e105284eab2424680267c5f67c12cf3bc4b4caabbf2c532d7d19bf3bdfe75216

Sharing

Copy URL

Twitter E-mail

General

Target

e105284eab2424680267c5f67c12cf3bc4b4caabbf2c532d7d19bf3bdfe75216
Size

6.0MB
MD5

dce13f62d76168432b0ab5fda4d77ee2
SHA1

7e390d70f96c1e78e0c0bbc1c0e7ccf3045f0984
SHA256

e105284eab2424680267c5f67c12cf3bc4b4caabbf2c532d7d19bf3bdfe75216
SHA512

a9cd167047d37a6279eaf94545dc4a7b5fe3fb88120634a814c5118c9cf18555cbe97ffd395383b88ea507c47f81b90fa4992482cc5c8c7ffeb4032f89fc3067
SSDEEP

98304:GAhY36NCBIFx+h5a4Rl92p5PbkZ+/ot4LYVSzhy9sB7ySb1Gsh1Y3ir/qfECGzOL:GAhe4DS5VRz0kkAt4vty9spygcqY3i+P

Score

N/A

Malware Config

Signatures

Files

e105284eab2424680267c5f67c12cf3bc4b4caabbf2c532d7d19bf3bdfe75216
.exe windows x86

cacafbb77cb82d6967e7b7c539ed8143

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32FirstW
CreateToolhelp32Snapshot
OutputDebugStringW
GetCurrentProcessId
Sleep
GetCurrentThreadId
WinExec
GetModuleFileNameW
IsWow64Process
GetLocalTime
K32GetProcessImageFileNameW
OpenProcess
ExitProcess
lstrcatW
lstrcpyW
lstrlenW
QueryDosDeviceW
lstrcmpiW
GetLogicalDriveStringsW
CreateThread
GetProfileStringW
WriteProfileStringW
RegisterWaitForSingleObject
SetStdHandle
GetStdHandle
FreeResource
SizeofResource
LoadResource
FindResourceW
GetProfileIntW
GetLongPathNameW
GetTempPathW
SetThreadContext
GetThreadContext
ResumeThread
CreateProcessW
GetEnvironmentStringsW
SetHandleInformation
GetEnvironmentVariableW
VirtualAllocEx
VirtualFreeEx
WriteProcessMemory
GetExitCodeProcess
RemoveDirectoryW
DeleteFileW
CreateFileW
CreateDirectoryW
FindClose
FindNextFileW
FindFirstFileW
SetFilePointerEx
GetFileSizeEx
GetFullPathNameW
GetFileAttributesW
WriteFile
LockResource
Process32NextW
ReadFile
GetCurrentProcess
DuplicateHandle
UnregisterWaitEx
WaitForSingleObject
ResetEvent
SetEvent
CloseHandle
CreateEventW
GetTickCount
QueryPerformanceFrequency
QueryPerformanceCounter
FreeLibrary
GetProcAddress
GetModuleHandleW
LoadLibraryW
WideCharToMultiByte
MultiByteToWideChar
SetEndOfFile
HeapSize
GetProcessHeap
FreeEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
HeapFree
FormatMessageA
GetStringTypeW
WaitForSingleObjectEx
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
LocalFree
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
LCMapStringEx
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetCurrentDirectoryW
GetFileSize
GlobalLock
GlobalUnlock
GetACP
GetLastError
LocalFileTimeToFileTime
SetFilePointer
SetFileTime
SystemTimeToFileTime
FormatMessageW
RaiseException
MulDiv
GlobalAlloc
lstrcpynW
CreateEventA
GetVersion
GetFileType
GlobalMemoryStatus
LoadLibraryA
GetVersionExA
RtlUnwind
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
WriteConsoleW
HeapAlloc

user32

OffsetRect
GetSystemMetrics
IsRectEmpty
ReleaseDC
GetWindow
GetWindowThreadProcessId
SetCursor
SetCapture
ReleaseCapture
GetWindowDC
ClientToScreen
WindowFromPoint
GetMessageW
TranslateMessage
DispatchMessageW
CreateWindowExW
IsWindow
DestroyWindow
SetWindowPos
IsIconic
CharNextW
SetFocus
GetActiveWindow
GetFocus
GetKeyState
KillTimer
GetDC
BeginPaint
EndPaint
GetUpdateRect
InvalidateRect
GetClientRect
ScreenToClient
MapWindowPoints
GetSysColor
IntersectRect
UnionRect
SetWindowLongW
LoadImageW
MonitorFromWindow
GetMonitorInfoW
InflateRect
DefWindowProcW
CallWindowProcW
RegisterClassW
RegisterClassExW
LoadCursorW
EnableWindow
SetPropW
GetPropW
SetWindowRgn
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
LoadIconW
UpdateWindow
UpdateLayeredWindow
GetWindowRgn
CharPrevW
DrawTextW
FillRect
SetRect
EnableMenuItem
CreateCaret
GetCaretBlinkTime
HideCaret
ShowCaret
SetCaretPos
GetCaretPos
IsWindowEnabled
CreateAcceleratorTableW
InvalidateRgn
GetGUIThreadInfo
EqualRect
wsprintfA
DrawTextA
GetKeyboardLayout
GetKeyNameTextW
MapVirtualKeyExW
GetUserObjectInformationW
GetProcessWindowStation
GetDesktopWindow
MessageBoxA
GetParent
MessageBoxW
PtInRect
DestroyMenu
TrackPopupMenu
AppendMenuW
SetTimer
GetWindowRect
SystemParametersInfoW
MoveWindow
SetForegroundWindow
GetWindowLongW
PostQuitMessage
CreatePopupMenu
IsZoomed
GetCursorPos
ShowWindow
IsWindowVisible
PostMessageW
SendMessageW
GetClassInfoExW
wsprintfW

