46c204da79b553a2e894100632360474e8dfda716af23e313c974400bd952d40

Sharing

Copy URL

Twitter E-mail

General

Target

46c204da79b553a2e894100632360474e8dfda716af23e313c974400bd952d40
Size

616KB
MD5

612af96a4e5a1f2bee5c629bab29e300
SHA1

f3081c8d52f8e7ec635e5fb476903f668ff0f1da
SHA256

46c204da79b553a2e894100632360474e8dfda716af23e313c974400bd952d40
SHA512

76437cda7ff58f8340fe1967cbd42c3ddc134a9ad4a76650856e904edca0b2f9fa22ae1b81277e3f04c8b338943a1aed220371d92a38c8fe1044c5a997e6ac9d
SSDEEP

12288:C+vNkw4MtOhTL7D6XbkkB5Mojf74ruDt5jrsyTtzvLJQOb7ciEJNVCrSsPdL:Ow4BhTxkB5jjz4rE502tzvqOb7jEJnC5

Score

N/A

Malware Config

Signatures

Files

46c204da79b553a2e894100632360474e8dfda716af23e313c974400bd952d40
.exe windows x86

6c416eba8efc087a9ac8c224dfc0f953

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetErrorMode
RtlUnwind
ExitProcess
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetTimeFormatA
GetDateFormatA
GetStartupInfoA
GetCommandLineA
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
QueryPerformanceCounter
LCMapStringA
LCMapStringW
GetOEMCP
GetStringTypeW
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetTimeZoneInformation
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
SetEnvironmentVariableA
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
InterlockedIncrement
GetFileTime
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
LeaveCriticalSection
EnterCriticalSection
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcatA
lstrcmpW
GetCurrentThread
GetCurrentThreadId
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetModuleHandleA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
SetLastError
GlobalFree
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
InterlockedDecrement
LocalFree
FindFirstFileA
FindClose
SetCurrentDirectoryA
CreateProcessA
CreateToolhelp32Snapshot
Process32First
OpenProcess
TerminateProcess
Process32Next
WriteFile
SetFileTime
GetCurrentDirectoryA
LocalFileTimeToFileTime
SystemTimeToFileTime
ReadFile
CreateFileA
SetFilePointer
OutputDebugStringA
FreeResource
CreateThread
SetThreadPriority
ResumeThread
GetTempPathA
GetTempFileNameA
WaitForSingleObject
TerminateThread
GetPrivateProfileIntA
GetPrivateProfileStringA
SetFileAttributesA
CopyFileExA
Sleep
GetCurrentProcessId
LoadLibraryA
GetProcAddress
GetProcessHeap
GetFileAttributesA
CreateDirectoryA
GetModuleFileNameA
DeleteFileA
GetTickCount
CreateMutexA
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
RaiseException
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
GetLastError
MultiByteToWideChar
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetStringTypeA
WritePrivateProfileStringA

user32

MessageBeep
GetNextDlgGroupItem
InvalidateRgn
SetRect
IsRectEmpty
CharNextA
DestroyMenu
ReleaseCapture
SetCapture
LoadCursorA
GetSysColorBrush
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
TabbedTextOutA
SetWindowContextHelpId
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMessageA
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
IsWindowEnabled
SetCursor
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
GetClassLongA
GetClassInfoExA
GetClassNameA
SendDlgItemMessageA
GetFocus
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
MessageBoxA
MapDialogRect
CharUpperA
IsIconic
GetDesktopWindow
GetWindow
GetLastActivePopup
FlashWindow
SetForegroundWindow
RemovePropA
GetPropA
GetKeyState
IsWindowVisible
GetMenu
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
GetClassInfoA
RegisterClassA
PostThreadMessageA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetSystemMetrics
CopyRect
RegisterClipboardFormatA
CallNextHookEx
UnregisterClassA
SendMessageA
PostMessageA
SetWindowRgn
BringWindowToTop
GetClientRect
UpdateWindow
InvalidateRect
SetTimer
KillTimer
LoadIconA
RegisterHotKey
UnregisterHotKey
RegisterWindowMessageA
IsWindow
EnableWindow
PostQuitMessage
SetPropA
GetWindowRect
GetParent
DrawTextA
wsprintfA
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
PtInRect
CopyAcceleratorTableA

gdi32

GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
GetStockObject
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
CreateFontA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
CreateFontIndirectA
BitBlt
CreateCompatibleDC
CreateRoundRectRgn
CreateCompatibleBitmap
GetObjectA
TextOutA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

CloseServiceHandle
OpenServiceA
OpenSCManagerA
RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
QueryServiceStatus
RegSetValueExA
RegCreateKeyExA

shell32

SHGetSpecialFolderPathA

comctl32

ord17
_TrackMouseEvent

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFileExistsA
PathFindExtensionA
UrlUnescapeA

oledlg

ord8

ole32

CoRevokeClassObject
OleIsCurrentClipboard
CoRegisterMessageFilter
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoCreateInstance
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
CoTaskMemFree
OleFlushClipboard

oleaut32

SysAllocStringByteLen
SysStringByteLen
SysFreeString
VariantInit
VariantCopy
VariantChangeType
VariantClear
SysStringLen
SysAllocStringLen
SafeArrayDestroy
SystemTimeToVariantTime
OleCreateFontIndirect
GetErrorInfo
SysAllocString

wininet

InternetOpenUrlA
HttpSendRequestA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle
HttpQueryInfoA
InternetSetOptionExA
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetGetConnectedState
InternetQueryDataAvailable

gdiplus

GdipDrawImageRectRect
GdipSetInterpolationMode
GdipLoadImageFromStream
GdipCloneImage
GdipDrawImageRectRectI
GdipCreateFromHDC
GdipSetImageAttributesColorMatrix
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromStream
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdiplusStartup
GdiplusShutdown
GdipFree
GdipAlloc

sensapi

IsNetworkAlive

ws2_32

socket
WSAStartup
gethostbyname
htons
connect
send
recv
closesocket
WSACleanup
ntohs

Sections

.text
Size: 308KB - Virtual size: 306KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 216KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c416eba8efc087a9ac8c224dfc0f953

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

wininet

gdiplus

sensapi

ws2_32

Sections

.text Size: 308KB - Virtual size: 306KB

.rdata Size: 76KB - Virtual size: 74KB

.data Size: 12KB - Virtual size: 24KB

.rsrc Size: 216KB - Virtual size: 213KB

.text
Size: 308KB - Virtual size: 306KB

.rdata
Size: 76KB - Virtual size: 74KB

.data
Size: 12KB - Virtual size: 24KB

.rsrc
Size: 216KB - Virtual size: 213KB