2f56c87e31309da229dfcb8da4655bde23f15eedfd301e56ee3c24a719f647da

Sharing

Copy URL Twitter E-mail

General

Target

2f56c87e31309da229dfcb8da4655bde23f15eedfd301e56ee3c24a719f647da
Size

220KB
MD5

87d7cb5c570cbe150f53b99635f808e0
SHA1

d6132b5fa8ee53c87fe5e7e666ac2f7fc6755324
SHA256

2f56c87e31309da229dfcb8da4655bde23f15eedfd301e56ee3c24a719f647da
SHA512

daa63ec9e3b761f773c3488d76cf3c964ad613891469b88c6eb162faf2848a42ccad50b84891945faa4f05ae85525e7fefb88f7c1ece8b97864126bfea549a61
SSDEEP

6144:DhCzZnWmnvH1FRMlG9QXsaK4jIJlckYI9rDx41DY0:D2EK4j/FADx6DY

Score

1^/10

Malware Config

Signatures

Files

2f56c87e31309da229dfcb8da4655bde23f15eedfd301e56ee3c24a719f647da
.dll windows x86

a41d33e72baaea42602723496a7a41c7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmLockIMCC
ImmUnlockIMCC
ImmGetHotKey
ImmCreateIMCC
ImmReSizeIMCC
ImmDestroyIMCC
ImmLockIMC
ImmUnlockIMC
ImmGenerateMessage
ImmDestroySoftKeyboard
ImmShowSoftKeyboard
ImmSetStatusWindowPos
ImmSetOpenStatus
ImmGetConversionStatus
ImmCreateSoftKeyboard
ImmSetConversionStatus

comctl32

InitCommonControlsEx

userenv

GetUserProfileDirectoryW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

GlobalUnlock
GlobalFree
DeleteFileW
InterlockedIncrement
InterlockedDecrement
GetLastError
LocalAlloc
LocalFree
GetSystemTime
GetFileSize
CreateMutexW
HeapAlloc
MoveFileExW
HeapFree
WaitForSingleObject
GetProcessHeap
WriteFile
ReleaseMutex
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
GlobalLock
SetFilePointer
InitializeCriticalSection
LoadLibraryA
HeapReAlloc
VirtualAlloc
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
DeleteCriticalSection
GetStartupInfoA
GetFileType
SetHandleCount
GetModuleFileNameA
GetStdHandle
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
RtlUnwind
LeaveCriticalSection
EnterCriticalSection
ExitProcess
HeapSize
Sleep
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetVersionExA
GetCommandLineA
GetCurrentThreadId
GetSystemTimeAsFileTime
GlobalAlloc
GetTickCount
GetModuleHandleW
GetProcAddress
GetWindowsDirectoryW
GetCurrentProcess
GetVersion
lstrcatW
DisableThreadLibraryCalls
SizeofResource
FreeResource
LockResource
FindResourceW
LoadResource
CloseHandle
GetFileInformationByHandle
ReadFile
CreateFileW
CopyFileW
CreateDirectoryW
GetFileAttributesW
GetSystemDirectoryW
lstrcpyW
lstrcmpW
lstrcpynW
lstrlenW
SetEndOfFile
CreateFileA
WriteConsoleA

user32

EndPaint
BeginPaint
LoadBitmapW
IsWindowVisible
ShowWindow
InvalidateRect
GetWindowDC
IntersectRect
DrawTextW
DrawEdge
FillRect
ReleaseCapture
ClientToScreen
GetCaretPos
CharLowerW
MonitorFromRect
MonitorFromPoint
GetMonitorInfoW
MonitorFromWindow
TrackPopupMenu
RemoveMenu
CheckMenuItem
EnableMenuItem
GetSubMenu
LoadMenuW
CreateWindowExW
GetWindow
DestroyMenu
DialogBoxParamW
GetKeyboardLayout
DestroyWindow
MessageBoxW
DefWindowProcW
RedrawWindow
PostMessageW
GetWindowLongW
SetWindowLongW
ToAscii
GetSystemMetrics
SetWindowPos
GetCursorPos
GetSysColorBrush
GetSysColor
GetDlgItemTextW
SetCursor
PtInRect
ScreenToClient
GetWindowRect
EndDialog
SetDlgItemTextW
GetDlgItem
SendMessageW
SendInput
MapVirtualKeyW
GetMessageExtraInfo
DestroyIcon
UnregisterClassW
RegisterClassExW
GetClassInfoExW
LoadImageW
LoadCursorW
LoadIconW
LoadStringW
SystemParametersInfoW
ReleaseDC
GetDC
wsprintfW
GetClassNameW
MessageBeep
SetCapture

gdi32

GetDeviceCaps
GetTextExtentPointW
GetObjectW
GetCurrentObject
GetStockObject
CreateFontIndirectW
SetTextColor
SetBkColor
DeleteObject
CreateSolidBrush
SelectObject
CreateCompatibleBitmap
GetTextExtentPoint32W
SetBkMode
StretchBlt
BitBlt
PatBlt
CreateDCW
DeleteDC
CreateCompatibleDC

advapi32

RegEnumKeyExW
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey
OpenProcessToken
RegOpenKeyExW
GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
RegDeleteKeyW
RegEnumValueW

shell32

ShellExecuteW
SHGetFolderPathW

Exports

Exports

ContextMenuWndProc
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
UIWndProc

Sections

.text
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

GLOBALDA
Size: 4KB - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a41d33e72baaea42602723496a7a41c7

Headers

File Characteristics

Imports

imm32

comctl32

userenv

version

kernel32

user32

gdi32

advapi32

shell32

Exports

Exports

Sections

.text Size: 132KB - Virtual size: 130KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 8KB - Virtual size: 90KB

GLOBALDA Size: 4KB - Virtual size: 408B

.rsrc Size: 40KB - Virtual size: 38KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 132KB - Virtual size: 130KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 8KB - Virtual size: 90KB

GLOBALDA
Size: 4KB - Virtual size: 408B

.rsrc
Size: 40KB - Virtual size: 38KB

.reloc
Size: 12KB - Virtual size: 11KB