394c34e88e9a1d367faee6bea55fba3e0168447fea01479a40c49df429350eb3

Sharing

Copy URL

Twitter E-mail

General

Target

394c34e88e9a1d367faee6bea55fba3e0168447fea01479a40c49df429350eb3
Size

1.3MB
MD5

05a059fdaab7e3f5190c0d410f83dbab
SHA1

b043cb3070c3f86b6c877a73ea1f24f069f0bb2f
SHA256

394c34e88e9a1d367faee6bea55fba3e0168447fea01479a40c49df429350eb3
SHA512

07fa92386a9cabb5a3db78f2feb5d9303218eddaec76e9b4d48bad85d9ae9a3b41147a2abf71ac005a2c358365596c2f5406debcec25469cccb34cd9de8a7c8d
SSDEEP

24576:5lwiv/pny32/NX/0re04fl0aPv70gLoKjVOECI/a1vEFCi0VxUHsUXzSd+P3lpe7:5+M3VPtlt+4zU2oAmuSawfwhe4tE63JE

Score

1^/10

Malware Config

Signatures

Files

394c34e88e9a1d367faee6bea55fba3e0168447fea01479a40c49df429350eb3
.exe windows x86

947b595418ec3e83faf04c78f8cd428b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryW
GetTickCount
WriteFile
GetLastError
SizeofResource
DeleteFileW
IsBadWritePtr
FindResourceW
GetNativeSystemInfo
GetCurrentProcess
MultiByteToWideChar
LocalFree
LockResource
LoadLibraryW
WideCharToMultiByte
IsBadReadPtr
GetVolumeInformationW
GetCurrentProcessId
WritePrivateProfileStringW
GetPrivateProfileStringW
LoadResource
ExitProcess
FreeResource
GetACP
MulDiv
InterlockedIncrement
InterlockedDecrement
lstrcpyW
SetFilePointer
GetFileType
DuplicateHandle
ReadFile
SystemTimeToFileTime
DosDateTimeToFileTime
CreateDirectoryW
SetFileTime
GetFileSize
GlobalUnlock
GlobalLock
GlobalAlloc
HeapAlloc
HeapFree
GetTimeFormatA
GetDateFormatA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
HeapReAlloc
GetSystemTimeAsFileTime
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapCreate
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
LCMapStringA
LCMapStringW
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
QueryPerformanceCounter
HeapSize
GetModuleHandleA
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetModuleHandleW
GetProcAddress
GetDriveTypeW
GetLogicalDriveStringsW
GetLocalTime
Sleep
DeviceIoControl
CloseHandle
CreateFileW
GetModuleFileNameW

user32

PostMessageW
RegisterClassW
LoadCursorW
RegisterClassExW
GetClassInfoExW
CreateWindowExW
GetKeyState
UnionRect
InvalidateRect
SetTimer
KillTimer
SetCapture
ReleaseCapture
ScreenToClient
PtInRect
CharNextW
DestroyWindow
GetFocus
MapWindowPoints
IntersectRect
GetUpdateRect
IsRectEmpty
EndPaint
BeginPaint
GetActiveWindow
GetCursorPos
GetWindowRgn
MoveWindow
IsZoomed
SetPropW
OffsetRect
SetCursor
wvsprintfW
GetWindowTextW
GetWindowTextLengthW
GetCaretPos
GetCaretBlinkTime
FillRect
InvalidateRgn
GetGUIThreadInfo
CreateAcceleratorTableW
SetForegroundWindow
DrawTextW
CharPrevW
SetRect
CreateCaret
HideCaret
ShowCaret
SetCaretPos
GetSysColor
LoadImageW
SendMessageW
EnableWindow
GetMessageW
SetFocus
TranslateMessage
DispatchMessageW
ShowWindow
IsWindow
SetWindowLongW
DefWindowProcW
GetPropW
GetWindowLongW
CallWindowProcW
SetWindowRgn
wsprintfW
GetWindowRect
GetParent
GetWindow
GetMonitorInfoW
MonitorFromWindow
ClientToScreen
PostQuitMessage
SetWindowTextW
GetClientRect
IsWindowVisible
MessageBoxW
ReleaseDC
GetDC
EnumDisplayDevicesW
SetWindowPos
IsIconic
GetSystemMetrics

gdi32

CreateCompatibleDC
PtInRegion
CreatePatternBrush
CreateSolidBrush
CreateCompatibleBitmap
SaveDC
BitBlt
SelectObject
RestoreDC
GdiFlush
TextOutW
GetCharABCWidthsW
GetTextExtentPoint32W
CreateRoundRectRgn
CreatePenIndirect
MoveToEx
LineTo
SetBkColor
ExtTextOutW
SetStretchBltMode
StretchBlt
CombineRgn
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
SelectClipRgn
SetBkMode
SetTextColor
GetDeviceCaps
CreateDIBSection
RoundRect
CreateRectRgn
Rectangle
SetWindowOrgEx
DeleteDC
CreatePen
GetStockObject
GetObjectW
CreateFontIndirectW
DeleteObject
GetObjectA
GetTextMetricsW

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

GetSecurityInfo
CreateServiceW
CloseServiceHandle
DeleteService
OpenServiceW
OpenSCManagerW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
StartServiceW
SetEntriesInAclW
SetSecurityInfo
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegQueryValueExW

ole32

CreateStreamOnHGlobal
OleLockRunning
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemFree
StringFromCLSID

comctl32

_TrackMouseEvent
ord17

iphlpapi

GetAdaptersAddresses
GetAdaptersInfo

winmm

waveOutGetDevCapsW
waveOutGetNumDevs

imm32

ImmSetCompositionWindow
ImmSetCompositionFontW
ImmReleaseContext
ImmGetContext

oleaut32

VariantInit
VariantClear
SysFreeString
SysAllocString

gdiplus

GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipGetImageWidth
GdipLoadImageFromStreamICM
GdipGetPropertyItem
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipGetImageHeight
GdipImageGetFrameDimensionsCount
GdiplusShutdown
GdipFree
GdipAlloc
GdipDeleteBrush
GdipCreateStringFormat
GdipDeleteStringFormat
GdipDeleteGraphics
GdipDeleteFontFamily
GdipDeleteFont
GdipDisposeImage
GdipCreateBitmapFromScan0
GdiplusStartup
GdipCreateLineBrushI
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipCreateFromHDC
GdipGetImageGraphicsContext
GdipSetCompositingQuality
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdipGraphicsClear
GdipDrawString
GdipDrawImage
GdipDrawImageRectI
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipGetFamily
GdipCloneBrush
GdipCloneImage
GdipLoadImageFromStream

Sections

.text
Size: 437KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 742KB - Virtual size: 742KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

vlkrsgm
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

947b595418ec3e83faf04c78f8cd428b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

comctl32

iphlpapi

winmm

imm32

oleaut32

gdiplus

Sections

.text Size: 437KB - Virtual size: 436KB

.rdata Size: 95KB - Virtual size: 94KB

.data Size: 28KB - Virtual size: 47KB

.rsrc Size: 742KB - Virtual size: 742KB

.reloc Size: 32KB - Virtual size: 32KB

vlkrsgm Size: 4KB - Virtual size: 4KB

.text
Size: 437KB - Virtual size: 436KB

.rdata
Size: 95KB - Virtual size: 94KB

.data
Size: 28KB - Virtual size: 47KB

.rsrc
Size: 742KB - Virtual size: 742KB

.reloc
Size: 32KB - Virtual size: 32KB

vlkrsgm
Size: 4KB - Virtual size: 4KB