5504e8981ea7226f14efbb0d9a81cc163af9e3714019cf69887f0f6a9a09aa79

Sharing

Copy URL Twitter E-mail

General

Target

5504e8981ea7226f14efbb0d9a81cc163af9e3714019cf69887f0f6a9a09aa79
Size

976KB
MD5

48ef1c1401271b09958c08d1cdf1d190
SHA1

3dd98c7206d673d133a1b187a0d7c4310c270885
SHA256

5504e8981ea7226f14efbb0d9a81cc163af9e3714019cf69887f0f6a9a09aa79
SHA512

fc420d52ccef487a818c532b559349633aa8c2ef756ebb23b1ec83abfdbb15cf8aaa0412b271b39fcc184456f7f5f289c38dd4e2d7410c699562442076261673
SSDEEP

24576:tbxF5RfHpW/NeSKvyVCFBIDCASMFXdF9:tb75y/NeSK6VGBIDCAVd

Score

N/A

Malware Config

Signatures

Files

5504e8981ea7226f14efbb0d9a81cc163af9e3714019cf69887f0f6a9a09aa79
.exe windows x86

7318cd0596dd79233d95f0bdc29a5c52

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
FileTimeToSystemTime
WritePrivateProfileStringA
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
SetErrorMode
FileTimeToLocalFileTime
RtlUnwind
ExitThread
CreateThread
GetSystemTimeAsFileTime
ExitProcess
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetStartupInfoA
HeapSize
VirtualFree
GlobalHandle
HeapCreate
GetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsValidCodePage
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GlobalReAlloc
TlsGetValue
LocalAlloc
RaiseException
InterlockedDecrement
GetModuleFileNameW
SuspendThread
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcmpA
GlobalAlloc
FormatMessageA
LocalFree
MulDiv
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
SetLastError
lstrcmpW
InterlockedIncrement
GetDateFormatA
GetTimeFormatA
FindNextFileA
GlobalMemoryStatus
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ResetEvent
GetProcessHeap
HeapAlloc
HeapFree
lstrcatA
GetLocalTime
QueryPerformanceFrequency
GetQueuedCompletionStatus
CreateIoCompletionPort
PostQueuedCompletionStatus
UnmapViewOfFile
FlushViewOfFile
WinExec
lstrcpyA
GetWindowsDirectoryA
CompareStringW
CompareStringA
GetVersionExA
GetThreadLocale
GetLocaleInfoA
CreateFileMappingA
MapViewOfFile
SleepEx
FlushInstructionCache
GetVersionExW
GetACP
GetVersion
MultiByteToWideChar
DebugBreak
GetDiskFreeSpaceExA
CreateDirectoryA
GetFileTime
FindClose
FindFirstFileA
DeleteFileA
lstrlenA
OutputDebugStringA
WriteFile
FindResourceA
LoadResource
LockResource
SizeofResource
SetCurrentDirectoryA
CreateFileA
GetFileSize
ReadFile
CreateMutexA
GetFileAttributesA
GetModuleHandleA
CreateProcessA
GetLastError
GetSystemDirectoryA
CreateEventA
GetModuleFileNameA
LoadLibraryA
GetTickCount
GetCurrentProcessId
Process32First
Process32Next
OpenProcess
GetExitCodeProcess
TerminateProcess
TerminateThread
GetProcAddress
FreeLibrary
CreateToolhelp32Snapshot
SetEvent
WaitForSingleObject
Module32First
Module32Next
CloseHandle
Sleep
InterlockedExchange
HeapDestroy
WideCharToMultiByte

user32

PostThreadMessageA
UnregisterClassA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
IsRectEmpty
CopyAcceleratorTableA
GetSysColorBrush
DestroyMenu
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
TabbedTextOutA
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
GetMessageA
TranslateMessage
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuState
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
RegisterWindowMessageA
WinHelpA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
GetPropA
RemovePropA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
DefWindowProcA
CallWindowProcA
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetWindowTextLengthA
GetWindowTextA
SetWindowPos
SetFocus
IsWindowEnabled
ShowWindow
MoveWindow
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
RegisterClipboardFormatA
SetPropA
SendDlgItemMessageA
GetDlgItem
GetWindow
OffsetRect
UnionRect
SetWindowLongA
GetCursorPos
GetWindowLongA
ReleaseCapture
IsWindow
GetFocus
SetCapture
GetCapture
GetComboBoxInfo
RedrawWindow
CopyRect
LoadCursorA
LoadBitmapA
SetCursor
DrawTextA
CharNextA
CharUpperA
GetParent
PostQuitMessage
MessageBoxW
wsprintfA
LoadIconA
KillTimer
SetTimer
IsWindowVisible
InvalidateRect
ReleaseDC
GetDC
ScreenToClient
GetClientRect
PostMessageA
SetRect
PtInRect
SendMessageA
MessageBoxA
UpdateWindow
EnableWindow
SetForegroundWindow

gdi32

SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
ScaleViewportExtEx
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
CreateCompatibleBitmap
SetMapMode
RestoreDC
SaveDC
SetBkColor
GetClipBox
GetDeviceCaps
GetTextExtentPoint32A
CreateRectRgn
GetStockObject
CreateSolidBrush
GetTextMetricsA
CreateBitmap
SetBkMode
SetTextColor
StretchBlt
PatBlt
GetObjectA
CreateDIBitmap
CreateFontA
DeleteObject
BitBlt
SelectObject
CreateCompatibleDC
SelectClipRgn

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegCloseKey
RegSetValueExA
RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA

shell32

ShellExecuteA

comctl32

_TrackMouseEvent

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
StgOpenStorageOnILockBytes
CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize
OleFlushClipboard
CoRegisterMessageFilter
CoCreateGuid

oleaut32

OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SafeArrayCreate
SafeArrayGetElemsize
VariantClear
VariantInit
SysFreeString
VariantChangeType
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
VariantCopy
DispCallFunc
SysAllocString
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData

ws2_32

WSASetEvent
WSAWaitForMultipleEvents
ntohs
WSASendTo
getsockname
WSARecv
shutdown
listen
WSASocketA
WSASend
getsockopt
getpeername
accept
connect
recvfrom
htons
socket
WSACleanup
WSAStartup
inet_ntoa
gethostbyname
inet_addr
WSAGetLastError
WSAIoctl
WSARecvFrom
setsockopt
WSACloseEvent
closesocket
WSAResetEvent
WSAGetOverlappedResult
bind
WSACreateEvent
sendto

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

winmm

timeKillEvent
timeSetEvent

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 624KB - Virtual size: 620KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.drdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7318cd0596dd79233d95f0bdc29a5c52

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

version

winmm

iphlpapi

Sections

.text Size: 624KB - Virtual size: 620KB

.rdata Size: 140KB - Virtual size: 138KB

.data Size: 20KB - Virtual size: 366KB

.rsrc Size: 20KB - Virtual size: 17KB

.drdata Size: 68KB - Virtual size: 68KB

.text
Size: 624KB - Virtual size: 620KB

.rdata
Size: 140KB - Virtual size: 138KB

.data
Size: 20KB - Virtual size: 366KB

.rsrc
Size: 20KB - Virtual size: 17KB

.drdata
Size: 68KB - Virtual size: 68KB