fe217e4afe9fca15534ec9a2a618f8a3ad90f81dd00ae5391de894f9330b90e1

Sharing

Copy URL Twitter E-mail

General

Target

fe217e4afe9fca15534ec9a2a618f8a3ad90f81dd00ae5391de894f9330b90e1
Size

1.4MB
MD5

876eeecd3d700f1b691ec8318d277745
SHA1

b5730ebdb1c860b489b687ad77e845de385e7402
SHA256

fe217e4afe9fca15534ec9a2a618f8a3ad90f81dd00ae5391de894f9330b90e1
SHA512

f70bbdede5122d2ab6c16a32802d0c2565a3cb6493dc681034171b9f6bd8481fca8fa298137959cef5d6e5a03bb11894b0be156899a9ab63013241dcf31e4280
SSDEEP

24576:mfVml4wY32QJsJw+0b+N3/P0Y0DcPCx6gvfjpN4mTQsf:S93wq+N0YEcP32v4mT1

Score

N/A

Malware Config

Signatures

Files

fe217e4afe9fca15534ec9a2a618f8a3ad90f81dd00ae5391de894f9330b90e1
.exe windows x86

4e842cd0b98d16ed4e032b0d61784bb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

kernel32

SetUnhandledExceptionFilter
GetModuleFileNameA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
HeapSize
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
HeapCreate
HeapDestroy
VirtualQuery
GetSystemInfo
VirtualProtect
GetCPInfo
GetStartupInfoW
TerminateProcess
GetModuleHandleA
HeapReAlloc
ExitProcess
UnhandledExceptionFilter
InterlockedCompareExchange
LoadLibraryA
LCMapStringW
LCMapStringA
GetUserDefaultLCID
Sleep
GetVersionExA
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetSystemTime
GetFileType
GetStartupInfoA
GetStringTypeA
GetStringTypeW
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
IsBadCodePtr
GetOEMCP
SetStdHandle
CompareStringA
SetEnvironmentVariableA
CreateFileA
GetLocaleInfoW
VirtualFree
VirtualAlloc
IsBadWritePtr
FlushFileBuffers
WriteFile
ReadFile
CreateFileW
GetFileSize
SetFilePointer
WideCharToMultiByte
GetStringTypeExW
SetEvent
ResetEvent
CreateEventW
ReleaseSemaphore
CreateSemaphoreW
IsBadReadPtr
CompareStringW
MulDiv
GetCurrentProcessId
GetProfileStringW
GlobalFree
LockResource
GlobalAlloc
GlobalUnlock
GlobalLock
lstrcatW
LoadLibraryW
GetProcAddress
lstrcmpW
lstrcpynA
HeapFree
GetCurrentDirectoryW
lstrlenA
FindFirstFileW
GetFullPathNameW
SetLastError
FindClose
lstrcpynW
lstrcmpiW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
GetModuleFileNameW
SetHandleCount
GetModuleHandleW
lstrcpyW
ReleaseMutex
GetCurrentThreadId
GetLastError
CreateMutexW
WaitForSingleObject
CloseHandle
GetProcessHeap
HeapAlloc
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
lstrlenW
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
RaiseException
SetEndOfFile
GetCommandLineW
RtlUnwind

