34752376e4316817e750bbd6ca62bf4cfa53358e240e275bf2ff2020f89dd6f1

Sharing

Copy URL

Twitter E-mail

General

Target

34752376e4316817e750bbd6ca62bf4cfa53358e240e275bf2ff2020f89dd6f1
Size

1.0MB
MD5

61dade4d5d54904ddf847bee81dacde9
SHA1

c849f2189c541dece6ece0822ce3edd7099d4382
SHA256

34752376e4316817e750bbd6ca62bf4cfa53358e240e275bf2ff2020f89dd6f1
SHA512

8e93fe455cdb8cc570e10df4492d9afc19cb455b865edea41f9bf3ec6976c2dabb250f289564fe0fd48731b5a7ba4ada990363c8bfbde9dfd0a0780c236a6b85
SSDEEP

12288:MuPSy0L5Ii6H+RwnjjLbz8PBQFc/b4Cq1woePUKgGg7yW/J2XmvIQNZED/EeYdg4:MuPSy0wj0Jt40eGg7yW4W7NwEehJlu

Score

N/A

Malware Config

Signatures

Files

34752376e4316817e750bbd6ca62bf4cfa53358e240e275bf2ff2020f89dd6f1
.exe windows x86

c2b30d441c8c3c629c36c16bc89f9fa8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathRemoveExtensionW
PathCombineW
PathAddBackslashW
PathRemoveFileSpecW
PathStripPathW

kernel32

GetSystemDirectoryW
FreeResource
LoadLibraryW
lstrlenW
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
CreateTimerQueueTimer
DeleteTimerQueueTimer
GetACP
MulDiv
OutputDebugStringW
GetCurrentProcessId
OpenProcess
GlobalAlloc
GlobalUnlock
GlobalLock
lstrcpynW
InitializeCriticalSectionEx
lstrcpyW
CreateEventW
OutputDebugStringA
TerminateProcess
GetCurrentProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
ReadConsoleW
FlushFileBuffers
HeapReAlloc
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
GetStdHandle
ExitProcess
FreeLibraryAndExitThread
ExitThread
FindFirstFileExW
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
GetCPInfo
LCMapStringEx
DecodePointer
EncodePointer
GetStringTypeW
InitOnceComplete
InitOnceBeginInitialize
GetExitCodeThread
LocalFree
QueryPerformanceFrequency
GetModuleHandleExW
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
FormatMessageA
InitializeSListHead
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Sleep
GetSystemTimeAsFileTime
FindNextFileW
FindClose
FindFirstFileW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesExW
DeviceIoControl
GetFullPathNameW
GetCurrentThreadId
RaiseException
SizeofResource
LockResource
LoadResource
GetModuleHandleW
FindResourceW
DeleteFileW
GetCommandLineW
GetLastError
CreateProcessW
GetModuleHandleA
GetVersionExW
GetModuleFileNameW
lstrcmpiW
SetEndOfFile
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
GetTickCount
GetFileSize
GetLocalTime
WideCharToMultiByte
SystemTimeToFileTime
GetCurrentDirectoryW
CloseHandle
LocalFileTimeToFileTime
MultiByteToWideChar
GetFileAttributesW
CreateFileW
SetFilePointer
SetFileTime
WriteFile
ReadFile
CreateDirectoryW
IsBadReadPtr
FreeLibrary
GetProcessHeap
GetProcAddress
HeapAlloc
GetNativeSystemInfo
LoadLibraryA
VirtualAlloc
VirtualFree
SetLastError
HeapFree
VirtualProtect
SetStdHandle
HeapSize
WriteConsoleW
WaitForSingleObject
CreateThread

