f7c299467cbb03d299be8e06d442c25afab340fd34a707883407dd757b94d337

Sharing

Copy URL

Twitter E-mail

General

Target

f7c299467cbb03d299be8e06d442c25afab340fd34a707883407dd757b94d337
Size

3.2MB
MD5

e2423fc4e2b0685e9e70a5cfbf786694
SHA1

5fc4af1dd07bf9de476046e667c8fc2eeec33024
SHA256

f7c299467cbb03d299be8e06d442c25afab340fd34a707883407dd757b94d337
SHA512

150ad8d7c9bf5dfbf5bf7ee0817f73bdb05d66374203f0544a0bfe6911593e3c0e13a31dcacab8cddf95c25ad78ffd2d3de1fbea89411f1161bc5af2678d72f3
SSDEEP

98304:5rLFfuoBM7+ExPHfEpeZqWZBV42BChPMxd6ZcyoDWP:5rLFfuyMzHfZZF42Qqxd6Zc2

Score

N/A

Malware Config

Signatures

Files

f7c299467cbb03d299be8e06d442c25afab340fd34a707883407dd757b94d337
.exe windows x86

415362310baad15b3c75bf194ea49755

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GetFileType
CloseHandle
SetStdHandle
HeapReAlloc
VirtualQuery
VirtualAlloc
VirtualProtect
GetStartupInfoA
GetCommandLineA
HeapAlloc
HeapFree
ExitProcess
Sleep
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
GetTickCount
SetErrorMode
GetFileSizeEx
FileTimeToLocalFileTime
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetModuleHandleW
GetDiskFreeSpaceA
GetTempFileNameA
GetFileTime
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
GetShortPathNameA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
lstrcmpiA
GetThreadLocale
GetStringTypeExA
MoveFileA
InterlockedDecrement
GetModuleFileNameW
lstrcmpA
GetCurrentProcessId
GetModuleFileNameA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
CompareStringA
lstrcmpW
GetVersionExA
GlobalFree
CopyFileA
GlobalAlloc
FormatMessageA
LocalFree
lstrlenW
MultiByteToWideChar
SetFileTime
GetCurrentDirectoryA
GetFileAttributesA
CreateDirectoryA
LocalFileTimeToFileTime
lstrcpyA
lstrlenA
SystemTimeToFileTime
ReadFile
SetFilePointer
lstrcatA
DeleteFileA
WriteFile
MulDiv
GlobalSize
GlobalLock
GlobalUnlock
SetLastError
GetProcAddress
GetModuleHandleA
LoadLibraryA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetSystemInfo
FlushViewOfFile
FindFirstFileA
FindClose
GetTickCount64
GetFileSize
CreateFileA
CreateFileMappingA
GetLastError
MapViewOfFile
UnmapViewOfFile
VirtualFree

user32

GetSysColorBrush
DestroyCursor
GetMenuItemInfoA
SetWindowRgn
DrawIcon
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
ValidateRect
PostQuitMessage
WaitMessage
GetMessageA
SetParent
GetSystemMenu
DeleteMenu
IsRectEmpty
IsZoomed
CharUpperA
UnpackDDElParam
ReuseDDElParam
DestroyMenu
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
RedrawWindow
TranslateAcceleratorA
TranslateMDISysAccel
BringWindowToTop
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
GetWindowThreadProcessId
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
GetDlgCtrlID
CallWindowProcA
GetMenu
GetWindowLongA
SetWindowLongA
SetWindowPos
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
EndPaint
BeginPaint
GetWindowDC
RegisterClipboardFormatA
GetTabbedTextExtentA
GrayStringA
DrawTextExA
TabbedTextOutA
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
RemoveMenu
wsprintfA
WindowFromPoint
ClientToScreen
PtInRect
LoadMenuA
GetSubMenu
LockWindowUpdate
LoadBitmapA
PostThreadMessageA
CreateMenu
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
DestroyIcon
GetDCEx
GetClassNameA
UnregisterClassA
EnumWindows
IsWindowVisible
GetSystemMetrics
TranslateMessage
DispatchMessageA
SystemParametersInfoA
GetCursorPos
DrawTextA
ClipCursor
ReleaseCapture
IsClipboardFormatAvailable
IsWindow
LoadCursorA
SetCursor
GetClassInfoA
DefWindowProcA
GetParent
GetFocus
SetCapture
GetCapture
KillTimer
SetTimer
InvalidateRect
ReleaseDC
GetDC
ScreenToClient
GetClientRect
PostMessageA
DrawEdge
InvertRect
FillRect
IntersectRect
OffsetRect
InflateRect
SetRect
GetSysColor
GetKeyState
SendMessageA
EnableWindow
RemovePropA

gdi32

RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
GetCurrentPositionEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateBitmap
GetStockObject
CreateSolidBrush
PtVisible
GetWindowExtEx
DPtoLP
SetAbortProc
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
GetCharWidthA
StretchDIBits
CreateEllipticRgn
LPtoDP
Ellipse
GetViewportOrgEx
GetBkColor
GetTextColor
GetRgnBox
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetTextExtentPointA
GetWindowOrgEx
GetPixel
ExcludeClipRect
GetClipBox
SetMapMode
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetTextAlign
MoveToEx
LineTo
CreateCompatibleBitmap
CreatePalette
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
BitBlt
PtInRegion
CreatePolygonRgn
GetCurrentObject
EndDoc
AbortDoc
EndPage
StartPage
StartDocA
GetTextMetricsA
GetTextExtentPoint32A
Rectangle
GetDeviceCaps
GetObjectA
CreateFontA
CreateFontIndirectA
CreatePen
CreateDIBSection
SelectPalette
RealizePalette
StretchBlt
SelectObject
CreateCompatibleDC
DeleteObject

comdlg32

GetFileTitleA

winspool.drv

GetJobA
ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

GetFileSecurityA
SetFileSecurityA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegSetValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyA

shell32

ShellExecuteA
DragFinish
DragQueryFileA
SHGetFileInfoA
ExtractIconA

shlwapi

PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFindFileNameA

oledlg

ord8

ole32

CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleGetClipboard
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
OleDestroyMenuDescriptor

oleaut32

VariantClear
SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysAllocStringByteLen
SysFreeString
SysStringLen
VariantInit
VariantChangeType
SysAllocStringLen

psapi

EnumProcesses

wininet

InternetOpenUrlA
InternetOpenA
InternetCloseHandle

Sections

.text
Size: 438KB - Virtual size: 438KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

415362310baad15b3c75bf194ea49755

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

psapi

wininet

Sections

.text Size: 438KB - Virtual size: 438KB

.rdata Size: 134KB - Virtual size: 134KB

.data Size: 2.6MB - Virtual size: 2.6MB

.rsrc Size: 32KB - Virtual size: 31KB

.text
Size: 438KB - Virtual size: 438KB

.rdata
Size: 134KB - Virtual size: 134KB

.data
Size: 2.6MB - Virtual size: 2.6MB

.rsrc
Size: 32KB - Virtual size: 31KB