f0b120b02f4d477eede362c452f213865570d61207a995e8cbf23b8216ead683

Sharing

Copy URL Twitter E-mail

General

Target

f0b120b02f4d477eede362c452f213865570d61207a995e8cbf23b8216ead683
Size

409KB
MD5

467b38e79b4542bd54cb9c3ce4d99e10
SHA1

4b741c6788ec54bc4598d847ed59df1888a5f5e4
SHA256

f0b120b02f4d477eede362c452f213865570d61207a995e8cbf23b8216ead683
SHA512

0294072915f6ea8eaa8d57ddfbd74eca03bb0634fe1fc50326331d49914d36de0cc08ebc24973cf0674545b5ef4c08c1cf6988eefc6c8f4f6b30b3a53220fd4d
SSDEEP

12288:/XnLj1C68Wbobv2GHRHX9T9TL1kNcVtCuSdf:PP1Bobv20VtT9H1k2Vaf

Score

N/A

Malware Config

Signatures

Files

f0b120b02f4d477eede362c452f213865570d61207a995e8cbf23b8216ead683
.exe windows x86

1505d8cd995c2e678f41cee6bea3913b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAddAtomW
GetPrivateProfileSectionNamesW
FindResourceW
LoadResource
SizeofResource
LockResource
GetCommandLineW
CreateMutexW
WaitForSingleObject
GetModuleHandleW
GetLastError
CreateEventW
WaitForMultipleObjects
SetEnvironmentVariableA
GetDriveTypeA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetCurrentDirectoryA
GetTimeZoneInformation
GetStartupInfoA
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
CreateFileA
MoveFileW
SetFilePointer
TerminateThread
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetProcAddress
LoadLibraryW
WriteFile
GetCurrentThreadId
QueryPerformanceCounter
WritePrivateProfileStringW
GetPrivateProfileStringW
GetCurrentProcess
MultiByteToWideChar
GetModuleFileNameW
WideCharToMultiByte
DeleteFileW
GetTickCount
SetEvent
SetFileAttributesW
CreateDirectoryW
CloseHandle
CreateFileW
ReadFile
GetFileSize
lstrcpyW
LocalAlloc
VirtualAlloc
lstrcpynW
lstrcmpA
LocalFree
OpenEventW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringA
GetConsoleMode
lstrlenW
SetLastError
FormatMessageW
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
SetThreadPriority
ResumeThread
SuspendThread
SetErrorMode
InterlockedDecrement
FreeLibrary
GetModuleHandleA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileW
GetVersionExA
lstrcmpW
LoadLibraryA
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
LCMapStringW
GetThreadLocale
GetCurrentProcessId
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
GetVersion
GlobalFlags
FlushFileBuffers
SetEndOfFile
GetFullPathNameW
InterlockedExchange
CompareStringA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetSystemTimeAsFileTime
GetDriveTypeW
ExitThread
CreateThread
HeapReAlloc
RtlUnwind
RaiseException
HeapSize
SetStdHandle
GetFileType
ExitProcess
GetCPInfo
GetACP
GetOEMCP
Sleep
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetModuleFileNameA
GetConsoleCP

user32

GetSysColor
GetDlgItem
GetWindowLongW
SetWindowTextW
GetDlgCtrlID
SetWindowLongW
ShowWindow
IsWindowEnabled
SetWindowPos
GetWindowTextW
CopyRect
GetClientRect
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
CallWindowProcW
DefWindowProcW
PtInRect
AdjustWindowRectEx
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
GetMenu
SetForegroundWindow
MapWindowPoints
GetMessagePos
GetMessageTime
DestroyWindow
GetTopWindow
GetLastActivePopup
GetForegroundWindow
RemovePropW
GetPropW
SetPropW
GetClassNameW
GetClassLongW
GetCapture
WinHelpW
LoadIconW
RegisterWindowMessageW
GetWindowThreadProcessId
GetSysColorBrush
LoadCursorW
DestroyMenu
UnregisterClassA
DispatchMessageW
GetActiveWindow
SendMessageW
GetKeyState
GetCursorPos
ValidateRect
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
MessageBoxW
PostThreadMessageW
FindWindowW
PostMessageW
PeekMessageW
PostQuitMessage
IsWindow
IsWindowVisible
GetDC
ReleaseDC
DrawTextW
GetWindow
SetTimer
EnableWindow
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
UnhookWindowsHookEx
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
ModifyMenuW
EnableMenuItem
CheckMenuItem
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage

gdi32

PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
GetDeviceCaps
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
SelectObject
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
CreateBitmap
GetStockObject
OffsetViewportOrgEx

advapi32

SetSecurityDescriptorDacl
AddAccessAllowedAce
LookupAccountNameW
InitializeAcl
InitializeSecurityDescriptor

shell32

ShellExecuteW
CommandLineToArgvW
SHFileOperationW
SHGetSpecialFolderPathW

ole32

CoUninitialize
CoInitialize
CoCreateInstance
CLSIDFromProgID

oleaut32

VariantInit
VariantChangeType
SysFreeString
VariantClear
SysAllocString

shlwapi

PathFileExistsW
PathIsDirectoryW
PathFindFileNameW
PathFindExtensionW
UrlUnescapeW

crypt32

CryptMsgClose
CryptQueryObject
CertGetNameStringW
CertFreeCertificateContext
CertFindCertificateInStore
CertCloseStore
CryptMsgGetParam
CryptDecodeObject

ws2_32

inet_addr
htons
WSACleanup
WSAStartup
socket
connect
gethostbyname
send
recv
closesocket

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

wininet

InternetCloseHandle
InternetSetOptionW
HttpQueryInfoW
InternetReadFile
InternetConnectW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetOpenW

oleacc

LresultFromObject
CreateStdAccessibleObject

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

Sections

.text
Size: 256KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1505d8cd995c2e678f41cee6bea3913b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

crypt32

ws2_32

version

wininet

oleacc

winspool.drv

Sections

.text Size: 256KB - Virtual size: 252KB

.rdata Size: 60KB - Virtual size: 56KB

.data Size: 12KB - Virtual size: 5.0MB

.rsrc Size: 72KB - Virtual size: 72KB

.text
Size: 256KB - Virtual size: 252KB

.rdata
Size: 60KB - Virtual size: 56KB

.data
Size: 12KB - Virtual size: 5.0MB

.rsrc
Size: 72KB - Virtual size: 72KB