2271ef8c860b166e5fe34dd92e3c98df0cea39f4598760f58dbd5a6a58b458fc

Sharing

Copy URL Twitter E-mail

General

Target

2271ef8c860b166e5fe34dd92e3c98df0cea39f4598760f58dbd5a6a58b458fc
Size

394KB
MD5

405ef608b0e07d10953b0acd3b6f871f
SHA1

20728bf57804ed851a2ac08264bf9def1f59b415
SHA256

2271ef8c860b166e5fe34dd92e3c98df0cea39f4598760f58dbd5a6a58b458fc
SHA512

f7662e25210e572599d7258eb6db83e8ea3a94ae910e9fe6d50a4e3bd3333e0d9dcc66c620c45fbd8dbd8dce31ac59cc722185aec69f3b3ceec98ef8ab8d1474
SSDEEP

6144:E4gXgqyweIH9sVwqC3bveqqDL6nLWbV+TgoWgapbGTF+AC:DZqywh9sHC3bzqn6nSbYcga4JHC

Score

N/A

Malware Config

Signatures

Files

2271ef8c860b166e5fe34dd92e3c98df0cea39f4598760f58dbd5a6a58b458fc
.exe windows x86

9065e4c582d702ea457120d7ff413e62

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

setupapi

SetupIterateCabinetA

twsupd

ord3
ord2

kernel32

GlobalFlags
GetProcessVersion
SizeofResource
GetCPInfo
GetOEMCP
SetErrorMode
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetFileType
GetCommandLineA
ExitProcess
HeapFree
HeapAlloc
RaiseException
GetACP
HeapReAlloc
HeapSize
SetStdHandle
GetCurrentProcessId
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
TlsGetValue
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLastError
CreateMutexA
Sleep
CloseHandle
SetEvent
CreateEventA
lstrlenA
CreateThread
GetModuleFileNameA
WaitForSingleObject
ExpandEnvironmentStringsA
GetSystemDirectoryA
MapViewOfFile
OpenFileMappingA
UnmapViewOfFile
ReleaseMutex
CreateFileMappingA
CreateProcessA
GetStartupInfoA
GetVersion
GetCurrentProcess
lstrcpyA
GetTickCount
WritePrivateProfileStringA
GetPrivateProfileIntA
lstrcpynA
CreateDirectoryA
WideCharToMultiByte
MultiByteToWideChar
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DuplicateHandle
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
EnterCriticalSection
FormatMessageA
LocalFree
MulDiv
GlobalGetAtomNameA
GlobalAddAtomA
GetFileSize
CreateFileA
GetProfileStringA
GlobalFindAtomA
SetLastError
FreeLibrary
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
InterlockedDecrement
InterlockedIncrement
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpiA
lstrcmpA
GetCurrentThread
GetCurrentThreadId
DeviceIoControl
LoadLibraryA
GetWindowsDirectoryA
GetShortPathNameA
GetFileAttributesA
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetModuleHandleA
GetProcAddress
FindFirstFileA
FindNextFileA
FindClose
lstrcatA
TerminateProcess
GetStringTypeA

user32

GetNextDlgGroupItem
MessageBeep
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
LoadCursorA
DestroyMenu
CharUpperA
GetDesktopWindow
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
ClientToScreen
MapWindowPoints
GetSysColor
AdjustWindowRectEx
ScreenToClient
CopyRect
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
SetRect
GetMessagePos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
LoadStringA
MapDialogRect
GetWindow
SetWindowContextHelpId
SetFocus
ShowWindow
SetWindowPos
MoveWindow
GetDlgCtrlID
PtInRect
GetWindowTextA
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
EndDialog
SetActiveWindow
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SetCursor
PostQuitMessage
IsWindowVisible
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
GetMessageTime
IsIconic
GetMenuItemID
SetMenuDefaultItem
DestroyIcon
LoadImageA
LoadMenuA
GetSubMenu
GetCursorPos
TrackPopupMenu
InvalidateRect
wsprintfA
ExitWindowsEx
IsWindow
PostMessageA
FindWindowA
LoadIconA
GetDC
GetClientRect
GetWindowRect
GetForegroundWindow
GetWindowThreadProcessId
SetForegroundWindow
AttachThreadInput
EnableWindow
KillTimer
SendMessageA
SetTimer
GetActiveWindow
GetFocus
MessageBoxA
UpdateWindow
ShowCaret
HideCaret
UnregisterClassA
GetWindowTextLengthA
GetClassNameA
SetWindowLongA

gdi32

SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateDIBitmap
GetTextExtentPoint32A

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

OpenSCManagerA
OpenServiceA
CreateServiceA
CloseServiceHandle
StartServiceA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyExA
RegQueryValueExA

shell32

Shell_NotifyIconA
ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CLSIDFromString
CoRegisterMessageFilter
CoRevokeClassObject
CLSIDFromProgID
OleIsCurrentClipboard
OleFlushClipboard

olepro32

ord253

oleaut32

SysStringLen
SysAllocStringByteLen
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

wsock32

WSAStartup
WSACleanup

wininet

InternetSetStatusCallback
InternetGetLastResponseInfoA
HttpQueryInfoA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetConnectA
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetCookieA
InternetCloseHandle
InternetOpenA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetSetOptionA

Sections

.text
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9065e4c582d702ea457120d7ff413e62

Headers

File Characteristics

Imports

version

setupapi

twsupd

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

wininet

Sections

.text Size: 208KB - Virtual size: 207KB

.rdata Size: 64KB - Virtual size: 62KB

.data Size: 16KB - Virtual size: 40KB

.rsrc Size: 96KB - Virtual size: 96KB

.text
Size: 208KB - Virtual size: 207KB

.rdata
Size: 64KB - Virtual size: 62KB

.data
Size: 16KB - Virtual size: 40KB

.rsrc
Size: 96KB - Virtual size: 96KB