gdi32

PlayEnhMetaFile
GetTextMetricsW
GetObjectW
SetWindowOrgEx
CreateRoundRectRgn
CreatePatternBrush
CreateEnhMetaFileW
CloseEnhMetaFile
SelectObject
SaveDC
RestoreDC
Rectangle
RemoveFontMemResourceEx
AddFontMemResourceEx
GetStockObject
GetDeviceCaps
GetEnhMetaFileHeader
DeleteObject
CreateCompatibleBitmap
PatBlt
CreateSolidBrush
SetBkMode
SetTextColor
CreateRectRgn
PtInRegion
CreateDIBSection
CombineRgn
CreatePenIndirect
CreateRectRgnIndirect
GetCharABCWidthsW
GetClipBox
GetTextExtentPoint32W
LineTo
SelectClipRgn
ExtSelectClipRgn
SetBkColor
StretchBlt
SetStretchBltMode
GetObjectA
MoveToEx
TextOutW
GdiFlush
GetTextExtentPointA
GetBitmapBits
SetBitmapBits
DeleteDC
CreatePen
CreateFontIndirectW
CreateDIBitmap
CreateCompatibleDC
BitBlt

comdlg32

GetOpenFileNameW

advapi32

CheckTokenMembership
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegCloseKey
AllocateAndInitializeSid
RegOpenKeyExW
FreeSid
RegQueryValueExW

shell32

Shell_NotifyIconW
DragQueryFileW
ShellExecuteExW

ole32

OleLockRunning
CLSIDFromProgID
CLSIDFromString
CreateStreamOnHGlobal
ReleaseStgMedium
OleDuplicateData
DoDragDrop
CoInitialize
CoUninitialize
CoCreateInstance
OleUninitialize
OleInitialize

iphlpapi

GetAdaptersInfo

curllib

curl_easy_setopt
curl_easy_cleanup
curl_escape
curl_easy_getinfo
curl_easy_strerror
curl_easy_perform
curl_easy_init
curl_global_init
curl_global_cleanup

sqlite3

sqlite3_exec
sqlite3_get_table
sqlite3_open
sqlite3_close

vmprotectsdk32

VMProtectEnd
VMProtectBegin

ws2_32

inet_addr
gethostbyname
gethostname
WSAStartup
__WSAFDIsSet
select
WSASetLastError
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAWaitForMultipleEvents
closesocket
recv
send
WSAGetLastError
connect
ioctlsocket
setsockopt
socket
freeaddrinfo
getaddrinfo

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear

comctl32

ord17
_TrackMouseEvent
InitCommonControlsEx

gdiplus

GdipImageGetFrameCount
GdipGetImageHeight
GdipGetImageWidth
GdipSetStringFormatTrimming
GdipImageSelectActiveFrame
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipDrawImageRectI
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdiplusStartup
GdiplusShutdown
GdipAlloc
GdipFree
GdipCreatePath
GdipDeletePath
GdipAddPathLine
GdipAddPathArc
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipCreatePen1
GdipDeletePen
GdipSetPenMode
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipCloneImage
GdipDisposeImage
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetSmoothingMode
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipDrawRectangleI
GdipDrawPath
GdipFillRectangleI
GdipFillPath
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipDrawString
GdipMeasureString
GdipStringFormatGetGenericTypographic
GdipDeleteStringFormat
GdipCloneStringFormat
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext

Sections

.text
Size: 968KB - Virtual size: 967KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 16.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cacafbb77cb82d6967e7b7c539ed8143

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

iphlpapi

curllib

sqlite3

vmprotectsdk32

ws2_32

oleaut32

comctl32

gdiplus

imm32

Sections

.text Size: 968KB - Virtual size: 967KB

.rdata Size: 240KB - Virtual size: 239KB

.data Size: 58KB - Virtual size: 16.1MB

.rsrc Size: 4.7MB - Virtual size: 4.7MB

.reloc Size: 62KB - Virtual size: 61KB

.text
Size: 968KB - Virtual size: 967KB

.rdata
Size: 240KB - Virtual size: 239KB

.data
Size: 58KB - Virtual size: 16.1MB

.rsrc
Size: 4.7MB - Virtual size: 4.7MB

.reloc
Size: 62KB - Virtual size: 61KB