4121cd01c41c996d66d537f1bb0756f04c1db408c460ad8578908701d6faa64d

Sharing

Copy URL Twitter E-mail

General

Target

4121cd01c41c996d66d537f1bb0756f04c1db408c460ad8578908701d6faa64d
Size

2.0MB
MD5

411ae67f756d821581ebda0632147b30
SHA1

4a5a89b97a56070eb6917544db4a5da508bb5982
SHA256

4121cd01c41c996d66d537f1bb0756f04c1db408c460ad8578908701d6faa64d
SHA512

fdbf7b9fe71bdfe512cf5db45b15d56c7e2dccb7a1da896b40160ef3a01c2488c0fab5392f25f2118a5d44271dc3fe3291902c9b43e6429bff00becd7011f707
SSDEEP

49152:wqnjhhVPxrSHTbQUboJhMBDx6xC2Cexbn8Jajh:dndxrm1bwa6C2Cexbn8Jajh

Score

N/A

Malware Config

Signatures

Files

4121cd01c41c996d66d537f1bb0756f04c1db408c460ad8578908701d6faa64d
.exe windows x86

1ba51aa7b23f200e54ee02edb1183d97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeThread
Sleep
GetDiskFreeSpaceExW
InterlockedIncrement
VirtualAllocEx
VirtualFreeEx
InterlockedExchange
GlobalLock
GlobalUnlock
InterlockedDecrement
OutputDebugStringW
FlushInstructionCache
CreatePipe
GetStartupInfoW
SetEnvironmentVariableW
SleepEx
DuplicateHandle
ReleaseMutex
TerminateThread
FormatMessageW
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateProcessA
CreateFileA
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
FlushFileBuffers
GetCurrentDirectoryA
GetFullPathNameA
QueryPerformanceCounter
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetFileAttributesA
GetTimeZoneInformation
GetStringTypeW
GetSystemTimeAsFileTime
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStartupInfoA
GetFileType
SystemTimeToTzSpecificLocalTime
GetConsoleMode
GetConsoleCP
GetStdHandle
HeapCreate
IsValidCodePage
GetOEMCP
ExitProcess
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetCPInfo
LCMapStringW
LCMapStringA
RtlUnwind
FindFirstFileA
GetDriveTypeA
FileTimeToLocalFileTime
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
GetVersionExA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
LocalFree
SetLastError
VirtualAlloc
SetFileAttributesW
VirtualFree
FileTimeToSystemTime
GetFileTime
GetCurrentThreadId
FreeResource
MoveFileExW
CreateProcessW
SetEvent
OpenEventW
QueryDosDeviceW
GetLogicalDriveStringsW
GetPrivateProfileStringW
CreateDirectoryW
GetFileAttributesW
TerminateProcess
WaitForSingleObject
GetCurrentProcess
MoveFileW
DeleteFileW
GlobalFree
GlobalAlloc
GetVersionExW
GetWindowsDirectoryW
ReadProcessMemory
WritePrivateProfileStringW
OutputDebugStringA
SystemTimeToFileTime
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
GetModuleFileNameA
WaitForMultipleObjects
RaiseException
SetFilePointer
SetEndOfFile
ResetEvent
CreateThread
CreateEventW
GetCurrentProcessId
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileIntW
ExpandEnvironmentStringsW
Module32NextW
Module32FirstW
OpenProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
lstrlenA
lstrlenW
GetExitCodeProcess
SetHandleCount
GetSystemDirectoryW
GetFileSize
WriteFile
ReadFile
CreateFileW
SetErrorMode
CopyFileW
GetLocalTime
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetTickCount
FindResourceExW
CreateMutexW
CloseHandle
GetCommandLineW
GetModuleHandleW
LockResource
LoadResource
SizeofResource
FindResourceW
GetModuleFileNameW
FreeLibrary
GetProcAddress
LoadLibraryW
GetLastError
GetStringTypeA

user32

SetFocus
GetNextDlgTabItem
GetMonitorInfoW
MonitorFromPoint
PostMessageW
GetFocus
IsChild
IsDialogMessageW
GetWindow
GetWindowLongW
RegisterWindowMessageW
DestroyMenu
BeginPaint
EndPaint
MonitorFromWindow
ScreenToClient
ExitWindowsEx
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
BringWindowToTop
SetForegroundWindow
GetDesktopWindow
FindWindowW
FindWindowExW
SendMessageW
GetWindowRect
InvalidateRect
DrawTextW
DispatchMessageW
PostThreadMessageW
PeekMessageW
TranslateMessage
SetWindowLongW
GetLastInputInfo
IsWindowVisible
EnumWindows
MapWindowPoints
GetDC
ReleaseDC
CreateWindowExW
DefWindowProcW
LoadCursorW
RegisterClassExW
LoadBitmapW
LoadImageW
IsWindow
UpdateLayeredWindow
SetRectEmpty
SetCursor
PtInRect
SetRect
GetDlgCtrlID
ShowWindow
SetWindowPos
GetDlgItem
DestroyIcon
GetParent
OffsetRect
IsIconic
IsRectEmpty
MoveWindow
DestroyWindow
ClientToScreen
SetCapture
ReleaseCapture
InflateRect
LoadIconW
IsWindowEnabled
SetTimer
KillTimer
GetClientRect
CopyRect
IntersectRect
EqualRect
GetSystemMenu
DeleteMenu
PostQuitMessage
GetCursorPos
SetWindowTextW
CallWindowProcW
DrawIconEx
SetWindowRgn
GetSystemMetrics
GetClassInfoExW
GetActiveWindow
EnableWindow
SystemParametersInfoW
SetActiveWindow
CreatePopupMenu
TrackPopupMenuEx
AppendMenuW
GetMessageW
UnregisterClassA

