9c0057faa1cc61f23211d51993261272afcac54bb28c6e1dd730382e7d48665f

Sharing

Copy URL Twitter E-mail

General

Target

9c0057faa1cc61f23211d51993261272afcac54bb28c6e1dd730382e7d48665f
Size

169KB
MD5

e52eef87684b930b055aa3507e07aa0d
SHA1

49688c0828bead4cdad8e541b394beb220c55fa1
SHA256

9c0057faa1cc61f23211d51993261272afcac54bb28c6e1dd730382e7d48665f
SHA512

8e9bc4cece520ce129287f636b74d91af0ad592324e9cd2d99577a0bf5ab4ddcb10383f61b07e11af3b3290f139907f042a07e640223c96eca66b0e6b2d57925
SSDEEP

3072:yBtPO/1FJWyN01EysmfiMrTWY+w5UZLyMnepZWa4ZLEej:OXj1EysmfiiyJUjM64Dj

Score

N/A

Malware Config

Signatures

Files

9c0057faa1cc61f23211d51993261272afcac54bb28c6e1dd730382e7d48665f
.exe windows x86

fea7db6c754d7676b72eda592e4e9ae7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

GradientFill

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

LoadLibraryA
GetSystemDirectoryA
MultiByteToWideChar
WideCharToMultiByte
GlobalUnlock
GlobalLock
GlobalAlloc
LockResource
SizeofResource
LoadResource
FindResourceW
GetLastError
GetCurrentProcess
SetFileAttributesW
CloseHandle
ReadFile
GetFileSize
CreateFileW
WriteFile
GetEnvironmentVariableW
LocalFree
EnumResourceLanguagesW
EnumResourceNamesW
lstrlenW
GetSystemInfo
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetTickCount
MoveFileExW
GetSystemDirectoryW
CompareStringW
CompareStringA
FlushFileBuffers
CreateFileA
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetTimeZoneInformation
InterlockedExchange
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
Sleep
HeapReAlloc
VirtualAlloc
EnterCriticalSection
GetProcAddress
FreeLibrary
GetModuleFileNameW
GetUserDefaultLangID
SystemTimeToFileTime
GetModuleHandleW
FatalAppExitA
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapDestroy
HeapCreate
HeapAlloc
HeapFree

user32

CreateWindowExW
MessageBoxW
RegisterClassExW
LoadCursorW
SendMessageW
DrawTextW
DefWindowProcW
InvalidateRect
TrackMouseEvent
GetClientRect
SetWindowPos
DispatchMessageW
TranslateMessage
GetMessageW
UpdateWindow
ShowWindow
FillRect
ShowScrollBar
BeginPaint
EndPaint
DialogBoxParamW
ReleaseCapture
SetCapture
SetCursor
RegisterClassW
SetWindowTextW
LoadBitmapW
GetDlgItem
GetWindowRect
EndDialog
OpenClipboard
GetClipboardData
CloseClipboard
LoadIconW
ExitWindowsEx
MoveWindow
PostQuitMessage
DestroyWindow
SetScrollInfo
GetScrollInfo

gdi32

CreateSolidBrush
CreateCompatibleDC
DeleteObject
BitBlt
CreatePen
MoveToEx
LineTo
CreateFontW
SetTextColor
SelectObject
SetBkMode

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegCloseKey
LookupPrivilegeValueW
OpenProcessToken
SetNamedSecurityInfoW
SetEntriesInAclW
OpenSCManagerW
CreateServiceW
CloseServiceHandle
RegSetValueExW
RegQueryValueExW
RegEnumKeyExW
GetNamedSecurityInfoW
RegOpenKeyExW
RegEnumValueW
AdjustTokenPrivileges

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW

ole32

CreateStreamOnHGlobal

oleaut32

OleLoadPicture

shlwapi

PathIsDirectoryW
PathFileExistsW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.0e3c
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1oqp
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.15as
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.a9as
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.klkl
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.psi
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.teta
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ks1
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.1231
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.1237
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zetaa
Size: 364KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zeta0
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tetaX
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.1324
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fea7db6c754d7676b72eda592e4e9ae7

Headers

DLL Characteristics

File Characteristics

Imports

msimg32

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 2KB - Virtual size: 2KB

.0e3c Size: 512B - Virtual size: 208B

.1oqp Size: 512B - Virtual size: 200B

.15as Size: 512B - Virtual size: 200B

.a9as Size: 512B - Virtual size: 200B

.klkl Size: 512B - Virtual size: 200B

.psi Size: 512B - Virtual size: 200B

.teta Size: 512B - Virtual size: 200B

.ks1 Size: 512B - Virtual size: 200B

.1231 Size: 512B - Virtual size: 200B

.1237 Size: 512B - Virtual size: 200B

.zetaa Size: 364KB - Virtual size: 363KB

.zeta0 Size: 512B - Virtual size: 212B

.tetaX Size: 512B - Virtual size: 202B

.1324 Size: 512B - Virtual size: 52B

.rsrc Size: 16KB - Virtual size: 15KB

.reloc Size: 512B - Virtual size: 232B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 2KB - Virtual size: 2KB

.0e3c
Size: 512B - Virtual size: 208B

.1oqp
Size: 512B - Virtual size: 200B

.15as
Size: 512B - Virtual size: 200B

.a9as
Size: 512B - Virtual size: 200B

.klkl
Size: 512B - Virtual size: 200B

.psi
Size: 512B - Virtual size: 200B

.teta
Size: 512B - Virtual size: 200B

.ks1
Size: 512B - Virtual size: 200B

.1231
Size: 512B - Virtual size: 200B

.1237
Size: 512B - Virtual size: 200B

.zetaa
Size: 364KB - Virtual size: 363KB

.zeta0
Size: 512B - Virtual size: 212B

.tetaX
Size: 512B - Virtual size: 202B

.1324
Size: 512B - Virtual size: 52B

.rsrc
Size: 16KB - Virtual size: 15KB

.reloc
Size: 512B - Virtual size: 232B