7d267a18828edbb3d87af729384585c6aee48bfee2370ef8e544c7bf26a29ed0

Sharing

Copy URL Twitter E-mail

General

Target

7d267a18828edbb3d87af729384585c6aee48bfee2370ef8e544c7bf26a29ed0
Size

812KB
MD5

922aa677246537828355cc9beb5fbbd5
SHA1

e268899241cb85deb167de709336770f0d0fd8b7
SHA256

7d267a18828edbb3d87af729384585c6aee48bfee2370ef8e544c7bf26a29ed0
SHA512

b347c5df79ef565886fc7edc6789a84059d8000d40e52ffd8c94dd982a5944c4a428806296f0119f4f7c5c13ee08af8aaaeb6cc49ee2acf99b895b07393fb2dd
SSDEEP

12288:tHbijNtqG0o2h8a6hWw9N/1y0GtTLfvlldVFWsCPultfD2gEKejFqZIFy1:icTo2quw9NC9z3VXprEKXIFy1

Score

N/A

Malware Config

Signatures

Files

7d267a18828edbb3d87af729384585c6aee48bfee2370ef8e544c7bf26a29ed0
.exe windows x86

8cf32362166ad53ea0b5e3860d2f9aab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wtsapi32

WTSUnRegisterSessionNotification
WTSRegisterSessionNotification

kernel32

SetFilePointer
CreateEventW
GetCommandLineW
GetSystemDirectoryW
FindFirstFileW
FindClose
CreateToolhelp32Snapshot
Process32FirstW
GetCurrentProcessId
Process32NextW
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
InterlockedCompareExchange
GetComputerNameA
LoadLibraryA
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
ResumeThread
CreateThread
GetStartupInfoW
RtlUnwind
GetModuleHandleA
ExitProcess
LCMapStringA
LCMapStringW
WriteFile
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetStdHandle
GetModuleFileNameA
HeapCreate
GetFileAttributesA
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FreeEnvironmentStringsA
WaitForSingleObject
GetTickCount
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
QueryPerformanceCounter
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetExitCodeProcess
CreateProcessA
SetStdHandle
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
TryEnterCriticalSection
IsBadReadPtr
Sleep
SetEvent
ResetEvent
TerminateThread
MulDiv
lstrcmpW
OutputDebugStringW
GetLocalTime
lstrlenW
LeaveCriticalSection
GlobalAlloc
EnterCriticalSection
FreeResource
lstrcmpiW
DeleteCriticalSection
InitializeCriticalSection
lstrlenA
GetFileSize
ReadFile
GlobalLock
MultiByteToWideChar
GlobalUnlock
CloseHandle
GlobalFree
CreateFileW
CopyFileW
GetWindowsDirectoryW
GetLastError
DeleteFileW
RaiseException
LoadLibraryExW
GetCurrentThreadId
FlushInstructionCache
GetVersionExW
GetSystemTime
GetCurrentProcess
CreateDirectoryW
SetLastError
InterlockedIncrement
WideCharToMultiByte
GetModuleFileNameW
InterlockedDecrement
FreeLibrary
LoadLibraryW
GetModuleHandleW
GetProcAddress
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
SetEnvironmentVariableA
GetCPInfo

user32

IntersectRect
BeginPaint
SetRectEmpty
EndPaint
GetCursorPos
OffsetRect
CallWindowProcW
ClientToScreen
GetWindowTextW
ScreenToClient
GetMonitorInfoW
KillTimer
DestroyIcon
MonitorFromWindow
SetCursor
SetWindowRgn
LoadIconW
PostThreadMessageW
DestroyAcceleratorTable
FillRect
GetWindowTextLengthW
PaintDesktop
GetWindowDC
CheckMenuItem
ModifyMenuW
AnimateWindow
LoadMenuW
PostQuitMessage
TrackPopupMenu
GetSubMenu
IsMenu
MonitorFromPoint
BringWindowToTop
PtInRect
SetRect
ReleaseCapture
UpdateLayeredWindow
EqualRect
DrawIconEx
SetFocus
SetTimer
GetSysColor
FindWindowExW
CreateAcceleratorTableW
UnregisterClassA
RedrawWindow
GetClassNameW
InvalidateRgn
GetDlgCtrlID
SetWindowTextW
GetNextDlgTabItem
FindWindowW
WindowFromPoint
DrawFrameControl
DrawTextW
IsWindowVisible
GetSystemMetrics
SetCapture
IsWindowEnabled
IsWindow
InflateRect
ShowWindow
DispatchMessageW
TranslateMessage
PostMessageW
GetMessageW
PeekMessageW
GetWindowLongW
CreateWindowExW
GetParent
SetActiveWindow
LoadBitmapW
SetWindowLongW
CopyRect
CharNextW
SendMessageW
SetForegroundWindow
GetDlgItem
GetWindow
AttachThreadInput
GetClassInfoExW
InvalidateRect
DestroyWindow
SetWindowPos
SystemParametersInfoW
IsDialogMessageW
GetForegroundWindow
LoadImageW
LoadCursorW
IsChild
GetWindowThreadProcessId
GetFocus
GetClientRect
MapWindowPoints
GetWindowRect
EnableWindow
GetDesktopWindow
RegisterClassExW
GetActiveWindow
DefWindowProcW
MoveWindow
ReleaseDC
GetDC
RegisterWindowMessageW
SendMessageA
DestroyMenu

