418e0254ca7e7b365135ea4ac03093e909b6ebba2b07d27483642ea9a211dbe8

Sharing

Copy URL Twitter E-mail

General

Target

418e0254ca7e7b365135ea4ac03093e909b6ebba2b07d27483642ea9a211dbe8
Size

1.6MB
MD5

edd7f98bcbc05ba4fa2ff3c7f6683cf4
SHA1

613c9ed74e1219211de02238f20e21daab68024a
SHA256

418e0254ca7e7b365135ea4ac03093e909b6ebba2b07d27483642ea9a211dbe8
SHA512

3c79b24e07e5da1251c13ac0721512d574d74be4127ad3efdb2a3dccedf7fbb296847dc5bdf010e553177ae055944fb8b77d5f93e78f85b5d6ab612784069925
SSDEEP

24576:M6BMwbDO/eZtUCypraFQQr1mDwknW7SHsQY8tjss:xDO/eDUl3yOmm28tjss

Score

N/A

Malware Config

Signatures

Files

418e0254ca7e7b365135ea4ac03093e909b6ebba2b07d27483642ea9a211dbe8
.exe windows x86

e75d3f80710a66645156884319014b19

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipDrawString
GdipDeleteStringFormat
GdipDeleteFont
GdipDeletePen
GdipCreatePen1
GdipGetImageFlags
GdipCloneImage
GdipDrawLinesI
GdipCreateFontFromDC
GdipSetSolidFillColor
GdipSetStringFormatLineAlign
GdipFillPolygonI
GdipDrawLineI
GdipCreatePen2
GdipDrawRectangleI
GdipSetStringFormatAlign
GdipFillRectangle
GdipCreateStringFormat
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHICON
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipCreateHICONFromBitmap
GdipCreateBitmapFromStream
GdipDrawImageRectRect
GdipDeleteBrush
GdipCreateRegionHrgn
GdipAlloc
GdipDisposeImage
GdipCreateLineBrushFromRectI
GdipCreateSolidFill
GdipFree
GdipFillRegion
GdipDeleteRegion
GdipCreateBitmapFromFile
GdipCreateFontFromLogfontA
GdipFillRectangleI
GdipDrawImageRectRectI
GdipGetImageWidth
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipGetImageHeight
GdiplusStartup
GdiplusShutdown

comctl32

InitCommonControlsEx
_TrackMouseEvent

kernel32

FileTimeToSystemTime
SystemTimeToFileTime
SetFileTime
GetVersionExW
RemoveDirectoryW
GetUserDefaultLangID
SetFileAttributesW
FlushFileBuffers
InitializeCriticalSection
FreeResource
TryEnterCriticalSection
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
GetTickCount
CreateIoCompletionPort
PostQueuedCompletionStatus
GetQueuedCompletionStatus
MoveFileExW
QueryPerformanceFrequency
WriteConsoleW
SetEndOfFile
GetConsoleCP
SetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetUnhandledExceptionFilter
GetOEMCP
WideCharToMultiByte
FindFirstFileExW
ReadConsoleW
GetConsoleMode
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetTimeZoneInformation
GetFileType
GetStdHandle
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
OutputDebugStringW
IsDebuggerPresent
GetCPInfo
EncodePointer
LCMapStringEx
GetStringTypeW
LoadLibraryExW
FreeLibrary
IsValidCodePage
WaitForSingleObject
GetCurrentProcessId
GetLocalTime
FindResourceW
LoadResource
LoadLibraryW
CloseHandle
MultiByteToWideChar
CreateFileW
GetModuleFileNameW
GetCurrentProcess
SizeofResource
CreateDirectoryW
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetFileTime
SetFilePointerEx
Sleep
WriteFile
FindClose
FindNextFileW
GetFullPathNameW
FindFirstFileW
lstrcmpiW
VerifyVersionInfoW
GetModuleHandleW
VerSetConditionMask
GetProcAddress
CompareStringW
lstrlenW
GetACP
GetCurrentThreadId
SetLastError
DeleteFileW
GetFileSizeEx
ReadFile
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
SetThreadPriority
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
GetCommandLineA

