e782263ebcddce7623aa3d80129604670aa9878c218ef7a959f29e5f0f92c810

Sharing

Copy URL Twitter E-mail

General

Target

e782263ebcddce7623aa3d80129604670aa9878c218ef7a959f29e5f0f92c810
Size

608KB
MD5

a2c0973bcdeb269db582aa11ccfe7f0f
SHA1

72e90a5d809e6ab2f947a7c2698d45c0a3473320
SHA256

e782263ebcddce7623aa3d80129604670aa9878c218ef7a959f29e5f0f92c810
SHA512

843a70beb46f2103cf4677200559ba07c2d1b738537ad0c986fb9453210df5f344e9c61b95fc1930f76f630dd2cfac188aeb00e18585da399824825f62d442e6
SSDEEP

12288:CYIgJFnIa0+F8hJS5bmTOKnATbE8JMqmPecOeuC70Kh:CYIgJNohJCM9ATbXMPgK

Score

1^/10

Malware Config

Signatures

Files

e782263ebcddce7623aa3d80129604670aa9878c218ef7a959f29e5f0f92c810
.exe windows x86

a4dc04715f58ddfd9346ba8a11d2c276

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathStripToRootA
PathStripPathA
PathIsUNCA
PathFindFileNameA
PathRenameExtensionA

kernel32

GetDriveTypeA
WriteFile
SetFileTime
GetCurrentDirectoryA
GetFileAttributesA
CreateDirectoryA
LocalFileTimeToFileTime
SystemTimeToFileTime
ReadFile
SetFilePointer
lstrlenA
SetLastError
CreateFileA
FindFirstFileA
FindClose
GetLastError
GetTickCount64
DeleteFileA
GetPrivateProfileStringA
GetTickCount
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
CloseHandle
GetLocalTime
GetModuleHandleA
GetPrivateProfileIntA
FreeConsole
LoadLibraryA
GetProcAddress
GetModuleFileNameA
lstrcpyA
lstrcatA
WritePrivateProfileStringA
InterlockedDecrement
FreeLibrary
MulDiv
MultiByteToWideChar
LocalFree
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
FreeResource
GetVersionExA
lstrcmpW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
lstrcmpA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GetCurrentProcessId
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GetModuleHandleW
InterlockedIncrement
FileTimeToSystemTime
WaitForSingleObject
GlobalFlags
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
GetLocaleInfoA
GetCPInfo
GetOEMCP
Sleep
ExitProcess
RaiseException
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
VirtualAlloc
HeapReAlloc
SetStdHandle
GetFileType
ExitThread
CreateThread
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetConsoleCP
GetConsoleMode
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
SleepEx
VerifyVersionInfoA
VerSetConditionMask
GetSystemDirectoryA
PeekNamedPipe
WaitForMultipleObjects
ExpandEnvironmentStringsA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetFileInformationByHandle

user32

MapWindowPoints
GetMessagePos
GetMessageTime
GetTopWindow
DispatchMessageA
GetLastActivePopup
GetForegroundWindow
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
GetCapture
WinHelpA
LoadIconA
RegisterWindowMessageA
CheckMenuItem
EnableMenuItem
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetDC
ReleaseDC
CharUpperA
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
BeginPaint
EndPaint
GetWindowThreadProcessId
GetSysColorBrush
LoadCursorA
TranslateMessage
GetMessageA
DestroyMenu
PostQuitMessage
GetKeyState
SetMenu
GetScrollPos
SetForegroundWindow
UpdateWindow
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
ScreenToClient
DefWindowProcA
CallWindowProcA
GetMenu
IsIconic
GetWindowPlacement
GetSystemMetrics
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetNextDlgTabItem
EndDialog
GetWindowTextLengthA
GetWindowTextA
GetFocus
SetWindowPos
SetFocus
IsWindowEnabled
ShowWindow
MoveWindow
GetDlgCtrlID
IsWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
GetDlgItem
GetWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
UnhookWindowsHookEx
OffsetRect
CopyRect
GetWindowRect
GetMonitorInfoA
SystemParametersInfoA
MonitorFromPoint
SendMessageA
EnumWindows
GetClientRect
SetTimer
KillTimer
ShowScrollBar
GetParent
EnableWindow
PeekMessageA
SetWindowLongA
GetWindowLongA
FindWindowA
GetAsyncKeyState
MessageBeep
DestroyIcon
LoadImageA
IsRectEmpty
PtInRect
FillRect
PostMessageA
InvalidateRgn
ValidateRect
GetSysColor
wsprintfA

gdi32

CreatePen
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SetTextColor
SetBkColor
GetObjectA
CreateBitmap
SaveDC
RestoreDC
SetBkMode
SetMapMode
LineTo
MoveToEx
CreateSolidBrush
DeleteObject
CreateCompatibleBitmap
CreateRectRgn
CombineRgn
CreateCompatibleDC
Rectangle
BitBlt
GetTextExtentPoint32A
GetCurrentObject
DeleteDC
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
GetStockObject
GetDeviceCaps

advapi32

CryptCreateHash
CryptDestroyHash
CryptGetHashParam
CryptDestroyKey
CryptEncrypt
CryptImportKey
RegOpenKeyA
RegQueryValueExA
RegCloseKey
CryptHashData
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

shell32

ShellExecuteA

comctl32

ImageList_DrawEx

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle

wldap32

ord50
ord200
ord60
ord143
ord30
ord22
ord211
ord26
ord46
ord41
ord27
ord301
ord33
ord79
ord35
ord32

ws2_32

getsockname
ntohl
htonl
gethostname
ioctlsocket
listen
accept
recvfrom
sendto
getaddrinfo
freeaddrinfo
connect
socket
closesocket
WSAStartup
WSACleanup
getpeername
__WSAFDIsSet
WSAGetLastError
select
recv
send
WSAIoctl
setsockopt
WSASetLastError
ntohs
bind
htons
getsockopt

crypt32

CertFreeCertificateContext

oleacc

LresultFromObject
CreateStdAccessibleObject

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

comdlg32

GetFileTitleA

oleaut32

VariantClear
VariantChangeType
VariantInit

Exports

Exports

GetSourceData
GetSourceDesc
GetSourcesNum
SetupSource

Sections

.text
Size: 443KB - Virtual size: 442KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4dc04715f58ddfd9346ba8a11d2c276

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

advapi32

shell32

comctl32

wininet

wldap32

ws2_32

crypt32

oleacc

winspool.drv

comdlg32

oleaut32

Exports

Exports

Sections

.text Size: 443KB - Virtual size: 442KB

.rdata Size: 93KB - Virtual size: 92KB

.data Size: 9KB - Virtual size: 24KB

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 42KB - Virtual size: 41KB

.text
Size: 443KB - Virtual size: 442KB

.rdata
Size: 93KB - Virtual size: 92KB

.data
Size: 9KB - Virtual size: 24KB

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 42KB - Virtual size: 41KB