aef5aa2deef3f76e808538f0448716b09a72581a373e740c093c06a1bd264f72

Sharing

Copy URL

Twitter E-mail

General

Target

aef5aa2deef3f76e808538f0448716b09a72581a373e740c093c06a1bd264f72
Size

774KB
MD5

6d0b28c94f2605b7d51750bab20bee30
SHA1

99e0eb5df182d81b3615c860cdd087bf0d93de55
SHA256

aef5aa2deef3f76e808538f0448716b09a72581a373e740c093c06a1bd264f72
SHA512

5b0c25c89177748dfc62baecca71047e4e221b44e8c6c22957d156f648f04ac98841639b7ccf2ab626f3d7b46cc64b982ec1850d68bfa4030f023890111fc483
SSDEEP

12288:Js6tbZw0s8lG4A2tRDSFRnO8S7/ntUmrQlwyUDZ/RvC3yZ:JlbZw0s8lG4Ad48S7/5QsZK3yZ

Score

N/A

Malware Config

Signatures

Files

aef5aa2deef3f76e808538f0448716b09a72581a373e740c093c06a1bd264f72
.exe windows x86

85fa61d24152aa4804cca9f4c25fd23f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
GetOEMCP
SetErrorMode
RtlUnwind
RaiseException
ExitProcess
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
ExitThread
GetStartupInfoA
GetCommandLineA
SetStdHandle
GetFileType
GetACP
HeapReAlloc
HeapSize
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
GetProcessVersion
IsBadWritePtr
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalFlags
GetProfileStringA
InterlockedExchange
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GetFileTime
GetFileSize
lstrlenW
FileTimeToLocalFileTime
FileTimeToSystemTime
SuspendThread
SetThreadPriority
ResumeThread
lstrcmpA
GetCurrentThread
LocalAlloc
GetThreadLocale
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
DuplicateHandle
MulDiv
SetLastError
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
GetLocalTime
OutputDebugStringA
GetOverlappedResult
ResetEvent
GetTickCount
WaitForMultipleObjects
GetExitCodeThread
InterlockedIncrement
InterlockedDecrement
GetEnvironmentVariableA
GetTempPathA
WriteFile
SetFileTime
CreateDirectoryA
LocalFileTimeToFileTime
SystemTimeToFileTime
ReadFile
CreateFileA
SetFilePointer
GetModuleHandleA
DeleteFileA
FormatMessageA
LocalFree
FindClose
GetWindowsDirectoryA
GetDriveTypeA
FindFirstFileA
FindNextFileA
GetModuleFileNameA
GetFileAttributesA
lstrlenA
SetEvent
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateEventA
WideCharToMultiByte
GetVersionExA
CreateProcessA
GetExitCodeProcess
GetCurrentDirectoryA
SetCurrentDirectoryA
TerminateProcess
FreeLibrary
GetCurrentProcess
OpenProcess
WritePrivateProfileStringA
OpenMutexA
CloseHandle
WritePrivateProfileSectionA
CreateThread
WaitForSingleObject
CreateMutexA
GetLastError
GetPrivateProfileStringA
LoadLibraryA
GetProcAddress
FindResourceA
LoadResource
LockResource
SizeofResource
CopyFileA
MultiByteToWideChar
VirtualAlloc
Sleep

user32

UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
RegisterClassA
GetMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
DefWindowProcA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
OffsetRect
IntersectRect
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
PostThreadMessageA
GetWindowLongA
GetDlgItem
IsWindowEnabled
UnhookWindowsHookEx
RedrawWindow
GetDC
CopyRect
GetParent
wsprintfA
PeekMessageA
IsWindow
DrawTextW
LoadCursorA
SetCursor
GetMessagePos
ScreenToClient
PtInRect
GetWindow
LoadMenuA
ModifyMenuW
SetTimer
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
GetSubMenu
GetMenuItemCount
DeleteMenu
SetMenuDefaultItem
GetCursorPos
TrackPopupMenu
LoadImageA
LoadStringW
RegisterWindowMessageA
CallWindowProcA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SetWindowLongA
LoadIconA
RegisterClipboardFormatA
InflateRect
IsDialogMessageA
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
GetClassInfoA
FindWindowA
SetWindowRgn
EnableWindow
KillTimer
SetWindowPos
PostMessageA
InvalidateRect
SetForegroundWindow
SystemParametersInfoA
GetWindowRect
SetParent
SendMessageA
CharNextA
GetSysColorBrush
GetClassNameA
WindowFromPoint
DestroyMenu
LoadStringA
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
GetDesktopWindow
CharUpperA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
ClientToScreen
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
CopyIcon
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
DestroyWindow
SetWindowTextA

gdi32

SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
ScaleViewportExtEx
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
LPtoDP
DPtoLP
PatBlt
GetTextColor
GetBkColor
GetMapMode
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CreateRoundRectRgn
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateFontIndirectA
GetStockObject
CreateFontA
CreateDIBitmap
GetTextExtentPointA
GetObjectA

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

DuplicateTokenEx
OpenProcessToken
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyA
RegCreateKeyExA
CreateProcessAsUserA

shell32

ShellExecuteA
SHFileOperationA
SHGetSpecialFolderPathA
Shell_NotifyIconW

comctl32

_TrackMouseEvent
ord17

oledlg

ord8

ole32

CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CreateStreamOnHGlobal
OleInitialize
OleIsCurrentClipboard
OleFlushClipboard
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject

olepro32

ord253

oleaut32

SafeArrayUnaccessData
SysAllocStringLen
SysAllocString
VariantClear
SysFreeString
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantCopy
SysAllocStringByteLen
VariantChangeType
SafeArrayAccessData
VariantTimeToSystemTime
SysStringLen
SafeArrayGetLBound
SafeArrayGetUBound

ws2_32

gethostbyname
setsockopt
socket
htons
closesocket
recv
send
WSAStartup
WSACleanup
select
connect
ioctlsocket
inet_addr

gdiplus

GdipCreateFontFamilyFromName
GdipCreateFont
GdipDrawString
GdipCloneBrush
GdipCreateSolidFill
GdipFillRectangleI
GdipDeleteFont
GdipDeleteFontFamily
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipDrawImageI
GdipCloneImage
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipDisposeImage
GdipFree
GdipAlloc
GdiplusShutdown
GdiplusStartup
GdipCreateFromHDC
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectRectI
GdipDeleteBrush
GdipDeleteGraphics

netapi32

Netbios

wininet

InternetConnectA
InternetQueryDataAvailable
InternetReadFile
InternetGetLastResponseInfoA
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenUrlA
InternetCloseHandle
InternetOpenA
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

winmm

timeSetEvent
timeKillEvent

Sections

.text
Size: 388KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 40KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

85fa61d24152aa4804cca9f4c25fd23f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

ws2_32

gdiplus

netapi32

wininet

version

winmm

Sections

.text Size: 388KB - Virtual size: 384KB

.rdata Size: 84KB - Virtual size: 83KB

.data Size: 40KB - Virtual size: 54KB

.rsrc Size: 252KB - Virtual size: 252KB

.text
Size: 388KB - Virtual size: 384KB

.rdata
Size: 84KB - Virtual size: 83KB

.data
Size: 40KB - Virtual size: 54KB

.rsrc
Size: 252KB - Virtual size: 252KB