815b78350e26e5f20e4526bcb9aa52ef098a14b53b480494f8ce650b1a648e41

Sharing

Copy URL Twitter E-mail

General

Target

815b78350e26e5f20e4526bcb9aa52ef098a14b53b480494f8ce650b1a648e41
Size

2.2MB
MD5

6a2a6d4538c1917135acff9111e17f55
SHA1

db0eb2cf2b21e3019bd132f2b00bf81690a04ecc
SHA256

815b78350e26e5f20e4526bcb9aa52ef098a14b53b480494f8ce650b1a648e41
SHA512

5ed01cb7171e26cc00965cbaa3ce2a12a56d48f114c5dee6fdad7cc8bd478e620085beb540384022cafd7ecaf530994740e1f501c595361f6c2ac6bcd1eac9cf
SSDEEP

49152:jeJc35axbX8X/0BlsNFNxUdi2vEwbPHOHIUPXM9:jeaJaxbcwkNaDvEwbfqIP

Score

N/A

Malware Config

Signatures

Files

815b78350e26e5f20e4526bcb9aa52ef098a14b53b480494f8ce650b1a648e41
.exe windows x86

d4c063187f809186ce88730fce69ccc7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

CompareStringW
GetModuleHandleA
MulDiv
LocalFree
FormatMessageW
FreeResource
GetVersionExA
lstrcmpW
LoadLibraryW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
WritePrivateProfileStringW
FlushFileBuffers
LocalAlloc
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
LocalReAlloc
lstrlenA
SetErrorMode
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
GetLocaleInfoA
LCMapStringW
LCMapStringA
HeapReAlloc
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
RtlUnwind
InitializeCriticalSectionAndSpinCount
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RaiseException
HeapAlloc
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapFree
HeapCreate
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetStartupInfoW
WideCharToMultiByte
IsDebuggerPresent
lstrcatW
lstrlenW
Process32Next
Process32First
CreateToolhelp32Snapshot
MultiByteToWideChar
WinExec
GetTempFileNameA
GetTempPathA
DeleteFileW
WaitForSingleObject
CreateProcessW
CreateFileW
GetTempPathW
GetModuleHandleW
CopyFileW
FreeLibrary
SetFileAttributesA
GetProcAddress
LoadLibraryA
Sleep
DeleteFileA
GetModuleFileNameW
CreateMutexW
ExitProcess
GetCurrentThread
SetThreadPriority
GetCurrentProcess
SetPriorityClass
GetModuleFileNameA
GetVersionExW
GetNativeSystemInfo
WriteFile
SetFilePointer
VirtualFree
VirtualAlloc
GlobalLock
GlobalAlloc
LoadResource
LockResource
SizeofResource
FindResourceW
GlobalFree
GlobalUnlock
CloseHandle
DeviceIoControl
GetLastError
CreateFileA
GlobalFlags

user32

DestroyMenu
UnregisterClassW
GetSysColorBrush
SetCursor
GetMessageW
TranslateMessage
ValidateRect
GetCursorPos
WindowFromPoint
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
DispatchMessageW
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CopyRect
PtInRect
GetMenu
SystemParametersInfoA
GetWindowPlacement
UnhookWindowsHookEx
GetFocus
ShowWindow
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
GetWindowTextW
GetWindow
SetFocus
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
GetDlgItem
GetNextDlgTabItem
EndDialog
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
MessageBoxW
GetSysColor
EndPaint
BeginPaint
ReleaseDC
GetDC
AdjustWindowRectEx
ClientToScreen
ScreenToClient
DrawIcon
IsIconic
LoadIconW
wsprintfW
GetSystemMetrics
DestroyWindow
CreateWindowExA
RegisterClassA
LoadCursorW
DefWindowProcW
SetParent
GetWindowThreadProcessId
EnumWindows
PostMessageW
KillTimer
SendMessageW
IsWindow
InvalidateRect
GetWindowRect
GetParent
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
EnableWindow
CloseWindow
GetClientRect
SetWindowPos
SystemParametersInfoW
LoadImageW
PostQuitMessage
EqualRect
SetTimer
CallWindowProcW

gdi32

GetDeviceCaps
GetStockObject
CreateBitmap
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
BitBlt
CreateCompatibleBitmap
SetViewportOrgEx
CreateCompatibleDC
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
SelectObject
GetObjectW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegSetValueExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
OpenServiceA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegOpenKeyA
ControlService
OpenSCManagerA
StartServiceA
CreateServiceA
DeleteService
CloseServiceHandle

shell32

SHChangeNotify
SHGetSpecialFolderPathW
SHGetSpecialFolderPathA
ShellExecuteA

comctl32

_TrackMouseEvent

shlwapi

StrCatW
StrRChrW
PathFileExistsA
StrChrW
PathFindExtensionW
PathFindFileNameW
StrCpyW

gdiplus

GdipFree
GdipDisposeImage
GdipAlloc
GdipCloneImage
GdipCreateBitmapFromStream
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageI
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipGetImageWidth
GdipDrawImageRectRect
GdiplusStartup
GdipGetImageHeight

wininet

InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle

iphlpapi

GetAdaptersInfo

ole32

CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

VariantInit
VariantChangeType
VariantClear

Sections

.text
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d4c063187f809186ce88730fce69ccc7

Headers

DLL Characteristics

File Characteristics

Imports

version

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

gdiplus

wininet

iphlpapi

ole32

oleaut32

Sections

.text Size: 171KB - Virtual size: 171KB

.rdata Size: 42KB - Virtual size: 41KB

.data Size: 11KB - Virtual size: 59KB

.rsrc Size: 2.0MB - Virtual size: 2.0MB

.reloc Size: 35KB - Virtual size: 35KB

.text
Size: 171KB - Virtual size: 171KB

.rdata
Size: 42KB - Virtual size: 41KB

.data
Size: 11KB - Virtual size: 59KB

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

.reloc
Size: 35KB - Virtual size: 35KB