8666a3308726d944643d7c5b1563ca92d130106e720cdb09b5bf6e46c19592c2

Sharing

Copy URL Twitter E-mail

General

Target

8666a3308726d944643d7c5b1563ca92d130106e720cdb09b5bf6e46c19592c2
Size

3.3MB
MD5

b4bbd29029207b4569605774cc33a89e
SHA1

5dc84d504f5fb43be4db1bae8c400580cef535b6
SHA256

8666a3308726d944643d7c5b1563ca92d130106e720cdb09b5bf6e46c19592c2
SHA512

53b111d0a991691bad5a1274625fbda6eb18d9f6500b1cf8120f82c26b26df8cc5114ec45e8f5bde7bfaca940f01cc3dc4abf3efbe29fb6a1ff7a6df78d3e0c0
SSDEEP

49152:bOHyC75V5bV5pUwdrY01YrKNyv04Ylw4xwgFHyA9BNSopx0ecLmN:bvC75x5HdrZBNIX4OKjBNVpx0ek2

Score

N/A

Malware Config

Signatures

Files

8666a3308726d944643d7c5b1563ca92d130106e720cdb09b5bf6e46c19592c2
.exe windows x86

5f1d7f57322cc7c9ec2a5da8d64e0ede

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
ExitProcess
GetCommandLineA
VirtualAlloc
VirtualQuery
HeapReAlloc
ExitThread
CreateThread
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetACP
IsValidCodePage
CompareStringW
LCMapStringA
LCMapStringW
HeapCreate
VirtualFree
GetConsoleCP
HeapAlloc
InitializeCriticalSectionAndSpinCount
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
HeapFree
RaiseException
RtlUnwind
FindResourceExA
GetOEMCP
GetCPInfo
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetModuleHandleW
GlobalFlags
GetTempPathA
SearchPathA
GetDiskFreeSpaceA
GetTempFileNameA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
InterlockedExchange
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
SuspendThread
WaitForSingleObject
ResumeThread
SetThreadPriority
GetProfileIntA
GetTickCount
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
GetStringTypeExA
MoveFileA
InterlockedIncrement
InterlockedDecrement
VirtualProtect
GetCurrentProcessId
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
GetVersionExA
CopyFileA
LocalFree
FreeResource
SetLastError
GetModuleFileNameA
GetShortPathNameA
lstrlenW
FormatMessageA
GetVersion
GetLocaleInfoA
GlobalAddAtomA
GetModuleHandleA
DeleteAtom
FreeConsole
WriteFile
SetFileTime
GetCurrentDirectoryA
GetFileAttributesA
CreateDirectoryA
LocalFileTimeToFileTime
lstrcatA
SystemTimeToFileTime
ReadFile
SetFilePointer
GlobalSize
LoadLibraryA
FreeLibrary
CreateEventA
GetProcAddress
ResetEvent
SetEvent
lstrcpyA
GlobalGetAtomNameA
MulDiv
lstrcmpA
GetSystemInfo
CreateFileA
CreateFileMappingA
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
CloseHandle
FindFirstFileA
FindClose
GetLastError
DeleteFileA
lstrcmpiA
OpenFile
GetLocalTime
GetUserDefaultLCID
EnumDateFormatsA
EnumTimeFormatsA
GetTimeFormatA
GetDateFormatA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetConsoleMode
MultiByteToWideChar

user32

LockWindowUpdate
DestroyIcon
DrawIcon
SetWindowRgn
GetSystemMenu
UnpackDDElParam
ReuseDDElParam
SetCursor
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
SetParent
PostThreadMessageA
CreateMenu
GetCursorPos
WindowFromPoint
CharUpperA
DestroyMenu
GetMenuItemInfoA
InflateRect
CopyAcceleratorTableA
SendNotifyMessageA
IsRectEmpty
InSendMessage
CountClipboardFormats
IsClipboardFormatAvailable
MapDialogRect
GetAsyncKeyState
GetWindowThreadProcessId
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
IsWindowVisible
PostMessageA
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
DeferWindowPos
SetScrollInfo
DefWindowProcA
CallWindowProcA
GetMenu
SystemParametersInfoA
GetWindowPlacement
EndPaint
BeginPaint
GetWindowDC
GetMenuState
GetMenuStringA
GetMenuItemID
InsertMenuA
GetWindowTextLengthA
SetWindowPos
SetFocus
ShowWindow
MoveWindow
SetWindowLongA
GetDlgCtrlID
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
IsWindowEnabled
EndDialog
LoadImageA
RedrawWindow
KillTimer
SetTimer
LoadMenuA
RemoveMenu
GetSubMenu
GetMenuItemCount
DeleteMenu
GetWindow
MessageBeep
RegisterWindowMessageA
FindWindowA
ReleaseDC
GetDC
IntersectRect
RegisterClipboardFormatA
GetClassNameA
SendMessageTimeoutA
SetForegroundWindow
EnumWindows
ReleaseCapture
GetCapture
LoadCursorA
SetCapture
ScreenToClient
ClientToScreen
GetClientRect
EqualRect
OffsetRect
SetRectEmpty
OemToCharA
CharToOemBuffA
GetDCEx
GetTabbedTextExtentA
GetSysColorBrush
DestroyCursor
PostQuitMessage
WindowFromDC
GetMessageA
TranslateMessage
ValidateRect
ShowOwnedPopups
GetScrollInfo
IsZoomed
OemToCharBuffA
CharToOemA
MsgWaitForMultipleObjects
PeekMessageA
GetClassInfoA
UpdateWindow
PtInRect
InvalidateRect
BringWindowToTop
GetKeyState
wsprintfA
GetParent
GetNextDlgTabItem
GetWindowRect
LoadBitmapA
GetFocus
IsChild
GetWindowTextA
SetWindowTextA
GetSysColor
AppendMenuA
CreatePopupMenu
DrawFocusRect
FillRect
CopyRect
WinHelpA
LoadIconA
GetSystemMetrics
GrayStringA
DrawTextExA
TabbedTextOutA
EnableWindow
SendMessageA
DrawTextA
SetRect
GetDlgItem
IsIconic

