32d1afc330b129965145e77ea17d0bf16bf24171b83126a0e8550c6b9bad3852

Sharing

Copy URL Twitter E-mail

General

Target

32d1afc330b129965145e77ea17d0bf16bf24171b83126a0e8550c6b9bad3852
Size

2.5MB
MD5

499e578cc71b67691ffbcd54a57959eb
SHA1

6287bce8390957f990c0eaa2fd3059b3e5a39084
SHA256

32d1afc330b129965145e77ea17d0bf16bf24171b83126a0e8550c6b9bad3852
SHA512

047c21b11a3016aafc274939fcf0a140a9d051d14473c22028a82ed7003be711bbe3403a321fa230274c8d8c2a667c8a9968fcece9f3ebcc3455d08a0f04effe
SSDEEP

24576:0PCA+jHRire4e9/TjoCLgg+NkE+6wn1n7mog+68eOqh5EDN+6Nqmc5iFBLxC+9mS:0pM0exTH+NCZ1nJiO7DUmJBLcatDD3

Score

N/A

Malware Config

Signatures

Files

32d1afc330b129965145e77ea17d0bf16bf24171b83126a0e8550c6b9bad3852
.exe windows x86

6dc3e91c87588a0f32c5c233dec96abf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
SetFileTime
GetFileInformationByHandle
GetFileTime
GetFileSizeEx
GetDiskFreeSpaceA
SetFilePointerEx
FlushFileBuffers
_lwrite
SetFilePointer
SetEndOfFile
GetProcAddress
GetModuleHandleA
LoadLibraryA
CreateEventA
SetEvent
WaitForSingleObject
SetThreadPriority
GetCurrentThread
DefineDosDeviceA
GetCurrentProcessId
FormatMessageW
VirtualQuery
ReleaseMutex
CreateMutexA
OpenMutexA
GetVolumeInformationW
GetLogicalDrives
GetFileSize
CreateDirectoryA
OutputDebugStringA
GetVersionExA
GetCurrentDirectoryA
LocalFree
FindClose
FindFirstFileA
GetWindowsDirectoryA
DeleteFileA
GetTempPathA
SetCurrentDirectoryA
QueryDosDeviceA
GetSystemInfo
SetUnhandledExceptionFilter
_lread
InterlockedExchangeAdd
QueryPerformanceCounter
GetProcessWorkingSetSize
GetProcessTimes
GetThreadTimes
GlobalMemoryStatus
GetProcessHeap
InterlockedExchange
ResetEvent
InterlockedCompareExchange
HeapFree
HeapAlloc
GetDiskFreeSpaceExA
GetModuleFileNameW
VirtualAlloc
HeapDestroy
HeapReAlloc
HeapSize
CompareStringW
CompareStringA
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetLocaleInfoW
GetFullPathNameA
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
LCMapStringW
LCMapStringA
IsValidCodePage
GetACP
GetCPInfo
FatalAppExitA
GetSystemTimeAsFileTime
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
FindNextFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileType
SetStdHandle
ExitProcess
CreateThread
ResumeThread
ExitThread
RtlUnwind
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
CreatePipe
DeviceIoControl
VirtualLock
SetFileAttributesA
GetStartupInfoA
VirtualUnlock
GetVolumePathNameA
GetSystemDirectoryA
ReadFile
CreateProcessA
GetFileAttributesA
Sleep
GetVolumeInformationA
GetDriveTypeA
WriteFile
GetTickCount
CreateFileA
SetVolumeLabelA
GetModuleFileNameA
FindResourceExA
lstrcmpiW
FindResourceA
LoadLibraryExW
FreeLibrary
IsProcessorFeaturePresent
InitializeCriticalSection
GetModuleHandleW
InterlockedDecrement
InterlockedIncrement
lstrlenW
DeleteCriticalSection
SetEnvironmentVariableA
GetOEMCP
CreateSemaphoreW
GetLastError
CloseHandle
lstrcpynW
LeaveCriticalSection
EnterCriticalSection
FindResourceExW
GetCurrentProcess
FlushInstructionCache
SetLastError
RaiseException
GlobalFree
GetCurrentThreadId
FindResourceW
LoadResource
LockResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
FreeResource
WideCharToMultiByte
VirtualFree
MultiByteToWideChar

