d41b7a5d4896f7a53e422a104020af4a3ea76ae0b87d3a82be550f5c3011476b

Sharing

Copy URL Twitter E-mail

General

Target

d41b7a5d4896f7a53e422a104020af4a3ea76ae0b87d3a82be550f5c3011476b
Size

2.5MB
MD5

7bd847377d3ad27f8a7aaee33998783d
SHA1

a815ee5d712193080127902096882b23a6a88dc8
SHA256

d41b7a5d4896f7a53e422a104020af4a3ea76ae0b87d3a82be550f5c3011476b
SHA512

18d52074a6cfabba94b9ad8222264071dc01785cf495a71fba7c21d0954c4c44ad4179aa31b4b778b4912376002556266fda8fc608b28244d14303761733edcd
SSDEEP

49152:d43PrW5axbX8X/0BlsNFNxUdi2vEwbPHOHIF2jux5:u3PUaxbcwkNaDvEwbfqIF

Score

N/A

Malware Config

Signatures

Files

d41b7a5d4896f7a53e422a104020af4a3ea76ae0b87d3a82be550f5c3011476b
.exe windows x86

84e837a07b7a28fd32f7b1d943d3e03a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

GetProcessHeap
CompareStringW
GetModuleHandleA
MulDiv
LocalFree
FormatMessageW
FreeResource
GetVersionExA
lstrcmpW
LoadLibraryW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
WritePrivateProfileStringW
GlobalFlags
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
LocalReAlloc
SetEndOfFile
lstrlenA
SetErrorMode
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
GetLocaleInfoA
LCMapStringW
LCMapStringA
HeapReAlloc
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
RtlUnwind
InitializeCriticalSectionAndSpinCount
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RaiseException
HeapAlloc
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapFree
HeapCreate
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetStartupInfoW
WideCharToMultiByte
CopyFileW
IsDebuggerPresent
lstrcatW
lstrlenW
CreateProcessA
SetFileAttributesA
Process32Next
Process32First
CreateToolhelp32Snapshot
MultiByteToWideChar
WinExec
GetTempFileNameA
GetTempPathA
WaitForSingleObject
GetModuleHandleW
FreeLibrary
GetProcAddress
LoadLibraryA
Sleep
DeleteFileA
GetModuleFileNameW
CreateMutexW
ExitProcess
GetCurrentThread
SetThreadPriority
GetCurrentProcess
SetPriorityClass
GetModuleFileNameA
GetVersionExW
GetNativeSystemInfo
WriteFile
SetFilePointer
ReadFile
VirtualFree
VirtualAlloc
GlobalLock
GlobalAlloc
LoadResource
LockResource
SizeofResource
FindResourceW
GlobalFree
GlobalUnlock
CloseHandle
DeviceIoControl
GetLastError
CreateFileA
LocalAlloc

user32

DestroyMenu
UnregisterClassW
GetSysColorBrush
SetCursor
GetMessageW
TranslateMessage
ValidateRect
GetCursorPos
WindowFromPoint
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
DispatchMessageW
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CopyRect
PtInRect
GetMenu
SystemParametersInfoA
GetWindowPlacement
UnhookWindowsHookEx
GetFocus
ShowWindow
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
GetWindowTextW
GetWindow
SetFocus
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
GetDlgItem
GetNextDlgTabItem
EndDialog
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
MessageBoxW
GetSysColor
EndPaint
BeginPaint
ReleaseDC
GetDC
AdjustWindowRectEx
ClientToScreen
ScreenToClient
DrawIcon
IsIconic
LoadIconW
wsprintfW
GetSystemMetrics
DestroyWindow
CreateWindowExA
RegisterClassA
LoadCursorW
DefWindowProcW
SetParent
GetWindowThreadProcessId
EnumWindows
PostMessageW
KillTimer
SendMessageW
IsWindow
InvalidateRect
GetWindowRect
GetParent
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
EnableWindow
CloseWindow
GetClientRect
SetWindowPos
SystemParametersInfoW
LoadImageW
PostQuitMessage
EqualRect
SetTimer
CallWindowProcW

gdi32

GetDeviceCaps
GetStockObject
CreateBitmap
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
BitBlt
CreateCompatibleBitmap
SetViewportOrgEx
CreateCompatibleDC
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
SelectObject
GetObjectW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
OpenServiceA
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegOpenKeyA
ControlService
OpenSCManagerA
StartServiceA
CreateServiceA
DeleteService
CloseServiceHandle

shell32

SHChangeNotify
SHGetSpecialFolderPathW
SHGetSpecialFolderPathA
ShellExecuteA

comctl32

_TrackMouseEvent

shlwapi

StrCatW
StrRChrW
PathFileExistsA
StrChrW
PathFindExtensionW
PathFindFileNameW
StrCpyW

gdiplus

GdipFree
GdipDisposeImage
GdipAlloc
GdipCloneImage
GdipCreateBitmapFromStream
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageI
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipGetImageWidth
GdipDrawImageRectRect
GdiplusStartup
GdipGetImageHeight

wininet

InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
DeleteUrlCacheEntryA

iphlpapi

GetAdaptersInfo

ole32

CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

VariantInit
VariantChangeType
VariantClear

Sections

.text
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84e837a07b7a28fd32f7b1d943d3e03a

Headers

DLL Characteristics

File Characteristics

Imports

version

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

gdiplus

wininet

iphlpapi

ole32

oleaut32

Sections

.text Size: 228KB - Virtual size: 227KB

.rdata Size: 45KB - Virtual size: 44KB

.data Size: 11KB - Virtual size: 59KB

.rsrc Size: 2.3MB - Virtual size: 2.3MB

.reloc Size: 36KB - Virtual size: 36KB

.text
Size: 228KB - Virtual size: 227KB

.rdata
Size: 45KB - Virtual size: 44KB

.data
Size: 11KB - Virtual size: 59KB

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

.reloc
Size: 36KB - Virtual size: 36KB