6afa680a451d29d76cd5a7b4d7b93519b205a320fd2b29aff8ae02a8bb206c7a

Sharing

Copy URL Twitter E-mail

General

Target

6afa680a451d29d76cd5a7b4d7b93519b205a320fd2b29aff8ae02a8bb206c7a
Size

1.0MB
MD5

9b501e558c38718de5c17023041061a9
SHA1

db3df5cc78468d68a227fbd02800c96b02e8633b
SHA256

6afa680a451d29d76cd5a7b4d7b93519b205a320fd2b29aff8ae02a8bb206c7a
SHA512

438854317c60ff2560f86ccb7f37705447c925e889da37ca55155a144ad30b5f14503096841bc2bb168523a86a67523dc93e50085793612347e4ed0af5fe56f0
SSDEEP

24576:kI1998TUWhqqp+68Vv8D3z1TUZsNzf+Qs6QX:n199eUWv068Vvq3z1TUZsLYX

Score

1^/10

Malware Config

Signatures

Files

6afa680a451d29d76cd5a7b4d7b93519b205a320fd2b29aff8ae02a8bb206c7a
.exe windows x86

6749478557528e2fcbf50b6b3f287d11

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
ExitProcess
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
VirtualQuery
GetSystemInfo
MultiByteToWideChar
VirtualAlloc
VirtualProtect
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
RtlUnwind
GetStartupInfoW
GetFileSizeEx
FileTimeToLocalFileTime
SetErrorMode
GetFileTime
GlobalGetAtomNameW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FileTimeToSystemTime
WritePrivateProfileStringW
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetFullPathNameW
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
ReadFile
GetThreadLocale
GetModuleHandleA
lstrlenA
WideCharToMultiByte
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
MulDiv
GetModuleFileNameW
InterlockedIncrement
lstrlenW
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryW
FreeLibrary
CompareStringW
LoadLibraryA
SetLastError
lstrcmpW
GetModuleHandleW
GetProcAddress
GetVersionExA
GetVersion
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
Sleep
TerminateProcess
GetTickCount
GetEnvironmentVariableW
GetVolumeInformationW
InterlockedDecrement
CopyFileW
GetWindowsDirectoryW
GetTempPathW
GetCurrentProcess
GetLastError
GetProcessHeap
HeapAlloc
HeapFree
GetVersionExW
CreateFileW
GetFileSize
SetFilePointer
WriteFile
CloseHandle
FindFirstFileW
GetFileAttributesW
SetFileAttributesW
RemoveDirectoryW
DeleteFileW
FindNextFileW
FindClose
LoadResource
LockResource
SizeofResource
FindResourceW

user32

InsertMenuItemW
CreatePopupMenu
SetRectEmpty
BringWindowToTop
TranslateAcceleratorW
InvalidateRgn
SetRect
CopyAcceleratorTableW
UnregisterClassW
DestroyMenu
GetMenuItemInfoW
InflateRect
GetSysColorBrush
RegisterClipboardFormatW
SetWindowContextHelpId
MapDialogRect
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
ShowOwnedPopups
GetMessageW
TranslateMessage
GetActiveWindow
ValidateRect
PostQuitMessage
CharUpperW
EndPaint
BeginPaint
ReleaseDC
GetDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetCursorPos
ReleaseCapture
SetCursor
LoadCursorW
SetCapture
KillTimer
SetTimer
ClientToScreen
SetWindowRgn
FillRect
IsRectEmpty
SystemParametersInfoW
InvalidateRect
IsWindowEnabled
ShowWindow
LoadAcceleratorsW
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
EnableWindow
GetClientRect
GetSystemMetrics
DrawIcon
SetPropW
GetPropW
RemovePropW
IsWindow
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
UpdateWindow
LoadMenuW
ReuseDDElParam
UnpackDDElParam
CharNextW
GetNextDlgGroupItem
MessageBeep
PostMessageW
GetSubMenu
PostThreadMessageW
MoveWindow
SendMessageW
IsIconic
GetWindowRect
LoadIconW
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuW
GetParent
GetFocus
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetWindow
GetWindowPlacement
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowPos
SetWindowLongW
GetWindowLongW
GetMenu
CallWindowProcW
DefWindowProcW
GetDlgCtrlID
PtInRect
CopyRect
SetScrollInfo
GetScrollInfo
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
GetSysColor
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
GetMenuItemID
GetMenuItemCount
MessageBoxW
GetWindowDC

gdi32

GetBkColor
GetTextColor
CreateCompatibleBitmap
GetTextExtentPoint32W
GetRgnBox
CreateFontIndirectW
CreateRectRgnIndirect
CreateSolidBrush
GetStockObject
CreateCompatibleDC
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
TextOutW
SelectObject
Escape
GetMapMode
CreateBitmap
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
Ellipse
LPtoDP
CreateEllipticRgn
GetDeviceCaps
GetObjectW
SetBkColor
SetTextColor
GetClipBox
ExtTextOutW

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegQueryInfoKeyW
RegCreateKeyExW
RegQueryValueW
RegDeleteKeyW
RegCreateKeyW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegEnumValueW
RegOpenKeyW
GetUserNameW
RegSetKeySecurity
CopySid
RegEnumKeyW
AllocateAndInitializeSid
InitializeAcl
AddAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
FreeSid
RegOpenKeyExW
RegGetKeySecurity
RegCloseKey
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
OpenProcessToken
GetTokenInformation
GetLengthSid

shell32

DragQueryFileW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderPathW
SHEmptyRecycleBinW
ShellExecuteW
SHGetDesktopFolder
DragFinish

comctl32

ord17

shlwapi

PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathFindExtensionW
StrRetToBufW
PathFindFileNameW

oledlg

OleUIBusyW

ole32

CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoInitializeEx
CoUninitialize
CoTaskMemAlloc
OleInitialize
CoTaskMemFree
CoDisconnectObject
OleRun
CoSetProxyBlanket
CoCreateInstance
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysFreeString
SysAllocString
VariantClear
VariantInit
VariantCopy
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
VariantChangeType
SysStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromCy
LoadTypeLi
OleCreateFontIndirect
GetErrorInfo

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

wininet

FindNextUrlCacheEntryW
DeleteUrlCacheEntryW
FindFirstUrlCacheEntryW

Sections

.text
Size: 394KB - Virtual size: 394KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 532KB - Virtual size: 531KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6749478557528e2fcbf50b6b3f287d11

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

version

wininet

Sections

.text Size: 394KB - Virtual size: 394KB

.rdata Size: 114KB - Virtual size: 114KB

.data Size: 12KB - Virtual size: 27KB

.rsrc Size: 532KB - Virtual size: 531KB

.text
Size: 394KB - Virtual size: 394KB

.rdata
Size: 114KB - Virtual size: 114KB

.data
Size: 12KB - Virtual size: 27KB

.rsrc
Size: 532KB - Virtual size: 531KB