9b6505ee91b114f6cafb8ee55a692796ce8900dbc1c020c039b4b51d14af959b

Sharing

Copy URL Twitter E-mail

General

Target

9b6505ee91b114f6cafb8ee55a692796ce8900dbc1c020c039b4b51d14af959b
Size

232KB
MD5

c58e17d6161a3cdddadb01b3f48053a3
SHA1

f1fc90d0d0b292ac986517f89f596343696f1f7a
SHA256

9b6505ee91b114f6cafb8ee55a692796ce8900dbc1c020c039b4b51d14af959b
SHA512

652d7efe9f4e9c29d2b7ce9446194a4db46121433097c1458e0cc127df05ddbee907f30d1870d996f1ae179ab822ca223d1fbc61863baef87c4437f9319f0be0
SSDEEP

3072:udgdLHfiIUIXXU3MgvtgTw8IdZeKe573UJLLIXXj4me:udoLHKIUoIMg0wteFEJiu

Score

N/A

Malware Config

Signatures

Files

9b6505ee91b114f6cafb8ee55a692796ce8900dbc1c020c039b4b51d14af959b
.exe windows x86

0c7fad5ff0421daabc76807c61894996

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

_TrackMouseEvent

shlwapi

StrToInt64ExW

msimg32

AlphaBlend

wininet

InternetReadFile
InternetCloseHandle
HttpEndRequestW
HttpOpenRequestW
InternetAttemptConnect
HttpSendRequestW
InternetConnectW
InternetOpenW
InternetQueryDataAvailable
InternetCheckConnectionW

kernel32

DeleteFileW
ResumeThread
SetFileAttributesW
CreateThread
ExpandEnvironmentStringsW
GetModuleHandleW
GetModuleFileNameW
GlobalReAlloc
IsBadReadPtr
DosDateTimeToFileTime
SystemTimeToFileTime
GetCurrentProcess
SetFileTime
GetCurrentDirectoryW
GetFileType
CreateFileA
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
RtlUnwind
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
LoadLibraryA
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoA
SetHandleCount
GetModuleFileNameA
GetStdHandle
HeapReAlloc
VirtualAlloc
EnterCriticalSection
FindNextFileW
CreateEventW
FindClose
GetLastError
GetTempPathW
MultiByteToWideChar
TerminateProcess
Sleep
WideCharToMultiByte
GetSystemDirectoryW
WriteFile
GetTickCount
WaitForSingleObject
CreateDirectoryW
CreateProcessW
SetFilePointer
FindFirstFileW
GetTempFileNameW
ExitProcess
CloseHandle
GlobalFree
GlobalUnlock
CreateFileW
ReadFile
GlobalAlloc
GlobalLock
GetFileSize
GetCommandLineW
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
GetProcAddress
HeapFree
HeapAlloc
GetProcessHeap
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA

user32

FillRect
GetPropW
SendMessageW
SetWindowPos
ReleaseDC
GetDCEx
InvalidateRect
GetDC
SetPropW
DrawIconEx
DrawTextW
PostMessageW
GetWindowRect
DestroyWindow
GetNextDlgTabItem
GetMessageW
UnregisterClassW
GetParent
IsWindowEnabled
SetFocus
GetClassInfoExW
wsprintfW
GetUpdateRect
TranslateMessage
RegisterClassExW
SystemParametersInfoW
EnumChildWindows
DefWindowProcW
CreateWindowExW
UpdateWindow
EnableWindow
DispatchMessageW
ShowWindow
LoadImageW
GetIconInfo
SetRect
EndPaint
SetCursor
PostQuitMessage
GetClientRect
BeginPaint
GetForegroundWindow
LoadIconW
GetWindowLongW
SetWindowLongW
CopyRect
SetWindowRgn
LoadCursorW
InflateRect
IsWindow
MessageBoxW
CallWindowProcW

gdi32

CreateDIBitmap
GetTextExtentPoint32W
CreateFontIndirectW
GetDeviceCaps
GetDIBits
CombineRgn
ExtCreateRegion
SaveDC
SetDIBits
GetCurrentPositionEx
GetStockObject
GetTextColor
RestoreDC
StretchBlt
GetObjectW
MoveToEx
BitBlt
LineTo
SetTextColor
SetBkMode
CreateCompatibleBitmap
GetTextExtentPointW
CreateFontW
DeleteDC
CreateDIBSection
CreateDCW
DeleteObject
SelectObject
CreateCompatibleDC
Rectangle
CreatePen
RoundRect
CreateSolidBrush

advapi32

RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegCreateKeyW
RegOpenKeyExW
RegDeleteValueW

shell32

CommandLineToArgvW
SHGetFolderPathW
SHGetPathFromIDListW
ShellExecuteW
SHGetMalloc
SHGetSpecialFolderLocation

ole32

CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

OleLoadPicture

Sections

.text
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0c7fad5ff0421daabc76807c61894996

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

shlwapi

msimg32

wininet

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 188KB - Virtual size: 188KB

.rsrc Size: 28KB - Virtual size: 28KB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 188KB - Virtual size: 188KB

.rsrc
Size: 28KB - Virtual size: 28KB

.reloc
Size: 12KB - Virtual size: 12KB