aee581f680589ca74776239518273b1e1de7f27be036c826a8385cacaf650fc8

Sharing

Copy URL Twitter E-mail

General

Target

aee581f680589ca74776239518273b1e1de7f27be036c826a8385cacaf650fc8
Size

4.2MB
MD5

52c86b7ba69b8140a786d7ebe808a1fa
SHA1

3eb5b8f0b42635320ef76745277fd6eb95d86e0c
SHA256

aee581f680589ca74776239518273b1e1de7f27be036c826a8385cacaf650fc8
SHA512

cfb6c5d09cdf599486bb6a6dfdb73b53d607b88de231bc0c3d7b0a385b45673e6c4f2b0592065c7961f0f711d8ca0a68e088e4b0d509fcddff37f55b0a91419e
SSDEEP

98304:wiBB2HfmR4taYewBxdi0cttZocmyCZ0jXCyr6M4OiZrq1DfPHNADtV6v+:pB2+utaY1RbcmyCZ0jXC2T4O7NADtV6W

Score

1^/10

Malware Config

Signatures

Files

aee581f680589ca74776239518273b1e1de7f27be036c826a8385cacaf650fc8
.exe windows x86

dc0324692f735279c0c7b3763f42f93b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CertOpenStore
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertFindExtension
CertFreeCertificateChain
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryW
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertAddCertificateContextToStore

ws2_32

htons
inet_addr
WSAGetLastError
setsockopt
ioctlsocket
freeaddrinfo
htonl
getsockopt
WSARecv
connect
getsockname
getaddrinfo
WSASocketW
WSASetLastError
listen
select
WSASend
closesocket
WSAIoctl
bind
accept
__WSAFDIsSet
inet_ntoa
WSAAddressToStringW
ntohs
getpeername
ntohl
shutdown
send
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAResetEvent
WSASetEvent
WSAWaitForMultipleEvents
recv
socket
recvfrom
sendto
gethostname
WSAStartup
WSACleanup

wldap32

ord127
ord27
ord26
ord142
ord208
ord216
ord14
ord46
ord79
ord73
ord147
ord41
ord219
ord145
ord301
ord117
ord133
ord167

rasapi32

RasEnumConnectionsW

kernel32

GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GlobalAddAtomW
GlobalUnlock
lstrcpyW
GlobalSize
MulDiv
EncodePointer
GlobalFindAtomW
GlobalReAlloc
GlobalHandle
LocalAlloc
ResumeThread
GetFileSize
GetCurrentDirectoryW
CompareStringW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
FlushFileBuffers
GetFullPathNameW
GetVolumeInformationW
LockFile
SetEndOfFile
SetFilePointer
UnlockFile
DuplicateHandle
lstrcmpiW
GlobalGetAtomNameW
FileTimeToSystemTime
GetTempFileNameW
GetTempPathW
GetProfileIntW
SearchPathW
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesExW
GetFileTime
SystemTimeToTzSpecificLocalTime
GetWindowsDirectoryW
FindResourceExW
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
SetThreadPriority
GetCurrentThreadId
GetModuleHandleA
PeekNamedPipe
GetStdHandle
GetFileType
GetEnvironmentVariableA
MoveFileExW
GetSystemDirectoryW
InitializeCriticalSection
GetCurrentProcessId
OpenProcess
GetVersionExA
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
GetTickCount
IsBadReadPtr
GetNativeSystemInfo
LoadLibraryA
GetThreadLocale
VirtualAlloc
VirtualFree
VirtualProtect
FreeResource
GetFileSizeEx
ReadFile
CreateIoCompletionPort
CreateSemaphoreA
TlsGetValue
VerifyVersionInfoW
SleepEx
GetModuleHandleW
VerSetConditionMask
CreateEventW
WaitForMultipleObjectsEx
GetQueuedCompletionStatus
InterlockedCompareExchange
ReleaseSemaphore
CreateWaitableTimerW
TlsSetValue
SetWaitableTimer
Sleep
FindClose
FindNextFileW
FindFirstFileW
GetComputerNameA
GetDriveTypeW
GlobalMemoryStatusEx
GetProcAddress
LoadLibraryW
GetSystemInfo
GlobalFree
DeleteFileW
GlobalAlloc
GetDiskFreeSpaceExW
MultiByteToWideChar
SetFileAttributesW
GetFileAttributesW
CreateFileW
DeviceIoControl
WriteFile
SetLastError
CreateDirectoryW
CreateThread
FindResourceW
LoadResource
LockResource
lstrcpynW
SizeofResource
CreateEventA
FormatMessageA
TlsFree
InterlockedIncrement
WideCharToMultiByte
CopyFileW
LocalFree
QueueUserAPC
CloseHandle
InterlockedExchangeAdd
TlsAlloc
TerminateThread
SetEvent
FormatMessageW
PostQueuedCompletionStatus
WaitForSingleObject
WaitForMultipleObjects
GetModuleFileNameW
TerminateProcess
InterlockedDecrement
GetCurrentProcess
InterlockedExchange
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
HeapFree
lstrcmpW
lstrcmpA
GlobalLock
GlobalDeleteAtom
LoadLibraryExW
GetVersionExW
FreeLibrary
GetCurrentThread
OutputDebugStringW
OpenEventA
RtlUnwind
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
SetFilePointerEx
GetCommandLineA
GetCommandLineW
VirtualQuery
HeapQueryInformation
SetStdHandle
ExitProcess
GetACP
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetStringTypeW
GetDateFormatW
GetTimeFormatW
LCMapStringW
GetTimeZoneInformation
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
LocalReAlloc
WriteConsoleW

