a4abfb44c20d309137bde0b5a6f9973fabfab84c1f8111ba2e35e0f607892498

Sharing

Copy URL Twitter E-mail

General

Target

a4abfb44c20d309137bde0b5a6f9973fabfab84c1f8111ba2e35e0f607892498
Size

324KB
MD5

f9ebeacb3866a2dd7278951209665c3c
SHA1

e9ccd32bbf97bc0b8d9c5682a0275f3077c63e16
SHA256

a4abfb44c20d309137bde0b5a6f9973fabfab84c1f8111ba2e35e0f607892498
SHA512

0eec03259cad24211af7da5c4cf2436450258d68a416a7088b330d6f1f213de557978bf2d0d7b3cd5f89c9d47fb27102bd5173c5b9165b680ecf98b06e3d4f31
SSDEEP

6144:MNct0dgaOY8Uk6mkMxCuZjQWUrW4vTsnnRfmydOElyVLWf:Ft0L8JtkMxIWUKs0n15yVe

Score

N/A

Malware Config

Signatures

Files

a4abfb44c20d309137bde0b5a6f9973fabfab84c1f8111ba2e35e0f607892498
.exe windows x86

bc75a4a3103b88cd9d4d494a563cb877

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

ExcludeClipRect
FillRgn
GetClipBox
GetClipRgn
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetLayout
GetMapMode
GetObjectW
GetPaletteEntries
GetStockObject
GetSystemPaletteEntries
GetTextAlign
GetTextExtentPoint32W
GetTextMetricsW
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LPtoDP
EnumFontFamiliesExW
MoveToEx
Polygon
RealizePalette
Rectangle
RestoreDC
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetDIBColorTable
SetDIBits
SetLayout
SetMapMode
SetTextAlign
SetTextColor
SetViewportOrgEx
SetWindowOrgEx
StretchBlt
Ellipse
DeleteObject
DeleteDC
DPtoLP
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePolygonRgn
CreatePen
CreatePalette
CreateHalftonePalette
CreateFontIndirectW
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
LineTo
BitBlt

netapi32

NetApiBufferFree
NetGetJoinInformation

comctl32

ImageList_EndDrag
ImageList_DrawEx
ImageList_Draw
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_Destroy
ImageList_Create
ImageList_BeginDrag
ImageList_AddMasked
ImageList_Add
CreateToolbarEx
CreateStatusWindowW
ord8
ImageList_Remove
ord17
PropertySheetW
ImageList_GetIcon

wininet

InternetOpenA
HttpOpenRequestW
InternetOpenUrlW
InternetCrackUrlW
InternetReadFile
InternetSetOptionA
InternetSetOptionW
InternetSetStatusCallbackW
InternetConnectW
InternetCloseHandle
GetUrlCacheEntryInfoW
InternetCanonicalizeUrlW
HttpSendRequestW
HttpQueryInfoW
InternetOpenW
ResumeSuspendedDownload

version

GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueA
VerQueryValueW
GetFileVersionInfoA

ole32

CLSIDFromProgID
CoRegisterClassObject
OleUninitialize
OleSaveToStream
OleRun
OleRegGetUserType
OleRegGetMiscStatus
OleRegEnumVerbs
OleLockRunning
OleLoadFromStream
OleInitialize
OleFlushClipboard
OleCreateStaticFromData
RevokeDragDrop
GetHGlobalFromILockBytes
DoDragDrop
CreateStreamOnHGlobal
CreateOleAdviseHolder
CoInitialize
CoGetClassObject
CoCreateInstance
CoCreateGuid
CLSIDFromString
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
StringFromCLSID
StringFromGUID2
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
IIDFromString
WriteClassStm
RegisterDragDrop
CreateILockBytesOnHGlobal

