f0727adddbd4b77f94f3b3648042da98c70527f3c22c02d596aeb7e5e0e37c21

Sharing

Copy URL

Twitter E-mail

General

Target

f0727adddbd4b77f94f3b3648042da98c70527f3c22c02d596aeb7e5e0e37c21
Size

1.1MB
MD5

2914d9f9aebf3570c3549b1071de9b58
SHA1

095d501acaf955552849324ea9145855abb230a8
SHA256

f0727adddbd4b77f94f3b3648042da98c70527f3c22c02d596aeb7e5e0e37c21
SHA512

927f79310bf05f5c5aa8ef6a95f274d97f9515e95557b30f48617eb55425e9d3d3d2cc5b3e7832affb76745cb1eeea2ec350e641ffb18736704133481ba4995a
SSDEEP

24576:6aSK03Tllg0cjWBcy5fspp3jNbKlcjDnFY5VqlGPjNnD:cIiS5DW5nj5

Score

N/A

Malware Config

Signatures

Files

f0727adddbd4b77f94f3b3648042da98c70527f3c22c02d596aeb7e5e0e37c21
.exe windows x86

c1da4c9596cc9505e4c5fb5d120ca470

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToLocalFileTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetProcAddress
SetEnvironmentVariableA
CompareStringW
GetConsoleOutputCP
WriteConsoleA
GetProcessHeap
GetTimeZoneInformation
SetStdHandle
CreateProcessA
GetExitCodeProcess
GetConsoleMode
GetConsoleCP
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
HeapReAlloc
HeapSize
HeapAlloc
VirtualFree
HeapFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
QueryPerformanceCounter
SetHandleCount
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetACP
LoadLibraryW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
OutputDebugStringW
GetFileType
WriteConsoleW
OutputDebugStringA
GetStdHandle
DebugBreak
VirtualQuery
GetSystemInfo
VirtualAlloc
ExitThread
CreateThread
IsBadReadPtr
HeapValidate
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
ExitProcess
RaiseException
RtlUnwind
GetTickCount
GetFileSizeEx
GetFileTime
GetFileAttributesA
GetModuleHandleW
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetFileSize
SetEndOfFile
UnlockFile
LockFile
SetFilePointer
GetCurrentProcess
DuplicateHandle
VirtualProtect
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GlobalFlags
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
GetAtomNameA
FormatMessageA
LocalFree
MulDiv
MultiByteToWideChar
lstrcmpW
GlobalGetAtomNameA
GlobalFindAtomA
GetVersionExA
lstrlenA
ResumeThread
SetThreadPriority
GlobalUnlock
GlobalFree
FreeResource
SetLastError
GetCurrentProcessId
GlobalAddAtomA
SuspendThread
SetEvent
CompareStringA
InterlockedExchange
GlobalLock
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
GetCurrentThreadId
GetLocaleInfoA
LoadLibraryA
ConvertDefaultLocale
EnumResourceLanguagesA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetModuleFileNameA
ReadFile
CreateEventA
WriteFile
GetLastError
WaitForSingleObject
GetOverlappedResult
ClearCommError
FlushFileBuffers
SetCommBreak
ClearCommBreak
CreateFileA
SetupComm
GetCommState
SetCommState
SetCommTimeouts
PurgeComm
CloseHandle
LoadResource
LockResource
SizeofResource
FindResourceA
WideCharToMultiByte
SetErrorMode
GetLocalTime
Sleep
GetModuleHandleA
OpenEventA

user32

UnpackDDElParam
GetClipboardFormatNameA
ReleaseCapture
SetRectEmpty
DestroyMenu
LoadMenuA
ModifyMenuA
InsertMenuItemA
GetSubMenu
GetMenuItemInfoA
GetMenuState
GetMenuItemID
GetMenuItemCount
EnableMenuItem
CheckMenuItem
AppendMenuA
IsMenu
CreatePopupMenu
GrayStringA
DrawTextExA
DrawTextA
DrawIcon
FillRect
GetSysColorBrush
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
SendDlgItemMessageA
GetSysColor
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
WinHelpA
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetClassLongA
ReuseDDElParam
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
SetMenu
GetMenu
GetMessageTime
GetMessagePos
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
SetWindowPos
LoadIconA
LoadCursorA
PostThreadMessageA
SetWindowContextHelpId
GetForegroundWindow
SetForegroundWindow
IsChild
GetWindow
GetTopWindow
GetNextDlgTabItem
GetNextDlgGroupItem
SetCapture
GetCapture
LoadAcceleratorsA
GetSystemMetrics
TranslateAcceleratorA
SendMessageA
MessageBoxA
RedrawWindow
ShowOwnedPopups
IsWindowVisible
InvalidateRgn
InvalidateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
CharNextA
CopyAcceleratorTableA
MessageBeep
UnregisterClassA
RegisterClipboardFormatA
IsRectEmpty
GetClassNameA
PostQuitMessage
MapDialogRect
InflateRect
SetRect
PtInRect
IsWindow
PostMessageA
TabbedTextOutA
GetFocus
SetMenuItemBitmaps
LoadBitmapA
GetMenuCheckMarkDimensions
DispatchMessageA
TranslateMessage
GetMessageA
ValidateRect
SetWindowsHookExA
GetCursorPos
PeekMessageA
CallNextHookEx
GetKeyState
SetCursor
GetWindowThreadProcessId
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetParent
GetWindowLongA
GetDlgItem
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
GetActiveWindow
GetDesktopWindow
EndDialog
GetSystemMenu
IsIconic
BringWindowToTop
GetWindowRect
GetClientRect
MapWindowPoints
ClientToScreen
ScreenToClient
BeginPaint
EndPaint
CharUpperA

gdi32

GetBkColor
GetTextColor
GetMapMode
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
BitBlt
GetPixel
TextOutA
GetTextExtentPoint32A
Escape
SelectObject
DeleteDC
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
ExtSelectClipRgn
GetDeviceCaps
CreateCompatibleDC
GetRgnBox
CreateRectRgnIndirect
ExtTextOutA
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
CreateCompatibleBitmap
CreateFontIndirectA
CreatePatternBrush
CreateSolidBrush
GetObjectType
GetStockObject
GetObjectA

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

SetThreadToken
OpenThreadToken
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RevertToSelf

shell32

DragFinish
DragQueryFileA

shlwapi

PathFindFileNameA
PathRemoveFileSpecW
PathIsUNCA
PathFindExtensionA
PathStripToRootA

oledlg

ord8

ole32

OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoRevokeClassObject
StringFromGUID2
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoUninitialize
CoInitializeEx
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoCreateInstance

oleaut32

SystemTimeToVariantTime
SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysStringLen
SysAllocStringByteLen
OleCreateFontIndirect
SafeArrayDestroy
SysAllocString
VariantCopy
VariantTimeToSystemTime

Sections

.text
Size: 681KB - Virtual size: 681KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 293KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c1da4c9596cc9505e4c5fb5d120ca470

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 681KB - Virtual size: 681KB

.rdata Size: 153KB - Virtual size: 153KB

.data Size: 293KB - Virtual size: 311KB

.rsrc Size: 28KB - Virtual size: 28KB

.text
Size: 681KB - Virtual size: 681KB

.rdata
Size: 153KB - Virtual size: 153KB

.data
Size: 293KB - Virtual size: 311KB

.rsrc
Size: 28KB - Virtual size: 28KB