a4db6f79f83e2f37a9c0f4dcbb52800a1bcd480f84c96110000b9f68c8a2f630

Sharing

Copy URL

Twitter E-mail

General

Target

a4db6f79f83e2f37a9c0f4dcbb52800a1bcd480f84c96110000b9f68c8a2f630
Size

720KB
MD5

736c5548175b8910c9dc2457a6f205e0
SHA1

fbc1b59317a014fa837e7d0a6bc51db121cd8db2
SHA256

a4db6f79f83e2f37a9c0f4dcbb52800a1bcd480f84c96110000b9f68c8a2f630
SHA512

3db66f417515c62e2d980865c3cf43023576da93b9b7d3f84ce7d9cc2bfad3b295a3398f4a9f74d80c8445429574d720882edfe4abbcb34c51b4d2f419869c12
SSDEEP

12288:fT7rJEx1iqiagAaz1Ge8fU85IpBSeqd4RDowCoT55H3DMl65vbkmRSdNpq9wA0vb:fAU5HHSdNpqoXtySWq/

Score

N/A

Malware Config

Signatures

Files

a4db6f79f83e2f37a9c0f4dcbb52800a1bcd480f84c96110000b9f68c8a2f630
.exe windows x86

7d11188c13d35ebd36f4bb7b785a7aaa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

phonecommand

_SP_WriteCURef@12
_SP_ReadCURef@12
SP_SendATCommand
SP_GetAPVersion
SP_BeginPhoneTest
SP_EnterModeProcess
SP_SetProperty
SP_Write
SP_FastReadVersion
SP_GetMsVersion
SP_ReadSN
SP_FastReadNvInfo
SP_FastWriteNvInfo
SP_NvWriteDirect
SP_WriteSN
_SP_SetUsbAutoMode@8
SP_StopModeProcess
SP_GetUsbPort
SP_EndPhoneTest
SP_ReleasePhone
SP_CreatePhone

phasecheck

CreatePhaseCheckObject
CheckPhase
UpdatePhase
ReleasePhaseCheckObject

dcsource

CreateDCSourceFactory

kernel32

DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
lstrcmpiW
GlobalFlags
GetProcessVersion
SizeofResource
GetCurrentDirectoryW
GetThreadLocale
GlobalGetAtomNameW
SetErrorMode
DuplicateHandle
GetCurrentProcess
ReadFile
LockFile
UnlockFile
SetEndOfFile
MoveFileW
DeleteFileW
FindClose
FindFirstFileW
GetVolumeInformationW
GetFullPathNameW
GetStringTypeExW
GetShortPathNameW
GetFileTime
TlsAlloc
SystemTimeToFileTime
SetFileTime
SetFileAttributesW
GlobalSize
CopyFileW
GetStartupInfoW
ExitProcess
RtlUnwind
GetTimeZoneInformation
GetSystemTime
RaiseException
HeapAlloc
HeapFree
TerminateProcess
ExitThread
HeapSize
HeapReAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
FatalAppExitA
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
VirtualAlloc
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetStdHandle
SetConsoleCtrlHandler
GetLocaleInfoW
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
InitializeCriticalSection
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
SuspendThread
SetThreadPriority
FindResourceA
GlobalAddAtomA
GetProfileStringA
InterlockedExchange
ResumeThread
lstrcmpW
GlobalAlloc
lstrcmpA
lstrcmpiA
GetCurrentThread
lstrcpynW
FormatMessageW
LocalFree
InterlockedIncrement
GlobalFree
GlobalLock
GlobalUnlock
MulDiv
SetLastError
GetModuleHandleA
LoadLibraryA
FindResourceW
LoadResource
LockResource
GetVersion
lstrcatW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrcpyW
GetModuleHandleW
GetProcAddress
InterlockedDecrement
MultiByteToWideChar
TerminateThread
WaitForMultipleObjects
ResetEvent
GetTickCount
WritePrivateProfileStringW
GetPrivateProfileStringW
FreeLibrary
GetPrivateProfileIntW
LoadLibraryW
CreateFileW
SetFilePointer
lstrlenW
GetFileAttributesW
CreateDirectoryW
AllocConsole
GetStdHandle
SetConsoleScreenBufferSize
SetConsoleWindowInfo
SetConsoleTitleW
lstrcatA
WideCharToMultiByte
WriteConsoleW
GetLocalTime
lstrlenA
GetFileSize
WriteFile
IsBadWritePtr
GetTempPathW
GetConsoleWindow
FlushFileBuffers
FreeConsole
GetModuleFileNameW
GetLastError
Sleep
SetEvent
WaitForSingleObject
CreateThread
CloseHandle
CreateEventW
LocalFileTimeToFileTime

