25ab29f99ce1cab6e67f54d4f3a990ce2bdfc45afe7b0b2bbed19554b1522250

Sharing

Copy URL Twitter E-mail

General

Target

25ab29f99ce1cab6e67f54d4f3a990ce2bdfc45afe7b0b2bbed19554b1522250
Size

813KB
MD5

563ab1e79a9e7e3f2ac380b189bf05f1
SHA1

cd21ad2eb3f57f1c95015e1b038688292791c9ac
SHA256

25ab29f99ce1cab6e67f54d4f3a990ce2bdfc45afe7b0b2bbed19554b1522250
SHA512

3a7fb874df0dfdb3bb7f8c614c6f8e09a80d46f7d89fbde7219173bdc711bf69430c81b42db8bbfc27506f99be7ac5dfbe49b32b7025c7887c37b8886b225a4f
SSDEEP

12288:H41G0vTqsigh27OulIzqoh7YMrtIfJmG135xk9JMBMPaGX:QTLighZ+FotYMhIfYC35+2MPaGX

Score

N/A

Malware Config

Signatures

Files

25ab29f99ce1cab6e67f54d4f3a990ce2bdfc45afe7b0b2bbed19554b1522250
.exe windows x86

1b015706fda4ad018f72cef094acad05

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetOpenA
InternetOpenUrlA
HttpQueryInfoA
InternetReadFile
InternetGetConnectedState

winmm

timeGetTime

kernel32

GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrlenA
MulDiv
GlobalAlloc
lstrcmpA
GetThreadLocale
LockFile
UnlockFile
GetModuleFileNameW
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GlobalFlags
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetCPInfo
GetOEMCP
GetModuleHandleW
GetFileSizeEx
SetErrorMode
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
CompareStringA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
GetCommandLineA
GetStartupInfoA
ExitThread
GetTimeFormatA
GetDateFormatA
CreateDirectoryA
RtlUnwind
RaiseException
VirtualProtect
VirtualAlloc
VirtualQuery
HeapReAlloc
HeapSize
GetStdHandle
SetHandleCount
GetFileType
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
LCMapStringW
VirtualFree
HeapCreate
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
CompareStringW
GetLocaleInfoW
SetStdHandle
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
lstrcmpW
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
DuplicateHandle
GetFileTime
FlushFileBuffers
ReadFile
WriteFile
GetCurrentProcess
SetEndOfFile
SetFilePointer
GetFileSize
FindClose
CopyFileA
FindFirstFileA
GetFileAttributesA
GetVolumeInformationA
CreateFileA
GetFullPathNameA
FileTimeToLocalFileTime
FileTimeToSystemTime
LCMapStringA
MultiByteToWideChar
QueryPerformanceFrequency
GetSystemInfo
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetCurrentThread
CancelIo
CreateIoCompletionPort
PostQueuedCompletionStatus
GetQueuedCompletionStatus
InterlockedExchange
CreateEventA
SetEvent
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
ReleaseMutex
CreateMutexA
OpenMutexA
TerminateThread
ResumeThread
LocalFree
FormatMessageA
GetPrivateProfileIntA
GetProfileStringA
GetProfileIntA
WriteProfileStringA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetTickCount
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleHandleA
GetLastError
SetLastError
CreateThread
WaitForSingleObject
CloseHandle
GetVersionExA
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetProcAddress
OutputDebugStringA
FreeLibrary
LoadLibraryA
GetWindowsDirectoryA
Sleep
TerminateProcess
CreateFileW

user32

GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
WindowFromPoint
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemInt
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
InvalidateRgn
SetMenu
UpdateWindow
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
CharUpperA
AdjustWindowRectEx
DeferWindowPos
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
CheckMenuItem
GetMenuState
GetKeyState
DrawIcon
IsIconic
SetPropA
AppendMenuA
GetSystemMenu
GetSystemMetrics
GetPropA
GetDesktopWindow
GetWindow
GetMenuItemID
TrackPopupMenu
SetForegroundWindow
SetMenuDefaultItem
GetSubMenu
LoadMenuA
LoadIconA
OffsetRect
IsWindow
PostMessageA
MessageBeep
GrayStringA
DrawTextA
TabbedTextOutA
IntersectRect
EqualRect
PtInRect
SetRect
CopyAcceleratorTableA
CharNextA
UnregisterClassA
GetSysColorBrush
ScreenToClient
GetCursorPos
GetMessageA
ValidateRect
IsZoomed
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
DestroyMenu
MapWindowPoints
IsWindowVisible
LoadBitmapA
LoadImageA
GetSysColor
KillTimer
SetTimer
DispatchMessageA
TranslateMessage
PeekMessageA
DrawTextExA
GetParent
FrameRect
InvalidateRect
CopyIcon
SetCursor
ReleaseCapture
ClientToScreen
SetCapture
CopyRect
GetClientRect
SetRectEmpty
LoadCursorA
SendMessageA
EnableWindow
IsRectEmpty
ReleaseDC
GetDC
DrawAnimatedRects
GetWindowRect
RegisterClassA
GetMenu

gdi32

SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
ExcludeClipRect
GetStockObject
GetTextMetricsA
GetRgnBox
DeleteDC
SetMapMode
GetBkColor
GetDeviceCaps
CreateSolidBrush
DeleteObject
Polyline
SelectObject
SetROP2
CreatePen
GdiFlush
SetBkMode
RestoreDC
SaveDC
CreateRectRgnIndirect
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CreateFontA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetTextColor
GetBkMode
GetWindowExtEx
GetViewportExtEx
GetMapMode
CreateCompatibleBitmap
LPtoDP
BitBlt
CreateCompatibleDC
GetObjectA
IntersectClipRect

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA

shell32

Shell_NotifyIconA
ShellExecuteA

comctl32

InitCommonControlsEx

shlwapi

PathIsUNCA
PathStripToRootA
PathFindExtensionA
PathFindFileNameA
PathFileExistsA

oledlg

ord8

ole32

OleIsCurrentClipboard
CoRevokeClassObject
CoRegisterMessageFilter
OleFlushClipboard
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysAllocStringByteLen
SysFreeString
SysStringLen
SysAllocStringLen
OleCreateFontIndirect
SysAllocString
VariantInit
VariantChangeType
VariantClear

ws2_32

send
recv
WSACloseEvent
getpeername
WSARecv
WSASend
WSAEnumNetworkEvents
WSAAccept
WSAEventSelect
shutdown
WSACleanup
bind
WSAAsyncSelect
WSASocketA
WSAWaitForMultipleEvents
htonl
setsockopt
gethostname
closesocket
connect
socket
WSAStartup
listen
ntohs
WSAGetLastError
recvfrom
sendto
WSASetLastError
WSACreateEvent
accept
htons
inet_ntoa
select
gethostbyname
inet_addr

Sections

.text
Size: 481KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1b015706fda4ad018f72cef094acad05

Headers

DLL Characteristics

File Characteristics

Imports

wininet

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

Sections

.text Size: 481KB - Virtual size: 480KB

.rdata Size: 104KB - Virtual size: 104KB

.data Size: 16KB - Virtual size: 34KB

.rsrc Size: 124KB - Virtual size: 124KB

.reloc Size: 86KB - Virtual size: 85KB

.text
Size: 481KB - Virtual size: 480KB

.rdata
Size: 104KB - Virtual size: 104KB

.data
Size: 16KB - Virtual size: 34KB

.rsrc
Size: 124KB - Virtual size: 124KB

.reloc
Size: 86KB - Virtual size: 85KB