9e3c63954b64c5250a9042b70c8c92bcfb1e9da964ec3798e73b6317dee85fc0

Sharing

Copy URL Twitter E-mail

General

Target

9e3c63954b64c5250a9042b70c8c92bcfb1e9da964ec3798e73b6317dee85fc0
Size

857KB
MD5

4ccafe18ccd678b80b1b890f62d76576
SHA1

e2ba8652bedaee3f5280dbed5f7527ccc9e25b37
SHA256

9e3c63954b64c5250a9042b70c8c92bcfb1e9da964ec3798e73b6317dee85fc0
SHA512

08af7c856bad42919071957bfa2680d6cf1a795a0e5489d5db02a8689ac945b35a7366b5a7c72b29c4c0a7379dcf78b46b3c4533ccf987953620253b1d753648
SSDEEP

24576:27GMWCa7tJKuhZkTVvsVhzpsCWgtty9p8:zM5a76u+VUVhzpsCWg29m

Score

N/A

Malware Config

Signatures

Files

9e3c63954b64c5250a9042b70c8c92bcfb1e9da964ec3798e73b6317dee85fc0
.dll windows x86

a4c8b2042e47489d2d8f2825598156e5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
GetStartupInfoW
GetCPInfo
EnterCriticalSection
GetCurrentDirectoryW
VirtualFree
GetProcAddress
GlobalAlloc
SetLastError
GlobalFindAtomW
GetPrivateProfileStringW
SearchPathW
GetStringTypeW
LoadResource
UnlockFile
GetLastError
CreateFileW
HeapDestroy
DisconnectNamedPipe
FindResourceA
HeapQueryInformation
GetCurrentThreadId
CreateEventW
GetConsoleOutputCP
UnhandledExceptionFilter
GetTempFileNameW
GetVersion
GetUserDefaultUILanguage
GetFileAttributesW
InterlockedExchange
FreeEnvironmentStringsW
DuplicateHandle
ExitProcess
GlobalHandle
HeapFree
GetProfileIntW
OpenEventW
GlobalReAlloc
FlushFileBuffers
LCMapStringW
GetCommandLineW
GetTickCount
CompareStringW
GlobalFlags
LocalFree
GetLocaleInfoW
GetOverlappedResult
PeekNamedPipe
LocalAlloc
CreateDirectoryW
GetFileAttributesExW
lstrcmpA
SetHandleCount
HeapAlloc
GlobalLock
ReadFile
FreeLibrary
GetWindowsDirectoryW
GetCurrentDirectoryA
GetOEMCP
lstrcpyW
RaiseException
GetFileSizeEx
WaitForSingleObject
TerminateProcess
FindFirstFileW
FreeResource
SetThreadPriority
lstrcmpiW
lstrcmpW
InterlockedIncrement
InitializeCriticalSection
GetNumberFormatW
SetEnvironmentVariableA
GetTempPathW
GetVolumeInformationW
TlsSetValue
GlobalDeleteAtom
QueryPerformanceCounter
HeapSize
GetFileSize
CopyFileW
LocalReAlloc
SetEndOfFile
GlobalSize
TlsGetValue
Sleep
FileTimeToLocalFileTime
GetSystemInfo
VirtualProtect
IsValidLocale
ConnectNamedPipe
GlobalGetAtomNameW
IsProcessorFeaturePresent
FindResourceW
WaitForMultipleObjects
GetSystemDefaultUILanguage
LeaveCriticalSection
GlobalFree
ExitThread
GlobalUnlock
GetConsoleCP
lstrlenA
GetEnvironmentStringsW
GetFileInformationByHandle
GetModuleFileNameW
WideCharToMultiByte
FindFirstFileExW
TlsAlloc
GetACP
InterlockedCompareExchange
GetCurrentThread
GlobalAddAtomW
GetDriveTypeW
FindResourceExW
DeleteFileW
VirtualAlloc
GetCurrentProcess
SetCurrentDirectoryW
LoadLibraryW
GetCurrentProcessId
FileTimeToSystemTime
GetVersionExW
GetFileType
WritePrivateProfileStringW
CreateThread
FlushInstructionCache
SetEvent
GetPrivateProfileIntW
GetModuleHandleW
DeleteCriticalSection
InterlockedDecrement
GetFileTime
ResumeThread
CloseHandle
GetSystemDirectoryW
TlsFree
InitializeCriticalSectionAndSpinCount
IsValidCodePage
OpenMutexW
MultiByteToWideChar
FindClose
GetTimeZoneInformation
FormatMessageW
WriteFile
CreateMutexW
HeapSetInformation
ConvertDefaultLocale
HeapCreate
GetConsoleMode
SizeofResource
LockResource
MoveFileExW
DeleteAtom
VirtualQuery
SetUnhandledExceptionFilter
GetStdHandle
HeapReAlloc
MulDiv
GetSystemTimeAsFileTime
SetErrorMode
RtlUnwind
LockFile
LoadLibraryExW
GetProcessHeap
GetFullPathNameW
SetStdHandle
lstrlenW
WriteConsoleW
CreateNamedPipeW
SetFilePointer

