88dc1c9646e53917a0ed9ba34816e5f24724adbed8191b3ee7bc66e11ae74ef9

Sharing

Copy URL

Twitter E-mail

General

Target

88dc1c9646e53917a0ed9ba34816e5f24724adbed8191b3ee7bc66e11ae74ef9
Size

1.1MB
MD5

58bb09e16ab47ea72ada18a365e0a6d9
SHA1

d6c0d0c55417dd50f5cfd8865192db9f77de5cec
SHA256

88dc1c9646e53917a0ed9ba34816e5f24724adbed8191b3ee7bc66e11ae74ef9
SHA512

4684f501c3bcff8d5adc1dae2e804f094c59ffa3675f010661d6bee7c38db1a18804a07bcbbc716ce7ff2f31332c1b47a8d6919081a27cde5b6ae3d0c05d3654
SSDEEP

12288:3ics8YyJYPXQFtW58P58n65jZOlCvve4Ta0Ce4PsasfrM11P8l61+JrlyzI7ogPt:3iR8YyGPXQFOYlaHPYQcQM7ogdFWs

Score

N/A

Malware Config

Signatures

Files

88dc1c9646e53917a0ed9ba34816e5f24724adbed8191b3ee7bc66e11ae74ef9
.exe windows x86

bd23d4481adc4074d69aece792f81957

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToLocalFileTime
UnmapViewOfFile
GetPrivateProfileStringA
MapViewOfFile
CreateFileMappingA
GetProcessHeap
SetEnvironmentVariableA
CompareStringW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetTimeZoneInformation
LCMapStringW
LCMapStringA
CreateProcessA
GetExitCodeProcess
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
HeapReAlloc
HeapSize
HeapAlloc
HeapFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetACP
SetHandleCount
LoadLibraryW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
OutputDebugStringW
GetFileType
WriteConsoleW
GetStdHandle
DebugBreak
VirtualQuery
GetSystemInfo
IsBadReadPtr
HeapValidate
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
RtlUnwind
LocalFileTimeToFileTime
GetFileSizeEx
GetShortPathNameA
lstrcmpiA
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetCurrentDirectoryA
GetModuleHandleW
GetThreadLocale
SystemTimeToFileTime
FileTimeToSystemTime
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
GetOEMCP
GetCPInfo
VirtualProtect
InterlockedDecrement
GetModuleFileNameW
GetAtomNameA
SetErrorMode
GlobalFlags
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
GetPrivateProfileIntA
SetEvent
WaitForSingleObject
CloseHandle
InterlockedExchange
lstrcmpA
GetCurrentThread
GetLocaleInfoA
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetCurrentProcessId
MulDiv
GlobalAlloc
FormatMessageA
LocalFree
lstrlenA
CompareStringA
SetLastError
MultiByteToWideChar
lstrcmpW
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetVersionExA
GlobalLock
GetLastError
GlobalUnlock
GlobalFree
FreeResource
OutputDebugStringA
Sleep
FreeLibrary
VirtualFree
VirtualAlloc
GetLocalTime
LoadLibraryA
GetProcAddress
GetTickCount
LoadResource
LockResource
SizeofResource
FindResourceA
WideCharToMultiByte
WritePrivateProfileStringA
OpenEventA

user32

GetClipboardFormatNameA
DestroyCursor
GetCursorPos
GetMessageA
TranslateMessage
PostQuitMessage
ModifyMenuA
InsertMenuItemA
GetMenuItemInfoA
EnableMenuItem
CheckMenuItem
DeleteMenu
CreatePopupMenu
CreateMenu
GrayStringA
GetTabbedTextExtentA
DrawTextExA
DrawTextA
DrawIcon
FillRect
GetSysColorBrush
SetRectEmpty
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
GetWindowThreadProcessId
SetCursor
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
RemoveMenu
IsMenu
GetMenuItemCount
GetSubMenu
GetMenuState
GetMenuStringA
AppendMenuA
InsertMenuA
GetMenuItemID
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
LoadCursorA
PostThreadMessageA
SetWindowContextHelpId
GetForegroundWindow
SetForegroundWindow
WindowFromPoint
GetLastActivePopup
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
SetCapture
KillTimer
SetTimer
ShowOwnedPopups
IsWindowVisible
ValidateRect
InvalidateRgn
InvalidateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
EndPaint
BeginPaint
ClientToScreen
BringWindowToTop
SetWindowRgn
IsZoomed
GetMenuCheckMarkDimensions
LoadBitmapA
SetMenuItemBitmaps
RegisterWindowMessageA
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
LoadIconA
SendDlgItemMessageA
GetClientRect
MapWindowPoints
GetSysColor
IsWindowEnabled
GetDlgItem
GetWindowLongA
DestroyWindow
CreateDialogIndirectParamA
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
GetScrollRange
CharUpperA
CharNextA
CopyAcceleratorTableA
MessageBeep
PtInRect
IsRectEmpty
UnregisterClassA
RegisterClipboardFormatA
EnableWindow
IsWindow
InflateRect
SetRect
SetActiveWindow
GetActiveWindow
GetDesktopWindow
EndDialog
MapDialogRect
SendMessageA
PostMessageA
TabbedTextOutA
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowPos
SetWindowLongA
GetMessagePos
GetMessageTime
GetMenu
SetMenu
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassNameA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
GetDlgCtrlID
GetKeyState
GetWindowTextA
GetWindowTextLengthA
TrackPopupMenu
WinHelpA
GetCapture
GetWindow
GetParent
IsChild
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
DestroyIcon

gdi32

GetNearestColor
GetBkColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetMapMode
GetViewportOrgEx
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
DPtoLP
LPtoDP
PtVisible
RectVisible
GetCurrentPositionEx
Ellipse
Rectangle
PatBlt
BitBlt
GetPixel
TextOutA
GetTextExtentPoint32A
GetTextAlign
GetTextFaceA
GetTextMetricsA
Escape
StartDocA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
ExtSelectClipRgn
GetTextExtentPointA
GetRgnBox
CreateEllipticRgn
CreateRectRgnIndirect
CreateFontIndirectA
CreatePatternBrush
CreateSolidBrush
CreatePen
GetStockObject
GetObjectType
CreateFontA
GetCharWidthA
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
StretchDIBits
DeleteDC
GetDeviceCaps
CreateDCA
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
ExtTextOutA

comdlg32

GetFileTitleA

winspool.drv

GetJobA
OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

SetThreadToken
OpenThreadToken
RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueA
RegCloseKey
RevertToSelf

shell32

DragFinish
DragQueryFileA
SHGetFileInfoA
ExtractIconA

shlwapi

PathFindFileNameA
PathRemoveFileSpecW
PathIsUNCA
PathFindExtensionA
PathStripToRootA

oledlg

ord8

ole32

CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoRevokeClassObject
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
StringFromGUID2
CoUninitialize
CoInitializeEx
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CoInitialize
CoCreateInstance

oleaut32

SystemTimeToVariantTime
VariantClear
VariantChangeType
VariantInit
SysStringLen
SysAllocStringByteLen
SysFreeString
VariantCopy
SafeArrayDestroy
OleCreateFontIndirect
SysAllocString
VariantTimeToSystemTime
SysAllocStringLen

Sections

.text
Size: 744KB - Virtual size: 744KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 229KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bd23d4481adc4074d69aece792f81957

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 744KB - Virtual size: 744KB

.rdata Size: 161KB - Virtual size: 160KB

.data Size: 229KB - Virtual size: 245KB

.rsrc Size: 512B - Virtual size: 448B

.text
Size: 744KB - Virtual size: 744KB

.rdata
Size: 161KB - Virtual size: 160KB

.data
Size: 229KB - Virtual size: 245KB

.rsrc
Size: 512B - Virtual size: 448B