5b2fce9dd12302a1d349cb95ecca282e188f4a3355f0602ecea12abe4a013095

Sharing

Copy URL Twitter E-mail

General

Target

5b2fce9dd12302a1d349cb95ecca282e188f4a3355f0602ecea12abe4a013095
Size

1.9MB
MD5

df7b9de05e08e71e2bcd289394728cc9
SHA1

35c0a8e2fa71fb7b6e97858ef0fc4d1519342b1d
SHA256

5b2fce9dd12302a1d349cb95ecca282e188f4a3355f0602ecea12abe4a013095
SHA512

2e53d6de8e87d59aac84fcc8d669d2b35bd92851a45faf29f73bd269314675c3f031b674c5cd6d89e164440152cc816e5c1703bdafb4585d447a40404c264bc5
SSDEEP

49152:kDwqz2MqkgXHzzVUpRjqP2iqlZWxQa7ZvbyXXkw+v4c9:ZPkgfVUDqnqum8b8U7wc

Score

N/A

Malware Config

Signatures

Files

5b2fce9dd12302a1d349cb95ecca282e188f4a3355f0602ecea12abe4a013095
.exe windows x86

45a25292b1f8d12b86b49791bff59f87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsW
PathRemoveFileSpecW

wininet

InternetOpenUrlW
HttpQueryInfoW
InternetOpenW
InternetCloseHandle
InternetReadFile

kernel32

GlobalFlags
SetEndOfFile
GetModuleHandleA
InterlockedExchange
GetLocaleInfoW
SetFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
ExitThread
GetCommandLineA
GetStartupInfoA
RtlUnwind
RaiseException
HeapReAlloc
HeapSize
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapCreate
HeapDestroy
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetConsoleCP
GetConsoleMode
SetStdHandle
FreeResource
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
MoveFileExW
GlobalAddAtomW
SetFilePointerEx
GetTickCount
WriteFile
ReadFile
CreateFileW
GetLastError
DeviceIoControl
CloseHandle
GetTimeFormatA
GetDateFormatA
GlobalAlloc
Sleep
GlobalFree
GetSystemTime
CreateThread
GetFileSizeEx
CreateDirectoryW
WideCharToMultiByte
GetFileAttributesW
GetLocalTime
DeleteFileW
FlushFileBuffers
GetFileSize
FindFirstFileW
MoveFileW
FindClose
FindNextFileW
GetFileTime
CreateFileA
FreeLibrary
LoadLibraryW
VirtualFree
VirtualAlloc
GetDiskFreeSpaceExW
GetVolumeInformationW
CreateMutexW
SystemTimeToFileTime
InitializeCriticalSection
OpenProcess
LeaveCriticalSection
TerminateProcess
MultiByteToWideChar
EnterCriticalSection
GetDiskFreeSpaceW
Process32FirstW
InterlockedCompareExchange
DosDateTimeToFileTime
GlobalFindAtomW
GlobalDeleteAtom
WriteConsoleA
Process32NextW
CreateToolhelp32Snapshot
DeleteCriticalSection
SetFilePointer
FileTimeToSystemTime
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileSectionW
PeekNamedPipe
LoadLibraryA
lstrcmpW
GetVersionExA
lstrlenA
lstrcmpA
InterlockedIncrement
GetCurrentThreadId
MulDiv
lstrlenW
GetCurrentProcessId
InterlockedDecrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
CreateProcessW
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
SetLastError
GetModuleHandleW
GetProcAddress
GlobalUnlock
GlobalLock
LockResource
SizeofResource
LoadResource
FindResourceW
FindResourceExW
LocalFree
FormatMessageW
GetCurrentDirectoryW
DuplicateHandle
CreatePipe
CreateEventW
GetModuleFileNameW
GetExitCodeProcess
WaitForSingleObject
GetCurrentProcess

