84224386522958236d011e3bbbad8f9da8e255d0d410aa62c5abb1da36d0449f

Sharing

Copy URL Twitter E-mail

General

Target

84224386522958236d011e3bbbad8f9da8e255d0d410aa62c5abb1da36d0449f
Size

2.6MB
MD5

4e33890eb020c4cf5b18341dcf7e4789
SHA1

c61e83f6779c07e89f8def8fd1d3b713cf19bd6b
SHA256

84224386522958236d011e3bbbad8f9da8e255d0d410aa62c5abb1da36d0449f
SHA512

3704e69bcb7f9cc320d749559c07bd9a0bc596dd95d26c4e8a72e952b49d49ed36cc6238a844d1d58698e5fa120230e0901729710f4c62f04a52c406c65bd230
SSDEEP

49152:c3fVP5B1p47YVDgy74YmdG2phoqRMeWk0sXFBlZu0tCyCQKE4lFKHvy:wAsOFBlZ1CQMFs

Score

N/A

Malware Config

Signatures

Files

84224386522958236d011e3bbbad8f9da8e255d0d410aa62c5abb1da36d0449f
.exe windows x64

3b8e8997042e7b01db5e618f54a0ea4f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetSystemTimeAsFileTime
GetLocalTime
FileTimeToLocalFileTime
FileTimeToSystemTime
ResetEvent
VirtualQuery
WideCharToMultiByte
CopyFileW
GetCurrentProcessId
GetCurrentDirectoryW
GetSystemInfo
GlobalFlags
GetFileAttributesExW
MultiByteToWideChar
GetVersionExW
GetFileAttributesW
FindClose
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
FindNextFileW
SetLastError
FindFirstFileW
FreeLibrary
GetProcAddress
LoadLibraryW
GetUserDefaultLCID
GetTickCount
ExitProcess
FindResourceW
LoadResource
LockResource
FreeResource
GetCurrentThreadId
InitializeCriticalSection
SizeofResource
GlobalReAlloc
MulDiv
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GlobalSize
GetFileSize
IsDebuggerPresent
CreateEventW
ResumeThread
SetThreadPriority
CreateThread
WaitForSingleObject
SetEvent
WriteFile
ReadFile
SetFilePointerEx
SetFilePointer
CloseHandle
GetCommandLineW
GetModuleHandleW
GetConsoleWindow
SetConsoleCursorInfo
GetConsoleCursorInfo
SetConsoleScreenBufferSize
SetConsoleWindowInfo
GetStdHandle
SetConsoleTitleA
Sleep
CreateFileW
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetTempPathW
GetSystemDirectoryW
GetWindowsDirectoryW
CreateDirectoryW
GetLongPathNameW
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
WriteConsoleW
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetTimeZoneInformation
ReadConsoleW
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
HeapFree
SetErrorMode
OutputDebugStringA
GetModuleHandleExW
LoadLibraryExW
GlobalDeleteAtom
lstrcmpA
lstrcmpW
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
lstrcpyW
LocalFree
FormatMessageW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalHandle
LocalAlloc
LocalReAlloc
GetThreadLocale
EncodePointer
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
GetUserDefaultUILanguage
GlobalGetAtomNameW
VerSetConditionMask
VerifyVersionInfoW
SystemTimeToTzSpecificLocalTime
FlushFileBuffers
GetFullPathNameW
GetVolumeInformationW
LockFile
SetEndOfFile
UnlockFile
DuplicateHandle
lstrcmpiW
GetFileSizeEx
GetFileTime
VirtualProtect
SearchPathW
GetProfileIntW
FindResourceExW
GetTempFileNameW
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
InitializeSListHead
GetStartupInfoW
OutputDebugStringW
RtlUnwindEx
RtlPcToFileHeader
GetConsoleCP
ExitThread
FreeLibraryAndExitThread
GetCommandLineA
HeapQueryInformation
VirtualAlloc
QueryPerformanceFrequency
SetStdHandle
GetFileType
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetConsoleMode

user32

IsRectEmpty
EqualRect
IsChild
GetNextDlgGroupItem
GetNextDlgTabItem
GetTopWindow
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
BeginPaint
EndPaint
ClientToScreen
CheckMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
GetMessagePos
GetMessageTime
CallWindowProcW
GetClassInfoExW
IsMenu
DestroyWindow
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsIconic
GetCapture
GetMenu
SetMenu
TrackPopupMenu
UpdateWindow
GetForegroundWindow
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropW
GetPropW
RemovePropW
AdjustWindowRectEx
MapWindowPoints
SetWindowLongPtrW
GetClassLongPtrW
GetClassNameW
GetLastActivePopup
SetScrollInfo
GetScrollInfo
WinHelpW
ShowOwnedPopups
SetCursor
DeleteMenu
RealChildWindowFromPoint
SetTimer
KillTimer
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
LoadMenuW
CreatePopupMenu
SetWindowLongW
InsertMenuItemW
SetRectEmpty
DestroyIcon
UnpackDDElParam
ReuseDDElParam
SetParent
SetLayeredWindowAttributes
GetSysColorBrush
EnumDisplayMonitors
DrawStateW
TrackMouseEvent
CharUpperW
GetAsyncKeyState
SetWindowRgn
WindowFromPoint
NotifyWinEvent
ModifyMenuW
WaitMessage
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
MapVirtualKeyW
CreateAcceleratorTableW
DestroyAcceleratorTable
LockWindowUpdate
SetClassLongPtrW
DrawEdge
DrawFrameControl
DrawFocusRect
DrawIconEx
UnionRect
SetRect
GetMenuItemInfoW
SendDlgItemMessageA
CreateDialogIndirectParamW
EndDialog
GetKeyNameTextW
SetCursorPos
CharUpperBuffW
UpdateLayeredWindow
EnableScrollBar
GetMenuDefaultItem
SetMenuDefaultItem
CopyIcon
FrameRect
IsClipboardFormatAvailable
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsCharLowerW
MapVirtualKeyExW
SubtractRect
GetUpdateRect
GetDoubleClickTime
CreateMenu
DestroyCursor
GetComboBoxInfo
DrawIcon
GetWindowRgn
HideCaret
InvertRect
GetWindowLongW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
IsWindowEnabled
GetFocus
SetFocus
GetDlgCtrlID
CheckDlgButton
GetSystemMenu
GetDlgItem
ShowWindow
RemoveMenu
EnableMenuItem
GetWindowRect
RedrawWindow
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
SetWindowPos
GetSystemMetrics
MoveWindow
MessageBoxW
GetSubMenu
GetMenuState
GetMenuStringW
IntersectRect
InvalidateRgn
PostThreadMessageW
UnhookWindowsHookEx
InflateRect
CopyRect
FillRect
GetSysColor
ScreenToClient
EnableWindow
IsWindow
RegisterWindowMessageW
SystemParametersInfoW
OffsetRect
MessageBeep
IsZoomed
PostQuitMessage
PostMessageW
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
IsWindowVisible
GetMessageW
MapDialogRect
GetWindow
SetWindowContextHelpId
RegisterClipboardFormatW
InvalidateRect
CopyAcceleratorTableW
ReleaseCapture
SetCapture
PtInRect
CharNextW
GetIconInfo
SetWindowLongPtrA
IsDialogMessageW
DestroyMenu
MonitorFromPoint
PeekMessageW
GetKeyState
GetWindowThreadProcessId
MonitorFromWindow
SetActiveWindow
OpenClipboard
GetMonitorInfoW
CloseClipboard
EmptyClipboard
SetClipboardData
SetForegroundWindow
CopyImage
DefWindowProcW
CreateWindowExW
SendMessageW
GetWindowLongPtrW
LoadStringW
GetActiveWindow
GetClassInfoW
RegisterClassW
LoadIconW
LoadCursorW
GetDesktopWindow
GetParent
LoadImageW
GetDC
GetWindowDC
GetClientRect
ReleaseDC
DispatchMessageW
TranslateMessage
GetWindowLongPtrA

