bf30ab5189b58ae172ad007d5031efe715881b3b6c36f12f1e420a0a5f443423

Sharing

Copy URL Twitter E-mail

General

Target

bf30ab5189b58ae172ad007d5031efe715881b3b6c36f12f1e420a0a5f443423
Size

312KB
MD5

447a0a57c8b9dbe6adde8965d9351bc0
SHA1

d85014b4c5eac0550b6240ac76b8811341c27eef
SHA256

bf30ab5189b58ae172ad007d5031efe715881b3b6c36f12f1e420a0a5f443423
SHA512

4de1d0860ff8f7dc6d13509ae364c1a9d043db90369334b57b8877b2353ad599039dfb7ce662e80db853d24c28ef2a494cd276d21ae555252c09e5856375259d
SSDEEP

3072:NEkaQVF4iosF3G9ARP89OmzE5n4FBloOYMZjJDXrpCNOtnGMoNaUtnZ6I3bsXR4e://oGRP89OH9KuOYWYtZxL8cIid3su

Score

N/A

Malware Config

Signatures

Files

bf30ab5189b58ae172ad007d5031efe715881b3b6c36f12f1e420a0a5f443423
.exe windows x86

ca47ba32a535e6232abbb11c2670d497

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetACP
GetProfileStringA
HeapSize
HeapReAlloc
RaiseException
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapFree
RtlUnwind
HeapAlloc
FormatMessageA
GetFileTime
GetFileSize
GetFileAttributesA
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
SetErrorMode
GetOEMCP
GetCPInfo
GetThreadLocale
GetProcessVersion
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalFree
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrcpynA
MulDiv
SetLastError
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleFileNameA
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
lstrlenA
InterlockedDecrement
InterlockedIncrement
FindResourceA
SizeofResource
LoadResource
LockResource
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
FreeLibrary
CreateMutexA
GetLastError
OpenProcess
VirtualAllocEx
WriteProcessMemory
ReadProcessMemory
VirtualFreeEx
CloseHandle
GetModuleHandleA
GetProcAddress
WideCharToMultiByte
SetUnhandledExceptionFilter
MultiByteToWideChar

user32

CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
ScreenToClient
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
MapDialogRect
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
InflateRect
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
PostQuitMessage
DrawTextA
ReleaseDC
SetWindowPos
PtInRect
PostMessageA
SendMessageA
UnregisterClassA
HideCaret
MoveWindow
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
SetForegroundWindow
SetWindowRgn
RedrawWindow
GetDC
GetParent
InvalidateRect
IsWindow
GetDesktopWindow
GetWindowRect
IsIconic
GetSystemMetrics
GetClientRect
SetWindowContextHelpId
DrawIcon
GetWindowLongA
SetWindowLongA
LoadIconA
CopyRect
EnableWindow
ClientToScreen
OffsetRect
FindWindowA
FindWindowExA
GetWindow
IsWindowUnicode
GetWindowThreadProcessId
DestroyMenu
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
GetClassNameA
LoadCursorA
LoadStringA
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ShowWindow
UpdateWindow
SetWindowTextA
IsDialogMessageA
PeekMessageA
LoadBitmapA

gdi32

SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
RestoreDC
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
SelectObject
CreateDIBSection
DeleteObject
DeleteDC
GetObjectA
GetPixel
CreatePolygonRgn
CreateFontA
GetStockObject
CreateCompatibleDC
BitBlt
CreateDIBitmap
GetTextExtentPointA
CreateCompatibleBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

comctl32

_TrackMouseEvent
ord17

oledlg

ord8

ole32

CreateStreamOnHGlobal
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoRevokeClassObject

olepro32

ord253

oleaut32

VariantClear
SysFreeString
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen
SysAllocStringLen

gdiplus

GdipCloneBrush
GdipCreateSolidFill
GdipDrawString
GdipCreateFontFamilyFromName
GdipCreateFont
GdipDeleteFontFamily
GdipDeleteFont
GdipDeleteBrush
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipDrawImageI
GdiplusShutdown
GdiplusStartup
GdipCreateFromHDC
GdipDeleteGraphics
GdipGetImageWidth
GdipGetImageHeight
GdipDrawImageRectRectI
GdipCloneImage
GdipDisposeImage
GdipFree
GdipAlloc
GdipLoadImageFromStream
GdipLoadImageFromStreamICM

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ca47ba32a535e6232abbb11c2670d497

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

gdiplus

Sections

.text Size: 148KB - Virtual size: 147KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 48KB - Virtual size: 46KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 148KB - Virtual size: 147KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 48KB - Virtual size: 46KB

.rmnet
Size: 60KB - Virtual size: 60KB