user32

SetCapture
IsRectEmpty
KillTimer
SetTimer
SetRect
ReleaseCapture
SetCursor
InvalidateRect
EndPaint
BeginPaint
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
DestroyMenu
SetWindowTextW
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
IsWindow
SetFocus
GetForegroundWindow
GetDlgItem
GetTopWindow
GetMessageTime
GetMessagePos
SetMenu
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
GetDlgCtrlID
CallWindowProcW
CopyRect
GetMenu
SystemParametersInfoA
GetWindowPlacement
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetSysColor
GetSysColorBrush
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
CreateAcceleratorTableW
InvalidateRgn
CharPrevW
SetCaretPos
ShowCaret
HideCaret
CreateCaret
DrawIconEx
wvsprintfW
GetUpdateRect
UpdateLayeredWindow
CharNextW
LoadImageW
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
DestroyWindow
LoadCursorW
RegisterClassExW
GetWindowRgn
CreateWindowExW
DefWindowProcW
GetDC
InflateRect
OffsetRect
ReleaseDC
SetWindowRgn
GetWindowRect
IsIconic
SetForegroundWindow
GetParent
IntersectRect
GetWindowLongW
MonitorFromWindow
SetWindowLongW
MapWindowPoints
GetMonitorInfoW
MoveWindow
PostMessageW
GetWindowTextLengthW
PtInRect
GetWindowTextW
SetWindowPos
ClientToScreen
ScreenToClient
PostQuitMessage
IsZoomed
GetClientRect
CharUpperW
RegisterDeviceNotificationW
SendMessageW
GetSystemMetrics
CharLowerA
FindWindowW
ShowWindow
MessageBoxW
CharLowerW
wsprintfW

gdi32

CreateFontIndirectW
ExtTextOutW
GetTextExtentPoint32W
SaveDC
RestoreDC
SetBkMode
SetMapMode
LineTo
MoveToEx
SelectClipRgn
PtVisible
RectVisible
TextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
GetObjectW
SetWindowOrgEx
ScaleWindowExtEx
ExtSelectClipRgn
GetStockObject
CreatePen
CreateSolidBrush
CreateRectRgnIndirect
CombineRgn
GetTextMetricsW
GetCharABCWidthsW
RoundRect
CreatePenIndirect
SetBkColor
SetTextColor
ScaleViewportExtEx
GetClipBox
GetDeviceCaps
CreateDIBSection
PtInRegion
CreateRectRgn
CreateBitmap
SetWindowExtEx
DeleteObject
CreateRoundRectRgn
BitBlt
DeleteDC
SelectObject
CreateCompatibleDC
SetStretchBltMode
SetViewportExtEx
CreateCompatibleBitmap
StretchBlt
GetObjectA
Rectangle

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegCloseKey
RegOpenKeyA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA

shell32

SHGetPathFromIDListW
ShellExecuteW
SHBrowseForFolderW
SHFileOperationW
SHGetSpecialFolderPathW
ord165

ole32

OleRun
OleLockRunning
CLSIDFromProgID
CoUninitialize
OleInitialize
OleUninitialize
CoInitialize
OleSetContainedObject
CLSIDFromString
CoCreateInstance

oleaut32

VariantInit
SysAllocString
SysFreeString
SysStringLen
VariantClear
VariantChangeType
VariantCopy
SysAllocStringLen

ws2_32

WSACleanup
closesocket
gethostbyname
send
htons
inet_addr
htonl
gethostname
connect
getservbyname
gethostbyaddr
recv
socket
WSAStartup

iphlpapi

GetAdaptersInfo

gdiplus

GdipCreateStringFormat
GdipAlloc
GdipFree
GdipDeleteBrush
GdipDeleteStringFormat
GdipDeleteGraphics
GdipDeleteFont
GdipCreateLineBrushI
GdipCloneBrush
GdipSetStringFormatLineAlign
GdipCreateFromHDC
GdipSetTextRenderingHint
GdipDrawString
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdiplusStartup
GdiplusShutdown
GdipSetStringFormatAlign

oleacc

LresultFromObject
CreateStdAccessibleObject

winmm

timeEndPeriod
timeSetEvent
timeKillEvent

comctl32

ord17
_TrackMouseEvent

Sections

.text
Size: 866KB - Virtual size: 865KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 872KB - Virtual size: 872KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45a25292b1f8d12b86b49791bff59f87

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

wininet

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

ws2_32

iphlpapi

gdiplus

oleacc

winmm

comctl32

Sections

.text Size: 866KB - Virtual size: 865KB

.rdata Size: 145KB - Virtual size: 144KB

.data Size: 17KB - Virtual size: 37KB

.rsrc Size: 872KB - Virtual size: 872KB

.reloc Size: 74KB - Virtual size: 73KB

.text
Size: 866KB - Virtual size: 865KB

.rdata
Size: 145KB - Virtual size: 144KB

.data
Size: 17KB - Virtual size: 37KB

.rsrc
Size: 872KB - Virtual size: 872KB

.reloc
Size: 74KB - Virtual size: 73KB