baed7275c654b1557261767520bcc0e962ede6d0077edfbb7d1fe377cf6ab159

Sharing

Copy URL

Twitter E-mail

General

Target

baed7275c654b1557261767520bcc0e962ede6d0077edfbb7d1fe377cf6ab159
Size

1.8MB
MD5

e2d464764e518e02a1c7e9f96016f0af
SHA1

12915d57ee50315d5502f093b5214cfcdd02172f
SHA256

baed7275c654b1557261767520bcc0e962ede6d0077edfbb7d1fe377cf6ab159
SHA512

fce97ac98f1b9feb1757c97125390919292a4382918e616833249acc475deb63f8e6033c95298a2f69f9924be48e5e6e73df1dd5a68dcb5b8eea021ba42dc9f6
SSDEEP

12288:uD/ysLTBIk20r/jAhP13vUcWhwhXDwefVrJm33qz1xBfeMn7tbtI4Ly:2vTBYw/khPecMrarJm33qVfr7te4Ly

Score

1^/10

Malware Config

Signatures

Files

baed7275c654b1557261767520bcc0e962ede6d0077edfbb7d1fe377cf6ab159
.exe windows x86

1f6ed9f339a6b89f7c2d95726c40aab6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

api-ms-win-core-path-l1-1-0

PathCchRemoveFileSpec

kernel32

GlobalAlloc
GlobalLock
GlobalUnlock
FreeResource
CreateMutexW
CreateThread
CloseHandle
WaitForSingleObject
Sleep
CreateFileW
GetModuleFileNameW
GetLastError
WriteFile
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
WritePrivateProfileStringW
lstrlenW
WritePrivateProfileSectionW
GetTickCount64
GetLocalTime
OutputDebugStringW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
SetFilePointerEx
GetStringTypeW
SetStdHandle
GetProcessHeap
LoadResource
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
MultiByteToWideChar
WideCharToMultiByte
GetFileType
HeapAlloc
HeapFree
DecodePointer
GetStdHandle
GetModuleHandleExW
ExitProcess
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
SetLastError
RaiseException
RtlUnwind
SizeofResource
FindResourceW
SetThreadLocale
SetThreadUILanguage
GetVersionExW
GetSystemDefaultLangID
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
CreateEventW
WriteConsoleW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection

user32

LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
LoadIconW
LoadCursorW
RegisterClassExW
CreateWindowExW
ShowWindow
UpdateWindow
SetWindowLongW
GetWindowLongW
PostMessageW
BeginPaint
EndPaint
MoveWindow
SendMessageW
GetDC
ReleaseDC
PostQuitMessage
DefWindowProcW
GetWindowRect
GetClientRect
InvalidateRect
SetRect
CopyRect
FillRect
FrameRect
DrawTextW
RedrawWindow
OffsetRect
GetWindowTextW
SetWindowTextW
wsprintfW
SetWindowPos
ScreenToClient
PtInRect
CreatePopupMenu
AppendMenuW
TrackPopupMenu
CallWindowProcW
GetClassLongW
ValidateRect
GetSystemMetrics
EnableWindow
IsWindowVisible
LoadStringW

gdi32

GetStockObject
CreateFontW
TextOutW
DeleteObject
SelectObject
SetBkMode
SetTextColor
CreateSolidBrush

ole32

CreateStreamOnHGlobal

gdiplus

GdiplusShutdown
GdipLoadImageFromStream
GdipFree
GdipAlloc
GdipCloneImage
GdipCreateFromHDC
GdipDeleteGraphics
GdiplusStartup
GdipDisposeImage
GdipCreatePen1
GdipDeletePen
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipCreateFont
GdipDeleteFont
GdipCreateStringFormat
GdipDeleteStringFormat
GdipCreateSolidFill
GdipDrawImageRectI
GdipDrawRectangle
GdipGetPathWorldBounds
GdipGetFontStyle
GdipGetFontSize
GdipAddPathString
GdipSetStringFormatTabStops
GdipSetSmoothingMode
GdipDeleteRegion
GdipCreateRegionPath
GdipAddPathEllipseI
GdipDeletePath
GdipCreatePath
GdipLoadImageFromFile
GdipSetStringFormatAlign
GdipDrawRectangleI
GdipMeasureString
GdipFillRectangleI
GdipCreateLineBrushI
GdipDrawString
GdipFillRectangle
GdipSetStringFormatLineAlign
GdipCloneBrush
GdipDeleteBrush
GdipDrawLineI

Sections

.text
Size: 443KB - Virtual size: 442KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1f6ed9f339a6b89f7c2d95726c40aab6

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

api-ms-win-core-path-l1-1-0

kernel32

user32

gdi32

ole32

gdiplus

Sections

.text Size: 443KB - Virtual size: 442KB

.rdata Size: 102KB - Virtual size: 101KB

.data Size: 9KB - Virtual size: 31KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.reloc Size: 37KB - Virtual size: 37KB

.text
Size: 443KB - Virtual size: 442KB

.rdata
Size: 102KB - Virtual size: 101KB

.data
Size: 9KB - Virtual size: 31KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

.reloc
Size: 37KB - Virtual size: 37KB