b8db8c212a66ec89d0f91a6906c269b7c903dd2543c06d6f1036bcee45bc9c99

Sharing

Copy URL Twitter E-mail

General

Target

b8db8c212a66ec89d0f91a6906c269b7c903dd2543c06d6f1036bcee45bc9c99
Size

1.1MB
MD5

4457346130170ba69553422594a813ff
SHA1

e7b9a87f33930dd7b14bddd7e1c44cc7895182bf
SHA256

b8db8c212a66ec89d0f91a6906c269b7c903dd2543c06d6f1036bcee45bc9c99
SHA512

67361582bce251e5ffd4f81741a65d31efe88ef2f57bc0db835029364f980ec9bb26fe68448a48ffe7f6480d12892ebdf4552ca91b17f4d6f6e23ce2625ded77
SSDEEP

24576:b2yPBP8kTX7wv1MjOZ+Mc0t2mw8fQVd1F:tR8kTLI6Ghlf4n

Score

1^/10

Malware Config

Signatures

Files

b8db8c212a66ec89d0f91a6906c269b7c903dd2543c06d6f1036bcee45bc9c99
.exe windows x86

96cad28175632a4a2b0a55e036984e4f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

_TrackMouseEvent
InitCommonControlsEx

kernel32

GetModuleHandleW
GetCurrentProcess
GlobalMemoryStatusEx
LoadLibraryW
CloseHandle
GetModuleFileNameA
OpenEventW
LeaveCriticalSection
GetCurrentProcessId
OpenFileMappingW
SetLastError
InitializeCriticalSection
ExpandEnvironmentStringsW
DeleteCriticalSection
EnterCriticalSection
SetEvent
GlobalReAlloc
FreeResource
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcpynW
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
GetFileInformationByHandle
SetFilePointer
SystemTimeToFileTime
GetLocalTime
FileTimeToSystemTime
GetTickCount
UnmapViewOfFile
MapViewOfFile
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
FormatMessageW
GetACP
GetFileAttributesW
GetFileSize
Sleep
FindResourceExW
InterlockedExchange
LoadResource
LockResource
InterlockedCompareExchange
SizeofResource
GetLocaleInfoW
ReadFile
GetUserDefaultUILanguage
FindResourceW
GetPrivateProfileSectionW
GetModuleFileNameW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetCommandLineW
CreateFileW
FindClose
FindNextFileW
CopyFileW
FindFirstFileW
CreateDirectoryW
DeleteFileW
lstrlenW
WriteFile
WideCharToMultiByte
GetLastError
GetProcAddress
GetVersionExW
lstrlenA
MultiByteToWideChar
FreeLibrary
CreateMutexW
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
IsValidCodePage
GetOEMCP
GetCPInfo
ExitProcess
HeapSize
RaiseException
RtlUnwind
GetStartupInfoW
GetProcessHeap
HeapReAlloc
HeapFree
HeapAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
FlushFileBuffers
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryA
GetVersionExA
GetModuleHandleA
GlobalFlags
lstrcmpW
GetVersion
InterlockedIncrement
InterlockedDecrement
LocalReAlloc
GlobalHandle
LocalAlloc
GetThreadLocale
LocalFree

