a48c03d7a9b54d3296b73aa7b42b2e1a6559477b0992221dc4206a7c53120b73

Sharing

Copy URL Twitter E-mail

General

Target

a48c03d7a9b54d3296b73aa7b42b2e1a6559477b0992221dc4206a7c53120b73
Size

475KB
MD5

94ac6691489b86c1b60b537a9f1ff8a5
SHA1

368a536e99d54cca518574ca3c2188e550f2bbeb
SHA256

a48c03d7a9b54d3296b73aa7b42b2e1a6559477b0992221dc4206a7c53120b73
SHA512

728483a7a490a34bc9daaabfec743d6427fcb64fd7957c5dde22a3e8175f98db5e68d49e2ea01bdfcdacc94e40f7d4b8cd731e50685a9d511fca8e1264ba1512
SSDEEP

12288:Uh6kwUu1Dsy9HLq0wzlYvX4fYN4ZWpIDNeSO:O9u1G1BYOZWp6DO

Score

1^/10

Malware Config

Signatures

Files

a48c03d7a9b54d3296b73aa7b42b2e1a6559477b0992221dc4206a7c53120b73
.exe windows x86

54aeaee0c9ba7478c3ce3f83c092b5ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesW
GetFileSizeEx
GetStartupInfoW
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
RtlUnwind
HeapReAlloc
RaiseException
ExitProcess
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
UnhandledExceptionFilter
IsDebuggerPresent
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
SetStdHandle
LCMapStringW
InitializeCriticalSectionAndSpinCount
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CreateFileA
SetEnvironmentVariableA
SetErrorMode
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetThreadLocale
GlobalFlags
lstrlenA
InterlockedDecrement
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetModuleHandleA
GetCurrentProcessId
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
FreeLibrary
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
FormatMessageW
LocalFree
MulDiv
FreeResource
GetVersion
WideCharToMultiByte
GetDiskFreeSpaceExW
GetSystemDirectoryW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
WritePrivateProfileStringW
DeleteFileW
TerminateThread
CreateThread
GetExitCodeProcess
WaitForSingleObject
GetTickCount
GetProcAddress
GetModuleHandleW
LoadLibraryW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetPrivateProfileStringW
GetVersionExW
GetLastError
CreateMutexW
SetLastError
GetModuleFileNameW
CloseHandle
GetFileTime
GetFileSize
CreateFileW
Sleep
lstrlenW
CreateDirectoryW
MultiByteToWideChar
GetModuleFileNameA
FindResourceW
LoadResource
LockResource
TerminateProcess
SizeofResource

user32

SetRect
InvalidateRgn
GetNextDlgGroupItem
CharUpperW
RegisterClipboardFormatW
PostThreadMessageW
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowThreadProcessId
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
IsRectEmpty
GetKeyState
SetMenu
UpdateWindow
CreateWindowExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowPos
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetMenuStringW
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
GetDlgItem
GetNextDlgTabItem
EndDialog
SetActiveWindow
DrawAnimatedRects
SetParent
SystemParametersInfoW
EnumChildWindows
GetClassNameW
TrackPopupMenu
GetCursorPos
RegisterWindowMessageW
DrawStateW
FillRect
CopyRect
ModifyMenuW
InsertMenuW
GetMenuState
CreateMenu
CreatePopupMenu
LoadMenuW
LoadCursorW
InflateRect
ReleaseDC
GetDC
SetWindowLongW
SetCursor
SetCapture
CopyAcceleratorTableW
CharNextW
UnregisterClassW
GetSysColorBrush
WindowFromPoint
DestroyMenu
PtInRect
MessageBeep
ValidateRect
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
EndPaint
RedrawWindow
ReleaseCapture
GetSysColor
OffsetRect
IsWindowEnabled
GetForegroundWindow
MessageBoxW
GetMenuItemID
GetSubMenu
GetMenuItemCount
IsWindowVisible
GetLastInputInfo
DrawIcon
IsIconic
GetSystemMetrics
PostMessageW
DeleteMenu
LoadBitmapW
AppendMenuW
GetSystemMenu
LoadIconW
GetMessageW
SetForegroundWindow
FindWindowW
DispatchMessageW
TranslateMessage
PeekMessageW
ScreenToClient
GetParent
GetWindowRect
LoadImageW
IsWindow
KillTimer
SetTimer
GetClientRect
InvalidateRect
SendMessageW
EnableWindow
GetClassInfoExW

gdi32

SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
Escape
RectVisible
CreatePen
CreateSolidBrush
GetBkColor
GetTextColor
GetRgnBox
TextOutW
ExcludeClipRect
PtVisible
GetWindowExtEx
GetViewportExtEx
CreateCompatibleDC
SetMapMode
SetBkMode
RestoreDC
SaveDC
DeleteObject
GetMapMode
CreateRectRgnIndirect
ExtTextOutW
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
Rectangle
GetTextExtentPoint32W
CreateFontIndirectW
GetObjectW
GetStockObject
GetTextMetricsW
CreateFontW
BitBlt
SelectObject
CreateCompatibleBitmap

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
GetUserNameW
RegQueryValueW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW

shell32

SHGetSpecialFolderPathW
ShellExecuteExW
Shell_NotifyIconW
SHAppBarMessage
ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW
PathRemoveFileSpecW
PathFindFileNameW
PathStripToRootW
PathFileExistsW
PathIsUNCW

oledlg

OleUIBusyW

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoInitializeEx
CoUninitialize
OleFlushClipboard
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitialize
CoRegisterMessageFilter
CoRevokeClassObject
OleIsCurrentClipboard

oleaut32

SysAllocString
OleCreateFontIndirect
SafeArrayDestroy
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysFreeString
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Sections

.text
Size: 311KB - Virtual size: 311KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

54aeaee0c9ba7478c3ce3f83c092b5ab

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

version

Sections

.text Size: 311KB - Virtual size: 311KB

.rdata Size: 81KB - Virtual size: 80KB

.data Size: 36KB - Virtual size: 52KB

.rsrc Size: 46KB - Virtual size: 45KB

.text
Size: 311KB - Virtual size: 311KB

.rdata
Size: 81KB - Virtual size: 80KB

.data
Size: 36KB - Virtual size: 52KB

.rsrc
Size: 46KB - Virtual size: 45KB