gdi32

CreateBitmap
DeleteObject
GetStockObject
GetObjectW
SelectClipRgn
CreateRectRgn
CreateDIBSection
CreateCompatibleBitmap
CreateCompatibleDC
SetDeviceGammaRamp
GetDeviceGammaRamp
SetViewportOrgEx
ExtSelectClipRgn
GetViewportOrgEx
TextOutW
CreatePen
GetTextExtentPoint32W
RectInRegion
CreateRectRgnIndirect
CombineRgn
GetClipRgn
MoveToEx
OffsetRgn
LineTo
RoundRect
CreateRoundRectRgn
SetRectRgn
SetBkMode
CreateSolidBrush
GetDeviceCaps
SelectObject
RestoreDC
StretchBlt
CreateFontIndirectW
SetStretchBltMode
BitBlt
Rectangle
SaveDC
SetTextColor
SetBkColor
DeleteDC
ExtTextOutW
GetTextColor
GetCurrentObject

advapi32

RegCreateKeyExW
RegOpenKeyExW
GetUserNameA
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegCloseKey
RegQueryValueExW

shell32

SHCreateDirectoryExW
SHFileOperationW
Shell_NotifyIconW
ShellExecuteW
CommandLineToArgvW
SHGetSpecialFolderPathW

ole32

CoGetClassObject
OleInitialize
OleLockRunning
OleUninitialize
StringFromGUID2
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CreateStreamOnHGlobal
CoTaskMemAlloc
CoCreateGuid

oleaut32

VarBstrCmp
OleCreateFontIndirect
VariantInit
LoadTypeLi
SysAllocStringLen
VariantClear
LoadRegTypeLi
SysAllocString
SysStringByteLen
DispCallFunc
SysStringLen
VarUI4FromStr
SystemTimeToVariantTime
VarUdateFromDate
VariantTimeToSystemTime
SysFreeString

wininet

HttpQueryInfoA
InternetGetConnectedState
InternetOpenA
InternetOpenUrlW
InternetCloseHandle

shlwapi

StrToIntA
PathFileExistsW
PathAddBackslashW
StrToIntW
PathQuoteSpacesW
PathRemoveFileSpecW
PathAppendW

comctl32

_TrackMouseEvent

msimg32

AlphaBlend

gdiplus

GdipCreateBitmapFromScan0
GdipFillPath
GdipSetTextRenderingHint
GdipCreatePath
GdipSetPenMode
GdipSetPenDashStyle
GdipSetCompositingQuality
GdipAddPathArcI
GdipSetStringFormatTrimming
GdipSetPenStartCap
GdipSetStringFormatLineAlign
GdipSetPenEndCap
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipDeleteBrush
GdipDeleteStringFormat
GdipCloneBrush
GdipDrawPath
GdipCreateStringFormat
GdipFillRectangle
GdipResetWorldTransform
GdipMeasureString
GdipFillRectangleI
GdipClosePathFigure
GdipCreateFont
GdipDeletePen
GdipAddPathStringI
GdipAddPathRectangleI
GdipGetFontSize
GdipDrawLinesI
GdipDeleteFont
GdipSetSmoothingMode
GdipGraphicsClear
GdipCreateFontFromLogfontW
GdipSetClipPath
GdipDeletePath
GdipDrawImageI
GdipLoadImageFromFile
GdipCreatePen1
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipDisposeImage
GdipDeleteGraphics
GdipNewPrivateFontCollection
GdipCreateFromHDC
GdipGetImageWidth
GdipDeletePrivateFontCollection
GdipGetImageHeight
GdipCreateImageAttributes
GdipPrivateAddFontFile
GdipCreateBitmapFromStream
GdipDisposeImageAttributes
GdipGetFontCollectionFamilyCount
GdipSetInterpolationMode
GdipDrawImageRectRectI
GdipLoadImageFromStream
GdipSetImageAttributesColorMatrix
GdipCreateHBITMAPFromBitmap
GdipGetFontCollectionFamilyList
GdipCloneFontFamily
GdipImageRotateFlip
GdipDrawImageRectRect
GdiplusStartup
GdipAlloc
GdipDrawImagePointsRectI
GdipDrawImageRectI
GdipCloneImage
GdiplusShutdown
GdipFree
GdipDeleteFontFamily
GdipDrawLine
GdipDrawString
GdipGetImageGraphicsContext
GdipCreateSolidFill
GdipSetPixelOffsetMode
GdipDrawRectangleI
GdipAddPathPieI
GdipGetFamily

Sections

.text
Size: 388KB - Virtual size: 385KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 300KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8cf32362166ad53ea0b5e3860d2f9aab

Headers

File Characteristics

Imports

wtsapi32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

wininet

shlwapi

comctl32

msimg32

gdiplus

Sections

.text Size: 388KB - Virtual size: 385KB

.rdata Size: 100KB - Virtual size: 96KB

.data Size: 20KB - Virtual size: 30KB

.rsrc Size: 300KB - Virtual size: 296KB

.text
Size: 388KB - Virtual size: 385KB

.rdata
Size: 100KB - Virtual size: 96KB

.data
Size: 20KB - Virtual size: 30KB

.rsrc
Size: 300KB - Virtual size: 296KB