8ae224d913e5173096b4edb1cf6518a0ce56d74827764c858ce0a696d2db4d7d

Sharing

Copy URL Twitter E-mail

General

Target

8ae224d913e5173096b4edb1cf6518a0ce56d74827764c858ce0a696d2db4d7d
Size

1.5MB
MD5

b7a559f772b3ffb5a4d88e725a6fbb62
SHA1

807fdfce0b4ac2020dabc30fe239503b728ea2ba
SHA256

8ae224d913e5173096b4edb1cf6518a0ce56d74827764c858ce0a696d2db4d7d
SHA512

a13759ae27f72aeeab6019560c43e64180b63d008395262b49a083a12379aafaccc97498210d9e50f0a346746280487ad3e8b3357a77ca48c4e477053c622149
SSDEEP

24576:5P2drtih9JZfojat6LVkZasKDNKVytGKodsYm5Yx6CuttgOS/TJlmZ+cKV6wbTaT:SCfylsKDNxsGSLmZ+73aFMKqdymC

Score

1^/10

Malware Config

Signatures

Files

8ae224d913e5173096b4edb1cf6518a0ce56d74827764c858ce0a696d2db4d7d
.exe windows x86

ac779612a40db7eb7aef12e8e4d75966

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
GetErrorMode
SetErrorMode
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetACP
FreeResource
CreateWaitableTimerW
SetWaitableTimer
ReleaseSemaphore
WaitForMultipleObjects
CreateSemaphoreW
DeleteFileA
GetFileSize
GetVersionExW
DuplicateHandle
SystemTimeToFileTime
GetFileType
DosDateTimeToFileTime
MulDiv
AreFileApisANSI
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
GetSystemTimeAsFileTime
HeapCreate
VirtualProtect
Thread32Next
Thread32First
SuspendThread
ResumeThread
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
VirtualFree
VirtualAlloc
VirtualQuery
GetCommandLineA
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
ReadConsoleW
SetEndOfFile
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
CreateEventW
CreateFileMappingW
IsValidLocale
GetStdHandle
ExitProcess
SystemTimeToTzSpecificLocalTime
FindNextFileW
FindFirstFileExW
FindClose
GetModuleHandleExW
ExitThread
RtlUnwind
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
LoadLibraryExW
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
CreateThread
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
LocalFree
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
UnhandledExceptionFilter
ResetEvent
GetLocaleInfoW
LCMapStringW
CompareStringW
GetCPInfo
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
QueryPerformanceCounter
EncodePointer
WaitForSingleObjectEx
GetStringTypeW
TryEnterCriticalSection
GetComputerNameA
GetTickCount
GlobalFree
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
GetCurrentProcessId
Sleep
SetLastError
GetUserDefaultLCID
SetEvent
LoadLibraryW
GetCurrentThread
GetCurrentThreadId
InitializeCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
EnterCriticalSection
GetModuleFileNameW
GetModuleFileNameA
MapViewOfFile
CreateDirectoryA
CreateFileA
UnmapViewOfFile
SetFilePointer
WriteFile
ReadFile
MultiByteToWideChar
GetModuleHandleA
FreeLibrary
CreateFileW
WideCharToMultiByte
GetModuleHandleW
GetProcessHeap
DeleteCriticalSection
GetProcAddress
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
CloseHandle
HeapReAlloc
FileTimeToSystemTime
GetLastError
CreateToolhelp32Snapshot
HeapSize
OpenProcess
WaitForSingleObject
InitializeCriticalSectionEx
HeapFree
OutputDebugStringW
OutputDebugStringA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
EnumSystemLocalesW

user32

SetRect
CharPrevW
GetWindowRgn
IsWindowVisible
EqualRect
PostMessageW
CreateCaret
ShowCaret
HideCaret
SetCaretPos
GetSysColor
GetCaretPos
MonitorFromPoint
SetWindowTextW
GetWindowTextLengthW
GetWindowTextW
InvalidateRgn
GetCaretBlinkTime
UpdateLayeredWindow
EnableWindow
OffsetRect
MoveWindow
GetGUIThreadInfo
CallWindowProcW
ClientToScreen
GetPropW
EnumChildWindows
LoadIconW
FillRect
MessageBoxW
SetWindowRgn
MonitorFromWindow
EnumThreadWindows
SetPropW
CharNextW
IsWindowEnabled
GetParent
GetClassNameW
ReleaseCapture
SetCapture
GetFocus
DispatchMessageW
TranslateMessage
GetMonitorInfoW
IsZoomed
IsIconic
GetClassInfoExW
PeekMessageW
MsgWaitForMultipleObjects
ScreenToClient
InflateRect
GetCursorPos
MapWindowPoints
GetWindowRect
IsRectEmpty
GetUpdateRect
EndPaint
BeginPaint
SetFocus
GetWindow
GetKeyState
GetClientRect
DestroyWindow
IntersectRect
PtInRect
ChangeWindowMessageFilter
wsprintfW
InvalidateRect
SetForegroundWindow
GetForegroundWindow
AttachThreadInput
IsWindow
ShowWindow
SetWindowPos
GetWindowThreadProcessId
KillTimer
SetTimer
FindWindowExW
GetDC
ReleaseDC
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
MessageBoxA
SetCursor
LoadCursorW
SystemParametersInfoA
FindWindowW
SetWindowLongW
GetWindowLongW
DefWindowProcW
RegisterClassW
RegisterClassExW
CreateWindowExW
UpdateWindow
SendMessageW
LoadStringW

