8dfb792f295ce0a4345fbaab98f2cdbc4530095352e27b435389717e6c38cb6d

Sharing

Copy URL Twitter E-mail

General

Target

8dfb792f295ce0a4345fbaab98f2cdbc4530095352e27b435389717e6c38cb6d
Size

841KB
MD5

31c511853a09384a5c082afa089440f0
SHA1

b399ebde4981f5e81e6473850ececc9ab630cce1
SHA256

8dfb792f295ce0a4345fbaab98f2cdbc4530095352e27b435389717e6c38cb6d
SHA512

98c3656a55440686c11f135596b954f0490c43f62029a0862ca95018789f92ba4b1301adc1b2418567c7faa8da3ed787395abd52c20a59d0308c7e25e114513b
SSDEEP

24576:f/NCZ+ckYAmG03am1kHVJ7GOXSljynacGdF17GH5mQK:fVCZ9kYbDKm+1J7DSlsacGdFFGHQQK

Score

N/A

Malware Config

Signatures

Files

8dfb792f295ce0a4345fbaab98f2cdbc4530095352e27b435389717e6c38cb6d
.exe windows x86

b4db4123328d33fd6f8ed3e7509e9363

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
SetEnvironmentVariableA
LockResource
GetVersionExA
GetACP
WriteConsoleA
FreeEnvironmentStringsA
FileTimeToSystemTime
GetCurrentThread
VirtualFree
GetConsoleMode
HeapDestroy
InterlockedDecrement
GetSystemInfo
DuplicateHandle
LeaveCriticalSection
FreeResource
WriteFile
UnhandledExceptionFilter
SizeofResource
GetLastError
GetStartupInfoA
GetThreadLocale
GlobalReAlloc
FileTimeToLocalFileTime
InterlockedExchange
GetWindowsDirectoryA
GetVersion
GetFileSize
CloseHandle
LCMapStringA
LocalFree
LocalReAlloc
UnlockFile
GetLocaleInfoA
QueryPerformanceCounter
SetLastError
FlushFileBuffers
EnterCriticalSection
InterlockedIncrement
TlsFree
RaiseException
TerminateProcess
SetFileTime
GlobalUnlock
GetCommandLineA
FindClose
LoadResource
GlobalLock
VirtualQuery
MulDiv
lstrlenA
CreateFileA
SetFilePointer
GlobalDeleteAtom
GlobalHandle
GetProcessHeap
GetModuleFileNameA
SetStdHandle
GetSystemDirectoryA
EnumResourceLanguagesW
Sleep
TlsAlloc
GlobalFlags
GetConsoleOutputCP
SetEndOfFile
SystemTimeToFileTime
HeapReAlloc
HeapFree
GetFileType
lstrcmpA
RtlUnwind
SetHandleCount
GetTimeZoneInformation
GetStdHandle
ReadFile
SetErrorMode
HeapAlloc
GetSystemTimeAsFileTime
FreeLibrary
HeapCreate
GetStringTypeA
ConvertDefaultLocale
GetConsoleCP
LockFile
VirtualAlloc
SetUnhandledExceptionFilter
GetCurrentThreadId
IsDebuggerPresent
GetCurrentProcessId
LocalAlloc
DeleteCriticalSection
TlsGetValue
GetEnvironmentStrings
LocalFileTimeToFileTime
HeapSize
CompareStringA
GetCommandLineW
TlsSetValue
lstrcpyA
GetSystemTime
GetModuleHandleA
GetOEMCP
LoadLibraryA
GlobalFree
GetProcAddress
lstrcatA
GlobalAlloc
GetTickCount
GetFileTime
ExitProcess

