be6e2c118f128c51a40e0bfc6ede87a4e8af71738341a01c6deaa69388a73fcb

Sharing

Copy URL Twitter E-mail

General

Target

be6e2c118f128c51a40e0bfc6ede87a4e8af71738341a01c6deaa69388a73fcb
Size

3.7MB
MD5

2b6607defc83636dc6df9a48f03d88bb
SHA1

6998031fc984c66195c948cc6ac0627c8dc54e58
SHA256

be6e2c118f128c51a40e0bfc6ede87a4e8af71738341a01c6deaa69388a73fcb
SHA512

53a6e88f0e5907d090eeff1dbb1f375245b0fc22a2127cf8a939112dc12ad09e9aaf5e238869f833c317e4e9ddfe4ed94f1fccd53a35f7c3e1a4d1237a5325d4
SSDEEP

98304:oG3sj2ZNFs8dKCHZbcrJKwMor1Q2hLoIcNA5Gq:33sj2PJtY1Kwdr1Q2hUNAAq

Score

N/A

Malware Config

Signatures

Files

be6e2c118f128c51a40e0bfc6ede87a4e8af71738341a01c6deaa69388a73fcb
.exe windows x86

32b759146666e62d7707871bf5264bcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
GetCurrentDirectoryA
GetFileAttributesA
CreateDirectoryA
LocalFileTimeToFileTime
lstrcpyA
lstrlenA
SystemTimeToFileTime
ReadFile
SetFilePointer
GetCurrentProcessId
InterlockedDecrement
VirtualAlloc
VirtualProtect
VirtualFree
ExitProcess
GetTickCount
Sleep
lstrcatA
DeleteFileA
WriteFile
MulDiv
GlobalSize
GlobalLock
GlobalUnlock
SetLastError
MultiByteToWideChar
lstrlenW
LocalFree
FormatMessageA
GlobalAlloc
CopyFileA
GlobalFree
GetModuleFileNameW
FreeLibrary
GetVersionExA
lstrcmpW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
FreeResource
GetModuleFileNameA
lstrcmpA
MoveFileA
GetStringTypeExA
GetThreadLocale
lstrcmpiA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
InterlockedExchange
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetFileTime
GetTempFileNameA
GetDiskFreeSpaceA
GetModuleHandleW
InterlockedIncrement
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileSizeEx
SetErrorMode
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
VirtualQuery
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetConsoleCP
GetConsoleMode
HeapCreate
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GetProcAddress
GetModuleHandleA
LoadLibraryA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetSystemInfo
FlushViewOfFile
FindFirstFileA
FindClose
GetTickCount64
GetFileSize
CreateFileA
CreateFileMappingA
GetLastError
MapViewOfFile
UnmapViewOfFile
CloseHandle

user32

EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
GetActiveWindow
GetDesktopWindow
GetWindowThreadProcessId
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
BringWindowToTop
TranslateMDISysAccel
TranslateAcceleratorA
RedrawWindow
SetRectEmpty
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
DestroyMenu
ReuseDDElParam
UnpackDDElParam
CharUpperA
IsZoomed
IsRectEmpty
DeleteMenu
GetSystemMenu
SetParent
GetMessageA
WaitMessage
PostQuitMessage
ValidateRect
ShowOwnedPopups
MapDialogRect
SetWindowContextHelpId
DrawIcon
SetWindowRgn
GetMenuItemInfoA
DestroyCursor
GetSysColorBrush
UnregisterClassA
GetDCEx
DestroyIcon
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
CreateMenu
PostThreadMessageA
GetTabbedTextExtentA
RegisterClipboardFormatA
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
SetForegroundWindow
ShowScrollBar
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
GetDlgCtrlID
CallWindowProcA
GetMenu
GetWindowLongA
SetWindowLongA
SetWindowPos
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
EndPaint
BeginPaint
GetWindowDC
UnhookWindowsHookEx
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
RemoveMenu
LoadBitmapA
EnableWindow
IsWindowEnabled
GetMenuCheckMarkDimensions
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendMessageA
GetKeyState
GetSysColor
SetRect
InflateRect
OffsetRect
IntersectRect
FillRect
InvertRect
DrawEdge
PostMessageA
wsprintfA
WindowFromPoint
ClientToScreen
PtInRect
LoadMenuA
GetSubMenu
UpdateWindow
EnumWindows
IsWindowVisible
LockWindowUpdate
SetMenuItemBitmaps
GetForegroundWindow
GetClientRect
ScreenToClient
GetDC
ReleaseDC
InvalidateRect
SetTimer
KillTimer
GetCapture
SetCapture
GetFocus
GetParent
DefWindowProcA
GetClassInfoA
SetCursor
LoadCursorA
IsWindow
IsClipboardFormatAvailable
ReleaseCapture
ClipCursor
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetCursorPos
SystemParametersInfoA
DispatchMessageA
TranslateMessage
GetSystemMetrics
GetScrollPos

gdi32

GetCharWidthA
StretchDIBits
CreateEllipticRgn
LPtoDP
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
Ellipse
GetViewportOrgEx
GetBkColor
GetTextColor
GetRgnBox
GetNearestColor
PatBlt
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetTextExtentPointA
GetWindowOrgEx
GetBkMode
GetMapMode
CombineRgn
SetRectRgn
CreateRectRgnIndirect
SetAbortProc
DPtoLP
CreatePolygonRgn
Escape
CreateDCA
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextColor
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
CreateSolidBrush
GetStockObject
PtInRegion
CopyMetaFileA
CreatePalette
DeleteObject
CreateCompatibleDC
SelectObject
StretchBlt
RealizePalette
SelectPalette
CreateDIBSection
CreatePen
CreateFontIndirectA
CreateFontA
GetObjectA
CreateCompatibleBitmap
GetDeviceCaps
Rectangle
BitBlt
GetTextExtentPoint32A
GetTextMetricsA
StartDocA
StartPage
EndPage
AbortDoc
EndDoc
GetCurrentObject
PtVisible
RectVisible
TextOutA
ExtTextOutA
CreateBitmap

advapi32

RegSetValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegOpenKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

shell32

SHGetFileInfoA
DragQueryFileA
DragFinish
ShellExecuteA
ExtractIconA

ole32

CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleGetClipboard
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoUninitialize
CoCreateInstance
CoInitializeEx
OleDestroyMenuDescriptor

oleaut32

VariantClear
SysFreeString
SysAllocString
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect

shlwapi

PathRemoveFileSpecW
PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathFindFileNameA

oledlg

ord8

oleacc

LresultFromObject
CreateStdAccessibleObject

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA
GetJobA

comdlg32

GetFileTitleA

Sections

.text
Size: 474KB - Virtual size: 474KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

32b759146666e62d7707871bf5264bcb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

oledlg

oleacc

winspool.drv

comdlg32

Sections

.text Size: 474KB - Virtual size: 474KB

.rdata Size: 136KB - Virtual size: 136KB

.data Size: 3.0MB - Virtual size: 3.0MB

.rsrc Size: 73KB - Virtual size: 72KB

.text
Size: 474KB - Virtual size: 474KB

.rdata
Size: 136KB - Virtual size: 136KB

.data
Size: 3.0MB - Virtual size: 3.0MB

.rsrc
Size: 73KB - Virtual size: 72KB