1ad2936e4d510633259697d0e7d692131c88de79716228963b39eb128a0dd301

Sharing

Copy URL Twitter E-mail

General

Target

1ad2936e4d510633259697d0e7d692131c88de79716228963b39eb128a0dd301
Size

3.2MB
MD5

4d4b8903c719e319d3a8ab8d03cd1b61
SHA1

ccc96afc650ebb26b515b0cb85570671176f4c9f
SHA256

1ad2936e4d510633259697d0e7d692131c88de79716228963b39eb128a0dd301
SHA512

6a50db69fab123b1587163e58937c287e8caa5e0927fc74734e41d1e0cd8bec16869250b855eee4ed4071653d4718c42390778ba30ffd825bf11c740f5c6190d
SSDEEP

98304:kz9SvzlV+PCTPJ4hqIW3LczzbFuJoxzTT5TTJCDe3hWvWoxlDmbu78:kW+tW3aFuJo1HFwflDmbu7

Score

1^/10

Malware Config

Signatures

Files

1ad2936e4d510633259697d0e7d692131c88de79716228963b39eb128a0dd301
.exe windows x86

4134ee7c3cc7cabdb233aab3302cfbe9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
SetConsoleCtrlHandler
LCMapStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
CreateFileA
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
GetFullPathNameA
SetConsoleMode
IsDebuggerPresent
FindFirstFileExA
GetDriveTypeA
GetFileInformationByHandle
GetDateFormatA
GetTimeFormatA
FlushConsoleInputBuffer
GetSystemTime
GlobalMemoryStatus
GetVersion
ExpandEnvironmentStringsA
WaitForMultipleObjects
PeekNamedPipe
FormatMessageA
GetSystemDirectoryA
SleepEx
VerSetConditionMask
VerifyVersionInfoA
InterlockedCompareExchange
UnhandledExceptionFilter
TerminateProcess
GetOEMCP
IsValidCodePage
GetACP
GetCPInfo
IsProcessorFeaturePresent
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
GetFileType
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
GetSystemTimeAsFileTime
HeapSize
HeapQueryInformation
CreateThread
ExitThread
HeapReAlloc
DeleteFileA
HeapAlloc
HeapFree
DecodePointer
EncodePointer
RtlUnwind
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineW
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathW
GetProfileIntW
GetTickCount
InitializeCriticalSectionAndSpinCount
GetTempPathW
GetTempFileNameW
GetFileTime
GetFileSizeEx
GetFileAttributesW
FileTimeToLocalFileTime
GetFileAttributesExW
SetErrorMode
GetNumberFormatW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
lstrcmpiW
DeleteFileW
SystemTimeToFileTime
FileTimeToSystemTime
GetThreadLocale
GlobalGetAtomNameW
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GlobalFlags
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
lstrcpyW
GetPrivateProfileIntW
WaitForSingleObject
ResumeThread
SetThreadPriority
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
InterlockedExchange
GetCurrentProcessId
GetModuleFileNameW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
GetModuleHandleW
FreeLibrary
CompareStringW
LoadLibraryW
ActivateActCtx
DeactivateActCtx
lstrcmpW
SetLastError
CopyFileW
GlobalSize
GlobalAlloc
FormatMessageW
LocalFree
lstrlenW
MulDiv
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
AllocConsole
ExitProcess
GetCurrentDirectoryW
GetPrivateProfileStringW
WritePrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringW
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleFileNameA
CreateMutexA
GetLastError
GetComputerNameA
lstrcmpA
GetModuleHandleA
lstrlenA
SetFileAttributesA
LoadLibraryA
GetProcAddress
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
Sleep
GetTickCount64
MoveFileA
MoveFileExA
GetFileAttributesA
OutputDebugStringA
GetCurrentProcess
CloseHandle
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
GetWindowsDirectoryW
GetWindowsDirectoryA
ReadConsoleInputA
GetDriveTypeW

