f29d5a57bc2f93860556a4e33d5620afae338da84270701e37a6e164a94c46e4

Sharing

Copy URL Twitter E-mail

General

Target

f29d5a57bc2f93860556a4e33d5620afae338da84270701e37a6e164a94c46e4
Size

1004KB
MD5

30bd43a8c053128ee39fabf10bd4dec8
SHA1

40c14fa87eedec7c1e28456d44f58026d08894c3
SHA256

f29d5a57bc2f93860556a4e33d5620afae338da84270701e37a6e164a94c46e4
SHA512

93f14bcf158883e15d07b1c326cc6b5a95c7c08ad9fb0c40dd7b36a56251b581a06d992b02bd5de2a9a58e577b859fca7b16bcdbf4ef5c637745523ff3dd7024
SSDEEP

24576:6k46qWsE5I/OoLA8xfw5XyHTZnM7jMfI:9tULA8xYVMTZnM/MQ

Score

1^/10

Malware Config

Signatures

Files

f29d5a57bc2f93860556a4e33d5620afae338da84270701e37a6e164a94c46e4
.exe windows x86

67001c9d6e032a7e7ba28ac51dd27823

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipDrawLinesI
GdipDrawRectangle
GdipFillPieI
GdipSetPenDashStyle
GdipDeletePen
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateSolidFill
GdipDeleteBrush
GdipFree
GdipAlloc
GdiplusShutdown
GdipCreatePen1
GdipFillRectangle
GdipDrawImageRectI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromStream
GdiplusStartup

comctl32

_TrackMouseEvent
ord17

msimg32

AlphaBlend
GradientFill

imm32

ImmDisableIME

winhttp

WinHttpCloseHandle
WinHttpOpen
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpSetTimeouts
WinHttpOpenRequest
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpConnect
WinHttpCrackUrl

iphlpapi

GetAdaptersInfo

kernel32

GetStartupInfoW
GetStringTypeW
EncodePointer
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
ResumeThread
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
Sleep
CloseHandle
CreateMutexW
GetModuleFileNameW
GetModuleHandleW
CreateProcessW
GetTempPathW
DeleteFileW
CopyFileW
TerminateThread
WaitForSingleObject
SetFileAttributesW
GetTickCount
GetProcAddress
GetEnvironmentVariableA
FreeLibrary
OpenProcess
CreateToolhelp32Snapshot
VirtualAllocEx
VirtualFreeEx
GetCurrentProcess
GetCurrentProcessId
ReadProcessMemory
Process32FirstW
Process32NextW
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
lstrcmpiW
lstrlenW
WriteFile
ReadFile
SetFilePointer
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
InitializeSListHead
WideCharToMultiByte
GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
GlobalFree
GetFileSize
lstrcatW
OutputDebugStringW
lstrcpyW
LocalAlloc
LocalReAlloc
LocalLock
LocalUnlock
LocalSize
LocalFree
HeapAlloc
HeapReAlloc
HeapFree
GetProcessHeap
CreateThread
SetEvent
ResetEvent
CreateEventW
SetProcessWorkingSetSize
GetTempFileNameW
GetCurrentThreadId
GetExitCodeThread
FindClose
FindNextFileW
TerminateProcess
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetLocalTime
QueryPerformanceCounter
RtlUnwind
LoadLibraryExW
SetLastError
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
LCMapStringW
GetLocaleInfoW
GetCPInfo
IsDebuggerPresent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
ExitProcess
GetStdHandle
GetACP
GetFileType
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
HeapSize
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
WriteConsoleW
SetEndOfFile
GetFileAttributesW
IsProcessorFeaturePresent

user32

EmptyClipboard
CharUpperBuffW
CharLowerBuffW
GetKeyState
PtInRect
RedrawWindow
GetFocus
EnableWindow
IsMenu
GetMenuStringW
GetMenuItemCount
EndMenu
GetIconInfo
DestroyCursor
GetCaretBlinkTime
CreateCaret
RemovePropW
SetPropW
EndPaint
BeginPaint
ReleaseCapture
SetCapture
GetCapture
SetFocus
UpdateLayeredWindow
DestroyWindow
CallWindowProcW
LoadCursorW
IntersectRect
CopyRect
SetRectEmpty
SetCursor
FindWindowExW
FindWindowW
GetParent
ScreenToClient
InvalidateRect
SendMessageTimeoutW
GetSubMenu
GetClipboardData
GetWindowThreadProcessId
GetDesktopWindow
EqualRect
GetWindowRect
SetWindowPos
IsWindow
GetClientRect
mouse_event
LoadImageW
DestroyIcon
GetMenu
GetSysColor
ClientToScreen
GetCursorPos
ReleaseDC
GetDC
SetForegroundWindow
TrackPopupMenu
AppendMenuW
DestroyMenu
SetClipboardData
CloseClipboard
OpenClipboard
SetWindowRgn
IsZoomed
FillRect
GetPropW
DrawTextW
IsRectEmpty
OffsetRect
GetSystemMetrics
SystemParametersInfoW
UpdateWindow
MoveWindow
PostThreadMessageW
SendMessageW
LoadIconW
SetWindowLongW
GetWindowLongW
KillTimer
SetTimer
ShowWindow
CreateWindowExW
RegisterClassExW
PostQuitMessage
DefWindowProcW
PostMessageW
DispatchMessageW
TranslateMessage
GetMessageW
UnregisterClassW
HideCaret
MapWindowPoints
GetActiveWindow
wsprintfW
GetClassNameW
SetClassLongW
GetClassLongW
ShowCaret
SetCaretPos
FlashWindowEx
DestroyCaret
CreatePopupMenu

gdi32

GetBkColor
GetBkMode
GetTextColor
SetRectRgn
CombineRgn
CreateRoundRectRgn
ExtCreateRegion
GetRegionData
PatBlt
CreatePatternBrush
CreateBitmap
TextOutW
GetTextMetricsW
GetTextExtentPointW
CreateCompatibleBitmap
SetBkMode
GetViewportOrgEx
GetStockObject
GetCurrentObject
SetBkColor
SetViewportOrgEx
GetTextExtentPoint32W
CreateFontW
EnumFontsW
SetTextColor
ExtTextOutW
CreateCompatibleDC
GetObjectW
SelectClipRgn
CreateRectRgn
BitBlt
CreateDIBSection
SelectObject
DeleteObject
GetClipBox
DeleteDC

advapi32

RegCreateKeyW
RegOpenKeyExW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
RegCloseKey
RegSetValueExW
RegQueryValueExW

shell32

ShellExecuteA
Shell_NotifyIconW
ShellExecuteW
SHGetSpecialFolderPathW
CommandLineToArgvW

ole32

CoUninitialize
CoCreateInstance
CoCreateGuid
CreateStreamOnHGlobal
CLSIDFromProgID
CoInitialize
StringFromGUID2
CoInitializeEx
StgCreateDocfile
OleInitialize
OleUninitialize
OleCreate

oleaut32

SysAllocString
SysFreeString
VariantChangeType
VariantInit
VariantClear
DispGetIDsOfNames
LoadTypeLi
GetErrorInfo

shlwapi

PathFileExistsW
StrStrIW
PathAddBackslashW
PathRemoveFileSpecW
PathAppendW
StrStrIA
PathIsDirectoryW

Sections

.text
Size: 654KB - Virtual size: 654KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

67001c9d6e032a7e7ba28ac51dd27823

Headers

DLL Characteristics

File Characteristics

Imports

gdiplus

comctl32

msimg32

imm32

winhttp

iphlpapi

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

Sections

.text Size: 654KB - Virtual size: 654KB

.rdata Size: 138KB - Virtual size: 138KB

.data Size: 21KB - Virtual size: 25KB

.rsrc Size: 188KB - Virtual size: 188KB

.text
Size: 654KB - Virtual size: 654KB

.rdata
Size: 138KB - Virtual size: 138KB

.data
Size: 21KB - Virtual size: 25KB

.rsrc
Size: 188KB - Virtual size: 188KB