03141964a6cd2855bdfeed88579bc9ac9677adaee8acb346f7c5f6955106a674

Sharing

Copy URL Twitter E-mail

General

Target

03141964a6cd2855bdfeed88579bc9ac9677adaee8acb346f7c5f6955106a674
Size

2.2MB
MD5

d567186ebaf3a06bf224b39bcfeb4399
SHA1

a9ef30053f2e7a3fad0da0c8880afd0107b3c78f
SHA256

03141964a6cd2855bdfeed88579bc9ac9677adaee8acb346f7c5f6955106a674
SHA512

71b55d0c0e4c3a5a0a2a0089b7cc1494a792e1baebda88a763097e23fb2b23dc47973ec2d83c87f3a50694015259d8699d5f45a8ebf175a39642380681a5c177
SSDEEP

49152:cRWiCzM2F9f8zmz4sVNbQlZPeIxZqyhsXFZ:nF9fWo4cbuxhsL

Score

N/A

Malware Config

Signatures

Files

03141964a6cd2855bdfeed88579bc9ac9677adaee8acb346f7c5f6955106a674
.exe windows x86

6ef3e66858facc5ab9adddcd0de04366

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToLocalFileTime
UnmapViewOfFile
GlobalFree
MapViewOfFile
CreateFileMappingA
GetProcessHeap
SetEnvironmentVariableA
CompareStringW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetTimeZoneInformation
LCMapStringW
LCMapStringA
CreateProcessA
GetExitCodeProcess
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
HeapReAlloc
HeapSize
HeapAlloc
VirtualFree
HeapFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
QueryPerformanceCounter
SetHandleCount
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetACP
LoadLibraryW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
OutputDebugStringW
GetFileType
WriteConsoleW
OutputDebugStringA
GetStdHandle
DebugBreak
VirtualQuery
GetSystemInfo
VirtualAlloc
IsBadReadPtr
HeapValidate
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
RtlUnwind
GetTickCount
GetCurrentDirectoryA
LocalFileTimeToFileTime
GetFileSizeEx
GetModuleHandleW
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
GetOEMCP
GetCPInfo
VirtualProtect
SystemTimeToFileTime
FileTimeToSystemTime
InterlockedDecrement
GetModuleFileNameW
GlobalFlags
GetAtomNameA
GetDiskFreeSpaceA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
SetEvent
WaitForSingleObject
InterlockedExchange
lstrcmpA
GetCurrentThread
GetLocaleInfoA
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetShortPathNameA
lstrcmpiA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
GetFileSize
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetCurrentProcessId
MulDiv
FormatMessageA
LocalFree
lstrlenA
CompareStringA
SetLastError
LoadLibraryA
lstrcmpW
FreeLibrary
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
GetLastError
LockResource
CreateDirectoryA
CopyFileA
SetErrorMode
GetLocalTime
Sleep
GetModuleHandleA
GetProcAddress
FindResourceA
SizeofResource
LoadResource
FreeResource
GlobalAlloc
GlobalLock
GlobalUnlock
OpenEventA

