4342a198f39c9b326e07ab8b2452c1f2f921d3f0f3fd82046f30839a7cc7b4c5

Sharing

Copy URL Twitter E-mail

General

Target

4342a198f39c9b326e07ab8b2452c1f2f921d3f0f3fd82046f30839a7cc7b4c5
Size

512KB
MD5

4065873f7872bc020322e9b501bea8e0
SHA1

3069357bb4194c89a25f3ce58d08efc41b4c1409
SHA256

4342a198f39c9b326e07ab8b2452c1f2f921d3f0f3fd82046f30839a7cc7b4c5
SHA512

d81cbbda5334d138af614f74a096b6dd4f4566cd304757fdbb51b523a2b89da3c65cacbd9d9a5adeb455041da32bf5bf24796a75ae514eefd784673cfce19235
SSDEEP

6144:UpWCDrqrLPXrYYvxhieBqqMWvTvDlCNB2ehjBbLWfKk5+T3BUJpDb+WxlU+:+rqrjr9xhi8q8DlEQUjBsK9rBo44/

Score

N/A

Malware Config

Signatures

Files

4342a198f39c9b326e07ab8b2452c1f2f921d3f0f3fd82046f30839a7cc7b4c5
.exe windows x86

82ae0481630ff9ec634379e44a0665b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
GlobalFree
GetVersionExW
SizeofResource
LockResource
LoadResource
SetCurrentDirectoryW
CreateMutexW
FindResourceW
WritePrivateProfileSectionW
GetPrivateProfileStringW
WritePrivateProfileStringA
WritePrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
WaitForSingleObject
ReleaseMutex
CreateEventW
ResetEvent
GetUserDefaultUILanguage
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileW
SetFilePointer
CreateFileA
FlushFileBuffers
SetStdHandle
InitializeCriticalSection
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
LocalAlloc
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
EnumResourceNamesW
GlobalReAlloc
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
GetStdHandle
WriteFile
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
HeapSize
Sleep
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoW
GetProcessHeap
GetVersionExA
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
LoadLibraryA
InterlockedExchange
GetProcAddress
LoadLibraryW
FreeLibrary
DeleteFileW
CopyFileW
OpenProcess
GetLongPathNameW
ExpandEnvironmentStringsW
FindFirstFileW
FindNextFileW
FindClose
GlobalAlloc
GlobalLock
GlobalUnlock
InterlockedIncrement
GetModuleFileNameA
MulDiv
TerminateThread
GetFileAttributesW
ReadFile
LoadLibraryExW
GetTempPathW
GetTempFileNameW
GetSystemTime
GetLastError
GetConsoleCP
LocalFree
GetModuleFileNameW
CloseHandle
GetTickCount
FreeEnvironmentStringsW
CreateThread

user32

CreatePopupMenu
DispatchMessageW
LoadIconW
LoadCursorW
RemovePropW
SetWindowPlacement
IsZoomed
GetWindowPlacement
IsIconic
SetPropW
GetPropW
ShowWindow
SetForegroundWindow
GetForegroundWindow
ShowOwnedPopups
PostMessageW
SetTimer
MoveWindow
MapWindowPoints
GetWindowRect
PtInRect
GetWindowLongW
GetAncestor
EnumChildWindows
UpdateLayeredWindow
SetActiveWindow
DestroyMenu
KillTimer
GetCursorPos
EnableWindow
GetDlgItem
SetRect
GetClassNameW
GetClientRect
GetWindowTextW
SetWindowTextW
SendMessageW
WindowFromPoint
GetAsyncKeyState
DialogBoxParamW
RedrawWindow
BringWindowToTop
GetTopWindow
MessageBoxW
RegisterHotKey
UnregisterHotKey
EndDialog
DefWindowProcW
IsWindow
GetWindowThreadProcessId
TrackPopupMenu
CheckMenuItem
EnableMenuItem
AppendMenuW
ReleaseCapture
SetCapture
SetWindowLongW
UnhookWindowsHookEx
DestroyWindow
RegisterShellHookWindow
SetWindowsHookExW
PostQuitMessage
RegisterClipboardFormatW
CreateWindowExW
RegisterWindowMessageW
GetDC
ReleaseDC
GetWindowRgn
GetDesktopWindow
GetIconInfo
LookupIconIdFromDirectoryEx
DestroyIcon
CreateIconFromResourceEx
FindWindowW
SystemParametersInfoW
EnumWindows
GetWindow
GetParent
SendDlgItemMessageW
IsWindowVisible
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
LoadImageW
GetSystemMetrics
EnumDisplayMonitors
SetWindowPos
RegisterClassExW

