29d8367e0f9d5d5cbaf9478f9b33e60b58be9e72a8f72e448788821464492350

Sharing

Copy URL Twitter E-mail

General

Target

29d8367e0f9d5d5cbaf9478f9b33e60b58be9e72a8f72e448788821464492350
Size

2.3MB
MD5

5f1a77788f275d3d11b497608f4ec128
SHA1

248eca6b329609f98df0f654f2eac8fa8428c369
SHA256

29d8367e0f9d5d5cbaf9478f9b33e60b58be9e72a8f72e448788821464492350
SHA512

299588006a471708457a03558e68c360e40728233a71c1919e66e28b75f47f682a07e01389487e4fb54296e4ed235ff526ece58766c5fb46d8774e921c1492b2
SSDEEP

49152:xU/Ercra5BB3Djcp086VNWgkDjo6/gTC5p1OGO5I91:+/ErzLcKxNWgkDjoEqUfFO5I9

Score

N/A

Malware Config

Signatures

Files

29d8367e0f9d5d5cbaf9478f9b33e60b58be9e72a8f72e448788821464492350
.exe windows x86

9b07d6c6bd37f226a1f03ba99efc7284

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

libcrypto-1_1

ERR_get_error
ERR_error_string
RSA_size
RSA_public_decrypt
RSA_free
RSA_private_encrypt
OPENSSL_init_crypto
PEM_read_bio_RSA_PUBKEY
BIO_new_mem_buf
PEM_read_bio_RSAPrivateKey

kernel32

WaitForSingleObjectEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetOEMCP
IsValidCodePage
FindFirstFileExW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
GetDriveTypeW
LCMapStringW
GetStringTypeW
ResetEvent
GetStdHandle
VirtualQuery
VirtualAlloc
QueryPerformanceFrequency
HeapQueryInformation
GetFileType
SetStdHandle
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetTimeZoneInformation
GetCommandLineW
GetCommandLineA
RtlUnwind
OutputDebugStringW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WriteConsoleW
ExitProcess
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
InterlockedDecrement
SizeofResource
LockResource
LoadResource
FindResourceW
SetEvent
DeleteFileW
Sleep
DuplicateHandle
GetCurrentProcess
CloseHandle
GetStartupInfoW
MultiByteToWideChar
ReadFile
ResumeThread
WaitForSingleObject
HeapFree
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
HeapSize
GetLastError
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
lstrcpyW
CreateSemaphoreW
OpenProcess
TerminateProcess
GetModuleFileNameW
GetPrivateProfileStringW
CreateToolhelp32Snapshot
FindResourceExW
GetProfileIntW
GetTickCount
SearchPathW
GetWindowsDirectoryW
GetTempPathW
GetTempFileNameW
SetErrorMode
GetFileTime
GetFileSizeEx
GetFileAttributesExW
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
Process32FirstW
Process32NextW
WideCharToMultiByte
GlobalGetAtomNameW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GlobalFlags
VerifyVersionInfoW
VerSetConditionMask
LocalAlloc
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileW
FileTimeToLocalFileTime
GetPrivateProfileIntW
lstrcmpA
GetCurrentThread
GetThreadLocale
MoveFileW
lstrcmpiW
UnlockFile
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
SuspendThread
SetThreadPriority
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetSystemDirectoryW
EncodePointer
GetCurrentThreadId
FormatMessageW
MulDiv
LocalFree
GlobalSize
GlobalAlloc
GetCurrentProcessId
LoadLibraryW
GlobalFree
GlobalUnlock
GlobalLock
GetProcAddress
GetModuleHandleW
GetModuleHandleA
FreeResource
SetLastError
FindClose
FindFirstFileW
OutputDebugStringA
AllocConsole
CreateEventW
DeleteFileA
GetFileSize
FlushFileBuffers
CreateFileA
GetModuleFileNameA
GetACP
InitializeCriticalSection
SetFileTime
WriteFile
LocalFileTimeToFileTime
GetCurrentDirectoryW
SystemTimeToFileTime
SetFilePointer
CreateFileW
WritePrivateProfileStringW
CopyFileW
GetVersionExW
GetSystemInfo
CreateDirectoryW
GetFileAttributesW