user32

DestroyWindow
ReleaseDC
DefWindowProcW
RegisterClassExA
GetDlgItem
GetDesktopWindow
PostQuitMessage
SendMessageW
LoadImageW
MessageBoxW
UpdateWindow
ShowWindow
SetRect
GetDC
EnumDisplaySettingsW
LoadCursorW
RegisterClassExW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExA
FindWindowA
GetWindowThreadProcessId
FillRect
DrawTextW
MapWindowPoints
GetWindow
PeekMessageW
GetParent
GetClassInfoExW
GetClassNameW
GetCursorPos
PostMessageW
RegisterWindowMessageW
ScreenToClient
EnableWindow
WindowFromPoint
ClientToScreen
SetFocus
SendMessageTimeoutW
SetCursor
GetSubMenu
GetMenuItemCount
GetMenuItemID
IsWindowEnabled
GetLastActivePopup
GetSysColorBrush
GetSysColor
SetWindowTextW
GetDlgCtrlID
GetFocus
ValidateRect
TabbedTextOutW
DrawTextExW
GrayStringW
GetWindowPlacement
IsIconic
SystemParametersInfoA
AdjustWindowRectEx
RegisterClassW
GetMenu
SetForegroundWindow
GetMessagePos
GetMessageTime
GetTopWindow
GetForegroundWindow
RemovePropW
GetPropW
SetPropW
GetClassLongW
WinHelpW
LoadIconW
CheckMenuItem
EnableMenuItem
ModifyMenuW
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
DestroyMenu
UnregisterClassA
SystemParametersInfoW
IsZoomed
SetWindowRgn
EndPaint
GetActiveWindow
GetWindowRect
IsWindowVisible
FindWindowExW
UpdateLayeredWindow
BeginPaint
GetWindowTextW
IsRectEmpty
InvalidateRect
GetSystemMenu
GetMenuState
UnionRect
SetWindowPos
DrawIconEx
GetSystemMetrics
OffsetRect
PtInRect
EqualRect
CopyRect
GetClientRect
KillTimer
SetTimer
GetKeyState
GetCapture
ReleaseCapture
SetCapture
IntersectRect
SetWindowLongW
UnhookWindowsHookEx
CreateWindowExW
SetWindowsHookExW
GetClassInfoW
CallNextHookEx
IsWindow
CallWindowProcW
GetWindowLongW

gdi32

SetWindowExtEx
SetTextColor
CreateSolidBrush
GetObjectA
ExtCreateRegion
GetObjectW
CombineRgn
Rectangle
ExtTextOutW
SetBkColor
BitBlt
CreateCompatibleBitmap
GetClipBox
CreateRectRgn
ExcludeClipRect
GetTextExtentPoint32W
SetBkMode
GetStockObject
CreatePen
DeleteDC
SelectObject
CreateDIBSection
CreateCompatibleDC
DeleteObject
CreateFontIndirectW
SetPixelFormat
ChoosePixelFormat
GetDeviceCaps
SaveDC
RestoreDC
SetMapMode
PtVisible
RectVisible
TextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateBitmap

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW

shell32

CommandLineToArgvW
SHGetFolderPathW

ole32

CreateStreamOnHGlobal

msimg32

AlphaBlend

shlwapi

StrFormatByteSizeW
PathCombineW
PathFileExistsW
PathAppendW
PathRemoveFileSpecW

opengl32

glGetString
wglMakeCurrent
wglCreateContext

gdiplus

GdipCreateHBITMAPFromBitmap
GdipCloneBitmapAreaI
GdipCreateBitmapFromStream
GdipAlloc
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageRectRectI
GdipFree
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDisposeImage
GdipCreateSolidFill
GdiplusShutdown
GdiplusStartup
GdipDeleteBrush
GdipSetStringFormatTrimming
GdipDeleteFont
GdipGetImagePixelFormat
GdipCreateFromHDC
GdipDeleteGraphics
GdipCreateBitmapFromFile
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetTextRenderingHint
GdipSetStringFormatFlags
GdipCreateFontFromDC
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipCreateFontFromLogfontA
GdipDrawString
GdipMeasureString

oleacc

CreateStdAccessibleObject
LresultFromObject

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

oleaut32

VariantInit
VariantChangeType
VariantClear

Sections

.text
Size: 284KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 756KB - Virtual size: 756KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

96cad28175632a4a2b0a55e036984e4f

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

msimg32

shlwapi

opengl32

gdiplus

oleacc

winspool.drv

oleaut32

Sections

.text Size: 284KB - Virtual size: 281KB

.rdata Size: 88KB - Virtual size: 84KB

.data Size: 12KB - Virtual size: 30KB

.rsrc Size: 756KB - Virtual size: 756KB

.text
Size: 284KB - Virtual size: 281KB

.rdata
Size: 88KB - Virtual size: 84KB

.data
Size: 12KB - Virtual size: 30KB

.rsrc
Size: 756KB - Virtual size: 756KB