db46d689770aa87219e2452bab3343aaeefb62d12d05969895014243d4d15500

Sharing

Copy URL Twitter E-mail

General

Target

db46d689770aa87219e2452bab3343aaeefb62d12d05969895014243d4d15500
Size

988KB
MD5

64e78a55f62c7964776d5f6c536af259
SHA1

2bcf24b4faf2c19c457e567b77ff44a76610b43d
SHA256

db46d689770aa87219e2452bab3343aaeefb62d12d05969895014243d4d15500
SHA512

b177b88096fcbc368c3d112a64b1945775e567e651af6fee6a3dcfb33e60ebd77f393c1df51660e155240a05f72814c18d7a5daa43b5b4a97e5560d82c00629e
SSDEEP

12288:/Udr6BBLVLLvE8uWioARoIJsRjvBLi1vHfKcY8rmD8WxYZbooYdjkpaNC:FBLVLLGi8kBsnFtZbooYZk

Score

N/A

Malware Config

Signatures

Files

db46d689770aa87219e2452bab3343aaeefb62d12d05969895014243d4d15500
.exe windows x86

4a46a329525dd482d47ff7e692d5bf81

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

sndPlaySoundA

kernel32

GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
SetStdHandle
GetFileType
HeapSize
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
CompareStringA
CompareStringW
SetEnvironmentVariableA
ResumeThread
SuspendThread
ExitThread
Sleep
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
InterlockedDecrement
GetModuleFileNameA
lstrcpyA
DeleteFileA
GetCurrentProcess
GetVersionExA
SetLocalTime
GetLastError
GetSystemDirectoryA
FreeLibrary
LoadLibraryA
GetWindowsDirectoryA
lstrlenA
LoadResource
FindResourceA
LockResource
GlobalFree
GlobalUnlock
GlobalLock
InterlockedIncrement
GetProcAddress
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetCurrentThreadId
lstrcatA
VirtualProtect
VirtualQuery
GetSystemInfo
GetStringTypeExW
InterlockedCompareExchange
InterlockedExchange
GetProfileStringA
CreateThread
GetCommandLineA
GetStartupInfoA
TerminateProcess
ExitProcess
RaiseException
HeapReAlloc
HeapFree
HeapAlloc
RtlUnwind
GetCurrentDirectoryA
WritePrivateProfileStringA
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
SizeofResource
GlobalFlags
GetVersion
GetFileTime
GetFileSize
GetFileAttributesA
GlobalAlloc
lstrcmpA
GetCurrentThread
FindNextFileA
MulDiv
SetLastError
FileTimeToLocalFileTime
FileTimeToSystemTime
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
LocalFree
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
DuplicateHandle
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
lstrcpynA
EnterCriticalSection
CreateEventA
SetThreadPriority
SetEvent
WaitForSingleObject
CloseHandle
FormatMessageA

user32

MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableA
GetSysColorBrush
PtInRect
GetClassNameA
WaitMessage
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
CharNextA
DestroyMenu
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
CharUpperA
LoadStringA
GetDesktopWindow
GetMessageA
TranslateMessage
ValidateRect
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
SetMenuItemBitmaps
EnableMenuItem
PostMessageA
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
ScreenToClient
IsWindowVisible
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
TrackPopupMenu
GetWindowTextLengthA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
PostThreadMessageA
CheckMenuItem
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
DefDlgProcA
IsWindowUnicode
LoadStringW
GetWindowPlacement
GetWindowRect
ReleaseDC
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
DrawFocusRect
SetRect
FillRect
CopyRect
GetWindowTextA
GetSystemMetrics
InflateRect
DrawStateA
GetClientRect
CopyIcon
ExitWindowsEx
GetDC
ModifyMenuA
InvalidateRect
LoadCursorA
SetCursor
GetSubMenu
GetTopWindow
RegisterClipboardFormatA
GetCursorPos
SetForegroundWindow
LoadMenuA
SetMenu
SetTimer
KillTimer
UpdateWindow
EnableWindow
LoadIconA
SendMessageA
AdjustWindowRectEx

gdi32

OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
DeleteObject
SetViewportOrgEx
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
CreateDIBitmap
BitBlt
GetTextExtentPointA
SetMapMode
SetBkMode
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
PatBlt
RoundRect
GetTextExtentPoint32A
CreatePen
CreateSolidBrush
GetObjectA
CreateFontIndirectA
GetStockObject
CreateFontA
CreateCompatibleDC

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
AdjustTokenPrivileges

shell32

Shell_NotifyIconA
ShellExecuteA

comctl32

_TrackMouseEvent
ImageList_Destroy
ImageList_Create
ord17

oledlg

ord8

ole32

CoRegisterMessageFilter
CoRevokeClassObject
CoFreeUnusedLibraries
OleFlushClipboard
OleIsCurrentClipboard
OleUninitialize
OleInitialize
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoCreateInstance
OleRun
CoTaskMemFree
StgCreateDocfileOnILockBytes

olepro32

ord253

oleaut32

GetErrorInfo
SysStringLen
VariantTimeToSystemTime
SysAllocStringLen
SysAllocStringByteLen
VariantCopy
SafeArrayDestroy
VariantClear
SysFreeString
SafeArrayPutElement
SysAllocString
VariantInit
SafeArrayCreate
VariantChangeType

wsock32

socket
recvfrom
sendto
connect
gethostbyname
closesocket
htonl
htons
inet_ntoa
ioctlsocket
accept
WSAGetLastError
WSASetLastError
WSAStartup
WSACleanup
WSAAsyncSelect
send
bind
recv

wininet

InternetReadFile
InternetGetLastResponseInfoA
HttpQueryInfoA
HttpSendRequestExA
HttpEndRequestA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetConnectA
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetOpenUrlA
InternetSetStatusCallback
InternetSetOptionExA
InternetOpenA
InternetCloseHandle

gdiplus

GdipFree
GdiplusStartup
GdipCloneImage
GdipAlloc
GdipCreateFromHDC
GdipLoadImageFromFile
GdipDrawImageI
GdipDisposeImage
GdipDeleteGraphics

Sections

.text
Size: 764KB - Virtual size: 763KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a46a329525dd482d47ff7e692d5bf81

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

wininet

gdiplus

Sections

.text Size: 764KB - Virtual size: 763KB

.rdata Size: 112KB - Virtual size: 108KB

.data Size: 40KB - Virtual size: 56KB

.rsrc Size: 68KB - Virtual size: 66KB

.text
Size: 764KB - Virtual size: 763KB

.rdata
Size: 112KB - Virtual size: 108KB

.data
Size: 40KB - Virtual size: 56KB

.rsrc
Size: 68KB - Virtual size: 66KB