ef4095026a8f3e4b8e8c929f74f6e7f12e932d2608784080986f90e5caca0cfc

Sharing

Copy URL Twitter E-mail

General

Target

ef4095026a8f3e4b8e8c929f74f6e7f12e932d2608784080986f90e5caca0cfc
Size

1.4MB
MD5

b00da25388dd905f6ecf862b97c7f327
SHA1

00bdcb138032cdf99a42e058e077552c0d88aa1e
SHA256

ef4095026a8f3e4b8e8c929f74f6e7f12e932d2608784080986f90e5caca0cfc
SHA512

da4c1acbbf49727a34e05de9abd328b0b14e3083bfc827553dc09f5c9991ad7a08034d5be89b24fe02d620a1060112affd4ef59ef117a41f93a2e64acf27728f
SSDEEP

24576:D5gboWFqyP9c5qIKR6B66wCIxGqHAypFBY6fWFmT0riPJOYL:qlRT6jI4vOgFmTXPJOYL

Score

N/A

Malware Config

Signatures

Files

ef4095026a8f3e4b8e8c929f74f6e7f12e932d2608784080986f90e5caca0cfc
.exe windows x86

e69d0149b343b7c74eb157a703e070b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

kernel32

SetUnhandledExceptionFilter
GetModuleFileNameA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
HeapSize
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
HeapCreate
HeapDestroy
VirtualQuery
GetSystemInfo
VirtualProtect
GetCPInfo
GetStartupInfoW
TerminateProcess
GetModuleHandleA
HeapReAlloc
ExitProcess
UnhandledExceptionFilter
InterlockedCompareExchange
LoadLibraryA
LCMapStringW
LCMapStringA
GetUserDefaultLCID
Sleep
GetVersionExA
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetSystemTime
GetFileType
GetStartupInfoA
GetStringTypeA
GetStringTypeW
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
IsBadCodePtr
GetOEMCP
SetStdHandle
CompareStringA
SetEnvironmentVariableA
CreateFileA
GetLocaleInfoW
VirtualFree
VirtualAlloc
IsBadWritePtr
FlushFileBuffers
WriteFile
ReadFile
CreateFileW
GetFileSize
SetFilePointer
WideCharToMultiByte
GetStringTypeExW
SetEvent
ResetEvent
CreateEventW
ReleaseSemaphore
CreateSemaphoreW
IsBadReadPtr
CompareStringW
MulDiv
GetCurrentProcessId
GetProfileStringW
GlobalFree
LockResource
GlobalAlloc
GlobalUnlock
GlobalLock
lstrcatW
LoadLibraryW
GetProcAddress
lstrcmpW
lstrcpynA
HeapFree
GetCurrentDirectoryW
lstrlenA
FindFirstFileW
GetFullPathNameW
SetLastError
FindClose
lstrcpynW
lstrcmpiW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
GetModuleFileNameW
SetHandleCount
GetModuleHandleW
lstrcpyW
ReleaseMutex
GetCurrentThreadId
GetLastError
CreateMutexW
WaitForSingleObject
CloseHandle
GetProcessHeap
HeapAlloc
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
lstrlenW
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
RaiseException
SetEndOfFile
GetCommandLineW
RtlUnwind

