c17ec3cda6266d2933b04627483ef9959b764d59e8413e1a3f3276b6d52b2231

Sharing

Copy URL Twitter E-mail

General

Target

c17ec3cda6266d2933b04627483ef9959b764d59e8413e1a3f3276b6d52b2231
Size

624KB
MD5

658b6d0be8afb8cbea427600b31a1c53
SHA1

eb2467c5d29b2cf553a13f6a95205b248dcbf5e6
SHA256

c17ec3cda6266d2933b04627483ef9959b764d59e8413e1a3f3276b6d52b2231
SHA512

f6bd70049a2fd7caa97e8423c6b4f388ac59c0240ed97c173a5b3a7248c276709654c3465c31ba5dccd0460388bfc69d54af7cf0f606ee78ae7ff40f62180a1d
SSDEEP

12288:0nfTdl+gb+T7F3RnyawnZIylyaCl92SXaFqTmZ:0nP+Y+T539wIzFn2SXnT

Score

N/A

Malware Config

Signatures

Files

c17ec3cda6266d2933b04627483ef9959b764d59e8413e1a3f3276b6d52b2231
.exe windows x86

81fb5d04c2bb0c00f185787785f3b2b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableA
SetUnhandledExceptionFilter
CompareStringW
GetLongPathNameW
CompareStringA
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
GetCPInfo
GetOEMCP
GetCurrentProcessId
QueryPerformanceCounter
IsBadWritePtr
GetTimeZoneInformation
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
HeapSize
VirtualQuery
GetSystemInfo
VirtualAlloc
TerminateProcess
HeapReAlloc
ExitProcess
GetSystemTimeAsFileTime
RtlUnwind
GetStartupInfoW
GetFileTime
GetFileAttributesW
FileTimeToLocalFileTime
SetErrorMode
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
WritePrivateProfileStringW
FindResourceExW
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GlobalFlags
lstrcmpiW
GlobalGetAtomNameW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
VirtualProtect
WideCharToMultiByte
SetLastError
MulDiv
lstrcpyW
FormatMessageW
LocalFree
FileTimeToSystemTime
InterlockedDecrement
lstrcpynW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrlenA
GetModuleHandleA
lstrlenW
lstrcatW
lstrcmpW
GetModuleHandleW
GetVersionExA
MultiByteToWideChar
FreeResource
GetVersion
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CreateFileW
GetCurrentProcess
GlobalFree
LoadLibraryW
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentThreadId
FindFirstFileW
SetFileAttributesW
RemoveDirectoryW
DeleteFileW
MoveFileW
FindNextFileW
FindClose
CreateMutexW
GetLastError
WriteFile
GetVersionExW
LoadLibraryA
GetProcAddress
HeapFree
GetProcessHeap
HeapAlloc
OpenProcess
CloseHandle
FreeLibrary
GetTickCount
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleFileNameW

user32

MessageBoxW
IsWindowVisible
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetClassInfoW
RegisterClassW
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetDesktopWindow
GetActiveWindow
CallNextHookEx
SetWindowsHookExW
IsDialogMessageW
MoveWindow
GetMenuCheckMarkDimensions
CheckMenuItem
EnableMenuItem
CreateDialogIndirectParamW
IsWindowEnabled
GetNextDlgTabItem
EndDialog
MapWindowPoints
RedrawWindow
GetDC
SetWindowRgn
GetMenuState
CopyRect
SetRect
TrackPopupMenu
SetMenuDefaultItem
LoadMenuW
UnregisterClassW
GetSysColorBrush
MapDialogRect
InvalidateRect
CreateWindowExW
GetFocus
DrawIconEx
DrawTextW
MessageBeep
ReleaseCapture
SetCapture
ScreenToClient
PeekMessageW
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
GetLastActivePopup
GetForegroundWindow
GetWindowLongW
SetWindowLongW
RegisterWindowMessageW
EmptyClipboard
SetClipboardData
CloseClipboard
SetForegroundWindow
OpenClipboard
KillTimer
IsIconic
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
DeleteMenu
EnumThreadWindows
DestroyWindow
DestroyIcon
GetParent
GetKeyState
TranslateMessage
DispatchMessageW
FindWindowW
UpdateWindow
PostMessageW
GetWindowTextLengthW
IsChild
SendDlgItemMessageA
SendDlgItemMessageW
RemovePropW
GetPropW
SetPropW
GetClassNameW
GetClassLongW
RegisterClassExW
GetClassInfoExW
SetMenuItemBitmaps
ReleaseDC
ValidateRect
GetMessageW
TabbedTextOutW
GetSystemMetrics
LoadImageW
wsprintfW
SetWindowTextW
ShowWindow
GetCursorPos
SetCursor
SetTimer
GetWindowRect
PtInRect
GetClientRect
AppendMenuW
CreatePopupMenu
FillRect
LoadCursorW
IsWindow
SetFocus
GetDlgItem
GetWindowTextW
LoadStringW
LoadIconW
GetCapture
WinHelpW
GetSysColor
EnableWindow
DrawTextExW
GrayStringW
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
InflateRect
GetMenuItemInfoW
DestroyMenu
SystemParametersInfoW
GetAsyncKeyState
PostQuitMessage
ShowOwnedPopups
SetWindowContextHelpId
RegisterClipboardFormatW
TranslateAcceleratorW
SetMenu
BringWindowToTop
SetRectEmpty
InsertMenuItemW
LoadAcceleratorsW
ReuseDDElParam
LockWindowUpdate
GetDCEx
PostThreadMessageW
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
CharNextW
CharUpperW
WindowFromPoint
SetParent
GetSystemMenu
IsRectEmpty
LoadBitmapW
UnpackDDElParam
SendMessageW
SetActiveWindow
ModifyMenuW

