e44a6d09e158bd299816da582942f30a084f29e6ffde6967c509047a287059ed

Sharing

Copy URL Twitter E-mail

General

Target

e44a6d09e158bd299816da582942f30a084f29e6ffde6967c509047a287059ed
Size

1.8MB
MD5

a311c4952c6cfd1df553e73d475064a2
SHA1

7b7f52b6b725b4741709e3bc17e355652711ac49
SHA256

e44a6d09e158bd299816da582942f30a084f29e6ffde6967c509047a287059ed
SHA512

0585e9c4bf7e5127897cd8bddf2cf94165fd0712e13a8983ef721ee48afd4d7acdec04c2f33a0bf215f9f76facce9ba6f78110b6a3031163f080f8463402e735
SSDEEP

49152:nHptJKmn1NWgMNfOiSvCKPb2YLkI3t7AZo+mCSpxFm6GlU7ozExtnZS:nxKmfWgMNfnOPyYLkI3iZo+gpxA6GlUH

Score

1^/10

Malware Config

Signatures

Files

e44a6d09e158bd299816da582942f30a084f29e6ffde6967c509047a287059ed
.exe windows x86

723ad2607d5067f3ee959a7d787632de

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
IsValidLocale
EnumSystemLocalesA
LCMapStringW
CreateFileW
WriteConsoleW
CompareStringW
GetStringTypeW
GetTimeZoneInformation
IsValidCodePage
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
HeapCreate
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetFileType
SetStdHandle
HeapSize
HeapQueryInformation
CreateThread
ExitThread
GetSystemTimeAsFileTime
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
RaiseException
RtlUnwind
HeapAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineA
ExitProcess
HeapFree
DecodePointer
EncodePointer
FindResourceExW
SetErrorMode
SearchPathA
GetProfileIntA
GetFileSizeEx
GetFileAttributesExA
FileTimeToLocalFileTime
VirtualProtect
GetNumberFormatA
GetVolumeInformationA
FindFirstFileA
FindClose
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WriteFile
ReadFile
DeleteFileA
lstrcmpiA
GetCurrentDirectoryA
GetTempPathA
SetFilePointer
GetACP
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
TlsGetValue
LocalAlloc
GetFullPathNameA
GetTempFileNameA
GetFileTime
GetUserDefaultLCID
WaitForSingleObject
ResumeThread
SetThreadPriority
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
GetTickCount
GetWindowsDirectoryA
CreateFileA
GetFileSize
GetFileAttributesA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GlobalReAlloc
lstrcmpA
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
lstrcpyA
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
FormatMessageA
LocalFree
lstrlenW
GetCurrentProcessId
GetModuleFileNameA
GlobalLock
GlobalUnlock
MulDiv
lstrlenA
FileTimeToSystemTime
FindResourceA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
FreeLibrary
CompareStringA
LoadLibraryW
MultiByteToWideChar
lstrcmpW
InterlockedDecrement
InterlockedIncrement
SetFileAttributesA
CreateDirectoryA
Sleep
WinExec
GetCurrentProcess
CloseHandle
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
ActivateActCtx
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetLastError
DeactivateActCtx
SetEnvironmentVariableA
SetLastError

