13b039d1b56473057f1ae01855c26cfc49e14e6ba09f524d13fe9e5e33bc9bd7

Sharing

Copy URL Twitter E-mail

General

Target

13b039d1b56473057f1ae01855c26cfc49e14e6ba09f524d13fe9e5e33bc9bd7
Size

448KB
MD5

2d5a58979e2c111b446ae71724a3ee30
SHA1

69fb93b648521cb5f506fbfb0c9a7c25e6b593fa
SHA256

13b039d1b56473057f1ae01855c26cfc49e14e6ba09f524d13fe9e5e33bc9bd7
SHA512

3e743c2c98c424a1ec81ef481f76695cf05dfc8f931aa1e570d3fc34645a8b9ddcc7c7b824267fc99bad3f5407418659f85c01b51c8d66f5fb374a9007ae0815
SSDEEP

12288:JSGsWx1OvsBn+wGYMOcdixlbUUbPL7ZKKKpcDz:JP51ei+wGXKYUbj7Zyps

Score

N/A

Malware Config

Signatures

Files

13b039d1b56473057f1ae01855c26cfc49e14e6ba09f524d13fe9e5e33bc9bd7
.dll windows x86

16590b5338c592be72f8cf5e9e2a079c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

BitBlt
CreateBitmap
CreateCompatibleDC
CreateSolidBrush
DeleteDC
DeleteObject
GetBitmapBits
GetObjectW
GetTextExtentPointW
SelectObject
SetBkMode
SetStretchBltMode
SetTextColor
StretchBlt
TextOutW
CreatePen
GetPaletteEntries
PathToRegion
Rectangle
CreateEnhMetaFileW
GetBkMode
GetCharWidthA
GetEnhMetaFileDescriptionA
GetEnhMetaFilePaletteEntries
PlgBlt
PolyTextOutW
RemoveFontResourceA
ScaleViewportExtEx
SetSystemPaletteUse
SetTextJustification
PlayEnhMetaFile
GdiPlayEMF
GdiPlayPrivatePageEMF
SetRectRgn
AnimatePalette
SwapBuffers
CreateFontIndirectExW
GdiPlayPageEMF
SetICMProfileW

kernel32

GetCurrentProcess
GetCurrentThreadId
GetModuleHandleW
GetProcAddress
LoadLibraryW
LocalAlloc
LocalFree
ReleaseMutex
SetUnhandledExceptionFilter
TerminateProcess
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForSingleObject
lstrlenW
GetProcessHeap
GlobalGetAtomNameW
InterlockedIncrement
ConvertThreadToFiber
CreateIoCompletionPort
EnumSystemLocalesA
ExpungeConsoleCommandHistoryW
FoldStringW
GetCommTimeouts
GetCurrencyFormatA
GetDateFormatW
GetDiskFreeSpaceA
GetDiskFreeSpaceExW
GetFileType
GetNumberOfConsoleMouseButtons
GetProcessPriorityBoost
GetProcessTimes
GetTempPathA
HeapLock
IsBadCodePtr
OpenJobObjectW
OpenProfileUserMapping
QueryDosDeviceW
SearchPathW
SetThreadContext
SetTimerQueueTimer
VirtualAllocEx
VirtualProtect
WriteConsoleA
WriteConsoleInputW
WriteProfileStringA
_lopen
GetCurrentProcessId
GetLocalTime
GetTickCount
GlobalAlloc
GlobalFree
InterlockedDecrement
SetEvent
Sleep
VirtualAlloc
VirtualFree
CallNamedPipeW
CloseHandle
CopyFileW
CreateDirectoryW
CreateFileW
CreateProcessW
GetSystemDirectoryW
GetSystemTimeAsFileTime
InterlockedCompareExchange
InterlockedExchange
QueryPerformanceCounter
QueueUserWorkItem
GetStartupInfoW
FindResourceW
FreeLibrary
GetModuleFileNameW
LoadLibraryExW
LoadResource
MultiByteToWideChar
OutputDebugStringA
RaiseException
SizeofResource
lstrcmpiW
CreateEventW
DeviceIoControl
GetCurrentThread
GetOverlappedResult
GetPrivateProfileStringW
LocalHandle
SetConsoleInputExeNameA
SetCurrentDirectoryA
AssignProcessToJobObject
CreateDirectoryA
CreateEventA
CreateFileA
CreateFileMappingA
CreateMutexA
CreateThread
ExpandEnvironmentStringsA
GetPrivateProfileIntA
GetSystemPowerStatus
GetWindowsDirectoryA
HeapDestroy
MapViewOfFile
SetCommTimeouts
SetThreadPriority
SuspendThread
UnmapViewOfFile
WaitForMultipleObjects
FindResourceA
WideCharToMultiByte
LCMapStringA
LCMapStringW
HeapFree
HeapAlloc
ExitProcess
GetLastError
GetExitCodeProcess
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
DuplicateHandle
GetFullPathNameA
DeleteFileA
SetFileAttributesW
GetFileAttributesW
DeleteFileW
GetCommandLineA
GetVersion
IsBadReadPtr
SetHandleCount
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
CreatePipe
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
HeapReAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
SetFilePointer
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapCreate
IsBadWritePtr
TlsAlloc
TlsFree
SetLastError
ReadFile
HeapSize
CompareStringA
CompareStringW
SetStdHandle
GetCurrentDirectoryA
GetDriveTypeA
FlushFileBuffers
WriteFile
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetTimeZoneInformation
GetSystemTime
IsValidLocale
IsValidCodePage
GetLocaleInfoA
GetUserDefaultLCID
SetConsoleCtrlHandler
LoadLibraryA
SetEnvironmentVariableW
GetFileAttributesA
CreateProcessA
SetEndOfFile
GetLocaleInfoW
SetEnvironmentVariableA