user32

PostMessageW
GetMessageW
TranslateMessage
DispatchMessageW
CreateWindowExW
IsWindow
DestroyWindow
SetWindowPos
IsWindowVisible
IsIconic
IsZoomed
CharNextW
SetFocus
GetActiveWindow
GetFocus
GetKeyState
SetCapture
ReleaseCapture
GetDC
ReleaseDC
BeginPaint
EndPaint
GetUpdateRect
InvalidateRect
GetClientRect
GetWindowRect
SendMessageW
ScreenToClient
MapWindowPoints
IntersectRect
UnionRect
OffsetRect
IsRectEmpty
PtInRect
GetWindowLongW
SetWindowLongW
GetParent
GetWindow
MonitorFromWindow
GetMonitorInfoW
SetWindowRgn
MessageBoxW
InflateRect
DefWindowProcW
GetKeyNameTextW
GetKeyboardLayout
SetForegroundWindow
GetGUIThreadInfo
PostQuitMessage
CallWindowProcW
RegisterClassW
RegisterClassExW
GetClassInfoExW
ShowWindow
EnableWindow
GetSystemMetrics
SetPropW
GetPropW
LoadCursorW
LoadImageW
UpdateLayeredWindow
SetTimer
KillTimer
wsprintfW
MapVirtualKeyExW
GetCursorPos
InvalidateRgn
CreateAcceleratorTableW
DrawTextA
wsprintfA
EqualRect
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
IsWindowEnabled
SystemParametersInfoW
GetSysColor
ClientToScreen
GetCaretPos
SetCaretPos
ShowCaret
HideCaret
GetCaretBlinkTime
CreateCaret
TrackPopupMenu
AppendMenuW
EnableMenuItem
DestroyMenu
CreatePopupMenu
SetRect
FillRect
DrawTextW
CharPrevW
SetCursor
MonitorFromPoint
GetWindowRgn
MoveWindow

gdi32

SetBitmapBits
GetBitmapBits
FillRgn
GetTextExtentPointA
CreatePatternBrush
GdiFlush
TextOutW
MoveToEx
GetObjectA
SetTextColor
SetStretchBltMode
StretchBlt
SetBkMode
SetBkColor
ExtSelectClipRgn
SelectClipRgn
LineTo
GetTextExtentPoint32W
GetClipBox
GetCharABCWidthsW
CreateSolidBrush
CreateRectRgnIndirect
CreatePenIndirect
CreateCompatibleBitmap
GetDeviceCaps
CreateDIBSection
PtInRegion
CreateRectRgn
CreateRoundRectRgn
SetWindowOrgEx
GetObjectW
GetTextMetricsW
SelectObject
SaveDC
RestoreDC
Rectangle
RemoveFontMemResourceEx
AddFontMemResourceEx
GetStockObject
DeleteObject
DeleteDC
CreatePen
CreateFontIndirectW
CreateCompatibleDC
BitBlt
CombineRgn

advapi32

RegEnumKeyW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteKeyW
RegDeleteValueW
RegDeleteKeyExW
RegOpenKeyExW

shell32

SHGetSpecialFolderPathW

ole32

CoInitialize
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
OleLockRunning
CreateStreamOnHGlobal
CoUninitialize

oleaut32

VariantClear
VariantInit
SysFreeString
SysAllocString

comctl32

ord17
_TrackMouseEvent

gdiplus

GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipDrawImageRectI
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImageHeight
GdipGetImageWidth
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipCloneStringFormat
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipMeasureString
GdipDrawString
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipFillRectangleI
GdipDrawRectangleI
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipSetPenMode
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipFree
GdipAlloc
GdiplusShutdown
GdiplusStartup

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext

winhttp

WinHttpCheckPlatform
WinHttpCrackUrl
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpConnect
WinHttpSetOption
WinHttpSetTimeouts
WinHttpOpen
WinHttpCloseHandle

Sections

.text
Size: 661KB - Virtual size: 660KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 174KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c2b30d441c8c3c629c36c16bc89f9fa8

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

gdiplus

imm32

winhttp

Sections

.text Size: 661KB - Virtual size: 660KB

.rdata Size: 175KB - Virtual size: 174KB

.data Size: 15KB - Virtual size: 21KB

.rsrc Size: 174KB - Virtual size: 173KB

.reloc Size: 41KB - Virtual size: 40KB

.text
Size: 661KB - Virtual size: 660KB

.rdata
Size: 175KB - Virtual size: 174KB

.data
Size: 15KB - Virtual size: 21KB

.rsrc
Size: 174KB - Virtual size: 173KB

.reloc
Size: 41KB - Virtual size: 40KB