60749a13850ee49357aad74109ba3fad0a3cd0f7

Sharing

Copy URL Twitter E-mail

General

Target

60749a13850ee49357aad74109ba3fad0a3cd0f7
Size

851KB
MD5

2e84705fed5711b1ecd8690d14dbf2da
SHA1

60749a13850ee49357aad74109ba3fad0a3cd0f7
SHA256

b4e8cc584db27a8714fe3b34a54a15ded5bc6a855ba8dda8e2dd4cc8137b8639
SHA512

0cae464be2947e9d79f4c1720a8bc41a75ca230da5e7eb5aa98657868856821127670641b6f6bd201d9d80275bea5a73ec15ca2300dba106ff6daa7db337595c
SSDEEP

12288:mr/JnGx/7hDWV+jgr9loU4cTVWrdSMlUTuWQr2Mt3rNgLecIdHDouFOWNCW:mr/tGB1Wsg3l/Tsp360KMtbyXgcukWx

Score

N/A

Malware Config

Signatures

Files

60749a13850ee49357aad74109ba3fad0a3cd0f7
.exe windows x86

6771a73db3d48d8719fc3bb82194883e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetPrivateProfileIntA
RtlUnwind
CloseHandle
SetEndOfFile
GetStringTypeA
HeapSize
ReleaseMutex
lstrlenA
SetEnvironmentVariableA
OutputDebugStringA
DeleteFileA
WriteFile
GetVersionExA
CopyFileA
lstrcpyA
VirtualAlloc
ExitProcess
GlobalLock
GetModuleHandleA
GetCurrentThreadId
GetTickCount
GetThreadLocale
GlobalUnlock
FindFirstFileA
GetCommandLineA
GetEnvironmentVariableA
TerminateProcess
FreeLibrary
LCMapStringA
UnlockFile
VirtualFree
HeapDestroy
GlobalFree
CreateDirectoryA
GetFileType
TlsFree
GetCPInfo
ExitThread
VirtualProtect
GetSystemDirectoryA
SizeofResource
LoadResource
GetStringTypeW
lstrcpynA
IsBadWritePtr
WideCharToMultiByte
GetFileAttributesA
GetStartupInfoA
TlsSetValue
GetSystemInfo
GetProcessVersion
LockFile
GetPrivateProfileSectionA
GlobalFindAtomA
MultiByteToWideChar
FindResourceA
GetModuleFileNameA
GetFileTime
MulDiv
GlobalDeleteAtom
CreateFileA
GlobalAddAtomA
GetVersion
GlobalReAlloc
lstrcatA
FreeEnvironmentStringsW
GetCurrentThread
IsBadReadPtr
CreateMutexA
DuplicateHandle
FileTimeToSystemTime
GetFullPathNameA
UnhandledExceptionFilter
IsBadCodePtr
lstrcmpiA
HeapReAlloc
GetCurrentDirectoryA
TlsAlloc
SetFilePointer
GetStdHandle
Sleep
LockResource
GetProcAddress
GlobalFlags
GetACP
SetHandleCount
CompareStringA
GetProfileStringA
GetLastError
GetOEMCP
GetDriveTypeA
FreeEnvironmentStringsA
LCMapStringW
InterlockedDecrement
LoadLibraryA
HeapFree
GlobalAlloc
lstrcmpA
FileTimeToLocalFileTime
GetCurrentProcess
lstrlenW
WritePrivateProfileStringA
TlsGetValue
GetEnvironmentStringsW
LocalAlloc
LeaveCriticalSection
GlobalHandle
GetShortPathNameA
GetFileSize
GetTimeZoneInformation
SetFileAttributesA
HeapCreate
FindClose
SetErrorMode
InitializeCriticalSection
ReadFile
FlushFileBuffers
InterlockedIncrement
GetTempPathA
LocalReAlloc
GetPrivateProfileStringA
GlobalGetAtomNameA
GetLocalTime
CompareStringW
SetStdHandle
GetVolumeInformationA
SetUnhandledExceptionFilter
LocalFree
GetEnvironmentStrings
EnterCriticalSection
DeleteCriticalSection
FormatMessageA
RaiseException
SetLastError

