8a7d45e112685bb5f768b94c4774c1c94e242c94e7cadd1c64bd5da8f59f525a

Sharing

Copy URL Twitter E-mail

General

Target

8a7d45e112685bb5f768b94c4774c1c94e242c94e7cadd1c64bd5da8f59f525a
Size

3.7MB
MD5

8b626959ffe47c8192e48786afe8f915
SHA1

d7536433bd24548d2d4795cc52af78ca992eb354
SHA256

8a7d45e112685bb5f768b94c4774c1c94e242c94e7cadd1c64bd5da8f59f525a
SHA512

aa60d5163f7f0026100b7fb6e2fd7596e36b66da89c9004dbadbb02be8564cfb9efcace3ea4361178e2bbcac7a2acc731dbe863cfb2dde8438419147c1097bf9
SSDEEP

49152:FKuRSKXQuESOVd1UFd9WR3avLSY2Dym0kWqUBL+2F3vOPdVnpdq:FKVCfFdAKjSThWqUR+sCdVn

Score

N/A

Malware Config

Signatures

Files

8a7d45e112685bb5f768b94c4774c1c94e242c94e7cadd1c64bd5da8f59f525a
.exe windows x86

c837e3f9beafb2ea9a946bea79577b14

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
CreateFileMappingW
FindResourceW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetExitCodeThread
GetCurrentProcessId
CreateMutexW
Process32NextW
SetLastError
OpenProcess
GetCurrentProcess
Process32FirstW
CreateToolhelp32Snapshot
GetCurrentThreadId
GetProcAddress
DeleteCriticalSection
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetModuleHandleW
SetEvent
CreateEventW
SuspendThread
VirtualProtect
GetThreadPriority
OpenThread
VirtualAlloc
FlushInstructionCache
SetThreadPriority
InitializeCriticalSection
VirtualQuery
GetThreadContext
TerminateThread
FindClose
FindNextFileW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
FindFirstFileW
GetModuleFileNameA
lstrlenA
SetEnvironmentVariableA
SetEndOfFile
ReadConsoleW
WriteConsoleW
SetStdHandle
LoadLibraryA
FreeEnvironmentStringsW
lstrcmpW
MapViewOfFile
OpenFileMappingW
TerminateProcess
DeleteFileW
WritePrivateProfileStringW
GetLocalTime
LocalFree
FormatMessageW
GetLastError
CloseHandle
WaitForSingleObject
CreateProcessW
CreateDirectoryW
GetTempPathW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcatW
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
Sleep
GetEnvironmentStringsW
QueryPerformanceCounter
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetFileType
GetTimeZoneInformation
HeapSize
GetOEMCP
GetACP
IsValidCodePage
GetStdHandle
GetCurrentThread
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetStartupInfoW
ReadProcessMemory
GetCommandLineW
GetSystemTime
WinExec
GetVersionExW
GetSystemDirectoryW
LocalAlloc
FreeResource
LoadResource
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
UnhandledExceptionFilter
SizeofResource
OutputDebugStringA
GetCPInfo
RtlUnwind
GetSystemTimeAsFileTime
LoadLibraryExW
AreFileApisANSI
GetModuleHandleExW
lstrcpyW
ExitProcess
IsProcessorFeaturePresent
ResumeThread
ExitThread
CreateThread
SetUnhandledExceptionFilter
UnmapViewOfFile
WaitForMultipleObjects
InterlockedIncrement
GlobalMemoryStatus
InterlockedDecrement
WriteFile
SetFilePointer
GlobalSize
LoadLibraryW
GetSystemInfo
DeviceIoControl
CreateFileA
HeapFree
GetProcessHeap
HeapAlloc
ReadFile
GetFileSize
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrcmpA
CreateFileW
GetStringTypeW
EncodePointer
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringW
IsDebuggerPresent
GetTickCount
HeapReAlloc

user32

OffsetRect
DefMDIChildProcW
SetWindowTextW
SystemParametersInfoW
CopyRect
PtInRect
IsWindow
SetWindowLongW
MessageBoxW
LoadIconW
LoadCursorW
DispatchMessageW
TranslateMessage
PeekMessageW
DefFrameProcW
SetParent
MoveWindow
ScreenToClient
GetMessageExtraInfo
mouse_event
PostQuitMessage
ShowWindow
GetWindowLongW
CharLowerBuffW
SetWindowPos
GetSystemMetrics
FindWindowW
SetCursorPos
GetWindowRect
wsprintfW
GetClientRect
IsIconic
BringWindowToTop
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
DestroyWindow
SetRectEmpty
GetMessageW
PostMessageW
GetCursorPos
EnumWindows
GetParent
GetClassNameW
IsWindowVisible
UpdateWindow
KillTimer
SetTimer
GetDesktopWindow
SendMessageW
RegisterWindowMessageW
DefWindowProcW
CreateWindowExW
RegisterClassExW
wsprintfA
MonitorFromRect
GetMonitorInfoW
EqualRect
OpenClipboard
GetClipboardData
CloseClipboard
EmptyClipboard
SetClipboardData
IsChild
GetWindow
ClientToScreen

