26f45d2e15699a31ba046c15f345e7be8991d531c5c5bdb0a5597e96e7dad98a

Sharing

Copy URL

Twitter E-mail

General

Target

26f45d2e15699a31ba046c15f345e7be8991d531c5c5bdb0a5597e96e7dad98a
Size

654KB
MD5

3641dfde89bedf426905ecca8cc8a2c0
SHA1

fd70710c0321fd7f49bb4b445887b2f9da50c1dd
SHA256

26f45d2e15699a31ba046c15f345e7be8991d531c5c5bdb0a5597e96e7dad98a
SHA512

b293fa482ca95ae1e06047a17f66648a0391a440225918b0fd48a5e5002745778e7d0962b8c059573579d1bf26a352b1300a7eef26dfc66f56c252159d29ac51
SSDEEP

12288:XXz6lnpbAngyj0TSMcn+SBtcac21rYwW6tGtERUI80JuXV9i0LT6TV9i0LT6:XXml2gyI+Mcn+Ctcac21rbWptubJuXVp

Score

1^/10

Malware Config

Signatures

Files

26f45d2e15699a31ba046c15f345e7be8991d531c5c5bdb0a5597e96e7dad98a
.exe windows x86

15424d7bd976766dc8b2452077f79c09

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

ord225

gdiplus

GdipCreateBitmapFromScan0
GdipCreateHBITMAPFromBitmap
GdipCreateSolidFill
GdipGetImageGraphicsContext
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipSetPageUnit
GdipDrawLineI
GdipDrawArcI
GdipFillRectangleI
GdipCloneBrush
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromResource
GdipCreateFromHDC
GdipDrawImageRectI
GdipCloneBitmapAreaI
GdipCreatePen1
GdipDeleteBrush
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipDeletePen
GdipDeleteGraphics

advapi32

RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegGetValueW
RegEnumValueW
EventRegister
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
EventWrite
EventUnregister

oleaut32

SysAllocStringByteLen
SysStringLen
VariantInit
VariantClear
SysFreeString
SysAllocString

ole32

CoCreateInstance
CoInitialize
CoUninitialize

comctl32

ord392
ImageList_Add
ImageList_Create
ord413
ord410
ImageList_Destroy

ntdll

WinSqmAddToStream

kernel32

lstrlenA
GetStartupInfoA
OutputDebugStringA
SetUnhandledExceptionFilter
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetModuleHandleW
GetSystemTime
SetEvent
GetModuleHandleA
WaitForSingleObject
CreateThread
CreateEventW
ResetEvent
lstrcmpW
GlobalSize
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
GlobalFindAtomW
GetLastError
InterlockedDecrement
MultiByteToWideChar
GetLocalTime
GetDateFormatW
InterlockedIncrement
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrcmpiW
GetLocaleInfoEx
GetProcAddress
LoadLibraryW
FreeLibrary
DelayLoadFailureHook
InterlockedCompareExchange
LoadLibraryA
LocalFree
LocalReAlloc
LocalAlloc
GetProfileStringW
lstrlenW
CompareStringW
ApplicationRecoveryInProgress
Sleep
ApplicationRecoveryFinished
RegisterApplicationRecoveryCallback
RegisterApplicationRestart
CompareFileTime
SystemTimeToFileTime
GetTempFileNameW
GetFileAttributesW
FileTimeToSystemTime
DeleteFileW
CreateFileW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
InterlockedExchange
RaiseException
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
WideCharToMultiByte
CloseHandle
HeapDestroy