gdi32

GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
SaveDC
SelectClipRgn
ExtSelectClipRgn
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
GetObjectType
GetClipBox
ExcludeClipRect
RestoreDC
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
CreateSolidBrush
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetTextMetricsW
CombineRgn
PatBlt
SetPixel
Escape
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateBitmap
GetRgnBox
CreateRectRgnIndirect
GetTextColor
GetDeviceCaps
GetTextExtentPoint32W
CreateFontIndirectW
BitBlt
CreateCompatibleBitmap
SelectObject
CreateDIBSection
SetDIBColorTable
CreateCompatibleDC
GetBkColor
CreateDCW
CopyMetaFileW
GetStockObject
RealizePalette
SetPixelV
GetTextFaceW
GetNearestPaletteIndex
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
SetPaletteEntries
ExtFloodFill
GetPaletteEntries
RoundRect
EnumFontFamiliesExW
GetSystemPaletteEntries
Rectangle
Polyline
Polygon
CreatePolygonRgn
Ellipse
CreateEllipticRgn
DPtoLP
SetRectRgn
GetMapMode
OffsetRgn
CreateRoundRectRgn
DeleteDC
DeleteObject
GetObjectW
CreatePalette
SelectPalette
StretchBlt

advapi32

RegDeleteKeyW
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW

shell32

DragFinish
DragQueryFileW
SHGetFileInfoW
SHGetDesktopFolder
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHAppBarMessage
ShellExecuteW

ole32

OleDuplicateData
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoDisconnectObject
DoDragDrop
OleGetClipboard
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CreateStreamOnHGlobal
CoUninitialize
CoTaskMemAlloc
CoRegisterMessageFilter
ReleaseStgMedium
OleIsCurrentClipboard
OleFlushClipboard
CoTaskMemFree
CoRevokeClassObject
CoGetClassObject
CoInitialize
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoInitializeEx
CLSIDFromString
CLSIDFromProgID
CoCreateInstance

oleaut32

VarBstrFromDate
VariantTimeToSystemTime
VariantClear
VariantChangeType
VariantCopy
SysAllocString
OleCreateFontIndirect
SysFreeString
LoadTypeLi
VariantInit
SystemTimeToVariantTime
SysAllocStringLen
SysStringLen
SafeArrayDestroy

comctl32

ImageList_AddMasked
ImageList_Create
ImageList_Destroy
InitCommonControlsEx

shlwapi

PathRemoveFileSpecW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathIsDirectoryW
StrFormatKBSizeW

msimg32

AlphaBlend
TransparentBlt

uxtheme

DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetWindowTheme
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
IsAppThemed
GetThemeSysColor
GetCurrentThemeName

oledlg

OleUIBusyW

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdiplusStartup
GdipGetImageHeight
GdipGetImagePaletteSize
GdipCloneImage
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipAlloc
GdipDrawImageRectI
GdipDisposeImage
GdipGetImagePixelFormat
GdipFree
GdipBitmapLockBits
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipGetImagePalette
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdiplusShutdown
GdipSetCompositingMode

ws2_32

WSACleanup

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 547KB - Virtual size: 547KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3b8e8997042e7b01db5e618f54a0ea4f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

msimg32

uxtheme

oledlg

gdiplus

ws2_32

oleacc

imm32

winmm

winspool.drv

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 547KB - Virtual size: 547KB

.data Size: 31KB - Virtual size: 61KB

.pdata Size: 89KB - Virtual size: 89KB

_RDATA Size: 512B - Virtual size: 148B

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 59KB - Virtual size: 58KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 547KB - Virtual size: 547KB

.data
Size: 31KB - Virtual size: 61KB

.pdata
Size: 89KB - Virtual size: 89KB

_RDATA
Size: 512B - Virtual size: 148B

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 59KB - Virtual size: 58KB