user32

ModifyMenuW
CharUpperBuffW
RegisterClipboardFormatW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
SetClassLongW
LockWindowUpdate
BringWindowToTop
SetParent
SetCursorPos
DestroyAcceleratorTable
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawIconEx
DrawFocusRect
DrawFrameControl
DrawEdge
LoadImageW
DestroyIcon
GetNextDlgGroupItem
SetRect
InvalidateRgn
CopyAcceleratorTableW
CharNextW
WaitMessage
CopyImage
MonitorFromPoint
UnionRect
EnableScrollBar
UpdateLayeredWindow
IsRectEmpty
SetMenuDefaultItem
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
WindowFromPoint
MessageBeep
SetWindowRgn
DeleteMenu
KillTimer
SetTimer
ReleaseCapture
SetCapture
GetAsyncKeyState
IsZoomed
TrackMouseEvent
IntersectRect
RealChildWindowFromPoint
EnumDisplayMonitors
LoadCursorW
GetSysColorBrush
SetLayeredWindowAttributes
SystemParametersInfoW
InflateRect
GetMenuItemInfoW
TranslateAcceleratorW
OffsetRect
SetRectEmpty
SendDlgItemMessageA
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
SetCursor
ShowOwnedPopups
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
CharUpperW
GetMessageW
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetWindow
GetTopWindow
GetClassLongW
SetWindowLongW
GetMenuItemID
GetMenuItemCount
InsertMenuW
RemoveMenu
InsertMenuItemW
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
UnpackDDElParam
ReuseDDElParam
CopyIcon
FrameRect
GetIconInfo
HideCaret
InvertRect
GetDoubleClickTime
IsCharLowerW
MapVirtualKeyExW
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
RedrawWindow
ValidateRect
SubtractRect
CreateMenu
DestroyCursor
GetComboBoxInfo
GetWindowRgn
DestroyMenu
GetDlgCtrlID
SetFocus
GetKeyState
GetCapture
GetMenu
SetMenu
TrackPopupMenu
GetForegroundWindow
SetForegroundWindow
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetDC
GetWindowDC
ReleaseDC
BeginPaint
EndPaint
PostThreadMessageW
ShowWindow
EnableWindow
UnregisterClassW
MessageBoxW
PostMessageW
LoadIconW
GetSystemMenu
AppendMenuW
SendMessageW
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
PeekMessageW
TranslateMessage
DispatchMessageW
wsprintfW
DrawStateW
UpdateWindow
InvalidateRect
FillRect
ClientToScreen
GetClassNameW
LoadBitmapW
IsWindow
DestroyWindow
CreateDialogIndirectParamW
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
IsWindowEnabled
SetActiveWindow
GetWindowLongW
GetDesktopWindow
GetParent
GetWindowThreadProcessId
ScreenToClient
GetSysColor
GetLastActivePopup
GetMenuStringW
GetMenuState
GetSubMenu
GetFocus
GetWindowRect
GetCursorPos
PtInRect
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
RegisterWindowMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
IsMenu
IsChild
SetWindowPos
GetWindowPlacement
SetWindowPlacement
IsWindowVisible

gdi32

ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
PatBlt
CreateFontIndirectW
GetTextExtentPoint32W
Escape
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetTextMetricsW
CombineRgn
GetMapMode
SetRectRgn
DPtoLP
CreateRoundRectRgn
CreateDIBSection
GetBkColor
GetTextColor
GetRgnBox
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
OffsetRgn
Rectangle
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
LPtoDP
RoundRect
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
GetViewportOrgEx
SetPixelV
GetTextFaceW
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
DeleteDC
CreateSolidBrush
DeleteObject
GetStockObject
GetObjectW
CopyMetaFileW
CreateDCW
GetDeviceCaps
BitBlt
CreateCompatibleBitmap
PtVisible
CreateBitmap

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegSetValueExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

shell32

ShellExecuteW
SHChangeNotify
SHGetSpecialFolderPathW
SHCreateDirectoryExA
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
SHBrowseForFolderW
DragFinish
DragQueryFileW

comctl32

InitCommonControlsEx

shlwapi

PathRemoveFileSpecW
PathFileExistsW
PathRemoveFileSpecA
PathCombineA
PathFileExistsA
PathIsUNCW
PathStripToRootW
PathFindExtensionW
UrlUnescapeW
PathFindFileNameW
StrFormatKBSizeW

uxtheme

GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeText
DrawThemeParentBackground
IsAppThemed

ole32

CoRegisterMessageFilter
CoRevokeClassObject
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleInitialize
OleLockRunning
CoInitializeEx
OleUninitialize
CoFreeUnusedLibraries
CreateStreamOnHGlobal
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc

oleaut32

VariantInit
VariantClear
VariantChangeType
SysStringLen
LoadTypeLi
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SysAllocStringLen
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
SysFreeString
SysAllocString

oledlg

OleUIBusyW

kdui32

_FreeSkin@0
_OpenSkinW@20
_GetCtrlBase@4

gdiplus

GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipDrawImageI
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipFree
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipAlloc
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdiplusShutdown
GdipBitmapUnlockBits
GdipSetInterpolationMode

ws2_32

WSACleanup
WSAStartup
gethostbyname
inet_addr
recv
send
connect
socket
htons
closesocket

rpcrt4

UuidCreateSequential

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

wininet

HttpOpenRequestW
HttpSendRequestW
HttpQueryInfoW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetSetStatusCallbackW
InternetConnectW
InternetCloseHandle
InternetOpenW
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetGetLastResponseInfoW

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 348KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b07d6c6bd37f226a1f03ba99efc7284

Headers

DLL Characteristics

File Characteristics

Imports

libcrypto-1_1

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

kdui32

gdiplus

ws2_32

rpcrt4

oleacc

wininet

imm32

winmm

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 348KB - Virtual size: 347KB

.data Size: 23KB - Virtual size: 48KB

.gfids Size: 107KB - Virtual size: 106KB

.giats Size: 512B - Virtual size: 16B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 256KB - Virtual size: 255KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 348KB - Virtual size: 347KB

.data
Size: 23KB - Virtual size: 48KB

.gfids
Size: 107KB - Virtual size: 106KB

.giats
Size: 512B - Virtual size: 16B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 256KB - Virtual size: 255KB