user32

CharNextW
GetMenuStringW
DeleteMenu
InsertMenuW
WindowFromPoint
GetWindowThreadProcessId
WaitMessage
ReleaseCapture
SetCapture
GetDialogBaseUnits
GetSysColorBrush
LoadCursorW
PtInRect
GetClassNameW
DestroyMenu
MapDialogRect
SetWindowContextHelpId
GetMessageW
TranslateMessage
ValidateRect
GetCursorPos
SetCursor
ShowOwnedPopups
PostQuitMessage
LoadStringW
wvsprintfW
EndDialog
GetActiveWindow
CreateDialogIndirectParamW
GrayStringW
DrawTextW
TabbedTextOutW
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
GetNextDlgTabItem
IsWindowEnabled
MoveWindow
SetWindowTextW
IsDialogMessageW
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
UpdateWindow
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
PeekMessageW
DispatchMessageW
GetFocus
SetActiveWindow
IsWindow
RegisterClipboardFormatW
AdjustWindowRectEx
ScreenToClient
CopyAcceleratorTableW
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
GetSysColor
SendMessageW
InvalidateRect
EnableWindow
PostThreadMessageW
PostMessageW
UnregisterClassW
GetWindowTextLengthA
MessageBoxW
IsChild
GetCapture
WinHelpW
wsprintfW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetDlgItem
InflateRect
CharUpperW
BringWindowToTop
UnpackDDElParam
GetNextDlgGroupItem
ReuseDDElParam
GetWindowTextLengthW
GetWindowTextW
HideCaret
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
DrawTextA
DrawFocusRect
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
GetWindowRect
GetClientRect
ShowWindow
EnableMenuItem
SetRect
DestroyIcon
EqualRect
RemoveMenu
SetMenu
LoadMenuW
TranslateAcceleratorW
LoadAcceleratorsW
SetRectEmpty
MessageBeep
SetFocus
GetSystemMenu
GetDlgCtrlID
GetKeyState
DefWindowProcW
DestroyWindow
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindowLongW
SetWindowLongW
SetWindowPos
RegisterWindowMessageW
OffsetRect
IntersectRect
SystemParametersInfoW
GetWindowPlacement
GetParent
GetWindow
GetDesktopWindow
FillRect
RegisterDeviceNotificationW
KillTimer
SetTimer
LoadIconW
IsIconic
AppendMenuW
DrawIcon
GetSystemMetrics
CheckMenuItem

gdi32

SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
SetStretchBltMode
SelectObject
Escape
RestoreDC
GetTextMetricsW
CreateFontIndirectW
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
CopyMetaFileW
CreateDCW
SaveDC
StartDocW
DeleteDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
BitBlt
CreateCompatibleDC
GetObjectW
DeleteObject
CreateDIBSection
CreateFontW
GetTextExtentPoint32W
CreateSolidBrush
TextOutW
RectVisible
PtVisible
CreateDIBPatternBrushPt
CreatePatternBrush
CreateHatchBrush
ExtCreatePen
CreatePen
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
CreateRectRgn
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ExtTextOutA
GetTextExtentPointA
CreateDIBitmap
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
ExtTextOutW

comdlg32

GetFileTitleW
GetOpenFileNameW
GetSaveFileNameW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegDeleteKeyW
RegCreateKeyW
RegEnumKeyW
RegQueryValueW
RegSetValueW
RegOpenKeyW
RegCloseKey
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegEnumValueW
RegQueryValueExW

shell32

SHGetFileInfoW
DragQueryFileW
DragFinish
DragAcceptFiles
ExtractIconW

comctl32

ord17

oledlg

OleUIBusyW

ole32

ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
OleDuplicateData
ReleaseStgMedium
OleUninitialize
OleInitialize
CoDisconnectObject
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleRun
CoUninitialize
CoInitialize
CoRegisterMessageFilter
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
CoFreeUnusedLibraries

olepro32

ord253

oleaut32

SafeArrayDestroyData
CreateErrorInfo
SysAllocString
SysFreeString
VariantClear
SysAllocStringLen
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysReAllocStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
SysStringByteLen
SysAllocStringByteLen
VarCyFromStr
VarBstrFromCy
VarDateFromStr
SetErrorInfo
VarBstrFromDate
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
VariantInit
SafeArrayDestroyDescriptor
SysStringLen
LoadTypeLi
GetErrorInfo

setupapi

SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList

shlwapi

PathRemoveFileSpecW
PathFindExtensionW
PathIsRelativeW
PathFindFileNameW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 196KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 32KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7d11188c13d35ebd36f4bb7b785a7aaa

Headers

File Characteristics

Imports

phonecommand

phasecheck

dcsource

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

setupapi

shlwapi

version

Sections

.text Size: 396KB - Virtual size: 395KB

.rdata Size: 196KB - Virtual size: 194KB

.data Size: 32KB - Virtual size: 48KB

.rsrc Size: 92KB - Virtual size: 92KB

.text
Size: 396KB - Virtual size: 395KB

.rdata
Size: 196KB - Virtual size: 194KB

.data
Size: 32KB - Virtual size: 48KB

.rsrc
Size: 92KB - Virtual size: 92KB