user32

BeginPaint
SetActiveWindow
ExcludeUpdateRgn
GetWindowRect
GetForegroundWindow
CharUpperA
GetWindowDC
IsDialogMessageA
PostThreadMessageA
DrawIcon
GetMenuCheckMarkDimensions
LoadImageA
GetIconInfo
GetTopWindow
SetWindowLongA
IsWindowVisible
CallNextHookEx
GetScrollInfo
LoadIconA
RemovePropA
SetWindowTextA
FillRect
MoveWindow
TranslateMessage
GetMessageTime
DrawEdge
PeekMessageA
UnhookWindowsHookEx
DestroyIcon
GetDC
DrawTextA
MapWindowPoints
GetParent
EndDialog
TrackPopupMenuEx
GetCursorPos
ShowCaret
DrawStateA
GetWindowTextLengthA
GetMenuState
CopyAcceleratorTableA
LoadStringA
DrawFocusRect
GetSubMenu
FrameRect
CreateDialogIndirectParamA
LoadBitmapA
SetScrollPos
ModifyMenuA
GetWindowPlacement
BringWindowToTop
GetCapture
LoadCursorA
IsIconic
GetSystemMetrics
InflateRect
GetNextDlgGroupItem
PtInRect
IsWindowEnabled
IntersectRect
ShowWindow
PostQuitMessage
MessageBeep
GetWindow
SetFocus
UpdateWindow
PostMessageA
GetMenuItemCount
SetCursor
GetMenuItemID
GetSysColor
GetClassLongA
GetKeyState
MapDialogRect
SetWindowPos
OffsetRect
GetWindowLongA
GetMessagePos
IsWindow
EnableMenuItem
GetLastActivePopup
IsChild
DestroyMenu
GrayStringA
GetDlgItem
DefWindowProcA
DrawIconEx
SetTimer
LoadMenuA
SetWindowContextHelpId
EndPaint
GetClientRect
GetMenu
SetRect
CharNextA
GetWindowTextA
CreateWindowExA
CreateIconIndirect
CallWindowProcA
WinHelpA
ScreenToClient
DestroyWindow
RegisterClassA
GetClassInfoA
SetMenuItemBitmaps
CopyRect
RedrawWindow
UnregisterClassA
RegisterClipboardFormatA
SetPropA
wsprintfA
GetActiveWindow
ValidateRect
HideCaret
CheckMenuItem
DispatchMessageA
SendMessageA
WindowFromPoint
SendDlgItemMessageA
GetDesktopWindow
TabbedTextOutA
ClientToScreen
KillTimer
GetMessageA
SetScrollInfo
SetForegroundWindow
InvalidateRect
DestroyCursor
DefDlgProcA
GetNextDlgTabItem
SetWindowsHookExA
IsWindowUnicode
ReleaseDC
GetDlgCtrlID
GetFocus
AdjustWindowRectEx
SetWindowRgn
GetSysColorBrush
wvsprintfA
GetPropA
GetClassNameA
MessageBoxA
SystemParametersInfoA
RegisterWindowMessageA
EnableWindow

gdi32

LineTo
CreateCompatibleBitmap
GetPixel
GetWindowExtEx
BitBlt
GetViewportExtEx
GetMapMode
CreateSolidBrush
CombineRgn
OffsetViewportOrgEx
SetViewportOrgEx
FillRgn
CreateRectRgn
GetClipBox
CreateRoundRectRgn
CreatePolygonRgn
SetTextColor
SetBkMode
SetMapMode
GetStockObject
LPtoDP
Escape
Rectangle
FrameRgn
CreateDIBitmap
IntersectClipRect
ScaleViewportExtEx
GetTextExtentPoint32A
CreateCompatibleDC
ScaleWindowExtEx
CreateBitmap
PtVisible
GetCurrentObject
SetPixel
DPtoLP
RestoreDC
CreatePen
DeleteDC
PatBlt
GetTextExtentPointA
SetWindowOrgEx
SetBkColor
SelectObject
DeleteObject
GetDeviceCaps
TextOutA
MoveToEx
CreateFontIndirectA
GetBkColor
GetObjectA
SetViewportExtEx
SetWindowExtEx
RectVisible
SaveDC
ExtTextOutA
GetTextColor
CreateFontA
SelectClipRgn

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA

advapi32

RegSetValueExA
RegOpenKeyA
RegCloseKey
RegQueryValueA
RegEnumKeyA
RegSetValueA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
AllocateLocallyUniqueId

shell32

SHBrowseForFolderA
ShellExecuteA
SHGetPathFromIDListA
ExtractIconA
ShellExecuteExA
SHGetFileInfoA

ole32

CLSIDFromString
StringFromCLSID
StgCreateDocfileOnILockBytes
CoDisconnectObject
CoTaskMemAlloc
CLSIDFromProgID
OleInitialize
CoTaskMemFree
StgOpenStorageOnILockBytes
CoCreateInstance
CoRevokeClassObject
OleIsCurrentClipboard
CoFreeUnusedLibraries
OleUninitialize
CoGetClassObject
OleRun
OleFlushClipboard
CoRegisterClassObject
CoInitialize
CreateILockBytesOnHGlobal
CoRegisterMessageFilter

oleaut32

GetErrorInfo
LoadTypeLi
SysAllocStringLen
VariantCopy
SysStringByteLen
SysAllocStringByteLen
VariantChangeType
SysStringLen
SysFreeString
SysAllocString
VariantTimeToSystemTime
VariantInit
OleCreateFontIndirect
VariantClear

comctl32

ImageList_SetBkColor
ImageList_AddMasked
ord17
ImageList_GetImageInfo
ImageList_Destroy
_TrackMouseEvent
ImageList_GetBkColor
ImageList_DrawIndirect
ImageList_Create
ImageList_LoadImageA

imm32

ImmAssociateContext

oledlg

ord8

dnsapi

DnsAcquireContextHandle_A

Sections

.text
Size: 492KB - Virtual size: 491KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.joke
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.poke
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.s1
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.s2
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.s4
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.s6
Size: - Virtual size: 172KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.s3
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6771a73db3d48d8719fc3bb82194883e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

imm32

oledlg

dnsapi

Sections

.text Size: 492KB - Virtual size: 491KB

.joke Size: 2KB - Virtual size: 2KB

.poke Size: 4KB - Virtual size: 4KB

.s1 Size: 53KB - Virtual size: 53KB

.s2 Size: 229KB - Virtual size: 229KB

.s4 Size: 512B - Virtual size: 2B

.s6 Size: - Virtual size: 172KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 824B

.s3 Size: 49KB - Virtual size: 49KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 492KB - Virtual size: 491KB

.joke
Size: 2KB - Virtual size: 2KB

.poke
Size: 4KB - Virtual size: 4KB

.s1
Size: 53KB - Virtual size: 53KB

.s2
Size: 229KB - Virtual size: 229KB

.s4
Size: 512B - Virtual size: 2B

.s6
Size: - Virtual size: 172KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 824B

.s3
Size: 49KB - Virtual size: 49KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 4KB