2ee6d4958584c1dde257649d67479a8398aea4ef78e9e0e4916cbefa37f4b974

Sharing

Copy URL Twitter E-mail

General

Target

2ee6d4958584c1dde257649d67479a8398aea4ef78e9e0e4916cbefa37f4b974
Size

2.3MB
MD5

c6f8aec91156c553c58c885101e47895
SHA1

aeab93235d87b0174edac2ec7ba0fb90c9139bbc
SHA256

2ee6d4958584c1dde257649d67479a8398aea4ef78e9e0e4916cbefa37f4b974
SHA512

3fbe53d6ec1bd487c8abfc5342b920d12f9d2f7f78735886c7a732dfded5e4b54b3e74239a038f874ce9fb57b97ed462f38154fc8421f70aaf93030af93bd38e
SSDEEP

24576:P0XJUHHm2fKP1NRxxKMpYGHfNurV1/TiftznRxeOw7NfEnufS4SQswc:PKUHHffKP8i3NiKHXn1w

Score

1^/10

Malware Config

Signatures

Files

2ee6d4958584c1dde257649d67479a8398aea4ef78e9e0e4916cbefa37f4b974
.exe windows x86

006828524f70c77fc1ce2ec723c42ee4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileInformationByHandle
GetDriveTypeA
SetFileTime
WriteFile
CreateDirectoryA
GetFileAttributesA
LocalFileTimeToFileTime
lstrlenA
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile
SetFilePointer
DeleteFileA
FindClose
FindFirstFileA
GetSystemInfo
UnmapViewOfFile
CreateFileA
Sleep
MultiByteToWideChar
lstrcpynA
LoadLibraryA
GetLastError
SetLastError
FindResourceA
LoadResource
LockResource
SizeofResource
VirtualFreeEx
WritePrivateProfileStringA
lstrcatA
lstrcpyA
GetModuleFileNameA
WideCharToMultiByte
ReadProcessMemory
VirtualAllocEx
OpenProcess
FreeLibrary
GlobalAlloc
lstrcmpA
GlobalLock
InterlockedExchange
CompareStringA
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
MulDiv
LocalFree
FormatMessageA
GlobalUnlock
GlobalFree
FreeResource
GetCurrentProcessId
WaitForSingleObject
GlobalAddAtomA
GetModuleFileNameW
InterlockedDecrement
GetVersionExA
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
GlobalFlags
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
GetThreadLocale
FileTimeToSystemTime
GetModuleHandleW
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetVolumeInformationA
GetFullPathNameA
GetCPInfo
GetOEMCP
SetErrorMode
GetTickCount
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
ExitProcess
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
RtlUnwind
HeapReAlloc
RaiseException
VirtualProtect
VirtualAlloc
VirtualQuery
ExitThread
CreateThread
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetACP
IsValidCodePage
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
SleepEx
VerifyVersionInfoA
VerSetConditionMask
GetSystemDirectoryA
PeekNamedPipe
WaitForMultipleObjects
ExpandEnvironmentStringsA
GetCurrentProcess
GetModuleHandleA
GetProcAddress
CloseHandle

user32

AdjustWindowRectEx
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
UpdateWindow
SetForegroundWindow
SetMenu
MapWindowPoints
GetMessagePos
GetMessageTime
GetTopWindow
GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
SetFocus
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassLongA
GetCapture
IsChild
WinHelpA
SendDlgItemMessageA
RegisterWindowMessageA
IsDialogMessageA
SetWindowTextA
MoveWindow
GetMenu
WindowFromPoint
SetCapture
ReleaseCapture
GetSysColorBrush
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
CharUpperA
UnregisterClassA
EqualRect
RegisterClipboardFormatA
PostThreadMessageA
GetMenuItemID
GetMenuItemCount
GetSubMenu
PostQuitMessage
PostMessageA
SetWindowLongA
IntersectRect
GetWindowPlacement
SystemParametersInfoA
FindWindowA
FindWindowExA
DestroyMenu
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetActiveWindow
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetLastActivePopup
MessageBoxA
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetWindow
GetWindowThreadProcessId
SendMessageA
LoadIconA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowContextHelpId
MapDialogRect
SetWindowPos
ShowWindow
GetMenuState
wsprintfA
LoadBitmapA
GetSystemMenu
AppendMenuA
GetClientRect
ScreenToClient
PtInRect
FrameRect
SetRect
GetParent
CopyRect
InvalidateRect
EnableWindow
LoadCursorA
SetCursor
IsRectEmpty
FillRect
SetWindowRgn
OffsetRect
GetWindowRect
DrawIcon
GetSystemMetrics
IsIconic

gdi32

GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
SelectClipRgn
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
GetDeviceCaps
OffsetViewportOrgEx
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetRgnBox
DeleteObject
CreateRoundRectRgn
CreateCompatibleDC
BitBlt
GetObjectA
GetBitmapDimensionEx
CreateCompatibleBitmap
CreateSolidBrush
FrameRgn
CreateFontA
SelectObject
GetTextMetricsA
GetStockObject
GetTextColor
GetBkColor
DPtoLP
GetMapMode
GetClipBox
CreateFontIndirectA
CreateRectRgnIndirect
CreateBitmap
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx

shell32

ShellExecuteA

msimg32

TransparentBlt
AlphaBlend

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathStripPathA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA

oledlg

ord8

wldap32

ord301
ord33
ord41
ord46
ord27
ord50
ord26
ord30
ord200
ord32
ord35
ord79
ord143
ord211
ord22
ord60

ws2_32

closesocket
getpeername
socket
htons
bind
ntohs
getsockname
setsockopt
WSAIoctl
send
recv
select
WSAGetLastError
__WSAFDIsSet
WSASetLastError
WSAStartup
WSACleanup
connect
getaddrinfo
sendto
recvfrom
freeaddrinfo
accept
listen
ioctlsocket
gethostname
htonl
ntohl
getsockopt

crypt32

CertFreeCertificateContext

wininet

InternetOpenUrlA
InternetCloseHandle
InternetOpenA

oleacc

LresultFromObject
CreateStdAccessibleObject

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

comdlg32

GetFileTitleA

advapi32

CryptEncrypt
CryptDestroyKey
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptImportKey

ole32

CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree

oleaut32

SysStringLen
SysFreeString
SysAllocStringByteLen
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString

Sections

.text
Size: 500KB - Virtual size: 499KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

006828524f70c77fc1ce2ec723c42ee4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

msimg32

comctl32

shlwapi

oledlg

wldap32

ws2_32

crypt32

wininet

oleacc

winspool.drv

comdlg32

advapi32

ole32

oleaut32

Sections

.text Size: 500KB - Virtual size: 499KB

.rdata Size: 113KB - Virtual size: 113KB

.data Size: 11KB - Virtual size: 26KB

.rsrc Size: 1.6MB - Virtual size: 1.6MB

.reloc Size: 50KB - Virtual size: 50KB

.text
Size: 500KB - Virtual size: 499KB

.rdata
Size: 113KB - Virtual size: 113KB

.data
Size: 11KB - Virtual size: 26KB

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

.reloc
Size: 50KB - Virtual size: 50KB