4b6590ce3ed9de1f1bf49e04061fbfbc5a7d602ea8e59d7d99eaa5b1c816c27a

Sharing

Copy URL Twitter E-mail

General

Target

4b6590ce3ed9de1f1bf49e04061fbfbc5a7d602ea8e59d7d99eaa5b1c816c27a
Size

596KB
MD5

01103ad62804a897f948b41a49923dc0
SHA1

d29912a59faac76e6c650bb02e44864b08685883
SHA256

4b6590ce3ed9de1f1bf49e04061fbfbc5a7d602ea8e59d7d99eaa5b1c816c27a
SHA512

323cdf2bc65b44c06bb93a150762f9725027ac3477ddaab2eab9a754496caa29294f3d779d166caade6accdfd955d8b897f8476d34f9703fcbf650e3cdc2baad
SSDEEP

12288:hzZ1bRZxctZ+YNi+gV8fg0Sls/T8PXfcx9+SbX:hzZ19ctZJk+FP8PPO+S

Score

N/A

Malware Config

Signatures

Files

4b6590ce3ed9de1f1bf49e04061fbfbc5a7d602ea8e59d7d99eaa5b1c816c27a
.exe windows x86

0b9287d94791cd8914c2957fa9609431

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiSetClassInstallParamsA
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdA
SetupDiEnumDeviceInterfaces
SetupDiChangeState
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo

winmm

sndPlaySoundA

powrprof

ReadGlobalPwrPolicy

kernel32

CreateEventA
CreateThread
ResetEvent
WinExec
SetEvent
WaitForSingleObject
InterlockedDecrement
FreeLibrary
GetSystemDirectoryA
lstrcatA
LoadLibraryA
GetSystemPowerStatus
GlobalAlloc
GlobalFree
Sleep
GlobalLock
CreateFileA
WriteFile
CloseHandle
GlobalUnlock
GetWindowsDirectoryA
GetPrivateProfileStringA
CreateProcessA
FormatMessageA
LocalFree
GetStringTypeExW
GetStringTypeExA
GetEnvironmentVariableW
GetEnvironmentVariableA
lstrlenA
lstrcmpiW
lstrcmpiA
CompareStringW
CompareStringA
lstrlenW
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
lstrcpyA
GetLocalTime
GetVersionExA
GetModuleHandleA
GetProcAddress
GetCurrentProcess
GetLocaleInfoW
SetEnvironmentVariableA
IsValidCodePage
SizeofResource
LockResource
LoadResource
FindResourceA
SetLastError
GetModuleFileNameA
GetCurrentProcessId
MulDiv
GlobalSize
CopyFileA
GetModuleFileNameW
SetThreadPriority
ResumeThread
GetCurrentThreadId
SuspendThread
InterlockedIncrement
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeResource
GetAtomNameA
lstrcmpA
GetThreadLocale
FileTimeToSystemTime
SystemTimeToFileTime
GlobalFlags
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GetCPInfo
GetOEMCP
GetPrivateProfileIntA
WritePrivateProfileStringA
GetCurrentDirectoryA
SetErrorMode
MoveFileA
DeleteFileA
ReadFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
GetFileAttributesA
GetFileTime
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RaiseException
ExitThread
HeapSize
ExitProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
FatalAppExitA
VirtualFree
HeapDestroy
HeapCreate
GetACP
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetConsoleCtrlHandler
GetTimeZoneInformation
SetStdHandle
IsValidLocale
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
WriteConsoleA

user32

GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
SetFocus
IsWindow
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassLongA
GetCapture
IsChild
WinHelpA
SendDlgItemMessageA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
IsDialogMessageA
MoveWindow
ScrollWindowEx
ClientToScreen
GetDesktopWindow
InflateRect
GetMenuItemInfoA
DestroyMenu
FillRect
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetWindowDC
SetCursor
ShowOwnedPopups
DeleteMenu
DestroyIcon
GetNextDlgTabItem
CreateDialogIndirectParamA
GetDialogBaseUnits
SetActiveWindow
CopyRect
GetScrollInfo
PtInRect
SetWindowPlacement
GetDlgCtrlID
CallWindowProcA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetMessageTime
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
UnregisterClassA
GetSysColor
GetSysColorBrush
SetWindowsHookExA
CallNextHookEx
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
UnhookWindowsHookEx
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
GetWindowThreadProcessId
GetParent
GetLastActivePopup
IsWindowEnabled
EnableWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DeferWindowPos
DestroyWindow
GetMessagePos
MapWindowPoints
TrackPopupMenuEx
TrackPopupMenu
SetScrollRange
GetScrollRange
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetMenu
GetActiveWindow
LoadStringA
LoadIconA
LoadCursorA
RegisterClassA
ShowWindow
GetMessageA
RegisterWindowMessageA
PostQuitMessage
EnumDisplaySettingsExA
EndDialog
BeginPaint
EndPaint
DefWindowProcA
GetClassInfoExA
GetClassInfoA
AdjustWindowRectEx
MessageBoxA
CharLowerA
PostMessageA
LoadMenuA
CreateMenu
SetMenu
SetWindowTextA
SetScrollInfo
GetSystemMetrics
ScreenToClient
GetWindowPlacement
CharLowerW
CharUpperA
CharUpperW
FindWindowA
SendMessageA
UpdateWindow
TranslateMessage
DispatchMessageA
PeekMessageA
SetScrollPos
ScrollWindow
CreateWindowExA
GetWindowLongA
GetClientRect
ReleaseDC
GetDC
GetWindowRect
SetWindowPos
DialogBoxParamA
UnregisterDeviceNotification
RegisterDeviceNotificationA
EqualRect

gdi32

SetBkMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
TextOutA
RectVisible
PtVisible
StartDocA
GetPixel
GetWindowExtEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
RestoreDC
SaveDC
GetTextExtentPoint32A
ExtTextOutA
CreateFontIndirectA
GetObjectA
CreateDIBPatternBrushPt
CreatePatternBrush
CreateCompatibleDC
SelectObject
SetBkColor
SelectPalette
RealizePalette
CreateBitmap
SetDIBits
CreateDIBitmap
CreatePalette
BitBlt
DeleteDC
GetTextMetricsA
GetStockObject
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
CreatePen
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
GetViewportExtEx
SetTextColor
GetClipBox
GetDCOrgEx
CreateDCA
CopyMetaFileA
DeleteObject
GetDeviceCaps
DPtoLP
PatBlt
GetMapMode
CombineRgn
SetRectRgn
CreateRectRgnIndirect
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
Escape

comdlg32

GetSaveFileNameA
GetFileTitleA

advapi32

RegSetValueA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegSetValueExA

shell32

SHGetFileInfoA
SHGetFolderPathA
ExtractIconA

ole32

ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
ReadClassStg
StringFromCLSID
CoTreatAsClass
CreateBindCtx
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoDisconnectObject
StringFromGUID2
CreateStreamOnHGlobal
CoUninitialize
CoSetProxyBlanket
CoCreateInstance
CoInitializeEx
CLSIDFromString

oleaut32

VariantInit
VariantClear
OleLoadPicture
SysFreeString
SysAllocString
SysStringLen
SysAllocStringByteLen
SysStringByteLen
VariantChangeType
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysReAllocStringLen
VarDateFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromDate
GetErrorInfo
SetErrorInfo
CreateErrorInfo

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathRemoveExtensionA

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

Sections

.text
Size: 436KB - Virtual size: 435KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0b9287d94791cd8914c2957fa9609431

Headers

File Characteristics

Imports

setupapi

winmm

powrprof

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

oleacc

winspool.drv

Sections

.text Size: 436KB - Virtual size: 435KB

.rdata Size: 76KB - Virtual size: 73KB

.data Size: 16KB - Virtual size: 39KB

.rsrc Size: 4KB - Virtual size: 1KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 436KB - Virtual size: 435KB

.rdata
Size: 76KB - Virtual size: 73KB

.data
Size: 16KB - Virtual size: 39KB

.rsrc
Size: 4KB - Virtual size: 1KB

.rmnet
Size: 60KB - Virtual size: 60KB