daf4067e201aedf9fae7577c4f9ee65035b51895cb733acc679bad7c35d1966c

Sharing

Copy URL Twitter E-mail

General

Target

daf4067e201aedf9fae7577c4f9ee65035b51895cb733acc679bad7c35d1966c
Size

2.6MB
MD5

e738ac594eb15d23a98e8f60adf79bfb
SHA1

44497e5d11f007a751d3c9210f586c6da12f7318
SHA256

daf4067e201aedf9fae7577c4f9ee65035b51895cb733acc679bad7c35d1966c
SHA512

b37eb9fb0155a56093b1abb49146472b55ea09b4819f9e95a659b5d20c5c0bdae7b0fe43433ed045d1842886a9f770c11d0c01150c83b1df3c9fb0bb5fd90e29
SSDEEP

49152:gHmXk5axbX8X/0BlsNFNxUdi2vEwbPHOHIM2cGMB:gHmqaxbcwkNaDvEwbfqISG

Score

N/A

Malware Config

Signatures

Files

daf4067e201aedf9fae7577c4f9ee65035b51895cb733acc679bad7c35d1966c
.exe windows x86

80ca98e147782249afe248d0f115f8ca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

kernel32

CompareStringW
GetModuleHandleA
MulDiv
LocalFree
FormatMessageW
FreeResource
GetVersionExA
lstrcmpW
LoadLibraryW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
WritePrivateProfileStringW
GlobalFlags
LocalAlloc
GlobalHandle
InitializeCriticalSection
LocalReAlloc
lstrlenA
GetProcessHeap
SetErrorMode
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
GetLocaleInfoA
LCMapStringW
LCMapStringA
HeapReAlloc
SetEndOfFile
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
RtlUnwind
InitializeCriticalSectionAndSpinCount
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RaiseException
HeapAlloc
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapFree
HeapCreate
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetStartupInfoW
WideCharToMultiByte
IsDebuggerPresent
lstrcatW
lstrlenW
CreateProcessA
Process32Next
Process32First
CreateToolhelp32Snapshot
MultiByteToWideChar
WinExec
GetTempFileNameA
GetTempPathA
WaitForSingleObject
CreateProcessW
CreateFileW
GetTempPathW
GetModuleHandleW
CopyFileW
FreeLibrary
GetProcAddress
LoadLibraryA
Sleep
DeleteFileA
SetFileAttributesA
GetModuleFileNameW
CreateMutexW
ExitProcess
GetCurrentThread
SetThreadPriority
GetCurrentProcess
SetPriorityClass
GetModuleFileNameA
GetVersionExW
GetNativeSystemInfo
WriteFile
SetFilePointer
ReadFile
VirtualFree
VirtualAlloc
GlobalLock
GlobalAlloc
LoadResource
LockResource
SizeofResource
FindResourceW
GlobalFree
GlobalUnlock
CloseHandle
DeviceIoControl
GetLastError
CreateFileA
GlobalReAlloc

user32

DestroyMenu
UnregisterClassW
GetSysColorBrush
SetCursor
GetMessageW
TranslateMessage
ValidateRect
GetCursorPos
WindowFromPoint
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
DispatchMessageW
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CopyRect
PtInRect
CallWindowProcW
GetMenu
SystemParametersInfoA
GetWindowPlacement
UnhookWindowsHookEx
GetFocus
ShowWindow
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
GetWindowTextW
GetWindow
SetFocus
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
GetDlgItem
GetNextDlgTabItem
EndDialog
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
RegisterClipboardFormatW
MessageBoxW
GetSysColor
UpdateWindow
EndPaint
BeginPaint
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
DrawIcon
IsIconic
LoadIconW
wsprintfW
GetSystemMetrics
DestroyWindow
CreateWindowExA
RegisterClassA
LoadCursorW
DefWindowProcW
SetParent
GetWindowThreadProcessId
EnumWindows
PostMessageW
KillTimer
SendMessageW
IsWindow
InvalidateRect
GetWindowRect
GetParent
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
EnableWindow
CloseWindow
GetClientRect
SetWindowPos
SystemParametersInfoW
LoadImageW
PostQuitMessage
EqualRect
SetTimer

gdi32

SetViewportOrgEx
GetDeviceCaps
GetStockObject
CreateBitmap
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
CreateCompatibleDC
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
SelectObject
GetObjectW
BitBlt
CreateCompatibleBitmap
OffsetViewportOrgEx

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegSetValueExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
OpenServiceA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegOpenKeyA
ControlService
OpenSCManagerA
StartServiceA
CreateServiceA
DeleteService
CloseServiceHandle

shell32

SHChangeNotify
SHGetSpecialFolderPathW
SHGetSpecialFolderPathA
ShellExecuteA

comctl32

_TrackMouseEvent

shlwapi

StrCatW
StrRChrW
PathFileExistsA
StrChrW
PathFindExtensionW
PathFindFileNameW
StrCpyW

gdiplus

GdipFree
GdipAlloc
GdipCloneImage
GdipCreateBitmapFromStream
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageI
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipGetImageWidth
GdipGetImageHeight
GdipDrawImageRectRect
GdiplusStartup
GdipDisposeImage

wininet

InternetOpenUrlA
DeleteUrlCacheEntryA
InternetCloseHandle
InternetOpenA
InternetReadFile

iphlpapi

GetAdaptersInfo

ole32

CoCreateInstance
CoInitializeEx
CreateStreamOnHGlobal
CoUninitialize
CoInitialize

oleaut32

VariantInit
VariantChangeType
VariantClear

Sections

.text
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80ca98e147782249afe248d0f115f8ca

Headers

DLL Characteristics

File Characteristics

Imports

version

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

gdiplus

wininet

iphlpapi

ole32

oleaut32

Sections

.text Size: 224KB - Virtual size: 224KB

.rdata Size: 46KB - Virtual size: 45KB

.data Size: 11KB - Virtual size: 59KB

.rsrc Size: 2.3MB - Virtual size: 2.3MB

.reloc Size: 41KB - Virtual size: 41KB

.text
Size: 224KB - Virtual size: 224KB

.rdata
Size: 46KB - Virtual size: 45KB

.data
Size: 11KB - Virtual size: 59KB

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

.reloc
Size: 41KB - Virtual size: 41KB