f56c6810871ce412233c484ac79e741d20db61f9eea04175289db8e1622f4ca0

Sharing

Copy URL Twitter E-mail

General

Target

f56c6810871ce412233c484ac79e741d20db61f9eea04175289db8e1622f4ca0
Size

1.4MB
MD5

d7aeacf12eb09a4a536c8c76310a98bd
SHA1

a25799b0dc684e2bd30cee1b930c450c6f4357a1
SHA256

f56c6810871ce412233c484ac79e741d20db61f9eea04175289db8e1622f4ca0
SHA512

ef20e67e44b0b687a76ff13b41dca27d86e07d2f5a3c91346b77e3591b2bde77d12d254c66e85270232c86ce7fcc31a7faee45b28c1ea7347b61166dc8865c2b
SSDEEP

24576:yOTBjBRVDIWx92ooE7CLYM5tq2vOiOz3g0JHTYXcvDa/I+O2b2H7:Np1PiE7CLYKPgzjJHTyc27O2b2H7

Score

N/A

Malware Config

Signatures

Files

f56c6810871ce412233c484ac79e741d20db61f9eea04175289db8e1622f4ca0
.exe windows x86

2e96b728112369712dee9092cf6568f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

IsBadReadPtr
GlobalUnlock
GlobalLock
GlobalAlloc
GetLocalTime
SystemTimeToFileTime
FileTimeToSystemTime
GetFileTime
GetSystemTime
GetTimeFormatW
GetDateFormatW
ReadFile
GlobalFree
SetFilePointer
WriteFile
FlushFileBuffers
IsBadWritePtr
VirtualAlloc
VirtualFree
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapSize
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
WideCharToMultiByte
HeapDestroy
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualQuery
VirtualProtect
GetCPInfo
GetStartupInfoW
CreateThread
ExitThread
TerminateProcess
GetModuleHandleA
GetProcAddress
HeapReAlloc
RtlUnwind
ExitProcess
InterlockedCompareExchange
LoadLibraryA
LCMapStringW
LCMapStringA
GetUserDefaultLCID
Sleep
GetVersionExA
GetStringTypeExW
RemoveDirectoryW
SetFileAttributesW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
DeleteFileW
GetSystemInfo
ReleaseSemaphore
CreateSemaphoreW
FindNextFileW
CreateEventW
lstrcatW
CopyFileW
GetStringTypeA
GetStringTypeW
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
IsBadCodePtr
GetOEMCP
SetStdHandle
GetFileSizeEx
MulDiv
SetEvent
ResetEvent
ResumeThread
GetExitCodeThread
LockResource
CreateFileW
GetFileSize
CompareStringA
SetEnvironmentVariableA
CreateFileA
CompareStringW
lstrcmpW
SetErrorMode
GetFileAttributesW
lstrcpynA
HeapFree
GetTempPathW
GetCurrentDirectoryW
lstrlenA
FindFirstFileW
GetFullPathNameW
SetLastError
FindClose
lstrcpynW
lstrcmpiW
LoadLibraryExW
GetFileType
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
GetLastError
GetModuleFileNameW
GetModuleHandleW
lstrcpyW
InterlockedIncrement
ReleaseMutex
GetCurrentThreadId
CreateMutexW
WaitForSingleObject
CloseHandle
GetProcessHeap
HeapAlloc
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
lstrlenW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetLocaleInfoW
SetEndOfFile
HeapCreate
GetStartupInfoA

