73e80021dc10a155ae9a06fe3c8576597d8fa2a0e2e7c24c6deaa25b82f03263

Sharing

Copy URL Twitter E-mail

General

Target

73e80021dc10a155ae9a06fe3c8576597d8fa2a0e2e7c24c6deaa25b82f03263
Size

572KB
MD5

15dc442c3b1f1c00d1be37e6deeefdf2
SHA1

de5409acaa570fda516947444d0c7b2042b8d8dd
SHA256

73e80021dc10a155ae9a06fe3c8576597d8fa2a0e2e7c24c6deaa25b82f03263
SHA512

502cd4c7b7dc8635f5452f43133d693ad51a96594e6ff86c2409aed78531cf8d1dcba9b772b5dd2953d82e91c969687a67ca5ba7353aced6033dea08e656321f
SSDEEP

6144:mQ2+GT4LrOzRQevf1bwWIk6V3TvswfBeUG9BrQV0pKqsIBs2NqpaC23y/D6bbuSS:92+y4avVl6V3TvfGcVkskPAF0uUA3/5

Score

N/A

Malware Config

Signatures

Files

73e80021dc10a155ae9a06fe3c8576597d8fa2a0e2e7c24c6deaa25b82f03263
.exe windows x86

fb4388f4ed4b96416371c92faa86cbf0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

bind
listen
closesocket
WSASocketA
WSAResetEvent
WSAWaitForMultipleEvents
WSAGetLastError
inet_addr
htons
WSASend
WSARecv
gethostname
WSAGetOverlappedResult
getpeername
inet_ntoa
WSAAccept
gethostbyname
setsockopt
WSACreateEvent
WSAEventSelect
WSACloseEvent
WSAEnumNetworkEvents

advapi32

RegDeleteValueA
ImpersonateSelf
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyA
RegOpenKeyA
RegEnumValueA
OpenThreadToken
GetTokenInformation
LookupAccountSidA
RevertToSelf
GetUserNameA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegDeleteKeyA
RegEnumKeyA
RegSetValueExA

shell32

ord2
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteA
SHGetPathFromIDListA
SHGetFileInfoA

kernel32

GetProcessVersion
GetProcessTimes
GetWindowsDirectoryA
GetTempPathA
GetVolumeInformationA
GetDriveTypeA
GetDiskFreeSpaceA
lstrlenA
GlobalMemoryStatus
GetSystemInfo
Sleep
GetLogicalDrives
FindClose
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
CreateDirectoryA
RemoveDirectoryA
LocalFree
LocalAlloc
SetFileAttributesA
GetPriorityClass
GetDiskFreeSpaceExA
lstrcmpiA
GetCurrentThreadId
CreateFileA
DeleteCriticalSection
WaitForSingleObject
CreateEventA
InitializeCriticalSection
SetUnhandledExceptionFilter
CreateMutexA
ResetEvent
SetEvent
WaitForMultipleObjects
LoadLibraryExA
FlushViewOfFile
CreateFileMappingA
MapViewOfFile
OpenFileMappingA
UnmapViewOfFile
ReleaseMutex
GetExitCodeProcess
MultiByteToWideChar
QueryPerformanceCounter
InterlockedIncrement
InterlockedDecrement
GetFileSize
GetFileTime
lstrcpynA
FormatMessageA
DuplicateHandle
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
GetFullPathNameA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVersion
lstrcmpA
lstrlenW
SuspendThread
GlobalFlags
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetCPInfo
GetOEMCP
GetCurrentDirectoryA
RtlUnwind
RaiseException
ExitProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitThread
GetStartupInfoA
GetCommandLineA
SetStdHandle
GetFileType
GetACP
HeapSize
HeapReAlloc
SetHandleCount
LCMapStringA
LCMapStringW
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentProcessId
GetVersionExA
SetLastError
GetLocaleInfoA
EnterCriticalSection
LeaveCriticalSection
TerminateThread
CreateThread
GetModuleHandleA
GetEnvironmentVariableA
lstrcpyA
lstrcatA
GetCurrentThread
SetThreadPriority
CreateProcessA
ResumeThread
CreateToolhelp32Snapshot
Process32First
Process32Next
TerminateProcess
DeleteFileA
GetCurrentProcess
WritePrivateProfileStringA
GetPrivateProfileStringA
GetComputerNameA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
OpenProcess
CloseHandle
GetSystemDirectoryA
GetStdHandle
CopyFileA
WideCharToMultiByte
GetTickCount
HeapCreate
HeapAlloc
HeapFree
HeapDestroy
GetLastError
GetProcAddress
FreeLibrary
GetModuleFileNameA
LoadLibraryA
AreFileApisANSI
LockFileEx
CreateFileW
GetTempPathW
GetFileAttributesW
DeleteFileW
GetFullPathNameW
LoadLibraryW
GetFileAttributesA
GetSystemTimeAsFileTime