gdi32

ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
DeleteDC
LineTo
CreatePatternBrush
CreateBitmap
DPtoLP
GetWindowOrgEx
GetCharWidthA
CreateFontA
SetViewportExtEx
CreateCompatibleBitmap
CreateRectRgnIndirect
StartDocA
CreateMetaFileA
CloseMetaFile
DeleteMetaFile
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetViewportOrgEx
SetRectRgn
CombineRgn
GetMapMode
GetTextAlign
CreateEllipticRgn
LPtoDP
Ellipse
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextFaceA
GetTextExtentPointA
OffsetViewportOrgEx
StretchDIBits
SetViewportOrgEx
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetTextAlign
PatBlt
CreateFontIndirectA
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
GetObjectA
SelectObject
CreatePen
DeleteObject
EnumFontFamiliesExA
EnumFontFamiliesA
BitBlt
CreateCompatibleDC
CreateSolidBrush
GetStockObject
Rectangle
GetTextColor
GetBkColor
GetPaletteEntries
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetTextMetricsA
GetTextExtentPoint32A
GetDeviceCaps
CreateICA
MoveToEx

comdlg32

CommDlgExtendedError
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA
GetJobA

advapi32

SetFileSecurityA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueA
RegQueryValueExA
RegSetValueExA
RegOpenKeyA
RegCreateKeyA
RegCloseKey
GetFileSecurityA

shell32

SHGetFileInfoA
DragQueryFileA
ShellExecuteA
DragAcceptFiles
ShellAboutA
ExtractIconA
DragFinish

shlwapi

PathIsUNCA
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathRemoveFileSpecW

oledlg

ord11
ord1
ord3
ord5
ord4

ole32

OleCreateLinkToFile
OleGetIconOfClass
CreateItemMoniker
CreateGenericComposite
StgCreateDocfile
CreateFileMoniker
StgIsStorageFile
OleRun
OleIsRunning
OleSetMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CoLockObjectExternal
OleRegEnumVerbs
CreateOleAdviseHolder
OleRegGetMiscStatus
CreateDataAdviseHolder
CoDisconnectObject
CoRegisterClassObject
CoRevokeClassObject
CoInitializeEx
GetRunningObjectTable
OleGetClipboard
OleCreateFromFile
OleLockRunning
CreateStreamOnHGlobal
OleSaveToStream
WriteClassStm
OleSave
OleDuplicateData
CoTaskMemAlloc
CreateBindCtx
CoTreatAsClass
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
ReadClassStg
StringFromCLSID
CoTaskMemFree
ReleaseStgMedium
OleInitialize
OleUninitialize
CoCreateInstance
CoUninitialize
StgOpenStorage
OleSetContainedObject
GetHGlobalFromILockBytes
StgOpenStorageOnILockBytes
OleLoad
OleCreate
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData

oleaut32

SysStringByteLen
SysFreeString
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle

Sections

.text
Size: 468KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f1d7f57322cc7c9ec2a5da8d64e0ede

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

wininet

Sections

.text Size: 468KB - Virtual size: 468KB

.rdata Size: 132KB - Virtual size: 131KB

.data Size: 2.6MB - Virtual size: 2.6MB

.rsrc Size: 83KB - Virtual size: 83KB

.text
Size: 468KB - Virtual size: 468KB

.rdata
Size: 132KB - Virtual size: 131KB

.data
Size: 2.6MB - Virtual size: 2.6MB

.rsrc
Size: 83KB - Virtual size: 83KB