user32

OffsetRect
IntersectRect
CharUpperW
DestroyIcon
WaitMessage
ReleaseCapture
WindowFromPoint
SetCapture
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
DeleteMenu
LoadCursorW
GetSysColorBrush
RealChildWindowFromPoint
InvalidateRect
DrawStateW
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
SetWindowContextHelpId
MapDialogRect
LoadMenuW
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
ShowOwnedPopups
SetCursor
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
GetWindowThreadProcessId
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
SetWindowRgn
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
DrawFocusRect
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
MapVirtualKeyW
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
HideCaret
GetIconInfo
CopyImage
GetKeyState
SetMenu
EnableWindow
wsprintfA
GetDesktopWindow
DrawIcon
AppendMenuW
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
UpdateWindow
PostMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
RedrawWindow
MessageBeep
NotifyWinEvent
GetAsyncKeyState
IsZoomed
IsRectEmpty
UnionRect
EnableScrollBar
UpdateLayeredWindow
MonitorFromPoint
IsMenu
CreatePopupMenu
SetMenuDefaultItem
GetMenuDefaultItem
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
CharNextW
CopyAcceleratorTableW
SetRect
InvalidateRgn
GetNextDlgGroupItem
GetCapture
UnregisterClassW
SendMessageW
GetSystemMenu
IsIconic
GetClientRect
SetTimer
KillTimer
LoadIconW
GetSystemMetrics
MessageBoxW
UnpackDDElParam
EndDialog
GetNextDlgTabItem
GetParent
IsWindowEnabled
GetDlgItem
GetWindowLongW
IsWindow
DestroyWindow
CreateDialogIndirectParamW
SetActiveWindow
GetActiveWindow
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuW
GetMenuItemID
LoadImageW
DrawIconEx
SetParent
DestroyAcceleratorTable
GetMenuStringW
SetClassLongW
GetMenuState
GetWindow
SetWindowPos
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
DrawEdge
DrawFrameControl
GetMessagePos
InvertRect
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableW
SetCursorPos
BringWindowToTop
LockWindowUpdate
TranslateAcceleratorW
InsertMenuItemW
ReuseDDElParam
GetWindowRgn
DestroyCursor
SubtractRect
GetDoubleClickTime
GetUpdateRect
IsClipboardFormatAvailable
CreateMenu
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
MapVirtualKeyExW
IsCharLowerW
GetKeyNameTextW
PostThreadMessageW
CharUpperBuffW
CopyIcon
FrameRect
RegisterClipboardFormatW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
BeginDeferWindowPos

gdi32

GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateCompatibleDC
GetStockObject
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
CreateFontIndirectW
GetTextExtentPoint32W
GetTextMetricsW
CreateDIBitmap
CreateCompatibleBitmap
CreateRectRgnIndirect
EnumFontFamiliesW
GetTextCharsetInfo
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
CreateDIBSection
GetBkColor
GetTextColor
GetRgnBox
CreatePalette
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
OffsetRgn
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
SetPixelV
GetTextFaceW
MoveToEx
CreateRectRgn
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetBkMode
RestoreDC
SaveDC
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
CreateDCW
SelectClipRgn
DeleteObject
SetLayout
GetLayout
GetPaletteEntries
SetTextAlign
CopyMetaFileW
CreateRoundRectRgn
SetPolyFillMode
GetDeviceCaps

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegisterEventSourceA
DeregisterEventSource
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
CreateProcessAsUserA
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
ReportEventA

shell32

DragFinish
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHAppBarMessage
DragQueryFileW
SHGetDesktopFolder
ShellExecuteW
SHGetFileInfoW

comctl32

ImageList_GetIconSize
InitCommonControlsEx

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathRemoveFileSpecW

ole32

OleDestroyMenuDescriptor
IsAccelerator
OleLockRunning
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
OleCreateMenuDescriptor
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
CoInitializeEx
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleTranslateAccelerator
CoGetClassObject
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoInitialize
CoUninitialize

oleaut32

VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit

oledlg

OleUIBusyW

urlmon

URLDownloadToFileA
URLDownloadToFileW

gdiplus

GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDrawImageI
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipAlloc
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipFree

wininet

DeleteUrlCacheEntryW
DeleteUrlCacheEntryA

rpcrt4

UuidCreate

ws2_32

sendto
getaddrinfo
htonl
connect
socket
closesocket
getpeername
getsockopt
accept
listen
ioctlsocket
gethostname
recvfrom
htons
bind
getsockname
setsockopt
WSAIoctl
send
recv
select
WSAGetLastError
__WSAFDIsSet
WSASetLastError
WSAStartup
WSACleanup
ntohs
ntohl
shutdown
freeaddrinfo

wldap32

ord22
ord211
ord143
ord60
ord50
ord26
ord30
ord200
ord32
ord35
ord79
ord33
ord301
ord27
ord41
ord46

normaliz

IdnToAscii

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 579KB - Virtual size: 579KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4134ee7c3cc7cabdb233aab3302cfbe9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

urlmon

gdiplus

wininet

rpcrt4

ws2_32

wldap32

normaliz

oleacc

imm32

winmm

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 579KB - Virtual size: 579KB

.data Size: 63KB - Virtual size: 102KB

.rsrc Size: 17KB - Virtual size: 17KB

.reloc Size: 228KB - Virtual size: 228KB

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 579KB - Virtual size: 579KB

.data
Size: 63KB - Virtual size: 102KB

.rsrc
Size: 17KB - Virtual size: 17KB

.reloc
Size: 228KB - Virtual size: 228KB