueryInfoKeyW
FreeSid
RegDeleteKeyW

shell32

SHGetDesktopFolder
SHGetFileInfoW
DragQueryFileW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderLocation
Shell_NotifyIconW
DragFinish
SHAppBarMessage
DuplicateIcon
ExtractIconExW
ShellExecuteW
ShellExecuteExW

ole32

CoInitialize
OleCreateMenuDescriptor
IsAccelerator
ReleaseStgMedium
RegisterDragDrop
DoDragDrop
OleInitialize
OleFlushClipboard
CLSIDFromProgID
OleGetClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
RevokeDragDrop
CoLockObjectExternal
CoRegisterClassObject
CoRevokeClassObject
StringFromGUID2
CoCreateGuid
CreateILockBytesOnHGlobal
CoTaskMemRealloc
OleTranslateAccelerator
StgCreateDocfileOnILockBytes
CoUninitialize
OleUninitialize
CoTaskMemAlloc
CoGetClassObject
CoCreateInstance
OleIsCurrentClipboard
CreateStreamOnHGlobal
CoTaskMemFree
CoFreeUnusedLibraries
CoInitializeEx
OleDestroyMenuDescriptor
OleDuplicateData
OleLockRunning
CLSIDFromString

oleaut32

SafeArrayDestroy
UnRegisterTypeLi
VariantChangeType
SysStringByteLen
VariantInit
SysStringLen
VarBstrFromDate
SysAllocStringByteLen
RegisterTypeLi
SystemTimeToVariantTime
SysAllocString
LoadTypeLi
VarUI4FromStr
OleCreateFontIndirect
SysFreeString
VariantTimeToSystemTime
VarBstrCmp
SysAllocStringLen
VariantCopy
VarBstrCat
VariantClear

comctl32

_TrackMouseEvent
ImageList_GetIconSize
ImageList_DragShowNolock
InitCommonControlsEx
ImageList_DragMove

shlwapi

PathRemoveFileSpecW
PathIsUNCW
PathFindFileNameW
PathStripToRootW
PathFindExtensionW

winmm

PlaySoundW

rpcrt4

NdrProxyErrorHandler

msimg32

TransparentBlt
AlphaBlend

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

gdiplus

GdipGetImagePaletteSize
GdiplusStartup
GdipCreateBitmapFromStream
GdipFree
GdipGetImagePalette
GdipDisposeImage
GdipDeleteGraphics
GdipDrawImageI
GdiplusShutdown
GdipCloneImage
GdipAlloc
GdipGetImageHeight
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateFromHDC
GdipDrawImageRectI
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipCreateBitmapFromHBITMAP
GdipSetInterpolationMode

uxtheme

OpenThemeData
CloseThemeData

Sections

.text
Size: 569KB - Virtual size: 569KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 214KB - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e621fc0bda5d8b57a26a69ad53a1613b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

rpcrt4

msimg32

imm32

gdiplus

uxtheme

Sections

.text Size: 569KB - Virtual size: 569KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 214KB - Virtual size: 5.4MB

.tls Size: - Virtual size: 101B

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 15KB - Virtual size: 15KB

.text
Size: 569KB - Virtual size: 569KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 214KB - Virtual size: 5.4MB

.tls
Size: - Virtual size: 101B

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 15KB - Virtual size: 15KB