user32

DestroyCursor
GetMessageA
TranslateMessage
GetCursorPos
PostQuitMessage
ModifyMenuA
InsertMenuItemA
GetMenuItemInfoA
EnableMenuItem
CheckMenuItem
DeleteMenu
CreatePopupMenu
CreateMenu
GrayStringA
GetTabbedTextExtentA
DrawTextExA
DrawTextA
DrawIcon
FillRect
GetSysColorBrush
CharUpperA
SetRectEmpty
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
GetWindowThreadProcessId
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
RemoveMenu
IsMenu
GetMenuItemCount
GetSubMenu
GetMenuState
GetMenuStringA
AppendMenuA
InsertMenuA
GetMenuItemID
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
LoadCursorA
PostThreadMessageA
SetWindowContextHelpId
GetForegroundWindow
SetForegroundWindow
WindowFromPoint
SetParent
GetLastActivePopup
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
SetCapture
KillTimer
SetTimer
LockWindowUpdate
GetDCEx
ShowOwnedPopups
IsWindowVisible
ValidateRect
InvalidateRgn
InvalidateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
EndPaint
BeginPaint
ClientToScreen
BringWindowToTop
SetWindowRgn
IsZoomed
GetSystemMenu
GetMenuCheckMarkDimensions
LoadBitmapA
SetMenuItemBitmaps
RegisterWindowMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
LoadIconA
SendDlgItemMessageA
GetClientRect
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
MessageBoxA
PtInRect
SetCursor
IsWindowEnabled
GetDlgItem
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
GetClipboardFormatNameA
CharNextA
CopyAcceleratorTableA
MessageBeep
IsRectEmpty
UnregisterClassA
RegisterClipboardFormatA
GetWindowLongA
DestroyWindow
InflateRect
SetRect
CreateDialogIndirectParamA
EnableWindow
IsWindow
SetActiveWindow
GetActiveWindow
GetDesktopWindow
EndDialog
MapDialogRect
SendMessageA
PostMessageA
TabbedTextOutA
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowPos
SetWindowLongA
GetMessagePos
GetMessageTime
GetMenu
SetMenu
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassNameA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
GetDlgCtrlID
GetKeyState
GetWindowTextA
GetWindowTextLengthA
TrackPopupMenu
WinHelpA
GetCapture
GetWindow
GetParent
IsChild
GetTopWindow
SetScrollPos
DestroyIcon

gdi32

CreatePen
CreateSolidBrush
CreatePatternBrush
CreateFontIndirectA
CreateRectRgnIndirect
CreateEllipticRgn
CreatePolygonRgn
SetRectRgn
CombineRgn
OffsetRgn
GetRgnBox
PtInRegion
GetNearestColor
GetBkColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetMapMode
GetViewportOrgEx
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
DPtoLP
LPtoDP
PtVisible
RectVisible
ExtSelectClipRgn
Rectangle
PatBlt
BitBlt
GetPixel
TextOutA
GetTextExtentPoint32A
GetTextAlign
GetTextFaceA
GetTextMetricsA
Escape
StartDocA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetTextExtentPointA
CreateRectRgn
GetCurrentPositionEx
SetTextAlign
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
LineTo
Ellipse
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
GetStockObject
RestoreDC
SaveDC
GetObjectType
CreateFontA
GetCharWidthA
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
StretchDIBits
DeleteDC
GetDeviceCaps
CreateDCA
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
ExtTextOutA
MoveToEx

comdlg32

GetFileTitleA

winspool.drv

GetJobA
OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

SetThreadToken
OpenThreadToken
RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegSetValueA
RegCloseKey
RevertToSelf

shell32

DragFinish
DragQueryFileA
SHGetFileInfoA
ExtractIconA
DragAcceptFiles

shlwapi

PathFindExtensionA
PathRemoveExtensionA
PathIsUNCA
PathStripToRootA
PathRemoveFileSpecW
PathFindFileNameA

oledlg

ord8

ole32

CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
StringFromGUID2
CLSIDFromString
CLSIDFromProgID
CoUninitialize
CoInitializeEx
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CoInitialize
CoCreateInstance
CreateStreamOnHGlobal
CoRevokeClassObject

oleaut32

SystemTimeToVariantTime
OleLoadPicture
SysStringLen
SysAllocStringByteLen
SysFreeString
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
VariantCopy
SafeArrayDestroy
OleCreateFontIndirect
SysAllocString
VariantTimeToSystemTime

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CangBai
Size: 931KB - Virtual size: 932KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CangBai
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ef3e66858facc5ab9adddcd0de04366

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

msvcrt

iphlpapi

psapi

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.CangBai Size: 931KB - Virtual size: 932KB

.idata Size: 10KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 4KB

.CangBai Size: 4KB - Virtual size: 4KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.CangBai
Size: 931KB - Virtual size: 932KB

.idata
Size: 10KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 4KB

.CangBai
Size: 4KB - Virtual size: 4KB