a073b9c067039b364888e6692c43e28799170b829d40744bd14f56adbd65a9ed

Sharing

Copy URL

Twitter E-mail

General

Target

a073b9c067039b364888e6692c43e28799170b829d40744bd14f56adbd65a9ed
Size

1.3MB
MD5

757d3b64391e5fcfebd87405ca514122
SHA1

d190969dce85a32590f47b753544e3ce1f821a86
SHA256

a073b9c067039b364888e6692c43e28799170b829d40744bd14f56adbd65a9ed
SHA512

f7610381e7e09bdd5340d66444bfc0587df59cc68d8e204e18db4e522b1676fc6752af3cd85392092148603d74c24f4d6ca75d419dfbb2f198b57cca6c1c505d
SSDEEP

24576:a+A5DahcBICrkM69ddGwyH6QxxXNY3YJNVyWkF/PEKZTBmJn:aXi9ddN+XNnn8XhPPTBI

Score

1^/10

Malware Config

Signatures

Files

a073b9c067039b364888e6692c43e28799170b829d40744bd14f56adbd65a9ed
.exe windows x86

a62729c608cf7136f5651f2e28ed5566

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateSolidFill
GdipDeleteBrush
GdipFree
GdipAlloc
GdiplusShutdown
GdiplusStartup
GdipSetSmoothingMode
GdipDrawImageRectI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromStream
GdipFillRectangle
GdipDrawRectangle
GdipDrawLinesI
GdipSetPenDashStyle
GdipDeletePen
GdipCreatePen1
GdipFillPieI

comctl32

ord17
_TrackMouseEvent

msimg32

GradientFill
AlphaBlend

shlwapi

StrStrIA
PathFileExistsA
PathFileExistsW
PathAppendW
StrStrIW
PathAddBackslashW

winhttp

WinHttpQueryDataAvailable
WinHttpReadData
WinHttpConnect
WinHttpCloseHandle
WinHttpOpen
WinHttpOpenRequest
WinHttpSetTimeouts
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpCrackUrl

iphlpapi

GetAdaptersInfo

wldap32

ord46
ord211
ord60
ord50
ord41
ord22
ord27
ord32
ord33
ord35
ord79
ord30
ord200
ord301
ord143
ord26

crypt32

CertFreeCertificateContext

kernel32

RaiseException
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
DecodePointer
EncodePointer
RtlUnwind
VirtualAllocEx
CreateRemoteThread
WriteProcessMemory
HeapAlloc
HeapFree
GetProcessHeap
OpenProcess
GetCurrentProcess
GetCurrentProcessId
GetExitCodeThread
WaitForSingleObject
CloseHandle
FreeLibrary
GetProcAddress
GetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WriteFile
GetTickCount
CreateMutexW
LoadLibraryW
GetModuleHandleW
CreateProcessW
GetTempPathW
CreateFileW
DeleteFileW
ExitProcess
GetModuleFileNameA
GetEnvironmentVariableA
FreeResource
LoadResource
SizeofResource
FindResourceW
MultiByteToWideChar
WideCharToMultiByte
Sleep
GetFileSize
ReadFile
FindClose
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
lstrcpynW
GetModuleFileNameW
InitializeSListHead
QueryPerformanceCounter
GetTempFileNameW
GetWindowsDirectoryW
CreateDirectoryW
RemoveDirectoryW
CreateFileA
GetFileAttributesA
GetFileAttributesW
FindFirstFileW
FindNextFileW
GetLocalTime
SetFileAttributesW
TerminateProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
Process32First
Process32Next
SetEndOfFile
SetFilePointer
GetCurrentThreadId
SetEvent
ResetEvent
CreateEventW
ResumeThread
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetCurrentDirectoryW
lstrcmpiW
lstrlenW
GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
GlobalFree
lstrcatW
OutputDebugStringW
lstrcpyW
LocalAlloc
LocalReAlloc
LocalLock
LocalUnlock
LocalSize
LocalFree
HeapReAlloc
CreateThread
SetProcessWorkingSetSize
SetLastError
LoadLibraryExW
VerSetConditionMask
LoadLibraryA
GetModuleHandleA
GetSystemDirectoryA
VerifyVersionInfoA
FormatMessageA
WaitForMultipleObjects
GetFileType
GetStdHandle
PeekNamedPipe
ExpandEnvironmentStringsA
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
SetFilePointerEx
GetDriveTypeW
GetACP
GetConsoleMode
ReadConsoleW
GetConsoleCP
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStartupInfoW
FlushFileBuffers
SetStdHandle
GetFullPathNameW
GetTimeZoneInformation
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
HeapSize
InitializeCriticalSectionAndSpinCount
SleepEx
GetStringTypeW

user32

OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
CharUpperBuffW
CharLowerBuffW
GetKeyState
PtInRect
RedrawWindow
GetFocus
EnableWindow
IsMenu
GetMenuStringW
GetSubMenu
GetMenuItemCount
EndMenu
GetIconInfo
DestroyCursor
LoadImageW
GetCaretBlinkTime
CreateCaret
RemovePropW
SetPropW
InvalidateRect
EndPaint
BeginPaint
ReleaseCapture
SetCapture
GetCapture
SetFocus
UpdateLayeredWindow
LoadCursorW
IntersectRect
CopyRect
SetRectEmpty
IsZoomed
GetClientRect
DestroyWindow
IsWindow
CallWindowProcW
SystemParametersInfoW
GetSysColor
ClientToScreen
GetCursorPos
ReleaseDC
GetDC
UpdateWindow
TrackPopupMenu
AppendMenuW
DestroyMenu
CreatePopupMenu
GetSystemMetrics
MoveWindow
SendMessageW
PostMessageW
LoadIconW
SetWindowLongW
GetWindowLongW
GetWindowRect
SetForegroundWindow
KillTimer
SetTimer
SetWindowPos
ShowWindow
CreateWindowExW
RegisterClassExW
PostQuitMessage
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
wsprintfW
FillRect
GetPropW
DrawTextW
SetWindowRgn
EqualRect
IsRectEmpty
OffsetRect
MapWindowPoints
GetActiveWindow
GetClassNameW
GetParent
GetDesktopWindow
SetClassLongW
GetClassLongW
ScreenToClient
SetCaretPos
ShowCaret
HideCaret
SetCursor
DestroyCaret

gdi32

GetBkMode
GetBkColor
CombineRgn
PatBlt
CreatePatternBrush
CreateBitmap
TextOutW
GetTextMetricsW
GetTextExtentPointW
GetTextColor
SetRectRgn
CreateFontW
SetTextColor
GetRegionData
CreateCompatibleDC
CreateCompatibleBitmap
SetBkMode
DeleteDC
DeleteObject
SelectObject
CreateDIBSection
BitBlt
CreateRectRgn
GetViewportOrgEx
ExtCreateRegion
GetStockObject
GetCurrentObject
GetClipBox
GetObjectW
SelectClipRgn
EnumFontsW
ExtTextOutW
CreateRoundRectRgn
SetBkColor
GetTextExtentPoint32W
SetViewportOrgEx

advapi32

RegSetValueExW
CryptDestroyKey
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptEncrypt
CryptGetHashParam
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegQueryValueExA
RegOpenKeyExA
CryptImportKey
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyW
RegCloseKey
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken

shell32

ShellExecuteA
ord165
ShellExecuteW
CommandLineToArgvW
SHGetSpecialFolderPathW

ole32

CoInitialize
CoUninitialize
CoCreateInstance
CreateStreamOnHGlobal
CLSIDFromProgID
StringFromGUID2

oleaut32

VariantInit
VariantChangeType
VariantClear
SysAllocString
DispGetIDsOfNames
GetErrorInfo
LoadTypeLi
SysFreeString

ws2_32

accept
listen
getaddrinfo
sendto
ioctlsocket
gethostname
htonl
ntohl
WSAStartup
WSACleanup
WSAIoctl
freeaddrinfo
socket
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
WSAGetLastError
closesocket
bind
send
recv
WSASetLastError
select
__WSAFDIsSet
recvfrom

Sections

.text
Size: 847KB - Virtual size: 846KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a62729c608cf7136f5651f2e28ed5566

Headers

DLL Characteristics

File Characteristics

Imports

gdiplus

comctl32

msimg32

shlwapi

winhttp

iphlpapi

wldap32

crypt32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

ws2_32

Sections

.text Size: 847KB - Virtual size: 846KB

.rdata Size: 181KB - Virtual size: 180KB

.data Size: 20KB - Virtual size: 24KB

.rsrc Size: 276KB - Virtual size: 275KB

.text
Size: 847KB - Virtual size: 846KB

.rdata
Size: 181KB - Virtual size: 180KB

.data
Size: 20KB - Virtual size: 24KB

.rsrc
Size: 276KB - Virtual size: 275KB