user32

IsDialogMessageW
CheckDlgButton
MoveWindow
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetTopWindow
GetClassLongW
EqualRect
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
GetClassInfoExW
RegisterClassW
CallWindowProcW
GetMessageTime
GetMessagePos
GetClassNameW
InvalidateRect
EnumDisplayMonitors
GetMonitorInfoW
SystemParametersInfoW
LoadCursorW
CopyRect
SetRectEmpty
SetLayeredWindowAttributes
GetClassInfoW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
RemoveMenu
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringW
TranslateAcceleratorW
GetWindow
SetWindowContextHelpId
UnhookWindowsHookEx
PtInRect
ScreenToClient
ClientToScreen
GetDesktopWindow
SetActiveWindow
GetNextDlgTabItem
DestroyMenu
EndDialog
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetLastActivePopup
GetWindowThreadProcessId
MessageBoxW
IsWindowEnabled
SetCursor
ShowOwnedPopups
PostMessageW
DrawIconEx
GetParent
IsRectEmpty
OffsetRect
InflateRect
FillRect
DrawFocusRect
GetSysColorBrush
GetSysColor
MapWindowPoints
GetWindowRect
RedrawWindow
SetWindowRgn
DrawStateW
GetFocus
DrawFrameControl
DrawEdge
RegisterWindowMessageW
CallNextHookEx
SetWindowsHookExW
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageW
GetWindowLongW
GetMessageW
DefWindowProcW
GetDC
SetWindowPos
CreateWindowExW
RegisterClassExW
ShowWindow
DispatchMessageW
SetTimer
TranslateMessage
UpdateLayeredWindow
CharUpperBuffW
RegisterClipboardFormatW
SubtractRect
GetKeyNameTextW
CreateAcceleratorTableW
LoadAcceleratorsW
MapVirtualKeyW
IntersectRect
KillTimer
PostQuitMessage
UpdateWindow
CharNextW
MessageBoxA
GetSystemMenu
LoadMenuW
SendMessageW
GetSystemMetrics
SetWindowTextW
DrawIcon
GetSubMenu
LoadIconW
SetWindowLongW
GetClientRect
AppendMenuW
SetForegroundWindow
IsIconic
GetCursorPos
EnableWindow
UnregisterClassW
GetMenuItemInfoW
GetKeyboardLayout
ToUnicodeEx
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
SendDlgItemMessageA
GetKeyboardState
WaitMessage
RealChildWindowFromPoint
GetUpdateRect
InvertRect
HideCaret
GetWindowRgn
DestroyCursor
CreateMenu
GetComboBoxInfo
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
SetClassLongW
DestroyAcceleratorTable
MapVirtualKeyExW
IsCharLowerW
PostThreadMessageW
IsClipboardFormatAvailable
FrameRect
ReuseDDElParam
UnpackDDElParam
GetDlgItem
InsertMenuItemW
ModifyMenuW
SetMenuDefaultItem
GetMenuDefaultItem
CopyIcon
GetIconInfo
GetDoubleClickTime
EnableScrollBar
LockWindowUpdate
CreatePopupMenu
BringWindowToTop
UnionRect
SetRect
SetCursorPos
NotifyWinEvent
WindowFromPoint
MessageBeep
DeleteMenu
ReleaseCapture
SetCapture
GetAsyncKeyState
CharUpperW
IsZoomed
TrackMouseEvent
CopyImage
LoadImageW
DestroyIcon
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
MonitorFromPoint
MapDialogRect
SetParent

