207b80343a5e72cb90f7e78aa0776c8a6e49856716432cb8ba3ca5501a29224a

Sharing

Copy URL Twitter E-mail

General

Target

207b80343a5e72cb90f7e78aa0776c8a6e49856716432cb8ba3ca5501a29224a
Size

1.2MB
MD5

4e293f468c37bb477698a5a90526c650
SHA1

1dbfa9f03c619416f03bb062ce56b1eeffbfa9d0
SHA256

207b80343a5e72cb90f7e78aa0776c8a6e49856716432cb8ba3ca5501a29224a
SHA512

d8b916fb60cbc01c343f15d794a0011c089edb223e5c5b6727f7c2708559a9eae839511a6346f5ae4e2d69e9e26ecc528cfbaae2d7c401ad2c402a86f953a232
SSDEEP

24576:PBASsKapjRp+4l7A6KPza8hh1zzjyZ6DGkjiS3bWuuyMuuuuV7jGnIrxjXeBuuUe:wtpjRp+4l7jKJh/j66DGkjiS3bWuuyM0

Score

N/A

Malware Config

Signatures

Files

207b80343a5e72cb90f7e78aa0776c8a6e49856716432cb8ba3ca5501a29224a
.exe windows x86

a6df0e6966bc10805d8102fcca34f06f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

kernel32

CompareStringA
VirtualFree
VirtualAlloc
IsBadWritePtr
GetDriveTypeA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeA
HeapDestroy
HeapCreate
SetUnhandledExceptionFilter
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
IsBadCodePtr
GetLocaleInfoW
SetEnvironmentVariableA
GetProfileStringA
_lclose
_lread
CompareStringW
LCMapStringW
LCMapStringA
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
lstrcpynA
GetCurrentDirectoryA
SetCurrentDirectoryA
FindFirstFileA
FindClose
GetModuleFileNameA
GetTimeZoneInformation
GetACP
HeapSize
HeapReAlloc
GetFileType
SetStdHandle
HeapAlloc
GetCommandLineA
GetStartupInfoA
IsBadReadPtr
HeapFree
TerminateProcess
ExitProcess
RtlUnwind
RaiseException
InterlockedExchange
Sleep
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetOEMCP
GetCPInfo
GetProcessVersion
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SizeofResource
GlobalFlags
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
FormatMessageA
LocalFree
CloseHandle
MulDiv
SetLastError
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
_llseek
OpenFile
GetStringTypeW
IsValidLocale
IsValidCodePage

user32

WindowFromPoint
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
ShowOwnedPopups
DestroyMenu
LoadAcceleratorsA
GetMenuCheckMarkDimensions
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
LoadIconA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
GetScrollInfo
SetScrollInfo
TranslateAcceleratorA
SetRectEmpty
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
CallWindowProcA
RemovePropA
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
SystemParametersInfoA
GetWindowPlacement
PostMessageA
PostQuitMessage
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetSysColor
GetWindow
GetClientRect
SetMenuItemInfoA
GetMenuItemInfoA
SetWindowPos
IsIconic
GetMenu
GetSubMenu
PostThreadMessageA
GetParent
GetWindowRect
CreatePopupMenu
LoadMenuA
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringA
AppendMenuA
GetMessageTime
GetMessagePos
IntersectRect
GetSystemMetrics
SendMessageA
InvalidateRect
EnableWindow
GrayStringA
DrawTextA
TabbedTextOutA
LoadBitmapA
LoadCursorA
UpdateWindow
SetParent
RegisterClipboardFormatA
LockWindowUpdate
GetDCEx
InflateRect
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
CharUpperA
DestroyIcon
LoadStringA
GetSysColorBrush
DeleteMenu
InsertMenuA
GetClassNameA
FillRect
DrawFocusRect
GetAsyncKeyState
SetRect
KillTimer
SetTimer
IsZoomed
PtInRect
GetPropA
UnpackDDElParam
SetCapture
BringWindowToTop
GetDesktopWindow
ReuseDDElParam
SetMenu
RegisterClassA
ReleaseCapture
TrackPopupMenu
SetCursor
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode

gdi32

PtVisible
TextOutA
ExtTextOutA
Escape
GetDeviceCaps
CreateDIBSection
DeleteObject
GetTextMetricsA
CreateCompatibleBitmap
CreateBitmap
PatBlt
StretchBlt
GetClipBox
SetTextColor
SetBkColor
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
BitBlt
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
CreatePatternBrush
CreateRectRgnIndirect
StretchDIBits
GetCharWidthA
CreateFontA
GetTextExtentPoint32A
CreateFontIndirectA
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
SetRectRgn
CombineRgn
CreateCompatibleDC
GetTextExtentPointA
GetObjectA
RectVisible
CreateDIBitmap

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegDeleteValueA
RegCreateKeyA
SetFileSecurityA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegSetValueA
GetFileSecurityA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

shell32

SHGetFileInfoA
ExtractIconA
DragQueryFileA
DragFinish
DragAcceptFiles

comctl32

CreatePropertySheetPageA
DestroyPropertySheetPage
ord17
PropertySheetA

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
CoTaskMemAlloc
CoTaskMemFree

olepro32

ord253

oleaut32

VariantChangeType
SysAllocString
VariantTimeToSystemTime
VariantClear
VariantCopy
SysFreeString
SysAllocStringByteLen
SysAllocStringLen
SysStringLen

Sections

.text
Size: 536KB - Virtual size: 534KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 392KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a6df0e6966bc10805d8102fcca34f06f

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 536KB - Virtual size: 534KB

.rdata Size: 120KB - Virtual size: 116KB

.data Size: 132KB - Virtual size: 172KB

.rsrc Size: 392KB - Virtual size: 388KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 536KB - Virtual size: 534KB

.rdata
Size: 120KB - Virtual size: 116KB

.data
Size: 132KB - Virtual size: 172KB

.rsrc
Size: 392KB - Virtual size: 388KB

.rmnet
Size: 60KB - Virtual size: 60KB