user32

SendMessageW
SetCapture
SetCursor
SetCursorPos
SetDlgItemInt
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetMenu
SetMenuDefaultItem
SetMenuItemInfoW
SetParent
SetPropA
SetRect
SetRectEmpty
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TrackPopupMenuEx
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassW
UpdateWindow
ValidateRect
WindowFromDC
wsprintfW
LoadStringW
LoadStringA
LoadMenuW
LoadMenuA
LoadImageW
LoadImageA
LoadIconW
LoadIconA
LoadCursorW
LoadCursorA
LoadBitmapW
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsWindow
IsMenu
IsIconic
IsDlgButtonChecked
IsDialogMessageW
IsClipboardFormatAvailable
IsChild
InvalidateRgn
InvalidateRect
IntersectRect
InsertMenuItemW
InflateRect
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetWindow
GetUserObjectInformationW
GetUpdateRect
GetSystemMetrics
GetSysColorBrush
SendDlgItemMessageW
GetSubMenu
GetScrollInfo
GetPropA
GetParent
GetNextDlgTabItem
GetMessageW
GetMessageTime
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastInputInfo
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItemTextW
GetDlgItemInt
GetDlgItem
GetDlgCtrlID
GetDialogBaseUnits
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassInfoExW
GetClassInfoExA
GetAsyncKeyState
FlashWindow
FindWindowW
FindWindowExW
FillRect
EqualRect
EnumChildWindows
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableMenuItem
DrawTextW
DrawMenuBar
DrawFocusRect
DrawEdge
DrawAnimatedRects
DispatchMessageW
DialogBoxParamW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyAcceleratorTable
DeleteMenu
DeferWindowPos
DefWindowProcW
CreateWindowExW
CreateWindowExA
CreatePopupMenu
CreateDialogParamW
CreateAcceleratorTableW
CloseWindow
CloseDesktop
ClientToScreen
CheckRadioButton
CheckMenuRadioItem
CheckMenuItem
CheckDlgButton
CharUpperA
CharPrevW
CharNextW
CallWindowProcW
CallNextHookEx
BeginPaint
BeginDeferWindowPos
AdjustWindowRectEx
AdjustWindowRect
ScreenToClient
RemovePropA
MapWindowPoints
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClassW
RegisterClassExW
RegisterClassExA
RedrawWindow
PtInRect
PostThreadMessageW
PostQuitMessage
PostMessageW
PeekMessageW
OpenInputDesktop
OffsetRect
MsgWaitForMultipleObjects
MoveWindow
ModifyMenuW
MessageBoxW
MessageBoxIndirectW
GetSysColor
MessageBeep
RemoveMenu

kernel32

CompareFileTime
CompareStringA
CompareStringW
CopyFileA
CreateDirectoryW
CreateEventA
CreateEventW
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateMutexA
CreateProcessW
CreateThread
DeleteCriticalSection
DeleteFileA
DeleteFileW
DuplicateHandle
EnterCriticalSection
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindFirstFileW
FindResourceA
FindResourceExW
FindResourceW
FlushInstructionCache
FormatMessageA
FormatMessageW
FreeLibrary
GetACP
GetCommandLineW
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
lstrlenW
lstrlenA
lstrcpynW
lstrcpynA
lstrcpyW
lstrcmpiW
lstrcmpiA
lstrcmpW
lstrcmpA
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjects
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
UnmapViewOfFile
UnhandledExceptionFilter
TerminateThread
TerminateProcess
SystemTimeToFileTime
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetThreadLocale
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetCurrentDirectoryW
SearchPathA
ResumeThread
ResetEvent
ReleaseMutex
ReadFile
RaiseException
QueryPerformanceCounter
OpenFileMappingW
OpenEventW
MultiByteToWideChar
MulDiv
MoveFileW
MoveFileExW
MapViewOfFile
LockResource
LocalFree
LocalAlloc
LoadResource
LoadLibraryW
LoadLibraryA
LeaveCriticalSection
IsValidLocale
IsDBCSLeadByteEx
IsBadWritePtr
IsBadStringPtrW
IsBadStringPtrA
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapAlloc
GlobalUnlock
GlobalMemoryStatus
GlobalLock
GlobalFree
GlobalAlloc
GetWindowsDirectoryW
GetWindowsDirectoryA
GetVersionExW
GetVersionExA
GetVersion
GetUserDefaultLCID
GetTimeFormatW
GetTickCount
GetThreadLocale
GetTempPathW
GetTempPathA
GetTempFileNameW
GetTempFileNameA
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetSystemDefaultUILanguage
GetSystemDefaultLCID
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLocaleInfoW
GetLocaleInfoA
GetLocalTime
GetLastError
GetFileSize
GetFileAttributesW
GetFileAttributesA
GetDateFormatW
CloseHandle