user32

UnhookWindowsHookEx
CreatePopupMenu
SetCapture
EqualRect
GetWindowRgn
InvalidateRgn
GetActiveWindow
SetWindowPos
BeginPaint
TrackPopupMenu
SendDlgItemMessageA
GetMessageTime
DestroyWindow
SetWindowRgn
ReleaseCapture
KillTimer
ScreenToClient
OffsetRect
GetWindowPlacement
SetScrollPos
SetTimer
UnregisterClassA
ShowOwnedPopups
GetTopWindow
GetCapture
SetScrollInfo
GetWindowThreadProcessId
GetMessagePos
IsWindowEnabled
DestroyMenu
GetMenuItemID
ScrollWindow
GetNextDlgGroupItem
InflateRect
GetMenuCheckMarkDimensions
ShowWindow
ReleaseDC
GetMenuItemCount
SetForegroundWindow
SetRectEmpty
EndDialog
GetScrollPos
SetRect
LockWindowUpdate
MapDialogRect
GetDesktopWindow
GetKeyState
EnableMenuItem
GetDlgCtrlID
GetSystemMetrics
GetClientRect
WindowFromPoint
GetLastActivePopup
PostQuitMessage
CallNextHookEx
SetFocus
PtInRect
SetCursor
GetWindowRect
GetNextDlgTabItem
GetDC
GetWindow
SetActiveWindow
ValidateRect
SystemParametersInfoA
ClientToScreen
SetMenuItemBitmaps
SetMenu
GetMenuState
IsWindowVisible
TranslateMessage
GetFocus
CopyRect
IntersectRect
UnpackDDElParam
GetMenu
CheckMenuItem
GetCursorPos
GetWindowDC
BeginDeferWindowPos
GetSubMenu
GetForegroundWindow
UpdateWindow
FillRect
IsWindow
AdjustWindowRectEx
GetScrollRange
MapWindowPoints
IsZoomed
IsRectEmpty
GetDlgItem
SetWindowContextHelpId
DrawIcon
MessageBeep
MoveWindow
GetScrollInfo
EndPaint
RedrawWindow
GetSystemMenu
BringWindowToTop
GetSysColorBrush
GetSysColor
GetDCEx
GetParent
IsIconic
SetParent
InvalidateRect
DeferWindowPos
ShowScrollBar
EndDeferWindowPos
DestroyIcon
ReuseDDElParam
IsChild
SetScrollRange
DeleteMenu

gdi32

GetDeviceCaps
SelectClipRgn
CombineRgn
BitBlt
GetPixel
PatBlt
SetViewportExtEx
CreateCompatibleBitmap
ScaleViewportExtEx
IntersectClipRect
GetClipBox
PtVisible
RestoreDC
SetTextColor
CreateSolidBrush
SetBkMode
SetWindowExtEx
CreateRectRgnIndirect
CreatePatternBrush
DPtoLP
ExtSelectClipRgn
GetTextColor
CreateEllipticRgn
DeleteDC
RectVisible
CreateBitmap
SetRectRgn
GetStockObject
Ellipse
ScaleWindowExtEx
Escape
CreateCompatibleDC
SelectObject
GetRgnBox
OffsetRgn
GetMapMode
DeleteObject
OffsetViewportOrgEx
GetBkColor
SetBkColor
StretchDIBits
SaveDC
CreateRectRgn
ExcludeClipRect
SetViewportOrgEx
SetMapMode
GetWindowExtEx

advapi32

RegCloseKey
SetFileSecurityW

shell32

DragFinish

ole32

CreateStreamOnHGlobal
StgCreateDocfileOnILockBytes
OleInitialize
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
OleFlushClipboard
OleUninitialize
CLSIDFromProgID
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
CLSIDFromString
CoCreateInstance
CoGetClassObject
CoRegisterMessageFilter
CoRevokeClassObject

oleaut32

VariantInit
SysAllocString
OleCreateFontIndirect
VariantTimeToSystemTime
SafeArrayDestroy
SysFreeString
SystemTimeToVariantTime
SysAllocStringLen
VariantCopy
SysStringLen
VariantClear
OleLoadPicture
VariantChangeType

comctl32

ImageList_LoadImageW

shlwapi

PathRemoveExtensionW
PathFindFileNameW
PathFindExtensionW
PathFileExistsW
PathStripToRootW
PathIsUNCW

wldap32

ord201

Sections

.text
Size: 474KB - Virtual size: 473KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 343KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b4db4123328d33fd6f8ed3e7509e9363

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

wldap32

Sections

.text Size: 474KB - Virtual size: 473KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 343KB - Virtual size: 365KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 474KB - Virtual size: 473KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 343KB - Virtual size: 365KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 3KB - Virtual size: 3KB