user32

PeekMessageW
ToUnicodeEx
MapWindowPoints
UnhookWindowsHookEx
IsChild
CreateWindowExW
TrackPopupMenu
GetParent
UnregisterClassA
GetSystemMenu
BeginPaint
ShowOwnedPopups
DestroyCursor
DrawTextExW
GetMenuDefaultItem
UnregisterClassW
GetPropW
CopyAcceleratorTableW
GetSysColorBrush
PostThreadMessageW
ExitWindowsEx
ClientToScreen
GetUpdateRect
SetActiveWindow
SetCursor
SetRectEmpty
FrameRect
GetDoubleClickTime
DialogBoxIndirectParamW
GetNextDlgTabItem
AdjustWindowRectEx
IsZoomed
InvertRect
DeleteMenu
CreateMenu
GetDlgItem
GetMessagePos
GetKeyboardState
GetIconInfo
TranslateAcceleratorW
RemoveMenu
IsWindowVisible
WinHelpW
EndDialog
GetSystemMetrics
GetClassNameW
SetForegroundWindow
SetScrollPos
GetDC
GetMenuCheckMarkDimensions
RealChildWindowFromPoint
DrawEdge
SetWindowTextA
MapDialogRect
IsCharLowerW
DrawFrameControl
MessageBeep
SetWindowRgn
HideCaret
SetWindowsHookExW
GetDialogBaseUnits
DefWindowProcW
CharUpperBuffW
FillRect
DestroyIcon
IsMenu
GetDlgCtrlID
RegisterHotKey
SetWindowTextW
UnionRect
SetMenuDefaultItem
CallWindowProcW
GetActiveWindow
CharUpperW
GrayStringW
LoadIconW
UnregisterHotKey
RegisterClipboardFormatW
PostQuitMessage
DeferWindowPos
SubtractRect
IsRectEmpty
InsertMenuW
EqualRect
GetFocus
SetRect
SystemParametersInfoW
GetMessageW
SetClipboardData
GetNextDlgGroupItem
ValidateRect
SendDlgItemMessageW
TabbedTextOutW
RegisterWindowMessageW
GetWindowLongW
SetLayeredWindowAttributes
ModifyMenuW
DialogBoxParamW
GetScrollRange
UpdateLayeredWindow
ReleaseDC
RemovePropW
SetPropW
SendMessageTimeoutW
DrawIcon
GetClientRect
ReuseDDElParam
LoadAcceleratorsW
CheckDlgButton
MessageBoxW
MapVirtualKeyW
IsWindow
GetAsyncKeyState
IsDialogMessageW
EndPaint
GetForegroundWindow
GetMenuItemInfoW
SetFocus
GetMenuState
GetMenuItemCount
GetDlgItemTextW
GetKeyState
GetScrollPos
MonitorFromWindow
DrawIconEx
SetMenu
GetSubMenu
TranslateMDISysAccel
NotifyWinEvent
CopyIcon
EnableScrollBar
DestroyMenu
GetWindowRgn
SetParent
ShowScrollBar
BeginDeferWindowPos
EnableWindow
IntersectRect
SendMessageW
ScrollWindow
SetWindowLongW
UpdateWindow
AllowSetForegroundWindow
DestroyAcceleratorTable
DrawTextW
GetClassInfoW
SetCursorPos
DrawStateW
GetMessageTime
ShowWindow
SetWindowPlacement
WindowFromPoint
CreatePopupMenu
CheckMenuItem
EnumWindows
GetClassInfoExW
SetWindowPos
SetDlgItemTextW
SetScrollRange
MapVirtualKeyExW
OpenClipboard
CreateDialogIndirectParamW
EnableMenuItem
LoadBitmapW
CallNextHookEx
CreateAcceleratorTableW
DrawFocusRect
SetClassLongW
GetMonitorInfoW
GetWindowTextW
GetMenu
GetCursorPos
DispatchMessageW
LoadCursorW
GetWindowRect
InvalidateRect
RegisterClassW
GetCapture
IsIconic
PostMessageW
GetKeyboardLayout
ScreenToClient
EnumDisplayMonitors
InsertMenuItemW
IsWindowEnabled
GetSysColor
DrawMenuBar
LoadMenuW
InflateRect
SetScrollInfo
GetWindow
EndDeferWindowPos
DefMDIChildProcW
MonitorFromPoint
SetTimer
MoveWindow
OffsetRect
ReleaseCapture
GetWindowPlacement
GetKeyNameTextW
DestroyWindow
SendDlgItemMessageA
LoadImageW
GetWindowDC
GetLastActivePopup
LockWindowUpdate
GetClassLongW
CopyRect
GetScrollInfo
GetTopWindow
WaitMessage
GetWindowTextLengthW
RedrawWindow
KillTimer
AppendMenuW
CopyImage
PtInRect
SetCapture
GetDesktopWindow
CloseClipboard
GetMenuStringW
DefFrameProcW
EmptyClipboard
GetWindowThreadProcessId
TranslateMessage
BringWindowToTop
UnpackDDElParam
IsClipboardFormatAvailable
SetMenuItemBitmaps
GetMenuItemID