winmm

waveInGetNumDevs
PlaySoundW
waveOutGetNumDevs

oleaut32

LoadRegTypeLi
LoadTypeLi
OleCreateFontIndirect
OleCreatePropertyFrame
SafeArrayAccessData
SafeArrayCreateVector
SafeArrayDestroy
SafeArrayGetDim
SafeArrayGetElement
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnaccessData
SysAllocString
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
SysStringByteLen
SysStringLen
VarCmp
VariantChangeType
VariantClear
VariantCopy
VariantInit
CreateStdDispatch

shlwapi

SHGetInverseCMAP
StrCatBuffA
StrCatBuffW
StrChrA
StrChrW
StrCmpIW
StrCmpNA
StrCmpNIW
StrCmpNW
StrCpyNW
StrPBrkW
StrRChrA
StrRChrW
StrStrA
StrStrIA
StrStrIW
StrStrW
StrToIntExW
StrTrimA
StrTrimW
wnsprintfA
wnsprintfW
SHGetValueW

wsock32

WSAStartup
socket
setsockopt
sendto
send
select
recvfrom
recv
ntohs
ntohl
listen
inet_addr
ioctlsocket
htons
htonl
getsockname
gethostname
gethostbyname
connect
closesocket
bind
accept
WSAGetLastError
WSACleanup
WSACancelAsyncRequest
WSAAsyncSelect
WSAAsyncGetHostByName

comdlg32

GetOpenFileNameW
GetSaveFileNameW
ChooseFontW

shell32

DragFinish
DragQueryFileW
SHAppBarMessage
SHBrowseForFolderW
SHGetFolderPathW
SHGetMalloc
SHGetPathFromIDListW
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconA
Shell_NotifyIconW
DragAcceptFiles

Exports

Exports

SqmAddToAverage
SqmAddToStream
SqmAddToStreamDWord
SqmAddToStreamString
SqmAddToStreamV
SqmCleanup
SqmClearFlags
SqmCreateNewId
SqmEndSession
SqmFlushSession
SqmGetEnabled
SqmGetFlags
SqmGetMachineId
SqmGetSession
SqmGetSessionStartTime
SqmGetUserId
SqmIncrement
SqmIsWindowsOptedIn
SqmReadSharedMachineId
SqmReadSharedUserId
SqmSet
SqmSetAppId
SqmSetAppVersion
SqmSetBits
SqmSetBool
SqmSetCurrentTimeAsUploadTime
SqmSetEnabled
SqmSetFlags
SqmSetIfMax
SqmSetIfMin
SqmSetMachineId
SqmSetString
SqmSetUserId
SqmStartSession
SqmStartUpload
SqmSysprepGeneralize
SqmSysprepSpecialize
SqmTimerAccumulate
SqmTimerAddToAverage
SqmTimerRecord
SqmTimerStart
SqmUnattendedSetup
SqmWaitForUploadComplete
SqmWriteSharedMachineId
SqmWriteSharedUserId

Sections

.text
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc75a4a3103b88cd9d4d494a563cb877

Headers

File Characteristics

Imports

gdi32

netapi32

comctl32

wininet

version

ole32

user32

kernel32

winmm

oleaut32

shlwapi

wsock32

comdlg32

shell32

Exports

Exports

Sections

.text Size: 228KB - Virtual size: 228KB

.rdata Size: 48KB - Virtual size: 48KB

.data Size: 20KB - Virtual size: 1.7MB

.idata Size: 16KB - Virtual size: 16KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 228KB - Virtual size: 228KB

.rdata
Size: 48KB - Virtual size: 48KB

.data
Size: 20KB - Virtual size: 1.7MB

.idata
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 8KB - Virtual size: 8KB