gdi32

CreateRectRgn
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateDIBSection
DeleteDC
SelectObject
DeleteObject
GetObjectW

comdlg32

GetSaveFileNameW
ChooseColorW
ChooseFontW
GetOpenFileNameW
CommDlgExtendedError

advapi32

RegQueryValueExW
RegCreateKeyW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor

shell32

SHFileOperationW
DragFinish
ord25
ShellExecuteW
ord4
SHGetPathFromIDListW
ord2
SHGetSpecialFolderLocation
SHBindToParent
ord162
SHGetDataFromIDListW
SHGetMalloc
SHGetSpecialFolderPathW
SHGetFileInfoW
ShellExecuteExW
ord155
SHBrowseForFolderW

ole32

OleInitialize
OleUninitialize
CreateStreamOnHGlobal
RegisterDragDrop
CoLockObjectExternal
ReleaseStgMedium
CoCreateInstance

oleaut32

SysAllocStringLen
SysFreeString

comctl32

ImageList_Create
ImageList_Add

gdiplus

GdipDrawImageI
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromHICON
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipImageRotateFlip
GdipMeasureString
GdipFillPath
GdipDrawPath
GdipSetSmoothingMode
GdipGetInterpolationMode
GdipTransformPath
GdipAddPathString
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipCreateSolidFill
GdipTranslateMatrix
GdipSetMatrixElements
GdipCreateMatrix
GdipBitmapGetPixel
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipDeletePath
GdipCreatePath
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeletePen
GdipCreatePen1
GdipDeleteMatrix
GdipCloneBitmapAreaI
GdipSetImageAttributesColorMatrix
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePixelFormat
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipCloneImage
GdipCloneBrush
GdipDrawImageRectRectI
GdipDrawImageRectI
GdipFillRectangleI
GdipSetInterpolationMode
GdipSetCompositingQuality
GdipSetCompositingMode
GdipReleaseDC
GdipGetDC
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipCreateTextureIAI
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromScan0
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipSetTextureWrapMode
GdipScaleTextureTransform
GdipTranslateTextureTransform
GdipDeleteBrush
GdipAlloc
GdipFree

shlwapi

PathRemoveFileSpecW
PathRemoveFileSpecA
PathIsDirectoryW
PathSearchAndQualifyW
PathFileExistsW
StrRetToBufW

psapi

EnumProcesses
GetModuleBaseNameW
GetModuleFileNameExW

setupapi

SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList

Exports

Exports

DockletBrowseForImage
DockletDefaultConfigDialog
DockletDoAttentionAnimation
DockletGetLabel
DockletGetRect
DockletGetRelativeFolder
DockletGetRootFolder
DockletIsVisible
DockletLoadGDIPlusImage
DockletLockMouseEffect
DockletQueryDockAlign
DockletQueryDockEdge
DockletSetDockAlign
DockletSetDockEdge
DockletSetImage
DockletSetImageFile
DockletSetImageOverlay
DockletSetLabel
WritePrivateProfileInt

Sections

.text
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

srkjfgh
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

82ae0481630ff9ec634379e44a0665b5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

gdiplus

shlwapi

psapi

setupapi

Exports

Exports

Sections

.text Size: 280KB - Virtual size: 280KB

.rdata Size: 48KB - Virtual size: 44KB

.data Size: 8KB - Virtual size: 13KB

.rsrc Size: 172KB - Virtual size: 172KB

srkjfgh Size: - Virtual size: 4KB

.text
Size: 280KB - Virtual size: 280KB

.rdata
Size: 48KB - Virtual size: 44KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 172KB - Virtual size: 172KB

srkjfgh
Size: - Virtual size: 4KB