e44702bb99461342498bb4b727ad91100b40a6ac55405af8830758bc274bfe51

Sharing

Copy URL Twitter E-mail

General

Target

e44702bb99461342498bb4b727ad91100b40a6ac55405af8830758bc274bfe51
Size

1.6MB
MD5

b707acec096f88eba856f1705d6dfd81
SHA1

132bf7c12e673cc9764369894244b6d62d4cc03c
SHA256

e44702bb99461342498bb4b727ad91100b40a6ac55405af8830758bc274bfe51
SHA512

f0a6a8ec80e40bcb743fcae3d41d356f00f5de196540e20bb5548146122a19dc8fb43c2e0873f5539c0a8ccac65518ab5f4ddea02b8871e8f2a2156ab4a81920
SSDEEP

49152:XQYtPLnCFvS8Rar5kH7uX+jD1lv8tb6Qb:XQSbCFvShr5kH7m+jv46

Score

N/A

Malware Config

Signatures

Files

e44702bb99461342498bb4b727ad91100b40a6ac55405af8830758bc274bfe51
.exe windows x86

b5ebc54481ed1b6fff70e522d18502ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipDrawString
GdipDeleteStringFormat
GdipDeleteFont
GdipDeletePen
GdipCreatePen1
GdipGetImageFlags
GdipDrawLinesI
GdipCreateFontFromDC
GdipSetSolidFillColor
GdipSetStringFormatLineAlign
GdipFillPolygonI
GdipDrawLineI
GdipCreatePen2
GdipDrawRectangleI
GdipSetStringFormatAlign
GdipFillRectangle
GdipCreateFontFromLogfontA
GdipCreateStringFormat
GdipCreateBitmapFromHICON
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipCreateHICONFromBitmap
GdipCreateBitmapFromStream
GdipDrawImageRectRect
GdipCloneImage
GdipDeleteBrush
GdipCreateRegionHrgn
GdipAlloc
GdipDisposeImage
GdipCreateLineBrushFromRectI
GdipCreateSolidFill
GdipFree
GdipFillRegion
GdipDeleteRegion
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipFillRectangleI
GdipDrawImageRectRectI
GdipGetImageWidth
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipGetImageHeight
GdiplusStartup
GdiplusShutdown

comctl32

InitCommonControlsEx
_TrackMouseEvent

kernel32

FileTimeToSystemTime
SystemTimeToFileTime
SetFileTime
GetVersionExW
RemoveDirectoryW
GetUserDefaultLangID
SetFileAttributesW
FlushFileBuffers
InitializeCriticalSection
FreeResource
TryEnterCriticalSection
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
GetTickCount
CreateIoCompletionPort
PostQueuedCompletionStatus
GetQueuedCompletionStatus
MoveFileExW
QueryPerformanceFrequency
WriteConsoleW
SetEndOfFile
GetConsoleCP
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
LoadLibraryExW
GetCommandLineW
WaitForSingleObject
GetOEMCP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
GetConsoleMode
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetTimeZoneInformation
GetFileType
GetStdHandle
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
OutputDebugStringW
IsDebuggerPresent
GetCPInfo
LCMapStringEx
EncodePointer
GetStringTypeW
FreeLibrary
GetCurrentProcessId
WideCharToMultiByte
GetCommandLineA
GetLocalTime
FindResourceW
LoadResource
LoadLibraryW
CloseHandle
MultiByteToWideChar
CreateFileW
GetModuleFileNameW
GetCurrentProcess
SizeofResource
CreateDirectoryW
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetFileTime
SetFilePointerEx
Sleep
WriteFile
FindClose
FindNextFileW
GetFullPathNameW
FindFirstFileW
lstrcmpiW
VerifyVersionInfoW
GetModuleHandleW
VerSetConditionMask
GetProcAddress
CompareStringW
lstrlenW
GetACP
GetCurrentThreadId
SetLastError
DeleteFileW
GetFileSizeEx
ReadFile
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
SetThreadPriority
InitializeCriticalSectionEx
SetUnhandledExceptionFilter
LeaveCriticalSection
EnterCriticalSection
HeapFree
GetEnvironmentStringsW

