a5108316bed520cc2958fff458178f02a1e63d9280b8f56e9b6712da25f20ce0

Sharing

Copy URL Twitter E-mail

General

Target

a5108316bed520cc2958fff458178f02a1e63d9280b8f56e9b6712da25f20ce0
Size

1.2MB
MD5

59ec78bcc02ac93e579b2e8e804fc388
SHA1

a6cd4c06958bc65a9b2be58d7aeec2267a25020b
SHA256

a5108316bed520cc2958fff458178f02a1e63d9280b8f56e9b6712da25f20ce0
SHA512

4643540b72a04f166decd3cbbbd7ffdfc10e5109f8e024ea51a1050bf6f0d5c79e9d54b63a4e4837c65cc9e313e36d92dd5e9b574d75c0889381b97c69fa7242
SSDEEP

12288:db/IY5hPafaX7Imi9H6AtyiDilKqdHJiCKMp/ucu6HnOb9qDG246igVddR:db/IY5NaSXUsAPDi0gtu6HO9GGRUdb

Score

1^/10

Malware Config

Signatures

Files

a5108316bed520cc2958fff458178f02a1e63d9280b8f56e9b6712da25f20ce0
.exe windows x86

636d78f0353ca179c10460f5d073e507

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsW
PathAppendW
StrStrIA
StrStrIW
PathAddBackslashW

winhttp

WinHttpReceiveResponse
WinHttpQueryDataAvailable
WinHttpOpen
WinHttpReadData
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpSendRequest
WinHttpSetTimeouts
WinHttpConnect

setupapi

SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo

kernel32

SystemTimeToFileTime
lstrcpyW
OutputDebugStringA
OutputDebugStringW
TerminateProcess
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
DeviceIoControl
GlobalAlloc
GlobalLock
GlobalUnlock
GetFileSize
GetACP
MulDiv
LocalFree
FormatMessageW
DecodePointer
RaiseException
lstrcmpiW
InterlockedIncrement
InterlockedDecrement
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetCurrentDirectoryW
GetFileType
HeapAlloc
HeapFree
GetStdHandle
GetModuleHandleExW
LoadLibraryExW
RtlUnwind
InitializeSListHead
GetCurrentThreadId
lstrcatW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SetEvent
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
EncodePointer
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
CreateEventW
SetLastError
lstrcpyA
SetFilePointer
LocalFileTimeToFileTime
lstrcmpA
lstrlenA
lstrlenW
lstrcpynW
ReadFile
WideCharToMultiByte
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetTickCount
CopyFileW
WriteConsoleW
GetConsoleCP
FlushFileBuffers
HeapSize
FreeLibrary
GetModuleHandleW
CreateProcessW
GetCurrentProcessId
ExitProcess
DeleteCriticalSection
GetProcAddress
GetWindowsDirectoryW
GetLocalTime
FindResourceW
LoadResource
QueryPerformanceCounter
LoadLibraryW
CloseHandle
DeleteFileW
LockResource
GetLastError
FreeResource
CreateFileW
WaitForSingleObject
CreateMutexW
GetTempPathW
InitializeCriticalSection
LeaveCriticalSection
WriteFile
GetCurrentProcess
EnterCriticalSection
SizeofResource
CreateDirectoryW
HeapReAlloc
GetConsoleMode
ReadConsoleW
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle

user32

DrawTextW
CharPrevW
GetWindowRgn
MoveWindow
UpdateLayeredWindow
SetWindowRgn
InflateRect
SetCursor
SetRect
CreatePopupMenu
DestroyMenu
EnableMenuItem
AppendMenuW
TrackPopupMenu
CreateCaret
GetCaretBlinkTime
HideCaret
ShowCaret
SetCaretPos
GetCaretPos
ClientToScreen
FillRect
IsWindowEnabled
UpdateWindow
EqualRect
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
wsprintfA
DrawTextA
CreateAcceleratorTableW
PostQuitMessage
InvalidateRgn
GetPropW
SetPropW
GetGUIThreadInfo
ShowWindow
MessageBoxW
GetSystemMetrics
EnableWindow
GetClassInfoExW
RegisterClassExW
RegisterClassW
CallWindowProcW
GetMonitorInfoW
PostMessageW
DefWindowProcW
KillTimer
SendMessageW
MonitorFromWindow
LoadImageW
GetWindow
GetParent
SetForegroundWindow
SetWindowPos
GetWindowRect
GetMessageW
TranslateMessage
DispatchMessageW
CreateWindowExW
IsWindow
DestroyWindow
IsWindowVisible
IsIconic
IsZoomed
CharNextW
SetFocus
GetActiveWindow
GetFocus
GetKeyState
SetCapture
ReleaseCapture
SetTimer
GetDC
GetWindowLongW
ReleaseDC
BeginPaint
EndPaint
GetUpdateRect
InvalidateRect
GetClientRect
GetCursorPos
ScreenToClient
MapWindowPoints
GetSysColor
IntersectRect
UnionRect
OffsetRect
GetKeyboardLayout
GetKeyNameTextW
MapVirtualKeyExW
LoadCursorW
IsRectEmpty
PtInRect
SetWindowLongW

gdi32

CreateRectRgn
PtInRegion
CreateDIBSection
CombineRgn
CreatePenIndirect
CreateRectRgnIndirect
CreateSolidBrush
GetCharABCWidthsW
GetClipBox
GetTextExtentPoint32W
LineTo
SelectClipRgn
DeleteObject
SetBkColor
SetBkMode
StretchBlt
SetStretchBltMode
SetTextColor
CreateRoundRectRgn
MoveToEx
TextOutW
GdiFlush
CreatePatternBrush
GetTextExtentPointA
GetBitmapBits
SetBitmapBits
GetDeviceCaps
GetStockObject
AddFontMemResourceEx
RemoveFontMemResourceEx
Rectangle
RestoreDC
SelectObject
CloseEnhMetaFile
CreateEnhMetaFileW
GetEnhMetaFileHeader
PlayEnhMetaFile
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBitmap
CreateFontIndirectW
CreatePen
GetObjectA
DeleteDC
GetTextMetricsW
GetObjectW
ExtSelectClipRgn
SaveDC
SetWindowOrgEx

advapi32

RegCreateKeyW
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey

shell32

ord165
SHGetSpecialFolderPathW
SHBrowseForFolderW
ShellExecuteW
SHGetPathFromIDListW
CommandLineToArgvW
DragQueryFileW

ole32

DoDragDrop
OleDuplicateData
ReleaseStgMedium
CLSIDFromString
CLSIDFromProgID
OleLockRunning
CoInitialize
CreateStreamOnHGlobal
CoTaskMemFree
CoCreateInstance
CoUninitialize

oleaut32

VariantInit
VariantClear
SysAllocString
SysFreeString

ws2_32

gethostbyname
WSAStartup
gethostname

comctl32

_TrackMouseEvent
InitCommonControlsEx
ord17

gdiplus

GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipFillPath
GdipFillRectangleI
GdipDrawPath
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromStreamICM
GdipDrawString
GdipSetPenMode
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
ord1
GdipAddPathLine
GdipDeletePath
GdipCreatePath
GdipFree
GdipAlloc
GdiplusShutdown
GdiplusStartup
GdipDeleteFont
GdipMeasureString
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipSetStringFormatFlags
GdipCloneStringFormat
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipSetStringFormatTrimming
GdipGetImageWidth
GdipGetImageHeight
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipDrawImageRectI
GdipGetPropertyItem
GdipLoadImageFromStream
GdipGetPropertyItemSize
GdipDrawRectangleI

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 545KB - Virtual size: 544KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 504KB - Virtual size: 503KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

636d78f0353ca179c10460f5d073e507

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

winhttp

setupapi

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

ws2_32

comctl32

gdiplus

imm32

iphlpapi

Sections

.text Size: 545KB - Virtual size: 544KB

.rdata Size: 155KB - Virtual size: 155KB

.data Size: 9KB - Virtual size: 14KB

.rsrc Size: 504KB - Virtual size: 503KB

.reloc Size: 36KB - Virtual size: 35KB

.text
Size: 545KB - Virtual size: 544KB

.rdata
Size: 155KB - Virtual size: 155KB

.data
Size: 9KB - Virtual size: 14KB

.rsrc
Size: 504KB - Virtual size: 503KB

.reloc
Size: 36KB - Virtual size: 35KB