3244dde119e5cd4e604165996e1ab815ef6d39b43d65e38538a8de618efb2478

Sharing

Copy URL Twitter E-mail

General

Target

3244dde119e5cd4e604165996e1ab815ef6d39b43d65e38538a8de618efb2478
Size

957KB
MD5

e5bff3b382699ba69a3a682c018b40cd
SHA1

d2feae59b19e7ba626d7839a5872c15701950a1a
SHA256

3244dde119e5cd4e604165996e1ab815ef6d39b43d65e38538a8de618efb2478
SHA512

7857db65db83ee6f5287bb713d1c2aa70ec1eb4dcd79c26bb0481c0239ee2083e6180520dbe331a830eb188cf33426fc6a61a49c35ce28d04219be69cbfbc8a3
SSDEEP

12288:c/qY4PYE3ZUlHLhtAhg8zqvuHO198tdGnNCEQ05IwEDW4n786iZJGptVk8z:c/qYb6SVL7AesOwWnEEDKC4n7HaobF

Score

1^/10

Malware Config

Signatures

Files

3244dde119e5cd4e604165996e1ab815ef6d39b43d65e38538a8de618efb2478
.exe windows x86

f14d7a71bf42f6bfc23edb05ae237c4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToSystemTime
FileTimeToLocalFileTime
GetUserDefaultLangID
GetComputerNameA
GetDiskFreeSpaceExW
GlobalMemoryStatusEx
DeviceIoControl
CreateFileA
LoadLibraryA
OpenEventW
OpenSemaphoreW
GetCurrentProcessId
ExpandEnvironmentStringsW
OpenMutexW
GetTempPathW
CreateProcessW
GetSystemTime
SetUnhandledExceptionFilter
CreateEventW
CreateThread
SetEvent
ResetEvent
SetFileAttributesW
MoveFileW
GetLogicalDriveStringsW
QueryDosDeviceW
lstrcpyW
lstrcatW
OutputDebugStringW
GetCurrentDirectoryA
GetFullPathNameA
FindFirstFileA
GetDriveTypeA
GetVolumeInformationW
ExpandEnvironmentStringsA
FormatMessageA
GetSystemDirectoryA
SleepEx
SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
FlushFileBuffers
MoveFileExW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
ExitProcess
GetModuleHandleA
HeapCreate
GetCPInfo
LCMapStringW
LCMapStringA
RtlUnwind
GetStartupInfoW
ExitThread
GetSystemTimeAsFileTime
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
GetThreadLocale
GetLocaleInfoA
GetACP
GetVersionExA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GlobalFree
GetVersionExW
FlushInstructionCache
GetSystemInfo
InterlockedCompareExchange
GetLocalTime
ProcessIdToSessionId
LocalFree
LocalAlloc
OpenProcess
GetSystemDirectoryW
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
GetWindowsDirectoryW
GetTickCount
SetEndOfFile
WriteFile
CreateDirectoryW
GetFileAttributesW
SetFilePointer
DeleteFileW
GetPrivateProfileIntW
WideCharToMultiByte
GetFileSize
WaitForSingleObject
InterlockedExchange
SetLastError
FreeResource
GlobalAlloc
GlobalLock
GetPrivateProfileStringW
GetProcAddress
ReadFile
lstrlenA
LoadLibraryW
CreateFileW
GetStringTypeA
GlobalUnlock
Sleep
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetCurrentProcess
TerminateThread
DeleteCriticalSection
GetLastError
GetCurrentThreadId
lstrcmpiW
FreeLibrary
GetModuleFileNameW
EnterCriticalSection
InitializeCriticalSection
LoadLibraryExW
FindResourceW
GetModuleHandleW
LoadResource
SizeofResource
RaiseException
CreateFileMappingW
lstrlenW
FindResourceExW
LeaveCriticalSection
LockResource
InterlockedDecrement
MultiByteToWideChar
InterlockedIncrement
UnmapViewOfFile
CloseHandle
MapViewOfFileEx
GetStringTypeW
VirtualQuery

user32

PostMessageW
GetParent
LoadImageW
IsWindow
GetWindow
GetWindowRect
InvalidateRect
LoadBitmapW
GetWindowLongW
FindWindowW
GetClientRect
InflateRect
MapWindowPoints
GetDlgItem
SetWindowLongW
GetActiveWindow
GetDesktopWindow
IsWindowEnabled
EnableWindow
LoadCursorW
GetWindowThreadProcessId
GetForegroundWindow
CreateWindowExW
ShowWindow
SystemParametersInfoW
SendMessageW
SetWindowPos
AttachThreadInput
GetClassInfoExW
SetForegroundWindow
GetDC
ReleaseDC
CopyRect
SetActiveWindow
EnumDisplayDevicesA
RegisterClassExW
SetCapture
DrawFrameControl
ReleaseCapture
CallWindowProcW
GetCursorPos
DrawTextW
SetCursor
LoadIconW
GetFocus
SetRect
DestroyIcon
IsChild
IsWindowVisible
IsDialogMessageW
SetFocus
KillTimer
IsRectEmpty
EqualRect
GetNextDlgTabItem
IntersectRect
OffsetRect
BeginPaint
PostThreadMessageW
EndPaint
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
SetRectEmpty
ScreenToClient
MonitorFromWindow
GetMonitorInfoW
DrawIconEx
GetDlgCtrlID
ClientToScreen
PtInRect
UpdateLayeredWindow
UnregisterClassA
MoveWindow
EnumDisplayDevicesW
EnumDisplaySettingsW
GetSystemMetrics
RegisterWindowMessageW
CharNextW
DefWindowProcW
DestroyWindow