gdi32

RectVisible
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
PtVisible
CreateCompatibleBitmap
StretchDIBits
GetCharWidthW
CreateFontW
GetBkColor
SetRectRgn
GetMapMode
DPtoLP
EnumFontFamiliesExW
GetTextColor
GetRgnBox
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
SetStretchBltMode
CreateHalftonePalette
SetBkMode
RestoreDC
SaveDC
GetDeviceCaps
PatBlt
CreateRectRgnIndirect
CreateBitmap
GetClipBox
CreateRectRgn
CombineRgn
DeleteObject
GetPixel
CreateFontIndirectW
GetStockObject
TextOutW
SetTextColor
SetBkColor
SelectObject
DeleteDC
GetTextExtentPoint32W
GetDIBColorTable
StretchBlt
BitBlt
RealizePalette
CreateSolidBrush
CreatePalette
GetObjectW
CreateCompatibleDC

comdlg32

GetOpenFileNameW
GetSaveFileNameW
GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

OpenServiceW
OpenSCManagerW
QueryServiceStatus
FreeSid
LookupAccountSidW
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
RegCloseKey
RegOpenKeyW
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegCreateKeyExW
RegSetValueExW
CloseServiceHandle

shell32

DragAcceptFiles
DragQueryFileW
ShellExecuteW
ShellExecuteExW
Shell_NotifyIconW
DragFinish

comctl32

ImageList_ReplaceIcon
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragMove
ImageList_SetDragCursorImage
ImageList_DragShowNolock
ImageList_DragEnter
ImageList_DragLeave
_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_Create
ImageList_LoadImageW
PropertySheetW
DestroyPropertySheetPage
CreatePropertySheetPageW
ImageList_Draw
ImageList_GetImageInfo

shlwapi

PathRemoveFileSpecW
PathFileExistsW
PathCombineW
PathRemoveBackslashW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathAppendW
PathIsUNCW

oledlg

OleUIBusyW

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoTaskMemFree
CoCreateInstance
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoTaskMemAlloc

oleaut32

SysFreeString
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy
SafeArrayDestroy
SysAllocString
OleCreateFontIndirect
SysStringLen

msvfw32

DrawDibDraw
DrawDibClose
DrawDibOpen

rpcrt4

UuidToStringW
UuidCreate
RpcStringFreeW

hnkernel

HNK_AddConnRecord
HNK_RefreshTime
HNK_GetTimeHint
HNK_GetURL
HNK_GetSystemSettings
HNK_GetConfig
HNK_Start
HNK_SetNotifyWindow
HNK_Stop
HNK_GetConnections
HNK_HangUp
HNK_GetUIElement
HNK_AjustEntryString
HNK_AddUser
HNK_GetDevice
HNK_GetActiveDevice
HNK_LoadImage
HNK_SetConfig
HNK_SaveFile
HNK_Dial

ncutil

NCUtil_TStringToDBCS
NCUtil_XmlNodeSetAttribMulti
NCUtil_XmlNodeGetCDATA
NCUtil_XmlNodeFromFile
NCUtil_XmlNodeGetFirstChild
NCUtil_XmlNodeIsNamed
NCUtil_DecryptString
NCUtil_XmlNodeGetNextSibling
NCUtil_TStringToUTF8
NCUtil_XmlNodeFromDoc
NCUtil_FreeString
NCUtil_CreateDir
NCUtil_XmlNodeGetAttrib
NCUtil_CreateFileS
NCUtil_DBCSToTString
NCUtil_IsXPorAbove
NCUtil_XmlNodeCreate
NCUtil_XmlNodeAppendChild
NCUtil_XmlNodeAddCDATA
NCUtil_XmlNodeDelete
NCUtil_EncryptString

rasapi32

RasGetErrorStringW

Sections

.text
Size: 276KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�FA�
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

81fb5d04c2bb0c00f185787785f3b2b5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

msvfw32

rpcrt4

hnkernel

ncutil

rasapi32

Sections

.text Size: 276KB - Virtual size: 272KB

.rdata Size: 84KB - Virtual size: 82KB

.data Size: 36KB - Virtual size: 49KB

.rsrc Size: 140KB - Virtual size: 136KB

�FA� Size: 84KB - Virtual size: 84KB

.text
Size: 276KB - Virtual size: 272KB

.rdata
Size: 84KB - Virtual size: 82KB

.data
Size: 36KB - Virtual size: 49KB

.rsrc
Size: 140KB - Virtual size: 136KB

�FA�
Size: 84KB - Virtual size: 84KB