user32

GetClassNameW
SetWindowTextW
GetDlgItem
SendMessageW
ReleaseDC
ReleaseCapture
PtInRect
SetForegroundWindow
MonitorFromPoint
GetWindowRgn
GetParent
DrawIconEx
IsIconic
FlashWindow
GetKeyState
UnregisterClassW
DestroyWindow
SetRect
PostThreadMessageW
DrawTextW
GetClassLongW
IsZoomed
GetClientRect
SetWindowLongW
GetWindowDC
SetCapture
IsWindowEnabled
MapWindowPoints
ClientToScreen
GetMonitorInfoW
DestroyIcon
GetAsyncKeyState
SetClassLongW
GetSystemMetrics
EndDialog
FillRect
SetWindowRgn
MonitorFromWindow
SetWindowPos
GetWindowRect
GetWindow
PostMessageW
DefWindowProcW
GetWindowTextLengthW
GetWindowLongW
EnableWindow
GetActiveWindow
MessageBoxW
GetWindowTextW
EndPaint
BeginPaint
InvalidateRect
DialogBoxParamW
GetUpdateRect
GetSysColor
FrameRect
CopyRect
IsDialogMessageW
IsWindow
ShowWindow
EnumChildWindows
GetDC
InflateRect
GetFocus
CallWindowProcW
KillTimer
SetTimer
UpdateWindow
SetParent
CreateDialogParamW
IsWindowVisible
CheckRadioButton
RedrawWindow
SetDlgItemTextW
GetDlgItemTextW
SendDlgItemMessageW
IsDlgButtonChecked
GetMessageW
DispatchMessageW
TranslateMessage
LoadImageW
OpenClipboard
CloseClipboard
EmptyClipboard
SetClipboardData
PeekMessageW
RegisterClassExW
MoveWindow
GetClassInfoExW
SystemParametersInfoW
CreateWindowExW
ScreenToClient
OffsetRect
GetCapture
GetDlgCtrlID
TrackMouseEvent
DrawFocusRect
SetFocus
CharNextW
LoadCursorW
SetCursor
SetRectEmpty
GetCursorPos

gdi32

StretchBlt
GetBitmapDimensionEx
GetStockObject
CreatePen
GetTextExtentPoint32W
SetStretchBltMode
RestoreDC
RoundRect
BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
FrameRgn
CreateRoundRectRgn
CreateRectRgn
SaveDC
SetBkMode
SetViewportOrgEx
SelectClipRgn
SetBkColor
DeleteObject
CreateSolidBrush
CombineRgn
ExtTextOutW
GetViewportOrgEx
DeleteDC
PtInRegion
CreateDIBSection
GetBkColor
FillRgn
Ellipse
GetObjectA
CreateFontIndirectW
GetObjectW
SetTextColor
CreateBrushIndirect
ExcludeClipRect
Polygon

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegQueryInfoKeyW
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegSetValueExW
InitializeSecurityDescriptor
RegDeleteValueW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW

shell32

ShellExecuteW
SHGetFolderPathW

ole32

CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoInitialize
CoTaskMemRealloc
CoCreateGuid
CreateStreamOnHGlobal
CoTaskMemFree

oleaut32

VarUI4FromStr

dbghelp

MiniDumpWriteDump

shlwapi

PathIsDirectoryW
PathFileExistsW

msimg32

GradientFill

ws2_32

WSACleanup
WSAStartup
ntohs
htonl
htons
ntohl
inet_addr
freeaddrinfo
socket
connect
WSARecv
ioctlsocket
setsockopt
WSAGetLastError
__WSAFDIsSet
getaddrinfo
select
WSASend
closesocket

bcrypt

BCryptOpenAlgorithmProvider
BCryptGenRandom
BCryptCloseAlgorithmProvider

winmm

timeBeginPeriod
timeEndPeriod

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b5ebc54481ed1b6fff70e522d18502ed

Headers

DLL Characteristics

File Characteristics

Imports

gdiplus

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

dbghelp

shlwapi

msimg32

ws2_32

bcrypt

winmm

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 204KB - Virtual size: 204KB

.data Size: 43KB - Virtual size: 80KB

.rsrc Size: 141KB - Virtual size: 141KB

.reloc Size: 64KB - Virtual size: 64KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 204KB - Virtual size: 204KB

.data
Size: 43KB - Virtual size: 80KB

.rsrc
Size: 141KB - Virtual size: 141KB

.reloc
Size: 64KB - Virtual size: 64KB