fc0843f43a3b53e4d20d6ac2509b478dc5c68b5f233f6041a10659c6e17eb546

Sharing

Copy URL Twitter E-mail

General

Target

fc0843f43a3b53e4d20d6ac2509b478dc5c68b5f233f6041a10659c6e17eb546
Size

480KB
MD5

a645ac096048c480b55a87b4129921f9
SHA1

04f5ad2ee043d9242c9207d05e489748832efca8
SHA256

fc0843f43a3b53e4d20d6ac2509b478dc5c68b5f233f6041a10659c6e17eb546
SHA512

0e16a0c662f4f936be66140d5256e53a07adcc9db4ba201025c214012361e0b420f812b78ef6a387804ac8f8fac02148bcd3f34bab1036f0a507cb4c3ac26e62
SSDEEP

6144:hbrrui84vjzjgyQAsse0renZYO5XI6Kq8zgQ1C0Q2gLA+P0duqlwZKURgX9W/q:BfuibvjrteRYGlKq8p1Ci+0/wZKUeX9

Score

1^/10

Malware Config

Signatures

Files

fc0843f43a3b53e4d20d6ac2509b478dc5c68b5f233f6041a10659c6e17eb546
.dll windows x86

d3e86b345a5ed5774e681e32e8113c88

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CLSIDFromProgID
CoCreateInstance
OleRun
GetHGlobalFromStream
CreateStreamOnHGlobal
CLSIDFromString
CoUninitialize
CoInitialize

gdiplus

GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipSaveImageToStream
GdipCreateBitmapFromStream
GdipCreateSolidFill
GdipCreateFont
GdipLoadImageFromStream
GdipDeleteFont
GdipDeleteBrush
GdiplusShutdown
GdiplusStartup
GdipDeleteGraphics
GdipDisposeImage
GdipDrawImageRect
GdipGetImageDimension
GdipLoadImageFromFile
GdipDrawString
GdipSetTextRenderingHint
GdipCreateFromHDC

kernel32

GetOEMCP
GetACP
GetCPInfo
RaiseException
IsBadWritePtr
LCMapStringW
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
HeapCreate
HeapDestroy
MultiByteToWideChar
TerminateThread
CreateToolhelp32Snapshot
Process32First
CloseHandle
Process32Next
lstrcpyn
VirtualAlloc
VirtualFree
RtlMoveMemory
LoadLibraryA
GetProcAddress
FreeLibrary
CreateRemoteThread
VirtualFreeEx
VirtualAllocEx
WideCharToMultiByte
Sleep
CreateThread
ResumeThread
SuspendThread
lstrcpynA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalSize
GlobalFree
OpenProcess
TerminateProcess
GetStringTypeA
SetWaitableTimer
GetCurrentThreadId
GetModuleHandleA
GetModuleHandleW
VirtualProtect
GetExitCodeThread
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetUserDefaultLCID
WriteFile
ReadFile
GetFileSize
SetFilePointer
CreateFileA
LCMapStringA
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetVersionExA
GetFileType
GetStdHandle
SetHandleCount
GetLastError
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentProcess
RtlUnwind
InterlockedIncrement
InterlockedDecrement
GetVersion
GetCommandLineA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadCodePtr
SetStdHandle
FlushFileBuffers
CreateWaitableTimerA

shell32

SHBrowseForFolderA
SHGetSpecialFolderPathA
ShellExecuteA
SHGetPathFromIDListA

user32

DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
CreateWindowExA
CallNextHookEx
SendMessageW
GetParent
GetFocus
SetWindowsHookExW
keybd_event
MsgWaitForMultipleObjects
ReleaseDC
GetDC
GetClassNameA
GetWindowTextA
FindWindowExA
SendMessageA
RegisterHotKey
wvsprintfA
GetDlgCtrlID
EnumChildWindows
wsprintfA
MessageBoxA
UnhookWindowsHookEx
MapVirtualKeyA
CallWindowProcA
UnregisterHotKey

gdi32

GetDIBits
BitBlt
StretchBlt
CreateCompatibleDC
DeleteDC
GetObjectA
SelectObject
CreateCompatibleBitmap

atl

ord42
ord47

oleaut32

SafeArrayAllocDescriptor
SafeArrayDestroyDescriptor
VariantChangeType
VariantInit
SafeArrayAllocData
VariantCopy
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
VariantClear
SysAllocString
SafeArrayCreate
RegisterTypeLi
LHashValOfNameSys
LoadTypeLi
VarR8FromBool
VarR8FromCy
SysFreeString
SafeArrayGetElemsize
SafeArrayGetUBound

Sections

.text
Size: 260KB - Virtual size: 259KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 188KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d3e86b345a5ed5774e681e32e8113c88

Headers

File Characteristics

Imports

ole32

gdiplus

kernel32

shell32

user32

gdi32

atl

oleaut32

Sections

.text Size: 260KB - Virtual size: 259KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 188KB - Virtual size: 241KB

.rsrc Size: 4KB - Virtual size: 1KB

.data Size: 12KB - Virtual size: 11KB

.text
Size: 260KB - Virtual size: 259KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 188KB - Virtual size: 241KB

.rsrc
Size: 4KB - Virtual size: 1KB

.data
Size: 12KB - Virtual size: 11KB