ole32

CoTreatAsClass
StgCreateStorageEx
OleQueryCreateFromData
IIDFromString
OleFlushClipboard
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CoResumeClassObjects
CoInitializeEx
OleCreateStaticFromData
CoRegisterClassObject
WriteClassStg
StgCreateDocfile
OleGetAutoConvert
OleCreateFromDataEx
HkOleRegisterObject
CoSetProxyBlanket
CoCreateInstance

rpcrt4

NdrConformantVaryingStructFree
RpcMgmtIsServerListening
NdrFixedArrayUnmarshall
NdrXmitOrRepAsUnmarshall
RpcStringFreeW
RpcStringFreeA
RpcStringBindingParseW
RpcStringBindingComposeA
RpcRevertToSelf
RpcRaiseException
RpcBindingFromStringBindingW
RpcBindingFromStringBindingA
RpcBindingFree
NdrClientCall2
I_RpcNsBindingSetEntryNameW
I_RpcGetBuffer
I_RpcFree
I_RpcAllocate
data_from_ndr
MesInqProcEncodingId
NdrMesSimpleTypeEncode
CStdStubBuffer_Disconnect
I_RpcClearMutex
I_RpcTransDatagramFree
NdrComplexStructUnmarshall
NdrConformantArrayMarshall
NdrConformantArrayMemorySize
NdrCorrelationInitialize
NdrInterfacePointerUnmarshall
RpcBindingInqAuthClientW
RpcSsSetClientAllocFree
NdrVaryingArrayFree
NdrConformantVaryingStructUnmarshall
RpcBindingToStringBindingW
RpcServerUseProtseqExA
NdrClientInitializeNew
NdrDllGetClassObject
NdrSimpleStructUnmarshall
NdrProxySendReceive
UuidHash

shell32

StrChrA
SHGetDiskFreeSpaceA
DragQueryFileW

user32

GetKeyNameTextA
GetMenuCheckMarkDimensions
GetNextDlgGroupItem
IsWindow
ScrollChildren
SetWindowsHookExA
TileWindows
ToUnicode
TranslateAccelerator
UnregisterDeviceNotification
LoadAcceleratorsW
SetPropA
GetKeyboardType
CharNextW
OpenDesktopW
PostMessageA
wsprintfA
wvsprintfA
SetScrollRange
DestroyWindow
CallWindowProcW
CheckDlgButton
CheckRadioButton
CopyImage
CreateIconIndirect
DestroyIcon
DrawFocusRect
EnableWindow
FillRect
GetDC
GetDlgItem
GetFocus
GetIconInfo
GetParent
GetPropW
GetSysColor
GetSystemMetrics
GetWindowLongW
GetWindowRect
GetWindowTextW
LoadCursorW
LoadImageW
MapWindowPoints
PostMessageW
ReleaseDC
RemovePropW
SendMessageW
SetCursor
SetFocus
SetPropW
SetWindowContextHelpId
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
WinHelpW
DestroyAcceleratorTable
FindWindowExW
InflateRect
InvalidateRect
IsChild
IsRectEmpty
LoadStringW
OffsetRect
RealGetWindowClassA
ReleaseCapture
SetMenuItemInfoA
SetRect
UnionRect
UnregisterClassW
ClientToScreen
CloseWindowStation
DdeQueryConvInfo
DefFrameProcA
DefFrameProcW
DlgDirSelectComboBoxExW
GetDlgItemTextA

Exports

Exports

Embilpg

Sections

.text
Size: 340KB - Virtual size: 339KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16590b5338c592be72f8cf5e9e2a079c

Headers

File Characteristics

Imports

gdi32

kernel32

ole32

rpcrt4

shell32

user32

Exports

Exports

Sections

.text Size: 340KB - Virtual size: 339KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 68KB - Virtual size: 77KB

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 340KB - Virtual size: 339KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 68KB - Virtual size: 77KB

.reloc
Size: 16KB - Virtual size: 15KB