user32

FlashWindow
PtInRect
SendMessageW
UnregisterClassW
SetWindowTextW
GetClassNameW
GetDlgItem
GetParent
DrawIconEx
SetForegroundWindow
ReleaseCapture
GetKeyState
ReleaseDC
DestroyWindow
IsIconic
GetWindowRgn
SetRect
PostThreadMessageW
DrawTextW
GetClassLongW
IsZoomed
GetClientRect
SetWindowLongW
GetWindowDC
SetCapture
IsWindowEnabled
MapWindowPoints
ClientToScreen
GetMonitorInfoW
DestroyIcon
GetAsyncKeyState
SetClassLongW
GetSystemMetrics
EndDialog
FillRect
SetWindowRgn
MonitorFromWindow
SetWindowPos
GetWindowRect
GetWindow
PostMessageW
DefWindowProcW
GetWindowTextLengthW
GetWindowLongW
EnableWindow
GetActiveWindow
MessageBoxW
GetWindowTextW
EndPaint
BeginPaint
InvalidateRect
DialogBoxParamW
GetUpdateRect
GetSysColor
FrameRect
CopyRect
IsDialogMessageW
IsWindow
ShowWindow
EnumChildWindows
GetDC
InflateRect
GetFocus
CallWindowProcW
KillTimer
SetTimer
UpdateWindow
MonitorFromPoint
SetParent
CreateDialogParamW
IsWindowVisible
CheckRadioButton
RedrawWindow
SetDlgItemTextW
GetDlgItemTextW
SendDlgItemMessageW
IsDlgButtonChecked
GetMessageW
DispatchMessageW
TranslateMessage
LoadImageW
OpenClipboard
CloseClipboard
EmptyClipboard
SetClipboardData
PeekMessageW
RegisterClassExW
MoveWindow
GetClassInfoExW
SystemParametersInfoW
CreateWindowExW
ScreenToClient
OffsetRect
GetCapture
GetDlgCtrlID
TrackMouseEvent
DrawFocusRect
SetFocus
CharNextW
LoadCursorW
SetCursor
SetRectEmpty
GetCursorPos

gdi32

PtInRegion
GetTextExtentPoint32W
CreateBrushIndirect
GetObjectW
CreateFontIndirectW
Polygon
StretchBlt
GetBitmapDimensionEx
GetStockObject
CreatePen
ExcludeClipRect
SetStretchBltMode
RestoreDC
RoundRect
BitBlt
CreateCompatibleBitmap
CreateDIBSection
CreateCompatibleDC
FrameRgn
CreateRoundRectRgn
CreateRectRgn
SetTextColor
SetBkMode
SetViewportOrgEx
SelectClipRgn
SetBkColor
DeleteObject
CreateSolidBrush
CombineRgn
ExtTextOutW
GetViewportOrgEx
DeleteDC
GetObjectA
GetBkColor
FillRgn
SelectObject
Ellipse
SaveDC

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegQueryInfoKeyW
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegSetValueExW
InitializeSecurityDescriptor
RegDeleteValueW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW

shell32

SHGetFolderPathW
ShellExecuteW

ole32

CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoInitialize
CoTaskMemRealloc
CoCreateGuid
CreateStreamOnHGlobal
CoTaskMemFree

oleaut32

VarUI4FromStr

dbghelp

MiniDumpWriteDump

shlwapi

PathIsDirectoryW
PathFileExistsW

msimg32

GradientFill

ws2_32

WSACleanup
WSAStartup
ntohs
htonl
htons
ntohl
inet_addr
freeaddrinfo
socket
connect
WSARecv
ioctlsocket
setsockopt
WSAGetLastError
__WSAFDIsSet
closesocket
getaddrinfo
WSASend
select

bcrypt

BCryptOpenAlgorithmProvider
BCryptGenRandom
BCryptCloseAlgorithmProvider

winmm

timeBeginPeriod
timeEndPeriod

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e75d3f80710a66645156884319014b19

Headers

DLL Characteristics

File Characteristics

Imports

gdiplus

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

dbghelp

shlwapi

msimg32

ws2_32

bcrypt

winmm

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 204KB - Virtual size: 204KB

.data Size: 43KB - Virtual size: 80KB

.rsrc Size: 141KB - Virtual size: 141KB

.reloc Size: 64KB - Virtual size: 64KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 204KB - Virtual size: 204KB

.data
Size: 43KB - Virtual size: 80KB

.rsrc
Size: 141KB - Virtual size: 141KB

.reloc
Size: 64KB - Virtual size: 64KB