76c36bf9514eeabf46ceb95ca32497d2ece45ac68c0f58fc0608f503a4638529

Sharing

Copy URL Twitter E-mail

General

Target

76c36bf9514eeabf46ceb95ca32497d2ece45ac68c0f58fc0608f503a4638529
Size

2.1MB
MD5

f83c1d3f110822be7a93c1e8c6d4322d
SHA1

103fed7f5a41c3852354dabc113a5884e1da1425
SHA256

76c36bf9514eeabf46ceb95ca32497d2ece45ac68c0f58fc0608f503a4638529
SHA512

e8a341af8d334d31562c9e0d3c8363afb798eee7f71832f957f86060ca5bcb740d6a9d193f36168e618f867b41902247cc0cdaeb84904ce5f70a5ab86944b047
SSDEEP

49152:Wfc/H4q+lrww/coPY+OpKCbPDETa+C9Oy63TvaCeQ:wo4RBlcoPtOpKwP2a/9Oy6N

Score

N/A

Malware Config

Signatures

Files

76c36bf9514eeabf46ceb95ca32497d2ece45ac68c0f58fc0608f503a4638529
.exe windows x86

c6a8d78bc5fd145006ce49ce914f038a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
GetDriveTypeA
EnumResourceNamesW
LocalSize
GetExitCodeThread
TerminateThread
ResetEvent
OpenProcess
LoadLibraryExW
LoadLibraryExA
GetProcessHeap
SetEnvironmentVariableA
EnumResourceTypesW
GetStringTypeW
GetStringTypeA
LCMapStringW
SizeofResource
LCMapStringA
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
QueryPerformanceCounter
VirtualFree
HeapCreate
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapSize
CreateThread
ExitThread
ExitProcess
GetFileType
SetStdHandle
HeapReAlloc
RaiseException
RtlUnwind
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
FindResourceExW
VirtualProtect
Sleep
GetProfileIntW
GetTickCount
SearchPathW
GetTempPathW
GetTempFileNameW
SetErrorMode
lstrcpyW
GetCurrentDirectoryW
GetFileTime
GetFileSizeEx
GetFileAttributesW
CreateFileW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
GlobalGetAtomNameW
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
lstrlenA
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
GetModuleHandleA
CreateEventW
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
CloseHandle
GetPrivateProfileIntW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetCurrentProcessId
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
LoadLibraryW
CompareStringW
LoadLibraryA
FreeLibrary
lstrcmpW
GetModuleHandleW
GetProcAddress
GetVersionExA
GetLastError
SetLastError
CopyFileW
GlobalSize
GlobalAlloc
FormatMessageW
LocalFree
MulDiv
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
RemoveDirectoryW
GetModuleFileNameW
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
InterlockedIncrement
InterlockedDecrement
WritePrivateProfileStringW
FindResourceW
LoadResource
LockResource
CreateFileA

user32

SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
UnionRect
SetCursorPos
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
GetNextDlgGroupItem
InvalidateRgn
SetRect
CharNextW
EmptyClipboard
CloseClipboard
SetClipboardData
LoadImageW
DestroyIcon
CopyImage
OpenClipboard
DrawStateW
RegisterClipboardFormatW
EnumChildWindows
LockWindowUpdate
BringWindowToTop
IsRectEmpty
KillTimer
SetTimer
InvalidateRect
IsMenu
SetClassLongW
SetParent
CreatePopupMenu
NotifyWinEvent
SetWindowRgn
CreateAcceleratorTableW
LoadAcceleratorsW
DestroyAcceleratorTable
GetAsyncKeyState
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyW
ToUnicodeEx
CopyAcceleratorTableW
PostThreadMessageW
SetRectEmpty
DeleteMenu
WaitMessage
ReleaseCapture
WindowFromPoint
SetCapture
UnregisterClassW
CharUpperW
LoadCursorW
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GetMenuDefaultItem
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
DestroyMenu
GetMenuItemInfoW
InflateRect
ShowOwnedPopups
SetCursor
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
LoadMenuW
SetWindowContextHelpId
MapDialogRect
SystemParametersInfoW
MessageBeep
RedrawWindow
IsZoomed
PostQuitMessage
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
EnableWindow
SendMessageW
RegisterWindowMessageW
LoadIconW
GetSystemMenu
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetWindowThreadProcessId
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
IsCharLowerW
GetKeyNameTextW
MapVirtualKeyExW
IsClipboardFormatAvailable
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
FrameRect
GetUpdateRect
CharUpperBuffW
CopyIcon
SubtractRect
GetIconInfo
GetFocus
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
GetDoubleClickTime
CreateMenu
GetWindowRgn
GrayStringW
AppendMenuW
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
DestroyCursor
EndDialog
GetNextDlgTabItem
GetParent
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
CreateIconIndirect
SendMessageTimeoutW
RegisterClassA
DefMDIChildProcA
DefDlgProcW
DefDlgProcA
DefFrameProcA
DefWindowProcA
CallWindowProcA
EnumWindows
IsWindowUnicode
GetWindowLongA
SetWindowLongA
IsWindowEnabled
GetDlgItem
GetWindowLongW
IsWindow
DestroyWindow
CreateDialogIndirectParamW
SetActiveWindow
GetActiveWindow
GetDesktopWindow
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuW
GetMenuItemID
GetMenuStringW
GetMenuState
SetFocus
GetWindow
SetScrollPos
GetScrollPos
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowPlacement
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowPos
SetWindowLongW
GetMenu
PtInRect
CopyRect
CallWindowProcW
DefWindowProcW
GetDlgCtrlID
SetWindowPlacement
SetScrollInfo
GetScrollInfo
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
GetSysColor
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
MessageBoxW
PostMessageW
UpdateWindow
IsWindowVisible
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar

gdi32

PatBlt
GetDIBits
RealizePalette
CombineRgn
StretchBlt
SetPixel
CreateDIBSection
GetBkColor
StretchDIBits
SetRectRgn
GetMapMode
DPtoLP
CreateEllipticRgn
CreatePolygonRgn
Polyline
Ellipse
Polygon
Rectangle
RoundRect
CreatePalette
GetPaletteEntries
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
SetDIBColorTable
GetViewportOrgEx
LPtoDP
ExtFloodFill
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
GetTextFaceW
CreateRoundRectRgn
SetPixelV
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetBoundsRect
GetTextColor
GetTextCharsetInfo
EnumFontFamiliesW
CreateCompatibleBitmap
CreateDIBitmap
GetRgnBox
OffsetRgn
CreateRectRgnIndirect
GetTextMetricsW
CreateHatchBrush
CreateSolidBrush
CreatePen
GetObjectType
SelectPalette
GetStockObject
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
SelectObject
Escape
TextOutW
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
GetClipRgn
SelectClipRgn
DeleteObject
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
GetDeviceCaps
CopyMetaFileW
GetDCOrgEx
GetClipBox
SetTextColor
SetBkColor
GetObjectW
CreateBitmap
SetBrushOrgEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
RestoreDC
SetWindowOrgEx
CreateFontIndirectW
CreateCompatibleDC
BitBlt
ExtTextOutW
GetTextExtentPoint32W
SaveDC
ScaleViewportExtEx

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyW
RegQueryValueW
RegEnumKeyExW
RegOpenKeyExW

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHFileOperationW
ord165
SHGetFileInfoW
DragQueryFileW
DragFinish
ShellExecuteW
SHAppBarMessage

comctl32

InitCommonControlsEx
ImageList_GetIconSize
ImageList_Destroy
FlatSB_GetScrollProp
_TrackMouseEvent
ImageList_GetBkColor
ImageList_DrawIndirect
ImageList_GetImageInfo

shlwapi

PathIsDirectoryEmptyW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFileExistsW
PathRemoveFileSpecW

oledlg

OleUIBusyW

ole32

OleTranslateAccelerator
IsAccelerator
CoLockObjectExternal
RevokeDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoInitializeEx
CoUninitialize
RegisterDragDrop
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleGetClipboard
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleLockRunning
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CreateStreamOnHGlobal
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree

oleaut32

SysFreeString
SysAllocStringByteLen
SysStringLen
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringByteLen
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
VariantCopy
SafeArrayDestroy
OleCreateFontIndirect
OleLoadPicturePath

gdiplus

GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext

winmm

waveOutGetNumDevs
PlaySoundW

imagehlp

ImageDirectoryEntryToData

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 367KB - Virtual size: 367KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c6a8d78bc5fd145006ce49ce914f038a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

imm32

winmm

imagehlp

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 367KB - Virtual size: 367KB

.data Size: 29KB - Virtual size: 58KB

.rsrc Size: 44KB - Virtual size: 44KB

.reloc Size: 164KB - Virtual size: 164KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 367KB - Virtual size: 367KB

.data
Size: 29KB - Virtual size: 58KB

.rsrc
Size: 44KB - Virtual size: 44KB

.reloc
Size: 164KB - Virtual size: 164KB