user32

wsprintfA
SendMessageTimeoutA
RegisterClassExA
CreateWindowExA
SetLayeredWindowAttributes
GetWindowLongA
ExitWindowsEx
MessageBoxA
wsprintfW
GetKeyState
EnumWindows
GetWindowTextA
PostMessageA
SetWindowLongA
SetWindowTextA
GetClassNameA
SendMessageA
GetClassInfoA
UnregisterClassA
LoadIconA
RegisterClassA
GetUpdateRect
DefWindowProcA
ReleaseDC
RegisterDeviceNotificationA
SetDlgItemInt
GetDlgItemInt
EndDialog
IsDialogMessageW
ShowWindow
SetFocus
GetDlgItem
SetWindowPos
MapWindowPoints
GetClientRect
GetMonitorInfoW
GetWindowTextLengthA
GetActiveWindow
GetClipboardOwner
GetClipboardViewer
GetDesktopWindow
GetFocus
GetInputState
GetMessagePos
GetMessageTime
GetOpenClipboardWindow
GetProcessWindowStation
GetQueueStatus
GetCaretPos
CallNextHookEx
LoadCursorA
UnhookWindowsHookEx
DialogBoxParamW
CharNextW
FillRect
GetSysColorBrush
FindWindowW
IsIconic
GetLastActivePopup
EndPaint
BeginPaint
GetSysColor
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
DestroyCursor
LoadCursorW
MessageBoxW
SetCursor
PostMessageW
GetCursorPos
CreatePopupMenu
IsWindowVisible
InsertMenuW
MonitorFromWindow
GetWindowLongW
GetWindowRect
GetWindow
GetParent
SetWindowTextW
EnableWindow
SetTimer
KillTimer
PostQuitMessage
MoveWindow
CopyRect
IsWindowEnabled
CreateDialogParamW
DestroyWindow
SetWindowLongW
UpdateLayeredWindow
GetDC
SendMessageW
DefWindowProcW
IsWindow
UpdateWindow
InvalidateRect
SystemParametersInfoW
GetCapture
SetCapture
ReleaseCapture
SetForegroundWindow
TrackPopupMenu
DestroyMenu
DestroyIcon
GetSystemMetrics
LoadImageW
MessageBeep
SetDlgItemTextW
GetWindowTextLengthW
GetWindowTextW
GetMenu
AdjustWindowRectEx
CallWindowProcW
CreateWindowExW
SetWindowRgn
EnumChildWindows
ClientToScreen
PtInRect
GetDlgCtrlID
GetDialogBaseUnits

advapi32

RegDeleteKeyW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegQueryValueExA
RegOpenKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegOpenKeyExA
StartServiceA
OpenServiceA
CreateServiceA
CloseServiceHandle
OpenSCManagerA
DeleteService
ControlService
QueryServiceStatus
IsWellKnownSid
GetTokenInformation
CryptReleaseContext
CryptGenRandom
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteValueW

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
CreateStreamOnHGlobal

shell32

ord680
SHChangeNotify
SHGetFolderPathA
Shell_NotifyIconW
SHGetFileInfoA
SHGetMalloc
SHBrowseForFolderW
SHGetPathFromIDListA
ShellExecuteA
ShellExecuteW

oleaut32

VarUI4FromStr
SysAllocStringLen
SysFreeString

shlwapi

PathFileExistsA

comctl32

_TrackMouseEvent
ord17
InitCommonControlsEx

gdi32

CreateDIBSection
CreateRectRgn
CombineRgn
GetStockObject
SetTextColor
TextOutW
SetTextAlign
SelectObject
CreateSolidBrush
GetTextMetricsA
GetTextExtentPoint32W
LineTo
MoveToEx
CreatePen
CreateCompatibleDC
SetBkMode
DeleteObject
DeleteDC

gdiplus

GdipDeleteStringFormat
GdiplusShutdown
GdiplusStartup
GdipDrawImageRectRect
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDrawImageRectRectI
GdipCreateStringFormat
GdipDrawString
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipCreateBitmapFromResource
GdipCloneImage
GdipDisposeImage
GdipFree
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipAlloc
GdipGetImageHeight
GdipGetImageWidth

comdlg32

GetSaveFileNameW
GetOpenFileNameW

Sections

.text
Size: 643KB - Virtual size: 642KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6dc3e91c87588a0f32c5c233dec96abf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

shell32

oleaut32

shlwapi

comctl32

gdi32

gdiplus

comdlg32

Sections

.text Size: 643KB - Virtual size: 642KB

.rdata Size: 119KB - Virtual size: 119KB

.data Size: 22KB - Virtual size: 194KB

.rsrc Size: 1.7MB - Virtual size: 1.7MB

.text
Size: 643KB - Virtual size: 642KB

.rdata
Size: 119KB - Virtual size: 119KB

.data
Size: 22KB - Virtual size: 194KB

.rsrc
Size: 1.7MB - Virtual size: 1.7MB