e26ddc83540fddbdaaaa2bcd6ae36b35666fa025537b34676bebfc74732e15d4

Sharing

Copy URL Twitter E-mail

General

Target

e26ddc83540fddbdaaaa2bcd6ae36b35666fa025537b34676bebfc74732e15d4
Size

608KB
MD5

f14cada13b4a0a1257fa6e7bad8f59e8
SHA1

eac236c5822df6ff0201436b2d9650b822094df7
SHA256

e26ddc83540fddbdaaaa2bcd6ae36b35666fa025537b34676bebfc74732e15d4
SHA512

1834e588a6b13ec69c02fe66dab2a824b8dc7665fe6b5ede9b1f564afb4ea30665bfe03598f78e00586b9940a143a33c3e3598abd95d3ad26ca4f498a774f032
SSDEEP

12288:c+32VzTpyS6M5bKUlLFU5O08mxxuH/tR6DCTuC7L:30zdySBrLFf0yx

Score

1^/10

Malware Config

Signatures

Files

e26ddc83540fddbdaaaa2bcd6ae36b35666fa025537b34676bebfc74732e15d4
.exe windows x86

1ae791da9a5e94c95c1b3d6268b6d917

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileInformationByHandle
GetDriveTypeA
WriteFile
SetFileTime
GetFileAttributesA
CreateDirectoryA
LocalFileTimeToFileTime
lstrcpyA
lstrlenA
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile
SetFilePointer
OpenProcess
VirtualAllocEx
ReadProcessMemory
lstrcatA
VirtualFreeEx
GetCurrentProcess
DeleteFileA
LoadResource
LockResource
SizeofResource
FindResourceA
WideCharToMultiByte
GetModuleHandleA
LoadLibraryA
GetProcAddress
SetLastError
MulDiv
GlobalLock
GlobalUnlock
FindFirstFileA
FindClose
GetTickCount64
UnmapViewOfFile
CloseHandle
CreateFileA
FreeResource
GlobalFree
GetVersionExA
lstrcmpW
MultiByteToWideChar
CompareStringA
FreeLibrary
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
GetModuleFileNameA
GetCurrentProcessId
LocalFree
FormatMessageA
GlobalAlloc
lstrcmpA
GetModuleFileNameW
InterlockedDecrement
FlushFileBuffers
SetEndOfFile
GetFullPathNameA
InterlockedExchange
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
WaitForSingleObject
GlobalFlags
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
GetCPInfo
GetOEMCP
FileTimeToSystemTime
GetModuleHandleW
FileTimeToLocalFileTime
SetErrorMode
WritePrivateProfileStringA
GetTickCount
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
HeapFree
Sleep
ExitProcess
HeapAlloc
GetCommandLineA
GetStartupInfoA
HeapReAlloc
VirtualAlloc
SetStdHandle
GetFileType
ExitThread
CreateThread
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetConsoleCP
GetConsoleMode
HeapCreate
VirtualFree
InitializeCriticalSectionAndSpinCount
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
SleepEx
VerifyVersionInfoA
VerSetConditionMask
GetSystemDirectoryA
PeekNamedPipe
WaitForMultipleObjects
ExpandEnvironmentStringsA
GetLastError

user32

WinHelpA
SendDlgItemMessageA
LoadIconA
RegisterWindowMessageA
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
IsDialogMessageA
SetWindowTextA
ShowWindow
TabbedTextOutA
DrawTextExA
GrayStringA
BeginPaint
EndPaint
RemovePropA
DestroyMenu
GetMessageA
PostQuitMessage
ValidateRect
GetSysColorBrush
UnregisterClassA
RegisterClipboardFormatA
GetNextDlgTabItem
EndDialog
SetFocus
GetWindowTextA
GetForegroundWindow
SendMessageA
EnableWindow
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
SetMenu
SetForegroundWindow
UpdateWindow
GetMenuItemID
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
IsWindowEnabled
CopyRect
GetDlgCtrlID
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
GetParent
SystemParametersInfoA
DestroyWindow
GetWindowLongA
GetSysColor
DefWindowProcA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
GetDlgItem
wsprintfA
PtInRect
ClientToScreen
IsWindowVisible
GetSubMenu
GetWindowThreadProcessId
LoadBitmapA
GetSystemMetrics
TranslateMessage
DispatchMessageA
DrawTextA
GetCapture
PostMessageA
GetClassInfoA
IsWindow
GetKeyState
LoadCursorA
SetCursor
GetDC
ReleaseDC
GetFocus
GetCursorPos
GetClientRect

gdi32

PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
SetMapMode
RestoreDC
ScaleWindowExtEx
SaveDC
CreateBitmap
SelectObject
DeleteObject
GetObjectA
GetDeviceCaps
SetBkColor
SetTextColor
GetClipBox
GetStockObject
DeleteDC

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegSetValueExA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptDestroyKey
CryptEncrypt
CryptImportKey

shell32

ShellExecuteA

shlwapi

PathFindFileNameA
PathFindExtensionA

psapi

EnumProcesses

wininet

InternetCloseHandle
InternetOpenA
InternetOpenUrlA

wldap32

ord22
ord41
ord27
ord211
ord143
ord60
ord50
ord26
ord30
ord200
ord32
ord35
ord79
ord33
ord301
ord46

ws2_32

htonl
ioctlsocket
listen
accept
recvfrom
sendto
getaddrinfo
freeaddrinfo
connect
socket
closesocket
getpeername
getsockopt
htons
bind
ntohs
getsockname
setsockopt
WSAIoctl
send
recv
select
WSAGetLastError
__WSAFDIsSet
WSASetLastError
WSAStartup
WSACleanup
ntohl
gethostname

crypt32

CertFreeCertificateContext

oleacc

LresultFromObject
CreateStdAccessibleObject

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 450KB - Virtual size: 449KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ae791da9a5e94c95c1b3d6268b6d917

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

psapi

wininet

wldap32

ws2_32

crypt32

oleacc

winspool.drv

oleaut32

Sections

.text Size: 450KB - Virtual size: 449KB

.rdata Size: 117KB - Virtual size: 116KB

.data Size: 10KB - Virtual size: 25KB

.rsrc Size: 30KB - Virtual size: 32KB

.text
Size: 450KB - Virtual size: 449KB

.rdata
Size: 117KB - Virtual size: 116KB

.data
Size: 10KB - Virtual size: 25KB

.rsrc
Size: 30KB - Virtual size: 32KB