user32

ScrollWindowEx
GetSubMenu
SetMenuDefaultItem
EnableMenuItem
ModifyMenuW
SetMenuItemInfoW
SetRect
RedrawWindow
EnableWindow
DrawEdge
GetSystemMetrics
AdjustWindowRectEx
GetMenu
KillTimer
SetTimer
GetAsyncKeyState
SendDlgItemMessageW
GetSysColor
DrawFocusRect
FillRect
GetDC
DrawTextW
GetWindowTextLengthW
GetWindowTextW
EndDialog
SetWindowsHookExW
CallNextHookEx
ClientToScreen
SetScrollPos
GetDCEx
GetWindowDC
ReleaseDC
UnhookWindowsHookEx
InflateRect
CreateDialogParamW
EndPaint
BeginPaint
GetCursorPos
ReleaseCapture
EqualRect
SetCapture
ScreenToClient
GetCapture
GetDlgItem
GetNextDlgTabItem
IsChild
GetDlgCtrlID
GetClassNameW
GetForegroundWindow
GetScrollInfo
SetScrollInfo
GetMessagePos
IsIconic
GetAncestor
TrackPopupMenu
WindowFromPoint
CheckMenuItem
CharUpperW
IsCharAlphaW
ScrollDC
RemoveMenu
PtInRect
MonitorFromPoint
GetMonitorInfoW
MapWindowPoints
TrackPopupMenuEx
CreatePopupMenu
GetMenuItemCount
GetMenuItemInfoW
MessageBeep
LoadStringA
AnimateWindow
UnionRect
MessageBoxA
SetClipboardData
GetClipboardData
OpenClipboard
EmptyClipboard
CloseClipboard
IsClipboardFormatAvailable
FrameRect
SetFocus
PostQuitMessage
GetActiveWindow
DialogBoxParamW
CallWindowProcW
CharLowerW
SetWindowPos
GetKeyState
GetFocus
AppendMenuW
DestroyMenu
SystemParametersInfoW
MoveWindow
IntersectRect
OffsetRect
IsRectEmpty
CopyRect
SetCursor
IsDialogMessageW
GetParent
IsWindowVisible
UpdateWindow
GetWindowPlacement
GetClientRect
IsZoomed
GetSystemMenu
SetMenu
SetWindowTextW
PostMessageW
GetWindowLongW
InvalidateRect
GetWindowRect
TranslateAcceleratorW
wsprintfW
DefWindowProcW
FindWindowW
SetForegroundWindow
CharNextW
LoadMenuW
LoadAcceleratorsW
SendMessageW
CreateWindowExW
GetClassInfoExW
LoadCursorW
LoadImageW
RegisterClassExW
DestroyWindow
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
LoadStringW
IsWindow
GetWindow
IsWindowEnabled
ShowWindow
SetWindowLongW
wvsprintfW
MessageBoxW
UnregisterClassW
SetRectEmpty
SetDlgItemInt

gdi32

GetViewportExtEx
GetWindowExtEx
GetPixel
SetPixel
SetBrushOrgEx
SetStretchBltMode
StretchBlt
IntersectClipRect
Ellipse
Rectangle
LPtoDP
SetDIBColorTable
CreatePen
MoveToEx
LineTo
GdiFlush
CreateDIBSection
RestoreDC
SaveDC
TextOutW
SetTextCharacterExtra
GetTextExtentPoint32W
GetMapMode
SetMapMode
SetWindowOrgEx
SetViewportOrgEx
SetBkMode
SetTextColor
GetStockObject
CreateFontIndirectW
GetObjectW
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
CreateSolidBrush
ExcludeClipRect
SelectClipRgn
DeleteDC
SetBkColor
ExtTextOutW
PatBlt
DeleteObject
RectVisible

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW

shell32

SHGetSpecialFolderLocation
SHGetDesktopFolder
ShellExecuteW
SHCreateDirectoryExW
SHBrowseForFolderW
SHGetPathFromIDListW
DragQueryFileW
DragFinish
SHGetFileInfoW
SHGetFolderPathW

ole32

OleUninitialize
CoTaskMemFree
CoCreateInstance
OleInitialize
RegisterDragDrop
CoTaskMemRealloc
RevokeDragDrop
ReleaseStgMedium
CreateStreamOnHGlobal
CoTaskMemAlloc

oleaut32

OleLoadPicture
VarUI4FromStr

shlwapi

PathIsDirectoryW
PathCanonicalizeW
PathAppendW
StrRetToBufW
PathIsRelativeW
PathFileExistsW

comctl32

ImageList_Destroy
ImageList_Create
ImageList_Add
_TrackMouseEvent
InitCommonControlsEx
ImageList_Draw
ImageList_DragLeave
ImageList_EndDrag
ImageList_DragShowNolock
ImageList_DragEnter
ImageList_BeginDrag
ImageList_DragMove
ImageList_LoadImageW
ImageList_GetIconSize
ImageList_SetBkColor

Sections

.text
Size: 928KB - Virtual size: 924KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 156KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 352KB - Virtual size: 351KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2e96b728112369712dee9092cf6568f3

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

Sections

.text Size: 928KB - Virtual size: 924KB

.rdata Size: 156KB - Virtual size: 152KB

.data Size: 12KB - Virtual size: 20KB

.rsrc Size: 352KB - Virtual size: 351KB

.text
Size: 928KB - Virtual size: 924KB

.rdata
Size: 156KB - Virtual size: 152KB

.data
Size: 12KB - Virtual size: 20KB

.rsrc
Size: 352KB - Virtual size: 351KB