user32

ValidateRect
GetActiveWindow
GetMessageA
IsWindowEnabled
PtInRect
SetWindowTextA
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
PostQuitMessage
LoadCursorA
GetSysColorBrush
DestroyMenu
GetWindowRect
GrayStringA
TabbedTextOutA
ClientToScreen
CharUpperA
IsCharAlphaA
WaitForInputIdle
LoadStringA
MessageBoxW
DrawTextA
mouse_event
keybd_event
GetClientRect
GetCursorPos
SetTimer
KillTimer
PeekMessageA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
GetWindow
IsWindow
GetClassLongA
GetWindowDC
EnumDisplaySettingsA
RegisterClassA
CreateWindowExA
PostMessageA
DefWindowProcA
DestroyWindow
CreateDialogParamA
DialogBoxParamA
MoveWindow
SetWindowPos
GetWindowLongA
SetWindowLongA
ShowWindow
ExitWindowsEx
SystemParametersInfoA
EnumWindows
EnumChildWindows
GetWindowTextA
GetClassNameA
RegisterWindowMessageA
SendMessageTimeoutA
GetDesktopWindow
GetDC
ReleaseDC
GetForegroundWindow
GetWindowThreadProcessId
GetSystemMetrics
LoadIconA
MapWindowPoints
GetSysColor
GetFocus
SetFocus
AdjustWindowRectEx
CopyRect
IsWindowVisible
EnableWindow
GetTopWindow
GetParent
GetCapture
WinHelpA
GetClassInfoA
GetMenu
GetMenuItemCount
GetSubMenu
MessageBoxA
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetDlgCtrlID
GetKeyState
SetWindowsHookExA
CallNextHookEx
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
SetForegroundWindow
SendMessageA
IsIconic
GetWindowPlacement

gdi32

Escape
ExtTextOutA
RectVisible
CreateBitmap
PtVisible
GetTextExtentPoint32A
TextOutA
DeleteObject
GetStockObject
SelectPalette
RealizePalette
GetDIBits
GetObjectA
DeleteDC
BitBlt
SelectObject
CreateCompatibleBitmap
GetTextMetricsA
GetDeviceCaps
CreateICA
GetPixel
SetTextColor
SaveDC
RestoreDC
SetBkColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
CreateCompatibleDC

comdlg32

GetFileTitleA

winspool.drv

EnumPrintersA
OpenPrinterA
FindClosePrinterChangeNotification
FreePrinterNotifyInfo
FindNextPrinterChangeNotification
FindFirstPrinterChangeNotification
ClosePrinter
DocumentPropertiesA

comctl32

ord17

ole32

CoCreateGuid
CoInitialize

oleaut32

VariantClear
VarBstrFromDate

ppdata

ord4
ord40
ord2
ord6
ord18
ord17
ord9
ord45
ord52
ord47
ord39
ord38
ord8
ord5
ord26

shlwapi

PathFileExistsA

wsock32

WSAStartup
WSACleanup

Sections

.text
Size: 456KB - Virtual size: 453KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb4388f4ed4b96416371c92faa86cbf0

Headers

File Characteristics

Imports

ws2_32

advapi32

shell32

kernel32

user32

gdi32

comdlg32

winspool.drv

comctl32

ole32

oleaut32

ppdata

shlwapi

wsock32

Sections

.text Size: 456KB - Virtual size: 453KB

.rdata Size: 44KB - Virtual size: 42KB

.data Size: 40KB - Virtual size: 69KB

.rsrc Size: 28KB - Virtual size: 25KB

.text
Size: 456KB - Virtual size: 453KB

.rdata
Size: 44KB - Virtual size: 42KB

.data
Size: 40KB - Virtual size: 69KB

.rsrc
Size: 28KB - Virtual size: 25KB