gdi32

CreateDIBSection
PtInRegion
CombineRgn
GetPixel
GetObjectW
CreateCompatibleDC
CreateRectRgn
GetTextMetricsW
RestoreDC
DeleteDC
BitBlt
SaveDC
Rectangle
GetStockObject
SelectObject
CreatePen
DeleteObject
CreateSolidBrush
GetDeviceCaps
CreateRoundRectRgn
SetPixel
GetObjectA
SetBkMode
SetTextColor
SetBkColor
GetCharABCWidthsW
GetTextExtentPoint32W
TextOutW
CreateFontIndirectW
GetCurrentObject
SetGraphicsMode
SetWorldTransform
GetClipBox
CreateRectRgnIndirect
SelectClipRgn
ExtSelectClipRgn
StretchBlt
CreatePenIndirect
MoveToEx
LineTo
SetWindowOrgEx
SetStretchBltMode

advapi32

RegSetValueExW
RegOpenKeyExW
RegCreateKeyW
RegCreateKeyExW
RegQueryValueExW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
OpenThreadToken
RegCloseKey

shell32

ShellExecuteW
Shell_NotifyIconW
SHCreateDirectoryExA
ShellExecuteA
SHCreateDirectoryExW

ole32

CLSIDFromProgID
CLSIDFromString
OleLockRunning
OleUninitialize
OleInitialize
CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

VariantClear
SysAllocString
SysFreeString
VariantInit
VariantChangeType
VariantCopy

shlwapi

PathAppendW
PathFindFileNameW
PathFindFileNameA
PathRemoveFileSpecA
PathFileExistsA
PathFileExistsW
ord12
PathRemoveFileSpecW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

winmm

timeGetDevCaps
timeEndPeriod
timeKillEvent
timeGetTime
timeBeginPeriod
timeSetEvent

comctl32

ord17
_TrackMouseEvent

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext

winhttp

WinHttpReceiveResponse
WinHttpAddRequestHeaders
WinHttpQueryHeaders
WinHttpReadData
WinHttpOpenRequest
WinHttpWriteData
WinHttpQueryDataAvailable
WinHttpSetOption
WinHttpCloseHandle
WinHttpOpen
WinHttpSetTimeouts
WinHttpConnect
WinHttpGetProxyForUrl
WinHttpCrackUrl
WinHttpSendRequest
WinHttpGetIEProxyConfigForCurrentUser

d3d9

Direct3DCreate9

gdiplus

GdipDrawPath
GdipDrawRectangle
GdipDrawLineI
GdipSetPenDashStyle
GdipDeletePen
GdipCreatePen1
GdipCreateLineBrushI
GdipFillRectangleI
GdipAddPathLine
GdipStartPathFigure
GdipSetLineGammaCorrection
GdipCreateLineBrush
GdipSetPixelOffsetMode
GdipSetCompositingQuality
GdipMeasureString
GdipGetFamily
GdipDeleteFontFamily
GdipFillPath
GdipDeletePath
GdipCreatePath
GdipGraphicsClear
GdipDrawImageRectI
GdipSetInterpolationMode
GdipClosePathFigure
GdipAddPathArc
GdipImageSelectActiveFrame
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipCreateHBITMAPFromBitmap
GdipLoadImageFromStream
GdipLoadImageFromFile
GdipSetClipRectI
GdipReleaseDC
GdipGetDC
GdipSetTextRenderingHint
GdipDrawString
GdipSetSmoothingMode
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipSetStringFormatFlags
GdipSetStringFormatTrimming
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipCreateFromHDC
GdipGetImageHeight
GdipGetImageWidth
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromFile
GdipFree
GdipAlloc
GdiplusShutdown
GdiplusStartup
GdipSetStringFormatLineAlign

Sections

.text
Size: 996KB - Virtual size: 996KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 223KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac779612a40db7eb7aef12e8e4d75966

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

version

winmm

comctl32

imm32

winhttp

d3d9

gdiplus

Sections

.text Size: 996KB - Virtual size: 996KB

.rdata Size: 223KB - Virtual size: 223KB

.data Size: 21KB - Virtual size: 38KB

.gfids Size: 3KB - Virtual size: 2KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 269KB - Virtual size: 269KB

.reloc Size: 66KB - Virtual size: 66KB

.text
Size: 996KB - Virtual size: 996KB

.rdata
Size: 223KB - Virtual size: 223KB

.data
Size: 21KB - Virtual size: 38KB

.gfids
Size: 3KB - Virtual size: 2KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 269KB - Virtual size: 269KB

.reloc
Size: 66KB - Virtual size: 66KB