user32

SetScrollPos
ScrollWindowEx
UnionRect
InvalidateRgn
CharUpperW
DestroyCursor
SetMenuDefaultItem
IsDlgButtonChecked
GetWindowTextLengthW
GetWindowTextW
CreateDialogParamW
CheckDlgButton
EndDialog
CreateIconIndirect
DestroyIcon
SendDlgItemMessageW
KillTimer
SetTimer
GetClassNameW
ModifyMenuW
InflateRect
WindowFromPoint
GetSysColorBrush
FrameRect
GetWindowThreadProcessId
RegisterWindowMessageW
SetRectEmpty
SetCapture
GetWindowDC
DrawIconEx
GetSystemMenu
GetMenuDefaultItem
GetCapture
ClientToScreen
ReleaseCapture
DefFrameProcW
SystemParametersInfoW
SetRect
BeginPaint
DrawTextW
EndPaint
GetSysColor
GetDlgItem
GetNextDlgTabItem
DialogBoxParamW
CharLowerW
BringWindowToTop
GetMessagePos
GetScrollInfo
GetDesktopWindow
GetForegroundWindow
GetKeyState
GetClassLongW
SetClassLongW
EnableMenuItem
DeleteMenu
SetMenuItemInfoW
InsertMenuW
IsMenu
IsDialogMessageW
LoadBitmapW
GetActiveWindow
UpdateWindow
SetWindowPlacement
GetWindowPlacement
IsIconic
SetMenu
PostMessageW
SetWindowsHookExW
CallNextHookEx
UnhookWindowsHookEx
GetMenuStringW
DrawMenuBar
RemoveMenu
MapWindowPoints
TrackPopupMenuEx
CreatePopupMenu
GetMenuItemCount
AppendMenuW
GetMenuItemInfoW
MessageBeep
LoadStringA
PostQuitMessage
DefMDIChildProcW
SetFocus
GetFocus
IsChild
ReleaseDC
GetDC
GetSubMenu
InvertRect
EnableWindow
GetCursorPos
DrawFocusRect
GetDlgItemTextW
SetDlgItemTextW
MessageBoxA
TrackPopupMenu
GetSystemMetrics
DrawEdge
MonitorFromPoint
GetMonitorInfoW
FillRect
GetAsyncKeyState
EqualRect
SetClipboardData
GetClipboardData
OpenClipboard
EmptyClipboard
CloseClipboard
IsClipboardFormatAvailable
SubtractRect
ScrollDC
MoveWindow
CheckMenuItem
SetDlgItemInt
TranslateMDISysAccel
GetCursor
OffsetRect
PtInRect
CopyRect
EnableScrollBar
SetScrollInfo
AdjustWindowRectEx
GetDlgCtrlID
GetParent
RedrawWindow
IsWindowVisible
ScreenToClient
GetClientRect
GetWindowRect
SetWindowPos
IsZoomed
GetMenu
DestroyMenu
SetWindowTextW
GetWindowLongW
CallWindowProcW
TranslateAcceleratorW
DrawFrameControl
wsprintfW
DefWindowProcW
FindWindowW
SetForegroundWindow
CharNextW
SendMessageW
LoadMenuW
LoadAcceleratorsW
GetClassInfoExW
LoadImageW
RegisterClassExW
DestroyWindow
CreateWindowExW
MessageBoxW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
IsWindow
GetWindow
IsWindowEnabled
ShowWindow
SetWindowLongW
wvsprintfW
InvalidateRect
LoadCursorW
SetCursor
IntersectRect
IsRectEmpty
LoadStringW
UnregisterClassW
GetMenuItemID

gdi32

SetTextColor
ExtTextOutW
SetBkColor
GetViewportOrgEx
CreateFontIndirectW
SetBrushOrgEx
CreatePatternBrush
CreateBitmap
PatBlt
CreateCompatibleBitmap
BitBlt
SaveDC
RestoreDC
SetStretchBltMode
StretchBlt
GetDeviceCaps
GdiFlush
RectVisible
ExcludeClipRect
IntersectClipRect
CreateRectRgnIndirect
CreateSolidBrush
SelectClipRgn
CombineRgn
GetPixel
GetTextExtentPoint32W
SetBkMode
TextOutW
CreatePen
LineTo
SetWindowOrgEx
GetMapMode
GetViewportExtEx
GetWindowExtEx
GetEnhMetaFileHeader
CreateEnhMetaFileW
CloseEnhMetaFile
OffsetWindowOrgEx
PlayEnhMetaFile
DeleteEnhMetaFile
SetPixel
Ellipse
UnrealizeObject
GetTextMetricsW
Rectangle
SetDIBColorTable
StartDocW
AbortDoc
EndDoc
CreateDCW
GetCurrentObject
EndPage
StartPage
ResetDCW
CreateCompatibleDC
GetObjectW
CreateDIBSection
SelectObject
CreateFontW
GetStockObject
DeleteDC
SetViewportOrgEx
SetWindowExtEx
SetViewportExtEx
LPtoDP
SetMapMode
DPtoLP
MoveToEx
DeleteObject

winspool.drv

GetPrinterW
OpenPrinterW
ClosePrinter

comdlg32

ChooseColorW
PrintDlgW
PageSetupDlgW
GetOpenFileNameW
GetSaveFileNameW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
RegDeleteKeyW

shell32

SHGetDesktopFolder
DragAcceptFiles
ShellExecuteW
SHGetFolderPathW
SHCreateDirectoryExW
DragQueryFileW
DragFinish

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

VarUI4FromStr
OleLoadPicturePath

shlwapi

PathIsRelativeW
PathCanonicalizeW
PathRemoveFileSpecW
PathAppendW
PathFileExistsW
PathIsDirectoryW
PathRenameExtensionW

comctl32

InitCommonControlsEx
ImageList_Destroy
ord8
ImageList_GetImageCount
ImageList_Create
ImageList_DrawIndirect
ImageList_LoadImageW
ImageList_AddMasked
ImageList_Draw
_TrackMouseEvent
CreateStatusWindowW

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 196KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e69d0149b343b7c74eb157a703e070b7

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 152KB - Virtual size: 151KB

.data Size: 12KB - Virtual size: 19KB

.rsrc Size: 196KB - Virtual size: 193KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 152KB - Virtual size: 151KB

.data
Size: 12KB - Virtual size: 19KB

.rsrc
Size: 196KB - Virtual size: 193KB