user32

SetScrollPos
ScrollWindowEx
UnionRect
InvalidateRgn
CharUpperW
DestroyCursor
SetMenuDefaultItem
IsDlgButtonChecked
GetWindowTextLengthW
GetWindowTextW
CreateDialogParamW
CheckDlgButton
EndDialog
CreateIconIndirect
DestroyIcon
SendDlgItemMessageW
KillTimer
SetTimer
GetClassNameW
ModifyMenuW
InflateRect
WindowFromPoint
GetSysColorBrush
FrameRect
GetWindowThreadProcessId
RegisterWindowMessageW
SetRectEmpty
SetCapture
GetWindowDC
DrawIconEx
GetSystemMenu
GetMenuDefaultItem
GetCapture
ClientToScreen
ReleaseCapture
DefFrameProcW
SystemParametersInfoW
SetRect
BeginPaint
DrawTextW
EndPaint
GetSysColor
GetDlgItem
GetNextDlgTabItem
DialogBoxParamW
CharLowerW
BringWindowToTop
GetMessagePos
GetScrollInfo
GetDesktopWindow
GetForegroundWindow
GetKeyState
GetClassLongW
SetClassLongW
EnableMenuItem
DeleteMenu
SetMenuItemInfoW
InsertMenuW
IsMenu
IsDialogMessageW
LoadBitmapW
GetActiveWindow
UpdateWindow
SetWindowPlacement
GetWindowPlacement
IsIconic
SetMenu
PostMessageW
SetWindowsHookExW
CallNextHookEx
UnhookWindowsHookEx
GetMenuStringW
DrawMenuBar
RemoveMenu
MapWindowPoints
TrackPopupMenuEx
CreatePopupMenu
GetMenuItemCount
AppendMenuW
GetMenuItemInfoW
MessageBeep
LoadStringA
PostQuitMessage
DefMDIChildProcW
SetFocus
GetFocus
IsChild
ReleaseDC
GetDC
GetSubMenu
InvertRect
EnableWindow
GetCursorPos
DrawFocusRect
GetDlgItemTextW
SetDlgItemTextW
MessageBoxA
TrackPopupMenu
GetSystemMetrics
DrawEdge
MonitorFromPoint
GetMonitorInfoW
FillRect
GetAsyncKeyState
EqualRect
SetClipboardData
GetClipboardData
OpenClipboard
EmptyClipboard
CloseClipboard
IsClipboardFormatAvailable
SubtractRect
ScrollDC
MoveWindow
CheckMenuItem
SetDlgItemInt
TranslateMDISysAccel
GetCursor
OffsetRect
PtInRect
CopyRect
EnableScrollBar
SetScrollInfo
AdjustWindowRectEx
GetDlgCtrlID
GetParent
RedrawWindow
IsWindowVisible
ScreenToClient
GetClientRect
GetWindowRect
DestroyMenu
SetWindowPos
IsZoomed
GetMenu
SetWindowTextW
GetWindowLongW
CallWindowProcW
TranslateAcceleratorW
DrawFrameControl
wsprintfW
DefWindowProcW
FindWindowW
SetForegroundWindow
CharNextW
SendMessageW
LoadMenuW
LoadAcceleratorsW
GetClassInfoExW
LoadImageW
RegisterClassExW
DestroyWindow
CreateWindowExW
MessageBoxW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
IsWindow
GetWindow
IsWindowEnabled
ShowWindow
SetWindowLongW
wvsprintfW
InvalidateRect
LoadCursorW
SetCursor
IntersectRect
IsRectEmpty
LoadStringW
UnregisterClassW
GetMenuItemID

gdi32

SetTextColor
ExtTextOutW
SetBkColor
GetViewportOrgEx
CreateFontIndirectW
SetBrushOrgEx
CreatePatternBrush
CreateBitmap
PatBlt
CreateCompatibleBitmap
BitBlt
SaveDC
RestoreDC
SetStretchBltMode
StretchBlt
GetDeviceCaps
GdiFlush
RectVisible
ExcludeClipRect
IntersectClipRect
CreateRectRgnIndirect
CreateSolidBrush
SelectClipRgn
CombineRgn
GetPixel
GetTextExtentPoint32W
SetBkMode
TextOutW
CreatePen
LineTo
SetWindowOrgEx
GetMapMode
GetViewportExtEx
GetWindowExtEx
GetEnhMetaFileHeader
CreateEnhMetaFileW
CloseEnhMetaFile
OffsetWindowOrgEx
PlayEnhMetaFile
DeleteEnhMetaFile
SetPixel
Ellipse
UnrealizeObject
GetTextMetricsW
Rectangle
SetDIBColorTable
StartDocW
AbortDoc
EndDoc
CreateDCW
GetCurrentObject
EndPage
StartPage
ResetDCW
CreateCompatibleDC
GetObjectW
CreateDIBSection
SelectObject
CreateFontW
GetStockObject
DeleteDC
SetViewportOrgEx
SetWindowExtEx
SetViewportExtEx
LPtoDP
SetMapMode
DPtoLP
MoveToEx
DeleteObject

winspool.drv

GetPrinterW
OpenPrinterW
ClosePrinter

comdlg32

ChooseColorW
PrintDlgW
PageSetupDlgW
GetOpenFileNameW
GetSaveFileNameW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
RegDeleteKeyW

shell32

SHGetDesktopFolder
DragAcceptFiles
ShellExecuteW
SHGetFolderPathW
SHCreateDirectoryExW
DragQueryFileW
DragFinish

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

VarUI4FromStr
OleLoadPicturePath

shlwapi

PathIsDirectoryW
PathCanonicalizeW
PathRemoveFileSpecW
PathAppendW
PathFileExistsW
PathIsRelativeW
PathRenameExtensionW

comctl32

InitCommonControlsEx
ImageList_Destroy
ord8
ImageList_GetImageCount
ImageList_Create
ImageList_DrawIndirect
ImageList_LoadImageW
ImageList_AddMasked
ImageList_Draw
_TrackMouseEvent
CreateStatusWindowW

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 200KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4e842cd0b98d16ed4e032b0d61784bb5

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 160KB - Virtual size: 158KB

.data Size: 12KB - Virtual size: 20KB

.rsrc Size: 200KB - Virtual size: 198KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 160KB - Virtual size: 158KB

.data
Size: 12KB - Virtual size: 20KB

.rsrc
Size: 200KB - Virtual size: 198KB