bdd4fc0510b47e13917b2189d7bbd34f2a93741cd9c6fef7fb14102429fdd544

Sharing

Copy URL Twitter E-mail

General

Target

bdd4fc0510b47e13917b2189d7bbd34f2a93741cd9c6fef7fb14102429fdd544
Size

552KB
MD5

65c0ff4377667aaf0683471f969f4350
SHA1

5a625ba98703af711515be19f4c8dd17957d7d49
SHA256

bdd4fc0510b47e13917b2189d7bbd34f2a93741cd9c6fef7fb14102429fdd544
SHA512

3e7be19da8718f3a4c8bf21ba355cf688223580eb7c8b2cb9c3e676fdafbaac54442754da5fdaf2ef632afba58f9b3209a78332246fb3ca4f7636f10aebaca53
SSDEEP

6144:qykZHxHvkLi0DLbVVkbEYo/rdlQhkBfRGQpW7Da3jiTfgeDUu2+mlGCHG5aIVdvI:XkZb0DBl9RGQpzT64eYuJzVdvqdo

Score

N/A

Malware Config

Signatures

Files

bdd4fc0510b47e13917b2189d7bbd34f2a93741cd9c6fef7fb14102429fdd544
.exe windows x86

2ec70a411ef421aefd1834a3a470efde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cfgmgr32

CM_Get_Parent
CM_Get_Device_IDA

kernel32

GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GetCPInfo
SetErrorMode
RtlUnwind
GetStartupInfoA
ExitProcess
RaiseException
HeapAlloc
HeapFree
SetStdHandle
GetFileType
GetTimeZoneInformation
GetSystemTime
GetACP
HeapReAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
SizeofResource
GlobalFlags
GetFileTime
GetThreadLocale
GetFullPathNameA
lstrcpynA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
SetFilePointer
WriteFile
ReadFile
DuplicateHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
MulDiv
SetLastError
FormatMessageA
LocalFree
GlobalAlloc
TlsAlloc
lstrcmpA
InterlockedExchange
GetProfileStringA
GetOEMCP
GetLastError
CreateEventA
CloseHandle
CreateProcessA
CopyFileA
DeleteFileA
SetFileAttributesA
GetDriveTypeA
GetCommandLineA
WaitForSingleObject
Sleep
GetVersionExA
CreateThread
GetLogicalDrives
CreateMutexA
FlushFileBuffers
CreateFileA
WideCharToMultiByte
MultiByteToWideChar
GetPrivateProfileIntA
GetTempPathA
GetModuleFileNameA
GetDiskFreeSpaceExA
ReleaseMutex
GetCurrentProcess
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeviceIoControl
ResetEvent
FreeLibrary
GetProcAddress
LoadLibraryA
CreateDirectoryA
GetVolumeInformationA
GetDiskFreeSpaceA
InterlockedIncrement
InterlockedDecrement
GetLocalTime
GetFileSize
GetModuleHandleA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetFileAttributesA
TerminateProcess
FileTimeToDosDateTime
SystemTimeToFileTime
DosDateTimeToFileTime
IsDBCSLeadByte
LoadResource
FindResourceA
LockResource
GlobalFree
GlobalUnlock
GlobalLock
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetCurrentThreadId
lstrcatA
GetVersion
lstrlenA
GetCurrentThread
LocalAlloc

user32

GetSysColorBrush
LoadCursorA
GetDesktopWindow
PtInRect
LoadStringA
DestroyMenu
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
SetCursor
PostQuitMessage
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
PostThreadMessageA
MapWindowPoints
GetSysColor
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
IsWindowVisible
CharNextA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
RegisterClipboardFormatA
InflateRect
InvalidateRect
SendDlgItemMessageA
GetMessagePos
GetLastActivePopup
DefDlgProcA
IsWindowUnicode
GetForegroundWindow
SetWindowLongA
MessageBeep
GetNextDlgGroupItem
SetRect
PeekMessageA
CopyAcceleratorTableA
RegisterWindowMessageA
OffsetRect
IntersectRect
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
CharUpperA
SystemParametersInfoA
GetTopWindow
IsWindow
PostMessageA
GetClassNameA
GetWindow
GetCursorPos
CreatePopupMenu
AppendMenuA
SetForegroundWindow
SetWindowPos
IsIconic
SendMessageA
GetSystemMetrics
GetClientRect
DrawIcon
LoadIconA
MessageBoxA
EnableWindow
LoadBitmapA

gdi32

CreateCompatibleDC
BitBlt
GetTextExtentPointA
PatBlt
GetMapMode
LPtoDP
DPtoLP
GetBkColor
GetTextColor
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateSolidBrush
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
DeleteObject
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateDIBitmap

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegOpenKeyA
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA

shell32

SHChangeNotify
ShellExecuteA
Shell_NotifyIconA

comctl32

ord17

oledlg

ord8

ole32

OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject

olepro32

ord253

oleaut32

SysStringLen
VariantTimeToSystemTime
VariantChangeType
SysAllocStringByteLen
SysAllocString
SysFreeString
SysAllocStringLen
VariantCopy
VariantClear

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA

Sections

.text
Size: 328KB - Virtual size: 326KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2ec70a411ef421aefd1834a3a470efde

Headers

File Characteristics

Imports

cfgmgr32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

version

setupapi

Sections

.text Size: 328KB - Virtual size: 326KB

.rdata Size: 48KB - Virtual size: 46KB

.data Size: 28KB - Virtual size: 217KB

.rsrc Size: 84KB - Virtual size: 81KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 328KB - Virtual size: 326KB

.rdata
Size: 48KB - Virtual size: 46KB

.data
Size: 28KB - Virtual size: 217KB

.rsrc
Size: 84KB - Virtual size: 81KB

.rmnet
Size: 60KB - Virtual size: 60KB