gdi32

CreateRoundRectRgn
CreateRectRgnIndirect
GetTextExtentPoint32W
TextOutW
RoundRect
Rectangle
ExtSelectClipRgn
GetClipRgn
SetViewportOrgEx
GetViewportOrgEx
SetStretchBltMode
GetTextColor
GetCurrentObject
SelectClipRgn
SetBkMode
RestoreDC
SaveDC
LineTo
MoveToEx
OffsetRgn
GetStretchBltMode
SetTextColor
CreateBitmap
CreateCompatibleBitmap
CreateDIBSection
CombineRgn
CreateRectRgn
StretchBlt
BitBlt
ExtTextOutW
SetBkColor
CreateCompatibleDC
CreateFontIndirectW
GetStockObject
GetObjectW
DeleteObject
GetDeviceCaps
DeleteDC
SelectObject
CreatePen
RectInRegion

advapi32

StartServiceW
RegQueryValueExA
RegOpenKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CloseEventLog
ReadEventLogW
OpenEventLogW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl

shell32

SHGetFolderPathW
SHCreateDirectoryExW
ShellExecuteW
SHGetSpecialFolderPathW
Shell_NotifyIconW

ole32

CreateStreamOnHGlobal

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime

shlwapi

PathIsDirectoryW
PathFindFileNameW
StrToIntW
PathAddBackslashW
StrToIntA
PathFileExistsW
PathRemoveFileSpecW

comctl32

_TrackMouseEvent

msimg32

AlphaBlend

gdiplus

GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipLoadImageFromStream
GdipLoadImageFromFile
GdipGetFontSize
GdipGetFamily
GdipGetImagePixelFormat
GdiplusShutdown
GdiplusStartup
GdipCloneBitmapArea
GdipCreateHBITMAPFromBitmap
GdipDeleteFont
GdipCreateFont
GdipImageRotateFlip
GdipCreateBitmapFromStream
GdipCreateFontFromLogfontW
GdipPrivateAddFontFile
GdipDeletePrivateFontCollection
GdipNewPrivateFontCollection
GdipCloneFontFamily
GdipGetFontCollectionFamilyList
GdipGetFontCollectionFamilyCount
GdipSetClipHrgn
GdipSetClipPath
GdipDrawImagePointsRectI
GdipDrawImageRectRectI
GdipDrawImageRectRect
GdipDrawImageRectI
GdipDrawImageI
GdipMeasureString
GdipDrawString
GdipFillPath
GdipFillRectangleI
GdipFillRectangle
GdipGraphicsClear
GdipDrawPath
GdipDrawRectangleI
GdipDrawLinesI
GdipDrawLine
GdipRotateWorldTransform
GdipScaleWorldTransform
GdipTranslateWorldTransform
GdipResetWorldTransform
GdipSetPixelOffsetMode
GdipSetSmoothingMode
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipSetCompositingQuality
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipAddPathStringI
GdipAddPathPieI
GdipAddPathRectangleI
GdipAddPathRectangle
GdipAddPathArcI
GdipClosePathFigure
GdipDeletePath
GdipCreatePath
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipCreateStringFormat
GdipSetPenDashStyle
GdipSetPenMode
GdipSetPenEndCap
GdipSetPenStartCap
GdipDeletePen
GdipCreatePen1
GdipCreateLineBrushFromRectWithAngleI
GdipCreateLineBrushI
GdipDisposeImage
GdipCreateSolidFill
GdipCloneBrush
GdipDeleteBrush
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipAlloc
GdipDeleteFontFamily
GdipFree
GdipCreateBitmapFromScan0

ws2_32

gethostbyname
WSACleanup
inet_ntoa
inet_addr
WSAGetLastError
closesocket
send
getsockname
ntohs
bind
htons
getsockopt
setsockopt
connect
WSASetLastError
socket
select
ioctlsocket
WSAStartup
recv
__WSAFDIsSet

psapi

GetModuleFileNameExW

iphlpapi

IcmpSendEcho
IcmpCloseHandle
GetNetworkParams
IcmpCreateFile

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 688KB - Virtual size: 685KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ba51aa7b23f200e54ee02edb1183d97

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

gdiplus

ws2_32

psapi

iphlpapi

version

Sections

.text Size: 688KB - Virtual size: 685KB

.rdata Size: 168KB - Virtual size: 167KB

.data Size: 16KB - Virtual size: 25KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 688KB - Virtual size: 685KB

.rdata
Size: 168KB - Virtual size: 167KB

.data
Size: 16KB - Virtual size: 25KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB