bfdad8193c00f37d34daf0d41a39a40abb0e4575407fceeff6748ae45d4ddb7d

Sharing

Copy URL Twitter E-mail

General

Target

bfdad8193c00f37d34daf0d41a39a40abb0e4575407fceeff6748ae45d4ddb7d
Size

2.6MB
MD5

b31944725156d97d47c4cda165e6c35f
SHA1

71df563e42a9d2c0e41733acd23bd04c4ea5f295
SHA256

bfdad8193c00f37d34daf0d41a39a40abb0e4575407fceeff6748ae45d4ddb7d
SHA512

cc2677bb554fddd45fbe3a288d57a80b0ed10e1c92bf500ee785bee449e7b7e0e42752ac475d7c52272f5123235123aba1f92f8ea3408d06905cfa6a257e44b1
SSDEEP

49152:0wd+VZrnq9JU4ngIzfISl6zPefre2uITQpFFxidiKIFdZylhg:0wwuJUS1IScYe2upWdi

Score

N/A

Malware Config

Signatures

Files

bfdad8193c00f37d34daf0d41a39a40abb0e4575407fceeff6748ae45d4ddb7d
.exe windows x86

23c94e4cdb2b6f482702977dd730081b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
VirtualFree
HeapCreate
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
SetHandleCount
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTimeZoneInformation
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
VirtualAlloc
RaiseException
RtlUnwind
GetStartupInfoA
HeapReAlloc
CreateDirectoryW
GetFileAttributesW
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
LCMapStringA
CreateThread
ExitThread
GetOEMCP
GetCPInfo
GetCurrentDirectoryA
FreeResource
GlobalFindAtomA
SetConsoleMode
ReadConsoleInputA
GetSystemTime
GlobalMemoryStatus
GetVersion
FlushConsoleInputBuffer
lstrcmpW
GetVersionExA
GlobalDeleteAtom
GetLocaleInfoA
CreateFileW
GetProcessHeap
GetFileInformationByHandle
GetDriveTypeA
ExpandEnvironmentStringsA
PeekNamedPipe
SleepEx
QueryPerformanceFrequency
GetSystemDirectoryA
VerSetConditionMask
VerifyVersionInfoA
GetTempPathA
TryEnterCriticalSection
CreateDirectoryA
DosDateTimeToFileTime
IsValidCodePage
GetACP
GetStdHandle
HeapSize
GetFileType
UnhandledExceptionFilter
SetStdHandle
WaitForSingleObject
GlobalFlags
GlobalAddAtomA
SetFileAttributesA
GetFullPathNameA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
SystemTimeToFileTime
lstrcmpA
GlobalGetAtomNameA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedDecrement
InterlockedIncrement
GetModuleHandleW
CompareStringA
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
lstrlenA
GetCurrentProcessId
MultiByteToWideChar
GetLocalTime
CopyFileA
GetFileAttributesA
GetCurrentThreadId
OutputDebugStringA
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
GetShortPathNameW
FreeLibrary
FileTimeToSystemTime
FileTimeToLocalFileTime
LoadLibraryA
WritePrivateProfileStringA
DeleteFileA
GetPrivateProfileStringA
GetTickCount
GetFileSizeEx
CreateFileA
GetModuleFileNameA
GetModuleHandleA
GetModuleFileNameW
LoadLibraryW
GetProcAddress
Sleep
WaitForMultipleObjects
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetCommandLineA
CloseHandle
GetLastError
CreateMutexA
SetEnvironmentVariableA

user32

GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
DefWindowProcA
CallWindowProcA
GetMenu
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
IsWindow
GetMessageA
TranslateMessage
DispatchMessageA
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostQuitMessage
IsIconic
GetDlgItem
MapWindowPoints
GetMessagePos
GetMessageTime
DestroyWindow
GetTopWindow
RemovePropA
GetPropA
GetClientRect
ScreenToClient
IsZoomed
SetWindowLongA
GetWindowLongA
ReleaseCapture
PostMessageA
GetClassInfoExA
MonitorFromWindow
MoveWindow
FindWindowA
ShowWindow
SetForegroundWindow
MessageBoxA
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SetWindowPos
GetSubMenu
GetProcessWindowStation
SetPropA
GetClassLongA
GetCapture
WinHelpA
LoadIconA
RegisterWindowMessageA
FillRect
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
BeginPaint
EndPaint
SetCursor
DestroyMenu
InvalidateRect
SetRect
SetTimer
KillTimer
CreateWindowExA
SetMenu
GetMonitorInfoA
GetUserObjectInformationW
GetMenuItemCount
GetMenuItemID
GetMenuState
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GetSystemMetrics
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetParent
SendMessageA
GetWindowTextA
GetWindowTextLengthA
wsprintfW
GetGUIThreadInfo
CreateAcceleratorTableA
IsRectEmpty
UnionRect
SetCapture
SetFocus
SetWindowsHookExA
CallNextHookEx
LoadCursorA
InvalidateRgn
GetCaretBlinkTime
SetCaretPos
GetCaretPos
HideCaret
ShowCaret
CreateCaret
CharPrevA
GetWindowRgn
UpdateLayeredWindow
RegisterClassExA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
GetFocus
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowTextA
wvsprintfA
GetUpdateRect
CharNextA
SetWindowRgn
wsprintfA
UnhookWindowsHookEx

gdi32

TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateCompatibleDC
GetStockObject
RectVisible
CreateSolidBrush
CreateFontIndirectA
GetTextExtentPoint32A
CreateRectRgnIndirect
CombineRgn
GetTextMetricsA
CreateCompatibleBitmap
PtVisible
BitBlt
CreateRectRgn
SelectClipRgn
Rectangle
CreateRoundRectRgn
CreateDIBSection
PtInRegion
StretchBlt
CreatePenIndirect
RoundRect
GetCharABCWidthsA
GdiFlush
MoveToEx
LineTo
SetMapMode
SetStretchBltMode
SetBkMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
DeleteObject
CreatePen
GetDeviceCaps

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

ReportEventA
CryptDecrypt
CryptCreateHash
CryptSetHashParam
CryptSignHashA
CryptDestroyHash
CryptExportKey
CryptGetUserKey
CryptAcquireContextA
CryptGetProvParam
CryptDestroyKey
CryptReleaseContext
CryptEnumProvidersA
RegisterEventSourceA
DeregisterEventSource

shell32

SHGetPathFromIDListW
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteA
ShellExecuteExA

ole32

CoCreateInstance
CoUninitialize
CoInitialize
CLSIDFromString
CreateStreamOnHGlobal
CLSIDFromProgID
OleLockRunning

oleaut32

SysFreeString
SysAllocString
VariantInit
SysAllocStringLen
VariantChangeType
VariantClear

shlwapi

PathFileExistsW
PathAppendW
PathRemoveFileSpecW

ws2_32

accept
listen
freeaddrinfo
getaddrinfo
gethostname
htonl
getservbyname
gethostbyname
recvfrom
socket
inet_addr
htons
ioctlsocket
connect
select
getsockopt
sendto
getpeername
bind
ntohs
getsockname
setsockopt
WSAIoctl
__WSAFDIsSet
WSASetLastError
send
recv
WSAGetLastError
closesocket
WSAStartup
WSACleanup
inet_ntoa
shutdown

iphlpapi

GetAdaptersInfo

oleacc

LresultFromObject
CreateStdAccessibleObject

imm32

ImmGetContext
ImmSetCompositionWindow
ImmSetCompositionFontA
ImmReleaseContext

winhttp

WinHttpQueryHeaders
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetOption
WinHttpOpenRequest
WinHttpConnect
WinHttpCloseHandle
WinHttpOpen

comctl32

_TrackMouseEvent
ord17

gdiplus

GdipSetInterpolationMode
GdipSetPixelOffsetMode
GdipDeleteFontFamily
GdipGetFamily
GdipDrawImageRectI
GdipGraphicsClear
GdipDrawImage
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipGetImageWidth
GdipGetImageHeight
GdipImageSelectActiveFrame
GdipLoadImageFromStream
GdipSetCompositingQuality
GdipSetSmoothingMode
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCreateBitmapFromScan0
GdipCreateLineBrushI
GdipCreateStringFormat
GdipSetTextRenderingHint
GdiplusShutdown
GdiplusStartup
GdipDrawString
GdipMeasureString
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipSetStringFormatTrimming
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipCloneStringFormat
GdipCloneBrush
GdipAlloc
GdipFree
GdipDeleteBrush
GdipCreateSolidFill
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipDeleteGraphics
GdipCreateFromHDC
GdipCloneImage

wldap32

ord60
ord41
ord27
ord301
ord33
ord79
ord35
ord32
ord200
ord30
ord26
ord50
ord143
ord217
ord211
ord22
ord46

crypt32

CertGetCertificateContextProperty
CertOpenStore
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertFreeCertificateContext
CertDuplicateCertificateContext

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 412KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 310KB - Virtual size: 310KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23c94e4cdb2b6f482702977dd730081b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

shlwapi

ws2_32

iphlpapi

oleacc

imm32

winhttp

comctl32

gdiplus

wldap32

crypt32

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 412KB - Virtual size: 412KB

.data Size: 57KB - Virtual size: 85KB

.rsrc Size: 310KB - Virtual size: 310KB

.reloc Size: 118KB - Virtual size: 117KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 412KB - Virtual size: 412KB

.data
Size: 57KB - Virtual size: 85KB

.rsrc
Size: 310KB - Virtual size: 310KB

.reloc
Size: 118KB - Virtual size: 117KB