9c386bc5e469116cb8fc93e39a8bc8d143e9a2d7407f1ec74c753c9e57af2ece

Sharing

Copy URL Twitter E-mail

General

Target

9c386bc5e469116cb8fc93e39a8bc8d143e9a2d7407f1ec74c753c9e57af2ece
Size

5.4MB
MD5

03932298100c819c38b5f84f002cdec4
SHA1

f6943ce9928c490e1f1dca57408ac6ad0aa17cd2
SHA256

9c386bc5e469116cb8fc93e39a8bc8d143e9a2d7407f1ec74c753c9e57af2ece
SHA512

d599b71103012ccc120403fad72a3758bd587d49daf3d176cef8b71665d4adb35592c7877946015764c7da71422ac2c93e571e401bc900f40e0fe6c925e694b7
SSDEEP

98304:Ub5+ro83ce14sGHwlzjKGXjzS5iiFLOAkGkzdnEVomFHKnP:UbQoemHCKG3S5DFLOyomFHKnP

Score

1^/10

Malware Config

Signatures

Files

9c386bc5e469116cb8fc93e39a8bc8d143e9a2d7407f1ec74c753c9e57af2ece
.exe windows x64

01bd79dcacd8ba8e867b432b967278d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

IsProcessorFeaturePresent
SetStdHandle
GetFileType
HeapQueryInformation
GetStdHandle
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsValidCodePage
GetTimeZoneInformation
GetStringTypeW
SetFilePointerEx
RtlLookupFunctionEntry
ExitThread
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleCP
GetDriveTypeW
OutputDebugStringW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
WriteConsoleW
GetCurrentDirectoryW
CreateFileW
SetEnvironmentVariableA
RtlPcToFileHeader
GetCommandLineA
VirtualQuery
ReadConsoleW
RtlUnwindEx
GetSystemTimeAsFileTime
AreFileApisANSI
GetUserDefaultLCID
FindResourceExW
GetWindowsDirectoryA
SearchPathA
GetProfileIntA
GetTempFileNameA
GetTempPathA
GetTickCount
SetErrorMode
GetCPInfo
GetOEMCP
GetACP
VerifyVersionInfoA
lstrcpyA
VerSetConditionMask
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
FindNextFileA
GetThreadLocale
GetVolumeInformationA
lstrcmpiA
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFileSize
FlushFileBuffers
FindFirstFileA
GlobalGetAtomNameA
GlobalFindAtomA
GetSystemDirectoryW
EncodePointer
GlobalAddAtomA
ResumeThread
SetThreadPriority
WaitForSingleObject
GetPrivateProfileIntA
GetModuleHandleW
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
LoadLibraryW
GetModuleHandleExW
GetModuleFileNameW
FreeResource
CompareStringA
lstrcmpA
GlobalDeleteAtom
GetCurrentThread
FileTimeToSystemTime
LocalAlloc
LoadLibraryExW
FreeLibrary
InitializeCriticalSectionAndSpinCount
FileTimeToLocalFileTime
SetLastError
CopyFileA
FormatMessageA
MulDiv
LocalFree
GlobalFree
GlobalSize
TerminateThread
GetExitCodeThread
CheckRemoteDebuggerPresent
GetDiskFreeSpaceExA
GetCurrentThreadId
GetPrivateProfileSectionNamesA
DecodePointer
FindClose
RemoveDirectoryA
HeapSize
GetLogicalDriveStringsA
RaiseException
lstrcmpW
TerminateProcess
GetDriveTypeA
lstrlenA
HeapReAlloc
DeviceIoControl
CreateProcessA
OutputDebugStringA
DuplicateHandle
GetModuleHandleA
InitializeCriticalSectionEx
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleFileNameA
Process32Next
Process32First
CreateToolhelp32Snapshot
GetPrivateProfileStringA
WritePrivateProfileStringA
VirtualProtect
WriteProcessMemory
GetCurrentDirectoryA
DeleteFileA
ReadProcessMemory
CreateThread
ExitProcess
IsDebuggerPresent
HeapFree
VirtualFree
GetProcessHeap
HeapAlloc
IsBadReadPtr
GetCurrentProcess
MultiByteToWideChar
GetCurrentProcessId
VirtualAlloc
FindResourceW
WideCharToMultiByte
OpenProcess
Sleep
GetFullPathNameA
CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetLastError
GetVersionExA
GetSystemInfo
GetProcAddress
GetConsoleMode
LoadLibraryA

user32

DeleteMenu
CopyImage
LoadCursorW
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
LoadCursorA
SystemParametersInfoA
GetMenuItemInfoA
DestroyMenu
CharUpperA
IsDialogMessageA
SetWindowTextA
SendDlgItemMessageA
CheckDlgButton
SetDlgItemTextA
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
GetClassLongPtrA
GetClassLongA
SetWindowLongPtrA
GetWindowLongPtrA
EqualRect
AdjustWindowRectEx
GetWindowTextLengthA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
SetForegroundWindow
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
GetClassNameA
InvalidateRect
UpdateWindow
SetCursor
ShowOwnedPopups
ValidateRect
GetKeyState
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
UnhookWindowsHookEx
PtInRect
ScreenToClient
CopyAcceleratorTableA
RealChildWindowFromPoint
BeginPaint
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
GetLastActivePopup
CopyRect
MapVirtualKeyA
GetKeyNameTextA
GetWindowLongA
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamA
DestroyWindow
IsWindow
DrawIconEx
IsRectEmpty
OffsetRect
InflateRect
FillRect
DrawFocusRect
GetSysColorBrush
GetSysColor
MapWindowPoints
RedrawWindow
SetWindowRgn
DrawStateA
GetFocus
DrawFrameControl
DrawEdge
RegisterWindowMessageA
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
GetDesktopWindow
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringA
SetActiveWindow
FrameRect
CharUpperBuffA
SubtractRect
GetSystemMetrics
PostMessageA
CreateAcceleratorTableA
LoadAcceleratorsW
wsprintfA
SetWindowLongA
UnregisterClassA
MoveWindow
GetParent
ReleaseDC
GetWindowRect
GetDC
MessageBoxA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetSubMenu
LoadMenuW
GetCursorPos
FindWindowExA
GetWindowTextA
FindWindowA
IsWindowVisible
GetWindow
GetTopWindow
DrawIcon
GetClientRect
IsIconic
SetWindowPos
SetWindowsHookExA
GetWindowThreadProcessId
CallNextHookEx
SetTimer
KillTimer
CharNextA
GetWindowRgn
DestroyCursor
CreateMenu
InvertRect
HideCaret
SetCursorPos
LoadIconW
GetComboBoxInfo
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
MapVirtualKeyExA
IsCharLowerA
EndPaint
PostThreadMessageA
ToAsciiEx
GetKeyboardState
SendMessageA
EnableWindow
GetKeyboardLayout
RegisterClipboardFormatA
ReuseDDElParam
UnpackDDElParam
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
UpdateLayeredWindow
GetUpdateRect
SetClassLongPtrA
DestroyAcceleratorTable
ModifyMenuA
IsMenu
SetMenuDefaultItem
GetMenuDefaultItem
CopyIcon
GetIconInfo
GetDoubleClickTime
EnableScrollBar
LockWindowUpdate
CreatePopupMenu
BringWindowToTop
UnionRect
NotifyWinEvent
GetSystemMenu
GetAsyncKeyState
IsZoomed
TrackMouseEvent
LoadImageW
LoadImageA
DestroyIcon
MonitorFromPoint
SetParent
EnumDisplayMonitors
SetRectEmpty
SetLayeredWindowAttributes
MessageBeep
GetNextDlgGroupItem
IntersectRect
SetRect
ClientToScreen
InvalidateRgn
IsClipboardFormatAvailable

gdi32

GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
TextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetRgnBox
GetMapMode
SetRectRgn
DPtoLP
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
CreateRoundRectRgn
Rectangle
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExA
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
SetPixelV
GetTextFaceA
GetClipBox
ExcludeClipRect
Escape
CreatePatternBrush
CreatePen
CreateBitmap
GetTextMetricsA
Polyline
Polygon
CreatePolygonRgn
ExtTextOutA
PatBlt
GetTextExtentPoint32A
GetTextColor
GetBkColor
Ellipse
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreateHatchBrush
CreateEllipticRgn
CombineRgn
GetDeviceCaps
CreateDCA
CopyMetaFileA
CreateCompatibleDC
DeleteDC
SelectObject
BitBlt
CreateDIBSection
GetObjectA
CreateFontIndirectA
DeleteObject

msimg32

AlphaBlend
TransparentBlt

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegDeleteValueA
RegQueryValueA
RegEnumKeyA
RegCreateKeyExA
RegQueryValueExA
RegDeleteKeyW
RegFlushKey
RegSetValueExW
RegSetValueExA
RegCreateKeyExW
RegEnumValueA
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

shell32

DragFinish
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetDesktopFolder
SHGetFileInfoA
SHAppBarMessage
ShellExecuteA
DragQueryFileA

comctl32

InitCommonControlsEx

shlwapi

StrStrA
PathFindExtensionA
UrlUnescapeA
PathFindFileNameA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA
StrFormatKBSizeA

uxtheme

DrawThemeParentBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetWindowTheme
OpenThemeData
CloseThemeData
IsAppThemed
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
DrawThemeText

ole32

CoTaskMemAlloc
CoTaskMemFree
OleDuplicateData
ReleaseStgMedium
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoInitializeEx
CoDisconnectObject
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
CoUninitialize
RegisterDragDrop
CoCreateGuid
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
OleGetClipboard
CoLockObjectExternal
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoRegisterMessageFilter
CoRevokeClassObject
OleLockRunning
RevokeDragDrop

oleaut32

SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
LoadTypeLi
VariantChangeType
VariantClear
SysAllocStringLen
VariantInit
SysAllocStringByteLen
SysFreeString

oledlg

ord8

gdiplus

GdipBitmapLockBits
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipDrawImageRectI
GdipBitmapUnlockBits
GdipGetImageWidth
GdipGetImageGraphicsContext
GdiplusStartup
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipDeleteGraphics
GdipDrawImageI
GdipCreateFromHDC
GdipGetImageHeight
GdipSetInterpolationMode
GdipGetImagePixelFormat
GdipCloneImage
GdipAlloc
GdiplusShutdown
GdipDisposeImage
GdipFree

winmm

timeSetEvent
PlaySoundA

netapi32

Netbios

ntdll

RtlInitUnicodeString
RtlDosPathNameToNtPathName_U
NtLoadDriver

wininet

HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetSetStatusCallback
InternetGetLastResponseInfoA
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetConnectA
InternetCloseHandle
InternetOpenA
InternetCanonicalizeUrlA
InternetCrackUrlA

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Drv
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 675KB - Virtual size: 674KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

01bd79dcacd8ba8e867b432b967278d1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

winmm

netapi32

ntdll

wininet

oleacc

imm32

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.Drv Size: 3KB - Virtual size: 2KB

.rdata Size: 675KB - Virtual size: 674KB

.data Size: 1.3MB - Virtual size: 1.5MB

.pdata Size: 91KB - Virtual size: 90KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 62KB - Virtual size: 62KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.Drv
Size: 3KB - Virtual size: 2KB

.rdata
Size: 675KB - Virtual size: 674KB

.data
Size: 1.3MB - Virtual size: 1.5MB

.pdata
Size: 91KB - Virtual size: 90KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 62KB - Virtual size: 62KB