4afc08de58208440be75852daa3f54960f72b9a403af7b3810508b1ad1ee0bc2

Sharing

Copy URL

Twitter E-mail

General

Target

4afc08de58208440be75852daa3f54960f72b9a403af7b3810508b1ad1ee0bc2
Size

484KB
MD5

61dd82f9aa5595e09ea218b458df81c0
SHA1

d69952c9e5fc8c26a8f2476422317de14115e0e8
SHA256

4afc08de58208440be75852daa3f54960f72b9a403af7b3810508b1ad1ee0bc2
SHA512

b0d42e7714d3b47607f5a5a394a9f08993c8f1744d04317519e926f241e6abb900f3e1f275659364193f260fd750a4ad6e0ddd9b716151f378fd810f63dc6899
SSDEEP

12288:IUulHqKFNa8kEkkHQWA5SUV+bFhbSsPd9:MEEWWA5TqLSob

Score

N/A

Malware Config

Signatures

Files

4afc08de58208440be75852daa3f54960f72b9a403af7b3810508b1ad1ee0bc2
.exe windows x86

fbcc1ddd47fe0301183586a540afc38e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
LocalAlloc
GlobalReAlloc
GlobalHandle
LocalReAlloc
InterlockedIncrement
GlobalFlags
DeleteFileA
GetThreadLocale
FlushFileBuffers
LockFile
UnlockFile
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetCPInfo
GetOEMCP
FileTimeToSystemTime
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
HeapAlloc
HeapFree
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
RaiseException
InterlockedDecrement
VirtualAlloc
VirtualQuery
GetCommandLineA
GetProcessHeap
GetStartupInfoA
SetStdHandle
GetFileType
HeapSize
VirtualFree
HeapDestroy
HeapCreate
SetHandleCount
GetConsoleCP
GetConsoleMode
IsValidCodePage
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetEnvironmentVariableA
GetLocaleInfoW
GetModuleFileNameW
WritePrivateProfileStringA
FreeResource
GlobalAddAtomA
GlobalDeleteAtom
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GetModuleHandleA
GlobalLock
GlobalUnlock
MulDiv
GetStdHandle
SetLastError
GetVersionExA
FreeLibrary
GlobalAlloc
GlobalFree
LoadLibraryA
GetProcAddress
DuplicateHandle
GetModuleFileNameA
GetCurrentProcess
TlsSetValue
TlsFree
TlsAlloc
SetEvent
CreateEventA
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThread
ReleaseSemaphore
CreateSemaphoreA
CreateFileW
CreateFileA
GetTempPathA
GetEnvironmentStrings
ExitProcess
FormatMessageA
LocalFree
GetCurrentThreadId
TlsGetValue
GetSystemTimeAsFileTime
GetCurrentProcessId
GetFileSize
GetFileInformationByHandle
SetFilePointer
SetEndOfFile
GetComputerNameA
TerminateProcess
WaitForSingleObject
CloseHandle
GetSystemInfo
LeaveCriticalSection
EnterCriticalSection
GetLocalTime
Sleep
WriteFile
ReadFile
GetTickCount
FindResourceA
LoadResource
LockResource
SizeofResource
GetCommandLineW
lstrlenA
CompareStringW
CompareStringA
GetACP
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
VirtualProtect
InterlockedExchange

user32

RegisterClipboardFormatA
PostThreadMessageA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
OffsetRect
IntersectRect
GetWindowPlacement
GetSysColor
SystemParametersInfoA
DestroyMenu
CopyAcceleratorTableA
CopyRect
UnhookWindowsHookEx
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetMenuState
GetMenuItemID
CharNextA
ReleaseCapture
GetMenuItemCount
GetSubMenu
PostMessageA
GetSystemMetrics
EnableWindow
LoadIconA
GetClientRect
GetWindowRect
IsIconic
GetSystemMenu
SendMessageA
AppendMenuA
DrawIcon
UnregisterClassA
MessageBeep
CharUpperA
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
SetRect
GetWindow
IsRectEmpty
SetCapture
LoadCursorA
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetPropA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
RegisterWindowMessageA

gdi32

SetMapMode
DeleteObject
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
ExtTextOutA
GetObjectA
CreateBitmap
GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegisterEventSourceA
RegOpenKeyA
ReportEventA
DeregisterEventSource
RegCreateKeyA
RegSetValueExA
RegCloseKey

shell32

CommandLineToArgvW

comctl32

ord17

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

OleFlushClipboard
OleIsCurrentClipboard
CoCreateGuid
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
CoRegisterMessageFilter

oleaut32

SysFreeString
VariantClear
VariantChangeType
VariantInit
SysStringLen
SysAllocStringByteLen
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy
SysAllocStringLen

ws2_32

WSAGetLastError
shutdown
connect
inet_addr
gethostname
getservbyname
gethostbyname
gethostbyaddr
WSACleanup
WSAStartup
bind
ioctlsocket
select
__WSAFDIsSet
WSASend
sendto
getsockopt
socket
getpeername
closesocket

Sections

.text
Size: 312KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fbcc1ddd47fe0301183586a540afc38e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

Sections

.text Size: 312KB - Virtual size: 308KB

.rdata Size: 72KB - Virtual size: 69KB

.data Size: 16KB - Virtual size: 29KB

.rsrc Size: 80KB - Virtual size: 77KB

.text
Size: 312KB - Virtual size: 308KB

.rdata
Size: 72KB - Virtual size: 69KB

.data
Size: 16KB - Virtual size: 29KB

.rsrc
Size: 80KB - Virtual size: 77KB