7ab9549730aa633f4e0c216352b0d9a0b978769bba3420d9138b78c47249a785

Sharing

Copy URL

Twitter E-mail

General

Target

7ab9549730aa633f4e0c216352b0d9a0b978769bba3420d9138b78c47249a785
Size

982KB
MD5

57545df3d4bbab92cc5e23511164017e
SHA1

fc4f4921ea39b42fbd8c3dc8f93a9eb8dbf91052
SHA256

7ab9549730aa633f4e0c216352b0d9a0b978769bba3420d9138b78c47249a785
SHA512

bcc2d43052330953821bb08a62290cc002c7b6bf388cbb58a1c1c91db850fefe1a5399be7fc95568f534f2ef8f4269b2b34925121b0bb89ca67f69baf9a2b74f
SSDEEP

24576:R6rUCcM8GOnnapQuiy6VBnV8LhT9c4Y3RsnHT:YpcMxLABVohTqr3R6HT

Score

N/A

Malware Config

Signatures

Files

7ab9549730aa633f4e0c216352b0d9a0b978769bba3420d9138b78c47249a785
.exe windows x86

34a819112e194c135c5c17c7828e65d6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
RemoveDirectoryW
GetVersionExW
GetProcAddress
GetCurrentDirectoryW
ExpandEnvironmentStringsW
GetLogicalDriveStringsW
GetFileAttributesW
GetFileType
GetFileAttributesExW
SetFileTime
SetEndOfFile
SetFileAttributesW
CopyFileW
MoveFileW
CreateDirectoryW
ReadDirectoryChangesW
ExitThread
CreateEventW
SetEvent
WaitForSingleObject
ResetEvent
InitializeCriticalSectionAndSpinCount
Sleep
TryEnterCriticalSection
CreateEventA
CreateMutexA
ReleaseMutex
CreateMutexW
WaitForMultipleObjects
CreateSemaphoreW
ReleaseSemaphore
GetExitCodeThread
TerminateThread
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetConsoleCP
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStartupInfoA
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
FindNextFileW
GetStdHandle
HeapCreate
ExitProcess
HeapSize
GetModuleHandleA
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
LCMapStringW
LCMapStringA
GetCPInfo
GetStartupInfoW
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
FlushFileBuffers
GetUserDefaultLCID
FindFirstFileW
FindClose
GetDriveTypeW
GetTempPathW
GetLongPathNameW
lstrcpynW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
SetStdHandle
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
SetEnvironmentVariableA
FileTimeToLocalFileTime
SetFilePointer
ReadFile
FileTimeToSystemTime
GetTimeFormatW
GetDateFormatW
GetLocaleInfoW
GlobalAlloc
GetConsoleMode
GlobalLock
GlobalUnlock
GetTickCount
lstrlenA
OutputDebugStringW
DebugBreak
LoadLibraryW
CreateFileW
WriteFile
WideCharToMultiByte
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
FreeLibrary
InitializeCriticalSection
GetLastError
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
SetLastError
RaiseException
DeleteCriticalSection
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
CompareStringW
lstrcmpiW
lstrcpyW
lstrlenW
GetModuleHandleW
MultiByteToWideChar
CreateThread
GetModuleFileNameA
CloseHandle

user32

GetScrollInfo
GetScrollPos
DestroyCursor
IsWindowEnabled
SetScrollInfo
SetWindowRgn
GetSysColor
SystemParametersInfoW
GetCursorPos
SetCapture
UpdateWindow
EndPaint
BeginPaint
FillRect
DrawFrameControl
GetSysColorBrush
IntersectRect
RegisterClassW
GetKeyState
SetWindowsHookExW
UnhookWindowsHookEx
FrameRect
GetFocus
EqualRect
GetMessagePos
GetAsyncKeyState
wvsprintfW
GetDlgCtrlID
InflateRect
GetCapture
ReleaseCapture
ScreenToClient
ClientToScreen
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
SetScrollPos
CallWindowProcW
GetClassInfoExW
RegisterClassExW
DrawFocusRect
IsRectEmpty
RedrawWindow
CallNextHookEx
PtInRect
CopyRect
DialogBoxParamW
SetRectEmpty
SetCursor
SetFocus
GetForegroundWindow
IsIconic
GetComboBoxInfo
PostQuitMessage
InvalidateRect
SetTimer
GetActiveWindow
EnableWindow
KillTimer
IsDialogMessageW
CreateDialogParamW
DestroyWindow
DefWindowProcW
MessageBoxW
ShowWindow
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
FindWindowW
ReleaseDC
GetDC
CharNextW
CreateWindowExW
DrawTextW
OffsetRect
SetWindowLongW
GetWindowTextLengthW
GetWindowTextW
GetClassNameW
LoadCursorW
GetWindow
GetWindowRect
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetClientRect
MapWindowPoints
SetWindowPos
SendMessageW
GetDlgItem
GetParent
EndDialog
SetWindowTextW
GetSystemMetrics
LoadImageW
RegisterWindowMessageW
LoadStringW
LoadStringA
IsWindow
PostMessageW
RegisterClipboardFormatW
UnregisterClassA

gdi32

SetViewportOrgEx
GetTextExtentPoint32W
MoveToEx
LineTo
CombineRgn
CreateRectRgn
CreateCompatibleDC
CreatePolygonRgn
SetWindowOrgEx
BitBlt
CreatePen
CreateSolidBrush
ExtTextOutW
RoundRect
GetClipBox
OffsetWindowOrgEx
SetTextColor
SetBkMode
CreateFontIndirectW
GetStockObject
SelectObject
DeleteDC
DeleteObject
GetObjectW
SaveDC
CreateCompatibleBitmap
SetBkColor
RestoreDC

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegQueryInfoKeyW
RegOpenKeyExW
RegQueryValueExW
RegDeleteKeyW
RegDeleteValueW
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
RegCloseKey
RegSetValueExW
RegEnumKeyExW
RegCreateKeyExW

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFolderPathW
SHCreateDirectoryExW
ShellExecuteW

ole32

DoDragDrop
RevokeDragDrop
ReleaseStgMedium
RegisterDragDrop
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
OleDuplicateData

oleaut32

VarUI4FromStr

shlwapi

PathIsSystemFolderW
PathIsDirectoryW
PathFindExtensionW
PathIsURLW
PathIsRootW
PathIsNetworkPathW
PathAddBackslashW
PathStripToRootW

comctl32

_TrackMouseEvent
ImageList_LoadImageW
ImageList_GetIconSize
InitCommonControlsEx
ImageList_DrawEx

msimg32

AlphaBlend
GradientFill

uxtheme

DrawThemeText
CloseThemeData
OpenThemeData
DrawThemeBackground

Sections

.text
Size: 693KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

34a819112e194c135c5c17c7828e65d6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

uxtheme

Sections

.text Size: 693KB - Virtual size: 692KB

.rdata Size: 137KB - Virtual size: 136KB

.data Size: 17KB - Virtual size: 27KB

.rsrc Size: 97KB - Virtual size: 96KB

.reloc Size: 37KB - Virtual size: 36KB

.text
Size: 693KB - Virtual size: 692KB

.rdata
Size: 137KB - Virtual size: 136KB

.data
Size: 17KB - Virtual size: 27KB

.rsrc
Size: 97KB - Virtual size: 96KB

.reloc
Size: 37KB - Virtual size: 36KB