fda9c68df73f4691b4c02ac28e8c64b9b564f075c7f3020f1dc7584ca5325891

Sharing

Copy URL Twitter E-mail

General

Target

fda9c68df73f4691b4c02ac28e8c64b9b564f075c7f3020f1dc7584ca5325891
Size

464KB
MD5

3279dbc4556d89d964b4c06ec662ea80
SHA1

8d3734275ef8461cd4d78cf06226d1c8e36522d5
SHA256

fda9c68df73f4691b4c02ac28e8c64b9b564f075c7f3020f1dc7584ca5325891
SHA512

49f872500e2f290eef8c4ac8fd5e3c603b6c3e0fac9334d995587f199e0bd22c2fcca88f4016115facbb89da957094ae632ba40541020e5e845581e3df94ddd8
SSDEEP

12288:Mbfno8y2muGeCEZcoiciWr8NCsCz3uOsTs9wfLPaGe:3YZWNFCvsTPLPaGe

Score

N/A

Malware Config

Signatures

Files

fda9c68df73f4691b4c02ac28e8c64b9b564f075c7f3020f1dc7584ca5325891
.exe windows x86

2bae7757b10fe3223687dabe85eb50a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
RtlUnwind
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
GetStartupInfoA
GetCommandLineA
HeapReAlloc
HeapSize
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetHandleCount
GetFileType
LCMapStringA
LCMapStringW
SetStdHandle
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
SetErrorMode
GetOEMCP
GetCPInfo
GetVolumeInformationA
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
GlobalFlags
InterlockedIncrement
GlobalFindAtomA
lstrcmpW
WritePrivateProfileStringA
InterlockedDecrement
SetLastError
MulDiv
FormatMessageA
LocalFree
FreeResource
lstrcpynA
GlobalGetAtomNameA
GlobalAddAtomA
GetCurrentThread
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetModuleHandleA
ConvertDefaultLocale
EnumResourceLanguagesA
GetPrivateProfileStringA
WinExec
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
lstrcatA
lstrcpyA
GetFileTime
GetFullPathNameA
GetModuleFileNameA
GetFileAttributesA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
GetTickCount
LoadLibraryA
GetProcAddress
GetFileSize
SetFilePointer
CreateFileA
WriteFile
CloseHandle
ReadFile
CompareStringW
CompareStringA
lstrcmpiA
GetVersion
DeleteCriticalSection
InitializeCriticalSection
GetLastError
RaiseException
MultiByteToWideChar
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetPrivateProfileIntA
GetStdHandle
lstrlenA

user32

SetForegroundWindow
AdjustWindowRectEx
RegisterClassA
CallWindowProcA
SystemParametersInfoA
GetWindowPlacement
SetWindowContextHelpId
MapDialogRect
UnhookWindowsHookEx
CreateDialogIndirectParamA
DestroyWindow
GetNextDlgTabItem
EndDialog
RegisterWindowMessageA
wsprintfA
DestroyMenu
GetClassNameA
GetSysColor
SetWindowPos
WinHelpA
SetFocus
GetDlgItem
SetWindowLongA
GetDlgCtrlID
GetMenu
GetClassInfoA
GetCapture
SetActiveWindow
UpdateWindow
GetSubMenu
GetMenuItemID
GetMenuItemCount
ShowWindow
IsWindow
GetDesktopWindow
GetWindow
SetMenuItemBitmaps
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
CallNextHookEx
GetMessageA
GetActiveWindow
IsWindowVisible
GetCursorPos
ValidateRect
MessageBoxA
GetParent
IsWindowEnabled
PostQuitMessage
SetWindowRgn
DefWindowProcA
ScreenToClient
PeekMessageA
DispatchMessageA
IsDialogMessageA
TranslateMessage
PtInRect
GetDC
GetWindowLongA
LoadCursorA
EnumChildWindows
GetWindowThreadProcessId
RedrawWindow
ReleaseCapture
SetCapture
TrackMouseEvent
EqualRect
InvalidateRect
BeginPaint
EndPaint
PostMessageA
GetSysColorBrush
GetWindowDC
ReleaseDC
ClientToScreen
MoveWindow
SetWindowTextA
UnionRect
IntersectRect
IsRectEmpty
CopyRect
SetCursor
GetKeyState
GetWindowRect
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
OffsetRect
SetRect
UnregisterClassA
PostThreadMessageA
RegisterClipboardFormatA
MessageBeep
CharUpperA
GetSystemMetrics
LoadIconA
EnableWindow
GetClientRect
IsIconic
GetSystemMenu
SendMessageA
AppendMenuA
DrawIcon
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
GetLastActivePopup
CreateWindowExA
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
IsChild
GetWindowTextA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetWindowsHookExA

gdi32

SetTextColor
SetBkColor
SaveDC
RestoreDC
SetBkMode
SetMapMode
IntersectClipRect
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ExtSelectClipRgn
CreatePen
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
GetDeviceCaps
CreateBitmap
GetStockObject
GetTextExtentPoint32A
CreateFontIndirectA
CombineRgn
ExtCreateRegion
GetClipRgn
CreateRectRgn
SelectClipRgn
Rectangle
BitBlt
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetClipBox
CreateCompatibleBitmap
GetObjectA
DeleteDC
CreateDIBSection
CreateCompatibleDC
ScaleWindowExtEx
SelectObject
DeleteObject

msimg32

AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegCloseKey

shell32

SHGetSpecialFolderPathA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteA

comctl32

ord17

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathFileExistsA
PathIsUNCA

oledlg

ord8

ole32

StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
StgCreateDocfileOnILockBytes
CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize

oleaut32

SysStringLen
SysAllocStringByteLen
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysFreeString
SysAllocStringLen

Sections

.text
Size: 304KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2bae7757b10fe3223687dabe85eb50a9

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 304KB - Virtual size: 301KB

.rdata Size: 88KB - Virtual size: 84KB

.data Size: 12KB - Virtual size: 25KB

.rsrc Size: 56KB - Virtual size: 55KB

.text
Size: 304KB - Virtual size: 301KB

.rdata
Size: 88KB - Virtual size: 84KB

.data
Size: 12KB - Virtual size: 25KB

.rsrc
Size: 56KB - Virtual size: 55KB