gdi32

GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreatePatternBrush
CreatePen
CreateBitmap
BitBlt
GetDeviceCaps
CreateDCW
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
CopyMetaFileW
MoveToEx
TextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateCompatibleBitmap
CreateDIBitmap
CreateFontIndirectW
EnumFontFamiliesW
GetTextCharsetInfo
GetMapMode
SetRectRgn
DPtoLP
RealizePalette
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateRoundRectRgn
Rectangle
GetRgnBox
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
SetPixelV
GetTextFaceW
GetTextMetricsW
Polyline
Polygon
CreatePolygonRgn
ExtTextOutW
PatBlt
GetTextExtentPoint32W
GetTextColor
GetBkColor
Ellipse
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreateHatchBrush
CreateEllipticRgn
CombineRgn
SelectObject
CreateCompatibleDC
GetObjectW
DeleteObject
DeleteDC

msimg32

AlphaBlend
TransparentBlt

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

CryptDestroyHash
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
CryptEncrypt
CryptImportKey
CryptDestroyKey
RegQueryValueExW
RegDeleteValueW
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
GetUserNameA
RegCloseKey
RegCreateKeyExW
RegSetValueExW

shell32

Shell_NotifyIconW
ShellExecuteExW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
SHBrowseForFolderW
SHGetDesktopFolder
DragFinish
DragQueryFileW
ShellExecuteW
SHGetFileInfoW
SHAppBarMessage

comctl32

InitCommonControlsEx

shlwapi

PathIsURLA
PathFileExistsW
PathIsDirectoryW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
StrFormatKBSizeW

uxtheme

IsThemeBackgroundPartiallyTransparent
GetThemePartSize
GetWindowTheme
DrawThemeText
IsAppThemed
DrawThemeParentBackground
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData
GetThemeSysColor

ole32

CoFreeUnusedLibraries
OleInitialize
OleUninitialize
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoUninitialize
CoCreateInstance
CoInitializeEx
CoInitialize
CreateStreamOnHGlobal
CoCreateGuid
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
OleDuplicateData
ReleaseStgMedium
CoRegisterMessageFilter
CoRevokeClassObject

oleaut32

VariantTimeToSystemTime
SafeArrayDestroy
SystemTimeToVariantTime
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
LoadTypeLi
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocString

oledlg

OleUIBusyW

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdiplusShutdown
GdipFree
GdipCreateHBITMAPFromBitmap
GdipDisposeImage
GdipCreateBitmapFromStreamICM
GdipAlloc
GdipCreateBitmapFromStream
GdipCloneImage
GdiplusStartup
GdipGetImagePaletteSize

mswsock

GetAcceptExSockaddrs
AcceptEx

iphlpapi

GetBestInterfaceEx
GetAdaptersInfo
GetExtendedTcpTable

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Exports

Exports

curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_header
curl_easy_init
curl_easy_nextheader
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_easy_upkeep
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_global_sslset
curl_maprintf
curl_mfprintf
curl_mime_addpart
curl_mime_data
curl_mime_data_cb
curl_mime_encoder
curl_mime_filedata
curl_mime_filename
curl_mime_free
curl_mime_headers
curl_mime_init
curl_mime_name
curl_mime_subparts
curl_mime_type
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_poll
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_multi_wait
curl_multi_wakeup
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
curl_url
curl_url_cleanup
curl_url_dup
curl_url_get
curl_url_set
curl_url_strerror

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 439KB - Virtual size: 438KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc0324692f735279c0c7b3763f42f93b

Headers

DLL Characteristics

File Characteristics

Imports

crypt32

ws2_32

wldap32

rasapi32

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

mswsock

iphlpapi

oleacc

imm32

winmm

Exports

Exports

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 439KB - Virtual size: 438KB

.data Size: 30KB - Virtual size: 64KB

.gfids Size: 107KB - Virtual size: 106KB

.giats Size: 512B - Virtual size: 16B

.tls Size: 512B - Virtual size: 9B

.vmp0 Size: 109KB - Virtual size: 108KB

.reloc Size: 146KB - Virtual size: 145KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 439KB - Virtual size: 438KB

.data
Size: 30KB - Virtual size: 64KB

.gfids
Size: 107KB - Virtual size: 106KB

.giats
Size: 512B - Virtual size: 16B

.tls
Size: 512B - Virtual size: 9B

.vmp0
Size: 109KB - Virtual size: 108KB

.reloc
Size: 146KB - Virtual size: 145KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB