be7fb687fcd44f9a45f328651384c1ee36425b8d258e6c3167b08679e4586322

Sharing

Copy URL Twitter E-mail

General

Target

be7fb687fcd44f9a45f328651384c1ee36425b8d258e6c3167b08679e4586322
Size

5.4MB
MD5

4b2963be5f27022c9c82b2c11fb6f419
SHA1

d567eeed1c122fb96e157337f1b96de71888f666
SHA256

be7fb687fcd44f9a45f328651384c1ee36425b8d258e6c3167b08679e4586322
SHA512

7259f3274662343e6e84ba4eb767ae152a7d8db3763652b3e7bcbc9b34527506f9dbec6f2c5eec4000aa227b82a32859189a64faba21711e99000cafda817211
SSDEEP

98304:g6VM0s0fL6SDRzJrXPfVBUBMD95UnU6HKSFdd9OxqFDGiO:5VM0s0fLXFnVBZhvCCqEZ

Score

N/A

Malware Config

Signatures

Files

be7fb687fcd44f9a45f328651384c1ee36425b8d258e6c3167b08679e4586322
.exe windows x86

465fa9fdf8ad4d6b36ef9b7d565d4498

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetStringTypeW
GetStringTypeA
QueryPerformanceCounter
GetFileType
SetHandleCount
CompareStringW
SetEnvironmentVariableA
SetFileTime
GetCurrentDirectoryA
GetFileAttributesA
CreateDirectoryA
LocalFileTimeToFileTime
SystemTimeToFileTime
ReadFile
SetFilePointer
GetCurrentThreadId
GetWindowsDirectoryA
WinExec
FreeLibrary
GetModuleFileNameA
lstrcpyA
lstrcatA
WritePrivateProfileStringA
WriteFile
GetSystemInfo
DeleteFileA
CreateFileA
CreateFileMappingA
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
CloseHandle
FindFirstFileA
FindClose
lstrlenW
GetLastError
SetLastError
GetProcAddress
GetModuleHandleA
LoadLibraryA
FreeResource
GetCPInfo
lstrlenA
lstrcmpiA
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
MultiByteToWideChar
GetVersion
GetVersionExA
FreeEnvironmentStringsA
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
LCMapStringW
LCMapStringA
IsValidCodePage
GetACP
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GlobalFree
GlobalUnlock
GlobalLock
lstrcmpW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
MulDiv
LocalFree
FormatMessageA
GlobalAlloc
GetModuleFileNameW
InterlockedDecrement
lstrcmpA
GetCurrentProcessId
InterlockedExchange
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GetThreadLocale
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GlobalFlags
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
GetOEMCP
GetModuleHandleW
FileTimeToSystemTime
SetErrorMode
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
GetTickCount
HeapFree
HeapAlloc
RtlUnwind
RaiseException
Sleep
ExitProcess
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetCommandLineA
GetStartupInfoA
VirtualProtect
VirtualAlloc
VirtualQuery
HeapReAlloc
HeapSize
HeapCreate
VirtualFree
GetStdHandle

user32

TrackPopupMenu
MapWindowPoints
PeekMessageA
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
GetTopWindow
DispatchMessageA
GetLastActivePopup
GetWindowTextA
GetWindowTextLengthA
GetFocus
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
GetCapture
IsChild
WinHelpA
SendDlgItemMessageA
RegisterWindowMessageA
CheckMenuItem
EnableMenuItem
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
MoveWindow
DestroyMenu
GetMenuStringA
SetRectEmpty
ValidateRect
TranslateMessage
GetMessageA
BeginPaint
EndPaint
PostQuitMessage
MapDialogRect
SetWindowContextHelpId
CharUpperA
LoadCursorA
ReleaseCapture
IsRectEmpty
UnregisterClassA
SetCapture
CharNextA
GetClassInfoExA
InvalidateRgn
SetMenu
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
ShowWindow
SetWindowPos
SetWindowLongA
LoadIconA
IsIconic
GetSystemMenu
DrawIcon
PtInRect
EnumWindows
UpdateWindow
IsWindowVisible
RedrawWindow
DestroyCursor
LoadImageA
PostMessageA
SetCursor
GetWindowLongA
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetClientRect
GetWindowRect
SendMessageA
DrawFocusRect
FrameRect
OffsetRect
InflateRect
GetIconInfo
CreateIconIndirect
DrawStateA
IsMenu
GetMenuItemInfoA
GetSystemMetrics
SystemParametersInfoA
DrawIconEx
DestroyIcon
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetSysColorBrush
GetSysColor
GetDesktopWindow
ReleaseDC
GetDC
ModifyMenuA
GetSubMenu
GetMenuState
GetMenuItemID
GetMenuItemCount
AppendMenuA
CreatePopupMenu
CreateMenu
DrawEdge
FillRect
LoadBitmapA
CopyRect
SetRect
EnableWindow
KillTimer
SetTimer
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
ScreenToClient
MessageBoxA
GetNextDlgGroupItem
CreateWindowExA
EqualRect
CopyAcceleratorTableA
DeferWindowPos
wsprintfA
GetCursorPos
GetWindowDC
SetWindowRgn
VkKeyScanA
keybd_event
SetForegroundWindow
SetFocus
GetKeyState
GetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
IsWindow
IsWindowEnabled
FindWindowA
EndDialog
GetDlgItem
DestroyWindow
CreateDialogIndirectParamA
GetWindow
GetWindowPlacement
IntersectRect
GetMenu
CallWindowProcA
DefWindowProcA
GetDlgCtrlID
SetActiveWindow

gdi32

CreateRoundRectRgn
CreateRectRgnIndirect
CreateFontA
StretchBlt
CreateBitmap
SetBkColor
SetTextColor
GetStockObject
GetTextExtentPoint32W
Escape
GetTextColor
TextOutA
RectVisible
PtVisible
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
GetTextExtentPoint32A
SetPixel
GetPixel
BitBlt
PatBlt
Rectangle
Ellipse
GetBkMode
GetDeviceCaps
CreateCompatibleDC
GetObjectA
CreateCompatibleBitmap
CreateFontIndirectA
CreatePolygonRgn
FillRgn
FrameRgn
CombineRgn
CreateRectRgn
ExtTextOutA
GetRgnBox
DPtoLP
GetMapMode
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetBkColor
StretchDIBits
GetCharWidthA
GetClipBox
CreateSolidBrush
CreatePen

advapi32

RegOpenKeyExA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegCreateKeyA
RegSetValueExA
RegDeleteValueA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteKeyA

shell32

ShellExecuteExA
ShellExecuteA

comctl32

_TrackMouseEvent

shlwapi

PathStripPathA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA

oledlg

ord8

oleacc

LresultFromObject
CreateStdAccessibleObject

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

comdlg32

GetFileTitleA

ole32

CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleIsCurrentClipboard
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysAllocStringByteLen
SysFreeString
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear

Sections

.text
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

465fa9fdf8ad4d6b36ef9b7d565d4498

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

comctl32

shlwapi

oledlg

oleacc

winspool.drv

comdlg32

ole32

oleaut32

Sections

.text Size: 320KB - Virtual size: 320KB

.rdata Size: 78KB - Virtual size: 78KB

.data Size: 2.6MB - Virtual size: 2.6MB

.rsrc Size: 2.4MB - Virtual size: 2.4MB

.text
Size: 320KB - Virtual size: 320KB

.rdata
Size: 78KB - Virtual size: 78KB

.data
Size: 2.6MB - Virtual size: 2.6MB

.rsrc
Size: 2.4MB - Virtual size: 2.4MB