gdi32

GetTextExtentPoint32W
GetWindowExtEx
GetPixel
GetDeviceCaps
CreatePen
Polyline
SetRectRgn
GetBkColor
ExtTextOutW
PtVisible
OffsetViewportOrgEx
GetViewportOrgEx
CreateRectRgnIndirect
GetPaletteEntries
GetViewportExtEx
GetRgnBox
CreateCompatibleBitmap
EnumFontFamiliesW
GetTextFaceW
CreateDCW
CreateDIBitmap
TextOutW
CreateHatchBrush
ScaleWindowExtEx
CreatePalette
IntersectClipRect
CreateRoundRectRgn
DPtoLP
SaveDC
RoundRect
CreateFontW
SetTextColor
CreateFontIndirectW
LineTo
Escape
RectVisible
GetWindowOrgEx
LPtoDP
SetTextAlign
Polygon
Ellipse
GetBkMode
DeleteObject
GetTextCharsetInfo
SetDIBColorTable
RestoreDC
CombineRgn
SetPixelV
SetWindowExtEx
SetBkColor
GetBoundsRect
StretchDIBits
GetStockObject
SetPixel
ExcludeClipRect
Rectangle
SetMapMode
SetROP2
ScaleViewportExtEx
SetWindowOrgEx
ExtFloodFill
SetBkMode
SelectPalette
EnumFontFamiliesExW
GetObjectType
StretchBlt
BitBlt
CreateBitmap
FillRgn
RealizePalette
CreatePatternBrush
PatBlt
SetPaletteEntries
SetViewportOrgEx
PtInRegion
CopyMetaFileW
SelectObject
SelectClipRgn
SetViewportExtEx
CreateSolidBrush
GetCharWidthW
SetLayout
DeleteDC
CreateCompatibleDC
OffsetWindowOrgEx
CreateRectRgn
CreateDIBSection
FrameRgn
CreateEllipticRgn
SetPolyFillMode
GetObjectW
MoveToEx
GetTextMetricsW
GetSystemPaletteEntries
CreatePolygonRgn
ExtSelectClipRgn
GetTextColor
GetBitmapBits
GetLayout
GetClipBox
GetNearestPaletteIndex
SetDIBits
OffsetRgn

