e938fb55f10dcedb65fbf9603281c1705ad690fb81f0a35ff75084e3538626d8

Sharing

Copy URL Twitter E-mail

General

Target

e938fb55f10dcedb65fbf9603281c1705ad690fb81f0a35ff75084e3538626d8
Size

1.5MB
MD5

7220d9ba52fae3e83bb57278b0e8a5c9
SHA1

10485fa11b451a57b8f02ed1b389b261b23b70f4
SHA256

e938fb55f10dcedb65fbf9603281c1705ad690fb81f0a35ff75084e3538626d8
SHA512

fb2eaeb5360cfd7de3d09ccc27862b1169aba91dcd4c1a46bad7daf1c7c780352f01d8ab9af1baef73cc85242b115ea05b10f267b2fa5a1a503ccb7240f3ab6c
SSDEEP

12288:/CqJIePbvxWU6DKpgSmcuczfd8lCABRBjPlRZ3g3nfzLvIZPTEugJdS0y3yNb2H3:6qVWndcbulLlRZ3kLvIVc7xSKHNfqtgg

Score

N/A

Malware Config

Signatures

Files

e938fb55f10dcedb65fbf9603281c1705ad690fb81f0a35ff75084e3538626d8
.exe windows x86

8a9b4b7c4afdb5fd66ccb8624d712590

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdiplusStartup
GdiplusShutdown
GdipDrawImageRectI
GdipCreateFromHDC
GdipDeleteGraphics

kernel32

LocalReAlloc
TlsFree
GetCPInfo
GetOEMCP
GetCurrentDirectoryA
SetErrorMode
GetTickCount
HeapFree
ExitProcess
RtlUnwind
HeapAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
TlsSetValue
GetCommandLineA
HeapReAlloc
GetDriveTypeA
TerminateProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetStdHandle
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
InterlockedIncrement
GlobalFlags
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
VirtualProtect
WritePrivateProfileStringA
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
InterlockedDecrement
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
SetLastError
MulDiv
lstrcpynA
SetEnvironmentVariableA
FreeResource
GetSystemDefaultLangID
IsBadReadPtr
LeaveCriticalSection
EnterCriticalSection
FormatMessageA
LocalFree
GetLongPathNameA
lstrcatA
WinExec
GetFileAttributesA
GetProcAddress
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
SetThreadLocale
GetModuleFileNameA
GetModuleHandleA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
OpenMutexA
CreateMutexA
ReleaseMutex
GetEnvironmentVariableA
CompareStringW
CompareStringA
lstrlenW
lstrcmpiA
GetVersion
GetLastError
CreateThread
CreateFileA
GetFileSize
CloseHandle
Sleep
lstrlenA
lstrcpyA
MultiByteToWideChar
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetStartupInfoA

user32

GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
ValidateRect
PostQuitMessage
wsprintfA
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
ShowWindow
MoveWindow
RegisterWindowMessageA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
GetWindowTextLengthA
GetForegroundWindow
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetScrollPos
SetForegroundWindow
AdjustWindowRectEx
EqualRect
GetClassInfoA
RegisterClassA
DefWindowProcA
CallWindowProcA
IntersectRect
GetWindowPlacement
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
InvalidateRgn
GetMenuState
GetMenuStringA
GetActiveWindow
SetActiveWindow
EndDialog
SetWindowTextA
GetDlgCtrlID
GetWindowTextA
IsWindowEnabled
IsDialogMessageA
IsWindowVisible
MapDialogRect
WinHelpA
IsChild
GetCapture
MessageBeep
DestroyCursor
SetRectEmpty
MessageBoxA
DrawStateA
ModifyMenuA
GetSubMenu
GetMenuItemID
GetMenuItemCount
ReleaseCapture
GetSysColorBrush
DestroyWindow
SetCapture
OffsetRect
SetRect
GetDesktopWindow
GetKeyState
ScreenToClient
SetWindowPos
GetWindowRect
PostMessageA
IsRectEmpty
SystemParametersInfoA
DestroyIcon
LoadBitmapA
WindowFromPoint
GetParent
GetNextDlgTabItem
GetFocus
ReleaseDC
GetDC
ClientToScreen
DrawFocusRect
DrawFrameControl
InflateRect
IsMenu
GetWindowLongA
GetClassNameA
GetMenu
GetWindow
CopyAcceleratorTableA
CharNextA
LoadCursorA
CopyIcon
KillTimer
GetCursorPos
SetCursor
SetWindowLongA
SetTimer
RedrawWindow
PtInRect
PeekMessageA
DispatchMessageA
GetSystemMenu
AppendMenuA
CharUpperA
LoadIconA
GetDlgItem
UpdateWindow
LoadImageA
DestroyMenu
SetWindowContextHelpId
GetMessageA
TabbedTextOutA
TranslateMessage
GetSysColor
IsWindow
CopyRect
GetSystemMetrics
UnregisterClassA
EnableWindow
InvalidateRect
GetClientRect
IsIconic
SendMessageA
DrawIcon
CreateDialogIndirectParamA

gdi32

ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreateBitmap
CreateSolidBrush
CreateRectRgnIndirect
GetMapMode
DPtoLP
SetWindowExtEx
GetBkColor
GetTextColor
GetRgnBox
GetClipBox
SetMapMode
SetTextColor
SetStretchBltMode
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
SelectPalette
CreateDIBitmap
CreatePalette
ExtTextOutA
BitBlt
RealizePalette
CreateCompatibleBitmap
GetTextExtentPoint32A
GetTextExtentPointA
SetTextJustification
TextOutA
CreateFontIndirectA
CreateFontA
SelectObject
DeleteObject
GetObjectA
StretchBlt
PatBlt
CreateCompatibleDC
GetStockObject
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
CreateDIBSection
SetDIBitsToDevice

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegSetValueExA

shell32

ShellExecuteA
SHGetFileInfoA

comctl32

ImageList_SetBkColor
ImageList_GetImageInfo
ImageList_AddMasked
ord17
_TrackMouseEvent
ImageList_GetImageCount
ImageList_GetIcon
ImageList_Destroy
ImageList_Create

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA

oledlg

ord8

ole32

OleInitialize
CoCreateInstance
CoUninitialize
CoInitializeEx
CoInitialize
CoTaskMemFree
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc

oleaut32

SysFreeString
VariantCopy
SysStringLen
VariantInit
VariantChangeType
VariantClear
VarBstrCmp
VarBstrCat
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
SafeArrayDestroy
SystemTimeToVariantTime
SysAllocString
OleCreateFontIndirect

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 332KB - Virtual size: 330KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8a9b4b7c4afdb5fd66ccb8624d712590

Headers

File Characteristics

Imports

gdiplus

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

version

Sections

.text Size: 332KB - Virtual size: 330KB

.rdata Size: 88KB - Virtual size: 87KB

.data Size: 12KB - Virtual size: 27KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 332KB - Virtual size: 330KB

.rdata
Size: 88KB - Virtual size: 87KB

.data
Size: 12KB - Virtual size: 27KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB