d85a2f5885236dc971c30e52841bd46b2fb69c507978466dace177ad952a829d

Sharing

Copy URL Twitter E-mail

General

Target

d85a2f5885236dc971c30e52841bd46b2fb69c507978466dace177ad952a829d
Size

1.5MB
MD5

7b508e563262f19427d2383e75d0c8f2
SHA1

824e024243f622ecb4e4c876614eede47535368f
SHA256

d85a2f5885236dc971c30e52841bd46b2fb69c507978466dace177ad952a829d
SHA512

1caaf715e7cd153403c7e45eaae9cd56af7b61f1ef46c4c58a0709ad4103a36c94e7288431345098e93839e013541a72afb2ada7126e6d550a51e959d2cd9d9b
SSDEEP

24576:2n+IWe9VVkbjN72g/OG5Fy909inqxRHeu2vvQdM3MTtd+TtJxKTAf/n83Ow:U+VASN7V/5brRHn2vvvczstqw/n83Ow

Score

N/A

Malware Config

Signatures

Files

d85a2f5885236dc971c30e52841bd46b2fb69c507978466dace177ad952a829d
.exe windows x86

d335692330ae87addd35bc1170ebbe8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

commdll

ClxCommInit

kernel32

RtlUnwind
CreateDirectoryA
RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
SetEnvironmentVariableA
ExitThread
SetStdHandle
GetFileType
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetStringTypeW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
TlsAlloc
GlobalFlags
SystemTimeToFileTime
LocalFileTimeToFileTime
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFileAttributesA
ReleaseMutex
CreateMutexA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcpynA
SetLastError
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
FlushViewOfFile
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetFileSize
GlobalMemoryStatus
GetVersion
QueryPerformanceFrequency
QueryPerformanceCounter
SetEndOfFile
SetFilePointer
ReadFile
HeapReAlloc
HeapSize
HeapFree
GetProcessHeap
HeapAlloc
SetCurrentDirectoryA
FormatMessageA
GetCurrentThread
InterlockedExchangeAdd
CopyFileA
FindFirstFileA
FindNextFileA
FindClose
WritePrivateProfileSectionA
TerminateProcess
GetLastError
GetSystemDefaultLangID
GetCurrentProcessId
GetPrivateProfileIntA
LocalAlloc
LocalLock
LocalUnlock
LocalFree
GetSystemDirectoryA
GetACP
MulDiv
GetCommandLineA
WritePrivateProfileStringA
lstrcmpiA
GetStartupInfoA
GetPrivateProfileStringA
WriteFile
FindResourceA
LoadResource
SizeofResource
LockResource
ExitProcess
OpenProcess
CreateProcessA
Sleep
lstrcmpA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
_lopen
_lread
_lclose
_lcreat
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetWindowsDirectoryA
CreateThread
GetTickCount
WaitForSingleObject
GetExitCodeThread
GetTempPathA
GetTempFileNameA
MultiByteToWideChar
WideCharToMultiByte
CreateFileA
DeviceIoControl
CloseHandle
FreeLibrary
LoadLibraryA
GetProcAddress
GetSystemInfo
GetLogicalDriveStringsA
GetDriveTypeA
GetVersionExA
_llseek
_lwrite
GetVolumeInformationA
DeleteFileA
MoveFileA
OutputDebugStringA
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
GetModuleFileNameA
InterlockedExchange
GetStringTypeA

user32

GetSystemMenu
DeleteMenu
AppendMenuA
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
TranslateAcceleratorA
LoadAcceleratorsA
WaitMessage
CharNextA
CharUpperA
MapDialogRect
GetAsyncKeyState
IsZoomed
GetMessageA
ValidateRect
GrayStringA
UnregisterClassA
EndPaint
BeginPaint
wvsprintfA
ShowWindow
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
SendDlgItemMessageA
MapWindowPoints
SetFocus
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
WinHelpA
GetWindowTextLengthA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SystemParametersInfoA
GetWindowPlacement
EndDialog
CreateDialogIndirectParamA
GetDlgItem
IsWindowEnabled
EnumWindows
RegisterClassA
DrawIconEx
EnableScrollBar
GetFocus
DrawFrameControl
GetWindowTextA
GetCaretPos
DeferWindowPos
GetSysColorBrush
IsDialogMessageA
wsprintfA
LoadStringA
UnionRect
GetWindowDC
DlgDirListA
RedrawWindow
SetWindowRgn
GetMenuItemID
GetMenuItemCount
ModifyMenuA
PostQuitMessage
GetKeyboardState
ToAscii
SetWindowPos
GetClassNameA
SetForegroundWindow
SetActiveWindow
IsWindowVisible
FlashWindow
SetMenu
GetMenu
GetWindowThreadProcessId
FindWindowA
GetClassInfoA
DefWindowProcA
SetParent
UnregisterHotKey
RegisterHotKey
GetKeyNameTextA
CopyIcon
GetMessagePos
PeekMessageA
TranslateMessage
DispatchMessageA
CreateWindowExA
SetWindowTextA
SetWindowLongA
MoveWindow
DestroyWindow
AdjustWindowRectEx
EqualRect
EnableMenuItem
CheckMenuItem
TrackPopupMenu
SetRectEmpty
MessageBoxA
MessageBeep
RegisterWindowMessageA
IsIconic
GetSystemMetrics
DrawIcon
LoadIconA
GetKeyState
PostMessageA
GetCursorPos
ScreenToClient
KillTimer
DrawTextA
IsWindow
GetDC
ShowOwnedPopups
SetWindowContextHelpId
RegisterClipboardFormatA
GetDCEx
PostThreadMessageA
GetNextDlgGroupItem
InsertMenuA
InvertRect
ReleaseDC
LoadImageA
DrawStateA
CopyRect
FrameRect
GetSysColor
GetWindowRect
TrackPopupMenuEx
WindowFromPoint
GetActiveWindow
GetNextDlgTabItem
GetWindowLongA
DestroyIcon
DestroyCursor
DestroyMenu
LoadMenuA
InflateRect
IntersectRect
InvalidateRect
IsRectEmpty
RemoveMenu
GetSubMenu
ClientToScreen
PtInRect
GetCapture
OffsetRect
LoadCursorA
SetCursor
ReleaseCapture
SetCapture
DrawFocusRect
GetDesktopWindow
SetRect
FillRect
UpdateWindow
GetClientRect
LoadBitmapA
GetParent
SetTimer
EnableWindow
GetWindow
SendMessageA
GetTabbedTextExtentA
CopyAcceleratorTableA
GetMenuStringA
LockWindowUpdate
GetDlgCtrlID
TabbedTextOutA