gdi32

GetTextColor
LineTo
RoundRect
RectInRegion
GetClipRgn
SetBkMode
GetCurrentObject
CreateFontIndirectW
OffsetRgn
CreateRectRgnIndirect
ExtSelectClipRgn
CombineRgn
GetViewportOrgEx
TextOutW
CreateRoundRectRgn
SetViewportOrgEx
GetTextExtentPoint32W
SelectClipRgn
CreateDIBSection
CreateCompatibleDC
CreateRectRgn
DeleteDC
SetStretchBltMode
StretchBlt
SaveDC
GetDeviceCaps
CreateCompatibleBitmap
CreateBitmap
GetObjectW
DeleteObject
SetBkColor
CreatePen
GetStockObject
BitBlt
SelectObject
SetTextColor
ExtTextOutW
RestoreDC
Rectangle
MoveToEx

advapi32

RegOpenKeyExA
RegQueryInfoKeyW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CreateProcessAsUserW
RegQueryValueExA
RegEnumKeyExA
SetTokenInformation
DuplicateTokenEx
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
RegQueryValueExW
RegOpenKeyW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
RegEnumKeyExW
RegSetValueExW

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteW
SHGetFolderPathW
SHGetMalloc
SHGetSpecialFolderPathW

ole32

CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
CreateStreamOnHGlobal
CoSetProxyBlanket
CoUninitialize
CoInitializeSecurity
CoCreateGuid
CoTaskMemAlloc
CoInitializeEx

oleaut32

SafeArrayUnlock
SafeArrayLock
SysStringLen
VariantClear
VariantInit
VarUI4FromStr
SysFreeString
SysAllocString

shlwapi

PathFileExistsW
PathAppendW
PathFindExtensionW
PathFindFileNameW
StrToIntW
PathAddBackslashW
PathRemoveFileSpecW
StrToIntA

comctl32

_TrackMouseEvent
InitCommonControlsEx

msimg32

AlphaBlend

gdiplus

GdipClosePathFigure
GdipAddPathRectangleI
GdipTranslateWorldTransform
GdipCreateStringFormat
GdipSetTextRenderingHint
GdipRotateWorldTransform
GdipDeletePath
GdipDeleteStringFormat
GdipResetWorldTransform
GdipCreatePath
GdipDrawRectangleI
GdipSetStringFormatAlign
GdipCreateSolidFill
GdipCreateFont
GdipSetCompositingQuality
GdipMeasureString
GdipSetPixelOffsetMode
GdipDrawLine
GdipCreateFontFromLogfontW
GdipGetFamily
GdipSetSmoothingMode
GdipSetStringFormatLineAlign
GdipFillRectangle
GdipSetPenMode
GdipFillRectangleI
GdipSetPenDashStyle
GdipSetStringFormatFlags
GdipSetPenStartCap
GdipSetStringFormatTrimming
GdipAddPathStringI
GdipSetPenEndCap
GdipGetFontSize
GdipDeletePen
GdipFillPath
GdipCreatePen1
GdipDrawImageI
GdipNewPrivateFontCollection
GdipAddPathPieI
GdipDeletePrivateFontCollection
GdipAddPathArcI
GdipCloneBrush
GdipPrivateAddFontFile
GdipSetClipPath
GdipDrawLinesI
GdipGetFontCollectionFamilyCount
GdipDeleteBrush
GdipDrawString
GdipDrawPath
GdipGetFontCollectionFamilyList
GdipCloneFontFamily
GdipSetInterpolationMode
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipCloneImage
GdipGetImageGraphicsContext
GdipGraphicsClear
GdipLoadImageFromFile
GdipDisposeImage
GdipDrawImageRectI
GdipCloneBitmapArea
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipDrawImageRectRectI
GdiplusShutdown
GdipCreateBitmapFromStream
GdipSetImageAttributesColorMatrix
GdipLoadImageFromStream
GdipImageRotateFlip
GdipCreateHBITMAPFromBitmap
GdiplusStartup
GdipDeleteGraphics
GdipAlloc
GdipCreateFromHDC
GdipDrawImageRectRect
GdipFree
GdipGetImageWidth
GdipDeleteFontFamily
GdipGetImageHeight
GdipDrawImagePointsRectI
GdipDeleteFont

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

wtsapi32

WTSFreeMemory
WTSEnumerateSessionsW

rasapi32

RasEnumConnectionsW

iphlpapi

IcmpSendEcho
IcmpCreateFile
IcmpCloseHandle
GetAdaptersInfo

psapi

GetModuleFileNameExW
GetProcessImageFileNameW

Sections

.text
Size: 668KB - Virtual size: 667KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f14d7a71bf42f6bfc23edb05ae237c4a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

gdiplus

version

wtsapi32

rasapi32

iphlpapi

psapi

Sections

.text Size: 668KB - Virtual size: 667KB

.rdata Size: 140KB - Virtual size: 139KB

.data Size: 20KB - Virtual size: 32KB

.rsrc Size: 112KB - Virtual size: 112KB

.text
Size: 668KB - Virtual size: 667KB

.rdata
Size: 140KB - Virtual size: 139KB

.data
Size: 20KB - Virtual size: 32KB

.rsrc
Size: 112KB - Virtual size: 112KB