advapi32

RegOpenKeyExA
RegEnumKeyExA
GetUserNameW
RegOpenKeyW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
RegEnumValueW
RegQueryInfoKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegDeleteValueW
RegQueryValueExW
RegSetValueW
RegCreateKeyW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExA
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
SetFileSecurityW
LookupAccountNameW
GetFileSecurityW
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
GetAce
EqualSid
AddAce
GetSecurityDescriptorControl
SetSecurityDescriptorControl

shell32

ShellExecuteW
CommandLineToArgvW
SHFileOperationW
SHGetFileInfoW
Shell_NotifyIconW
ord51
SHGetSpecialFolderPathW
SHCreateDirectoryExW

ole32

CoGetClassObject
CoSetProxyBlanket
CoInitializeSecurity
CoCreateGuid
CoInitialize
CoCreateInstance
CoUninitialize
OleUninitialize
OleInitialize
OleSetContainedObject

oleaut32

SysStringLen
SysFreeString
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayCreateVector
VariantClear
SafeArrayAccessData
SysAllocString

shlwapi

StrStrIW
PathFileExistsW
SHDeleteKeyW
StrStrA
StrStrIA
StrChrIW

ws2_32

connect
ntohs
WSAStartup
socket
gethostbyname
WSAGetLastError
htons
send
select
closesocket
recv
WSACleanup
setsockopt
getsockopt
__WSAFDIsSet
ioctlsocket
gethostname
inet_addr

iphlpapi

GetAdaptersInfo

wininet

HttpAddRequestHeadersW
FindFirstUrlCacheEntryW
FindNextUrlCacheEntryW
HttpSendRequestW
HttpOpenRequestW
DeleteUrlCacheEntryW
InternetOpenW
InternetSetOptionW
InternetOpenUrlW
HttpQueryInfoW
InternetReadFile
InternetCloseHandle
InternetConnectW
InternetCrackUrlW

psapi

GetModuleBaseNameW
GetModuleFileNameExW

urlmon

CoInternetSetFeatureEnabled
CoInternetGetSession
ObtainUserAgentString
UrlMkSetSessionOption
URLDownloadToFileW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

gdui

GetPluginByName
WindowManager_Attach
MatchString
Plugin_IsValid
Plugin_TrackPopupMenu
Plugin_EndMenu
Plugin_TrackPopupMenu2
DUI_Init
ReleaseStyle
DUI_UnLoad
LoadStyleZipMemoryW
Plugin_Redraw
LoadStyleW

d3d9

Direct3DCreate9

winmm

timeEndPeriod
timeKillEvent
waveOutSetVolume

setupapi

SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW

crypt32

CertFreeCertificateContext
CryptDecodeObject
CryptQueryObject
CryptMsgGetParam
CertFindCertificateInStore
CertCloseStore
CryptMsgClose
CertGetNameStringW

wintrust

WinVerifyTrust
CryptCATCatalogInfoFromContext
CryptCATAdminEnumCatalogFromHash
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminReleaseContext
CryptCATAdminAcquireContext
CryptCATAdminReleaseCatalogContext

rpcrt4

UuidFromStringW
UuidCompare

oleacc

LresultFromObject

Exports

Exports

SetBusinessData

Sections

.text
Size: 740KB - Virtual size: 740KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 211KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c837e3f9beafb2ea9a946bea79577b14

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

ws2_32

iphlpapi

wininet

psapi

urlmon

version

gdui

d3d9

winmm

setupapi

crypt32

wintrust

rpcrt4

oleacc

Exports

Exports

Sections

.text Size: 740KB - Virtual size: 740KB

.rdata Size: 116KB - Virtual size: 116KB

.data Size: 211KB - Virtual size: 280KB

.rsrc Size: 2.6MB - Virtual size: 2.6MB

.reloc Size: 41KB - Virtual size: 41KB

.text
Size: 740KB - Virtual size: 740KB

.rdata
Size: 116KB - Virtual size: 116KB

.data
Size: 211KB - Virtual size: 280KB

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

.reloc
Size: 41KB - Virtual size: 41KB