gdi32

GetCurrentPositionEx
GetMapMode
CreatePatternBrush
PtVisible
ExtTextOutA
Escape
AbortDoc
EndDoc
MoveToEx
StartPage
SetAbortProc
CreateDCA
SetRectRgn
GetBkColor
StretchDIBits
GetCharWidthA
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
SetTextAlign
SetMapMode
GetViewportExtEx
SetViewportExtEx
GetWindowExtEx
SetWindowExtEx
CreateFontA
CreateRoundRectRgn
GetTextColor
SetPixel
GetSystemPaletteEntries
Ellipse
GetViewportOrgEx
CreatePen
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetStretchBltMode
SetROP2
SetPolyFillMode
StartDocA
GetClipBox
CreatePolygonRgn
FrameRgn
GetTextExtentPointA
SaveDC
IntersectClipRect
TextOutA
RestoreDC
RectVisible
CreatePalette
SelectPalette
RealizePalette
SetDIBits
GetPixel
LineTo
BitBlt
StretchBlt
GetDeviceCaps
GetObjectA
CreateRectRgn
EndPage
GetTextMetricsA
PatBlt
CreatePenIndirect
Rectangle
CreateFontIndirectA
SetBkMode
CreateBitmap
SetBkColor
SetTextColor
DeleteDC
GetStockObject
DeleteObject
GetTextExtentPoint32A
Polygon
SelectObject
LPtoDP
DPtoLP
CreateCompatibleDC
CreateCompatibleBitmap
CreateRectRgnIndirect
SetBrushOrgEx
CreateSolidBrush
UnrealizeObject
CombineRgn

comdlg32

PrintDlgA
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegEnumKeyA
GetUserNameA
RegCreateKeyExA
SetFileSecurityA
GetFileSecurityA
RegDeleteValueA
RegDeleteKeyA
RegSetValueA
RegCreateKeyA
RegQueryValueA

shell32

SHGetFileInfoA
ExtractIconA
DragQueryFileA
DragFinish
ShellExecuteExA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA

comctl32

ImageList_AddMasked
ImageList_GetImageCount
_TrackMouseEvent
ImageList_GetIconSize
ImageList_DrawEx
ord17
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
PropertySheetA
DestroyPropertySheetPage
ImageList_Draw
CreatePropertySheetPageA

oledlg

ord8

ole32

OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoUninitialize
CreateStreamOnHGlobal
CoTaskMemFree
StgOpenStorage
StgIsStorageFile

olepro32

ord253
ord251

oleaut32

SysStringLen
VariantTimeToSystemTime
VariantClear
SysAllocStringByteLen
SafeArrayCreate
SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysAllocStringLen
VariantChangeType
VariantCopy
SysFreeString

netapi32

Netbios

wininet

InternetQueryOptionA
InternetCanonicalizeUrlA
InternetGetLastResponseInfoA
HttpSendRequestA
InternetErrorDlg
HttpOpenRequestA
InternetConnectA
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetSetOptionExA
InternetCrackUrlA
InternetGetConnectedState
InternetOpenA
InternetOpenUrlA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetSetOptionA

rpcrt4

UuidCreate

shlwapi

PathMatchSpecA

wsock32

WSASetLastError
WSACleanup
htons
WSAGetLastError
WSAStartup
connect
sendto
recvfrom
socket
inet_ntoa
WSAAsyncSelect
send
recv
gethostbyname
closesocket
htonl
bind
ioctlsocket
accept
setsockopt

Sections

.text
Size: 1.1MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 208KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 240KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d335692330ae87addd35bc1170ebbe8f

Headers

File Characteristics

Imports

winmm

version

commdll

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

netapi32

wininet

rpcrt4

shlwapi

wsock32

Sections

.text Size: 1.1MB - Virtual size: 1.0MB

.rdata Size: 208KB - Virtual size: 204KB

.data Size: 52KB - Virtual size: 76KB

.rsrc Size: 240KB - Virtual size: 238KB

.text
Size: 1.1MB - Virtual size: 1.0MB

.rdata
Size: 208KB - Virtual size: 204KB

.data
Size: 52KB - Virtual size: 76KB

.rsrc
Size: 240KB - Virtual size: 238KB