991de18eebef999563c037ba2ac355402cfec10d9956124e2826140540f1c4fb

Sharing

Copy URL Twitter E-mail

General

Target

991de18eebef999563c037ba2ac355402cfec10d9956124e2826140540f1c4fb
Size

265KB
MD5

07eb8e56839ed2939b142a17ecbab3c4
SHA1

5d46cf89081b590cf18f597e5cb777722ada15da
SHA256

991de18eebef999563c037ba2ac355402cfec10d9956124e2826140540f1c4fb
SHA512

ee03dd7a6af4601af7146ae095f544d3d3997cbbb28bd47ea1607c7e9ba71a400fd760c1bcff42d10cf02854e7ee836eca9a94696230f6469373c596db723d46
SSDEEP

6144:BWBx6VmlJIpZjFbFi8v92IdHuX0bSBTmh:BWfRfE5EXKSV

Score

N/A

Malware Config

Signatures

Files

991de18eebef999563c037ba2ac355402cfec10d9956124e2826140540f1c4fb
.exe windows x86

ae1ee75bca4710982e83c532d347b7c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFlags
GlobalFree
GlobalHandle
GlobalReAlloc
HeapAlloc
InitializeCriticalSection
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LocalReAlloc
LockResource
QueryPerformanceCounter
GetVersion
SetErrorMode
SetFileAttributesW
SetFilePointer
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsFree
TlsGetValue
UnhandledExceptionFilter
UnlockFile
VirtualAlloc
VirtualFree
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileStringW
lstrcmpA
lstrcmpW
lstrlenW
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetStringTypeA
GetProcessPriorityBoost
GetProcessHeap
GetOEMCP
GetModuleHandleA
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFileTime
GetFileSize
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetConsoleMode
GetCommandLineA
GetCPInfo
GetBinaryTypeW
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FindResourceW
FindClose
FileTimeToLocalFileTime
EnumSystemLocalesA
DuplicateHandle
CreateHardLinkA
CreateFileW
CreateFileA
CreateDirectoryW
ConvertDefaultLocale
CompareStringW
ReadFile
CloseHandle

user32

GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
GrayStringW
IntersectRect
InvalidateRect
InvalidateRgn
IsChild
IsDialogMessageW
IsIconic
IsWindow
IsWindowEnabled
IsWindowVisible
LoadBitmapW
LoadCursorW
LoadIconW
LoadImageW
MapDialogRect
MapWindowPoints
MessageBeep
MessageBoxW
ModifyMenuW
OffsetRect
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
PtInRect
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemovePropW
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCapture
SetFocus
SetForegroundWindow
SetMenuItemBitmaps
SetRect
SetWindowContextHelpId
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoA
TabbedTextOutW
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
GetSysColorBrush
UpdateWindow
ValidateRect
WinHelpW
BeginPaint
CallNextHookEx
CharNextW
CharUpperW
ClientToScreen
CopyAcceleratorTableW
GetWindowRect
CopyRect
CreateWindowExW
DefWindowProcW
DestroyMenu
DestroyWindow
DispatchMessageW
DrawTextExW
GetSysColor
GetSubMenu
GetQueueStatus
GetPropW
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetActiveWindow
EqualRect
EndPaint
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
GetWindowDC
GetWindow
GetTopWindow
UnregisterClassW
GetSystemMetrics

comdlg32

PageSetupDlgA
GetFileTitleW
ChooseFontW
dwLBSubclass

wininet

HttpSendRequestW
GetUrlCacheEntryInfoExW
GetUrlCacheGroupAttributeA
HttpOpenRequestW
GetUrlCacheEntryInfoW
InternetGetLastResponseInfoW
InternetReadFile
InternetOpenW

gdi32

TextOutW
StartPage
SetViewportOrgEx
SetViewportExtEx
SetTextColor
SetMapMode
SetBkColor
SelectObject
OffsetViewportOrgEx
GetWindowExtEx
CreateBitmap
GetTextColor
GetStockObject
GetMapMode
GetDeviceCaps
GetClipBox
ExtTextOutW
ExtSelectClipRgn
Escape
DeleteObject
CreateSolidBrush
CreateRectRgnIndirect
CreateFontIndirectW
CreateCompatibleDC
GetViewportExtEx

advapi32

RegSetValueExW
RegQueryValueW
RegOpenKeyW
RegOpenKeyExW
RegEnumKeyW
RegCloseKey
OpenTraceW
GetTrusteeTypeW
ElfRegisterEventSourceW
RegisterEventSourceW

shell32

SHGetSpecialFolderPathW
SHGetSettings
SHGetFolderPathW
ShellExecuteW

winspool.drv

OpenPrinterW
GetPrintProcessorDirectoryW
EnumPrinterDataW
DocumentPropertiesW
ClosePrinter

oleaut32

SafeArrayDestroy
SysAllocString
SysAllocStringLen
SysStringLen
SystemTimeToVariantTime
VarDecFromBool
VarR8Pow
VariantChangeType
VariantClear
VariantCopy
VariantInit
VariantTimeToSystemTime
OleCreateFontIndirect

Sections

.text
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae1ee75bca4710982e83c532d347b7c4

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

wininet

gdi32

advapi32

shell32

winspool.drv

oleaut32

Sections

.text Size: 53KB - Virtual size: 56KB

.rdata Size: 147KB - Virtual size: 148KB

.data Size: 36KB - Virtual size: 152KB

.idata Size: 7KB - Virtual size: 7KB

.rsrc Size: 21KB - Virtual size: 23KB

.text
Size: 53KB - Virtual size: 56KB

.rdata
Size: 147KB - Virtual size: 148KB

.data
Size: 36KB - Virtual size: 152KB

.idata
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 21KB - Virtual size: 23KB