user32

SetMenuDefaultItem
DeleteMenu
DestroyAcceleratorTable
SetClassLongA
GetAsyncKeyState
NotifyWinEvent
WindowFromPoint
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
LoadImageA
DestroyIcon
GetActiveWindow
SetCursor
ReleaseCapture
LoadAcceleratorsA
InvalidateRect
InsertMenuItemA
CreatePopupMenu
BringWindowToTop
GetDesktopWindow
TranslateAcceleratorA
SetParent
IsZoomed
IsIconic
IntersectRect
DrawIconEx
SetWindowRgn
DrawFocusRect
DrawFrameControl
DrawEdge
OffsetRect
DrawStateA
GetSysColorBrush
LoadCursorA
LoadCursorW
SetLayeredWindowAttributes
GetSystemMetrics
EnumDisplayMonitors
SystemParametersInfoA
SetRectEmpty
GetMenuStringA
AppendMenuA
InsertMenuA
RemoveMenu
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
MapVirtualKeyA
GetKeyNameTextA
ReleaseDC
GetDC
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
IsWindowEnabled
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
RegisterWindowMessageA
LoadIconW
LoadIconA
SendDlgItemMessageA
IsChild
GetSystemMenu
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CharUpperBuffA
GetSysColor
AdjustWindowRectEx
EnableWindow
LoadBitmapW
GetClientRect
FillRect
GetNextDlgGroupItem
GetParent
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
GetWindowLongA
SetWindowLongA
GetWindow
ClientToScreen
UpdateWindow
SetTimer
KillTimer
GetCursorPos
GetMenuItemInfoA
IsMenu
IsClipboardFormatAvailable
OpenClipboard
GetWindowRgn
MapVirtualKeyExA
SendMessageA
ShowWindow
EnumChildWindows
GetClassNameA
FindWindowA
FindWindowExA
SetWindowPos
RedrawWindow
IsRectEmpty
PostMessageA
InflateRect
IsCharLowerA
CreateMenu
HideCaret
InvertRect
DrawIcon
GetCapture
DestroyCursor
SubtractRect
FrameRect
UpdateLayeredWindow
GetDoubleClickTime
CopyIcon
EnableScrollBar
GetMenuDefaultItem
CreateAcceleratorTableA
CopyImage
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
CharUpperA
UnregisterClassA
RealChildWindowFromPoint
ShowOwnedPopups
GetMessageA
TranslateMessage
WaitMessage
PostThreadMessageA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
LoadAcceleratorsW
MapDialogRect
RegisterClipboardFormatA
PostQuitMessage
MonitorFromPoint
GetUpdateRect
SetRect
SetCursorPos
SetCapture
LockWindowUpdate
ValidateRect
UnionRect
MessageBeep
GetIconInfo
LoadMenuW
LoadImageW
EmptyClipboard
CloseClipboard
WinHelpA
SetClipboardData
GetKeyboardState

gdi32

GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateCompatibleDC
GetStockObject
SelectPalette
GetObjectType
GetDeviceCaps
CreatePen
CreateSolidBrush
CreateHatchBrush
CopyMetaFileA
CreateDCA
CreateDIBitmap
CreateFontIndirectA
CreateCompatibleBitmap
GetTextMetricsA
EnumFontFamiliesA
GetTextCharsetInfo
CreateEllipticRgn
CreatePolygonRgn
CombineRgn
GetBkColor
GetTextColor
CreateRectRgn
Ellipse
Polygon
GetTextExtentPoint32A
SetRectRgn
DPtoLP
CreateDIBSection
SetDIBColorTable
GetDIBits
RealizePalette
StretchBlt
SetPixel
Rectangle
CreateRoundRectRgn
OffsetRgn
GetRgnBox
CreatePalette
GetPaletteEntries
GetViewportOrgEx
LPtoDP
GetNearestPaletteIndex
GetSystemPaletteEntries
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
EnumFontFamiliesExA
ExtFloodFill
SetPaletteEntries
GetTextFaceA
SetPixelV
SelectClipRgn
DeleteObject
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
PatBlt
CreateRectRgnIndirect
CreateBitmap
GetObjectA
Polyline
SetTextColor
SetBkColor

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegOpenKeyA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegEnumValueA
RegEnumKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA

shell32

SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
DragFinish
DragQueryFileA
SHGetMalloc
SHAppBarMessage
SHGetDesktopFolder
SHGetFileInfoA

comctl32

ImageList_GetIconSize

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW

ole32

OleIsCurrentClipboard
CoRevokeClassObject
OleLockRunning
OleFlushClipboard
OleUninitialize
CoCreateGuid
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoInitializeEx
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
OleGetClipboard
CoTaskMemFree
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
DoDragDrop
CoFreeUnusedLibraries
IsAccelerator

oleaut32

SysStringLen
SysAllocString
SysFreeString
VarBstrFromDate
SystemTimeToVariantTime
SysAllocStringLen
VariantTimeToSystemTime
VariantInit
VariantClear
VariantChangeType

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI

wininet

InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 269KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

723ad2607d5067f3ee959a7d787632de

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

gdiplus

wininet

oleacc

imm32

winmm

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 269KB - Virtual size: 268KB

.data Size: 24KB - Virtual size: 54KB

.rsrc Size: 164KB - Virtual size: 163KB

.reloc Size: 173KB - Virtual size: 172KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 269KB - Virtual size: 268KB

.data
Size: 24KB - Virtual size: 54KB

.rsrc
Size: 164KB - Virtual size: 163KB

.reloc
Size: 173KB - Virtual size: 172KB