5d65d35148bcf25b16924369e7f59eb1142ccdfc625e84bec69ac1ea5e65b127

Sharing

Copy URL Twitter E-mail

General

Target

5d65d35148bcf25b16924369e7f59eb1142ccdfc625e84bec69ac1ea5e65b127
Size

2.1MB
MD5

5399cc6986a581e2143c6039f77b6b1a
SHA1

7a69a514e15229e76799d26bb2846a2e0a9c91f5
SHA256

5d65d35148bcf25b16924369e7f59eb1142ccdfc625e84bec69ac1ea5e65b127
SHA512

880a236f8bff1b26a727b70f7caa1010ff6146119a12de00c7d42712670ea4e56c4cc79470a4f02eff8a734501b433f6dcd6839131d2d7c40d1db5b756df2a32
SSDEEP

24576:dHOlCD1yjMRTbn4LyqZmhGEQ6FmdFYP5wBQ4oNdS8:dHkCDYMR3PqoQ6AdFCiBQ4oNdr

Score

N/A

Malware Config

Signatures

Files

5d65d35148bcf25b16924369e7f59eb1142ccdfc625e84bec69ac1ea5e65b127
.exe windows x86

7bdc86e01de3c8de885b421df13cabea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetErrorMode
GetStartupInfoW
RtlUnwind
ExitProcess
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetEnvironmentVariableW
ExitThread
CreateThread
HeapReAlloc
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
TlsFree
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
CreateFileA
GetCurrentDirectoryA
GetDriveTypeA
SetEnvironmentVariableA
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
InterlockedIncrement
InterlockedDecrement
FormatMessageW
LocalFree
GetModuleHandleA
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GetFileTime
GetFileAttributesW
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetThreadLocale
MoveFileW
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
GetCurrentProcessId
GlobalAddAtomW
CreateEventW
SuspendThread
SetThreadPriority
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryExW
CompareStringA
InterlockedExchange
FreeLibrary
SetEvent
WriteFile
GetProcessHeap
HeapAlloc
HeapFree
GetVersion
GetModuleHandleW
LoadLibraryW
GetProcAddress
SetLastError
lstrcmpiW
MultiByteToWideChar
GetCPInfo
lstrlenA
MulDiv
CreateFileW
GetFileSize
ReadFile
_lopen
_lread
_lclose
GlobalAlloc
GlobalLock
FreeResource
GlobalUnlock
GlobalFree
ResumeThread
lstrcpyW
GetDriveTypeW
CreateDirectoryW
GetTempPathW
CreateProcessW
WaitForSingleObject
GetLastError
CloseHandle
GetVersionExW
WideCharToMultiByte
lstrcmpW
LoadResource
LockResource
SizeofResource
FindResourceW
lstrlenW
TerminateThread
GetCurrentDirectoryW
SetCurrentDirectoryW
GetPrivateProfileStringW
GetPrivateProfileIntW
WritePrivateProfileStringW
SetFileAttributesW
DeleteFileW
GetTickCount
Sleep
HeapCreate
GetModuleFileNameW

user32

CopyAcceleratorTableW
IsRectEmpty
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
UnregisterClassW
GetDCEx
LockWindowUpdate
RegisterClipboardFormatW
SetParent
PostThreadMessageW
GetMenuStringW
EndPaint
BeginPaint
GetWindowDC
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
SetForegroundWindow
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
CharUpperW
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
SetWindowsHookExW
CallNextHookEx
GetMessageW
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
PostQuitMessage
RedrawWindow
SetRectEmpty
GetFocus
SetCapture
GetCapture
UpdateWindow
ReleaseCapture
GetWindowLongW
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
ClientToScreen
DrawFocusRect
DrawStateW
FrameRect
OffsetRect
InflateRect
LoadImageW
GetIconInfo
CreateIconIndirect
IsMenu
DestroyCursor
GetDesktopWindow
ModifyMenuW
GetSubMenu
GetMenuState
GetMenuItemID
GetMenuItemCount
AppendMenuW
CreateMenu
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
CharNextW
DestroyMenu
ShowWindow
MoveWindow
DrawEdge
SetRect
GetSysColorBrush
FillRect
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
DrawIconEx
DestroyIcon
SystemParametersInfoW
GetSysColor
GetMenuItemInfoW
wsprintfW
MessageBoxW
SetMenuInfo
LoadIconW
EnableWindow
KillTimer
ReleaseDC
GetDC
GetClientRect
GetWindowRect
IsIconic
PostMessageW
SendMessageW
InsertMenuW
CreatePopupMenu
DrawIcon
LoadBitmapW
PeekMessageW
TranslateMessage
DispatchMessageW
PtInRect
CopyRect
SetCursor
GetSystemMetrics
LoadCursorW
SetClassLongW
SetTimer
InvalidateRect
IsWindow
FindWindowW
EndDialog
UnregisterClassA

gdi32

SelectClipRgn
GetViewportExtEx
GetWindowExtEx
RestoreDC
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetBkColor
GetTextColor
GetCharWidthW
GetRgnBox
SaveDC
GetClipBox
CreateRectRgn
CreateBitmap
SetBkColor
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
CreatePen
SetTextColor
GetStockObject
Escape
ExtTextOutW
TextOutW
SetPixel
GetPixel
PatBlt
Ellipse
RectVisible
PtVisible
GetBkMode
GetObjectW
CreateFontIndirectW
CreateDIBSection
SelectObject
CreateSolidBrush
DeleteObject
DeleteDC
GetTextExtentPoint32W
StretchDIBits
RealizePalette
SetStretchBltMode
SetDIBitsToDevice
GetDeviceCaps
GetSystemPaletteEntries
CreatePalette
SelectPalette
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontW
CreatePatternBrush
SetBkMode

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW

shell32

ShellExecuteExW

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathFindExtensionW
PathStripToRootW
PathFindFileNameW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CreateStreamOnHGlobal

oleaut32

VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SysStringLen
VariantChangeType
SysAllocStringLen
OleLoadPicture
VariantClear
VariantInit
SysFreeString
SysAllocString

wininet

InternetCloseHandle
HttpSendRequestExW
InternetWriteFile
HttpEndRequestW
HttpSendRequestA
HttpOpenRequestA
HttpAddRequestHeadersA
InternetSetCookieA
HttpSendRequestW
InternetOpenA
InternetConnectA
InternetAttemptConnect
FtpOpenFileA
InternetReadFile

d3d9

Direct3DCreate9

winmm

PlaySoundW

Sections

.text
Size: 412KB - Virtual size: 411KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7bdc86e01de3c8de885b421df13cabea

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

wininet

d3d9

winmm

Sections

.text Size: 412KB - Virtual size: 411KB

.rdata Size: 84KB - Virtual size: 83KB

.data Size: 12KB - Virtual size: 30KB

.rsrc Size: 1.6MB - Virtual size: 1.6MB

.text
Size: 412KB - Virtual size: 411KB

.rdata
Size: 84KB - Virtual size: 83KB

.data
Size: 12KB - Virtual size: 30KB

.rsrc
Size: 1.6MB - Virtual size: 1.6MB