comdlg32

GetOpenFileNameW
GetFileTitleW
GetSaveFileNameW

advapi32

SetSecurityDescriptorDacl
RegQueryValueExW
RegCloseKey
InitializeSecurityDescriptor
RegEnumValueW
LookupPrivilegeValueW
RegEnumKeyExW
CheckTokenMembership
RegOpenKeyExW
FreeSid
GetTokenInformation
RegCreateKeyExW
AdjustTokenPrivileges
RegSetValueExW
RegQueryValueW
OpenProcessToken
SetSecurityDescriptorSacl
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
AllocateAndInitializeSid

shell32

SHGetDiskFreeSpaceExW
DragQueryFileW
ShellExecuteExW
SHBrowseForFolderW
Shell_NotifyIconW
DuplicateIcon
SHChangeNotify
SHAppBarMessage
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetFolderLocation
SHGetPathFromIDListW
DragFinish
SHGetSpecialFolderPathW
SHGetFolderPathW
SHGetFileInfoW
ShellExecuteW

ole32

OleGetClipboard
CoCreateGuid
CoTaskMemFree
ReleaseStgMedium
OleUninitialize
CoFreeUnusedLibraries
CoUninitialize
CLSIDFromString
CoRevokeClassObject
OleIsCurrentClipboard
OleInitialize
DoDragDrop
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleDuplicateData
CoLockObjectExternal
CoRegisterMessageFilter
CoInitializeEx
CoInitialize
CoCreateInstance
CoTaskMemAlloc
OleFlushClipboard
RevokeDragDrop
OleCreateMenuDescriptor
OleLockRunning
IsAccelerator
RegisterDragDrop
CreateStreamOnHGlobal

oleaut32

SysAllocString
SysStringLen
VariantClear
VarBstrCmp
VarBstrCat
SysAllocStringLen
SysStringByteLen
VariantInit
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringByteLen
SysFreeString
VarBstrFromDate
VariantChangeType

comctl32

_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathFindFileNameW
PathStripToRootW
PathRemoveFileSpecW
PathIsUNCW
PathFindExtensionW

winmm

PlaySoundW

msimg32

AlphaBlend
TransparentBlt

mpr

WNetAddConnection3W

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext

oledlg

OleUIBusyW

gdiplus

GdiplusStartup
GdipDisposeImage
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipAlloc
GdipSetInterpolationMode
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipDrawImageI
GdipGetImageHeight
GdipGetImagePaletteSize
GdipDrawImageRectI
GdipGetImagePixelFormat
GdiplusShutdown
GdipCloneImage
GdipBitmapUnlockBits
GdipGetImageWidth
GdipCreateBitmapFromHBITMAP
GdipBitmapLockBits
GdipDeleteGraphics
GdipFree
GdipCreateBitmapFromScan0

msvcrt

exit

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
ObjectFromLresult
LresultFromObject

esent

JetMove

Sections

.text
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.cc
Size: 512B - Virtual size: 29B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.55
Size: - Virtual size: 183KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aa
Size: 321KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bb
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.a46
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asshole
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4c8b2042e47489d2d8f2825598156e5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

winmm

msimg32

mpr

imm32

oledlg

gdiplus

msvcrt

oleacc

esent

Sections

.text Size: 154KB - Virtual size: 153KB

.cc Size: 512B - Virtual size: 29B

.55 Size: - Virtual size: 183KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 512B - Virtual size: 828B

.aa Size: 321KB - Virtual size: 321KB

.bb Size: 148KB - Virtual size: 148KB

.a46 Size: 2KB - Virtual size: 1KB

.asshole Size: 206KB - Virtual size: 205KB

.rsrc Size: 1024B - Virtual size: 720B

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 154KB - Virtual size: 153KB

.cc
Size: 512B - Virtual size: 29B

.55
Size: - Virtual size: 183KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 512B - Virtual size: 828B

.aa
Size: 321KB - Virtual size: 321KB

.bb
Size: 148KB - Virtual size: 148KB

.a46
Size: 2KB - Virtual size: 1KB

.asshole
Size: 206KB - Virtual size: 205KB

.rsrc
Size: 1024B - Virtual size: 720B

.reloc
Size: 5KB - Virtual size: 5KB