user32

OpenClipboard
DefWindowProcW
PostQuitMessage
GetFocus
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
SetWindowPlacement
RegisterClassExW
LoadCursorW
LoadIconW
DrawTextW
ReleaseDC
GetDC
GetSystemMetrics
EnumChildWindows
SetPropW
SystemParametersInfoW
CheckRadioButton
SendDlgItemMessageW
SetCursor
MoveWindow
GetDlgItemInt
SetDlgItemInt
FillRect
IsDlgButtonChecked
DrawFocusRect
GetNextDlgTabItem
OffsetRect
GetWindowPlacement
GetMonitorInfoW
MonitorFromWindow
CopyRect
IntersectRect
EnumDisplayMonitors
EqualRect
MonitorFromRect
GetClassWord
EnumDesktopWindows
EmptyClipboard
SetClipboardData
CloseClipboard
GetClipboardData
PostMessageW
GetWindowTextW
IsWindowEnabled
SetWindowLongW
GetClassLongW
SetClassLongW
GetSysColor
EnableMenuItem
CheckMenuRadioItem
GetMenu
CheckMenuItem
LoadStringW
GetWindowTextLengthW
InvalidateRect
UpdateWindow
EnableWindow
GetWindowLongW
SetWindowTextW
CreateDialogParamW
DestroyWindow
MapWindowPoints
GetClassNameW
GetKeyState
SetFocus
IsDialogMessageW
LoadAcceleratorsW
CharNextA
GetParent
GetClientRect
ShowWindow
CreateWindowExW
DialogBoxParamW
EndDialog
GetDlgItem
GetWindowRect
SetWindowPos
SendMessageW
LoadImageW
UnregisterClassA
MessageBeep

rpcrt4

UuidCreate
UuidToStringW

winmm

timeGetTime

gdi32

CreateCompatibleBitmap
CreateCompatibleDC
EqualRgn
CombineRgn
SetRectRgn
CreateRectRgnIndirect
CreateRectRgn
CreatePatternBrush
SetTextColor
SetBkMode
GetStockObject
SetBkColor
DeleteObject
ExtCreatePen
MoveToEx
LineTo
CreateSolidBrush
GetTextMetricsW
GetTextExtentPoint32W
GetRgnBox
GetTextExtentPointW
CreateBrushIndirect
GetObjectW
SelectObject
CreateFontIndirectW
GetDeviceCaps
DeleteDC
BitBlt
CreateDIBSection

msvcrt

_strtoi64
_strtoui64
_wcsdup
_i64tow_s
_wtoi64
wcstoul
isalpha
time
difftime
memmove
_callnewh
__pctype_func
___lc_codepage_func
___lc_handle_func
_errno
___mb_cur_max_func
setlocale
__crtGetStringTypeW
__crtLCMapStringW
__mb_cur_max
tolower
isspace
abort
isalnum
__getmainargs
_cexit
_exit
sprintf_s
_ismbblead
exit
_acmdln
_initterm
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
??1type_info@@UAE@XZ
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
__uncaught_exception
_except_handler4_common
_controlfp
malloc
_purecall
free
??0exception@@QAE@XZ
_CxxThrowException
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
memmove_s
memcpy_s
__CxxFrameHandler3
strcspn
memchr
localeconv
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@ABV0@@Z
iswalpha
_wcslwr_s
iswdigit
_wcsnicmp
wcsncmp
_itow_s
_wtoi
_itoa
calloc
wcschr
_wcsicmp
_vsnwprintf
memcpy
wcsncpy_s
wcstol
wcscpy_s
mbstowcs_s
toupper
isxdigit
isdigit
_ftol2_sse
memset
_XcptFilter
_ftol2
_wcsrev

shell32

ord165
SHGetSpecialFolderPathW

Sections

.text
Size: 298KB - Virtual size: 298KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 299KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

15424d7bd976766dc8b2452077f79c09

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

gdiplus

advapi32

oleaut32

ole32

comctl32

ntdll

kernel32

user32

rpcrt4

winmm

gdi32

msvcrt

shell32

Sections

.text Size: 298KB - Virtual size: 298KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 299KB - Virtual size: 298KB

.reloc Size: 43KB - Virtual size: 44KB

.text
Size: 298KB - Virtual size: 298KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 299KB - Virtual size: 298KB

.reloc
Size: 43KB - Virtual size: 44KB