1d99698c1628ce382801407fb0e37d6503c7be1ffa5469fbdd70718f675ef602

Sharing

Copy URL Twitter E-mail

General

Target

1d99698c1628ce382801407fb0e37d6503c7be1ffa5469fbdd70718f675ef602
Size

652KB
MD5

969bb6e17367a601d7697ddf5aca5d61
SHA1

bd8cbce5719515ac5259347fc0b697619aa25119
SHA256

1d99698c1628ce382801407fb0e37d6503c7be1ffa5469fbdd70718f675ef602
SHA512

3731b53cabc45de6524a8231b8ceb82de8f57c72b7d3974fd0b904fff37d7ed9b199796a508b61cf36ce95a6e6ef3cc424abdd9f60dde26bf0f105e3a8538617
SSDEEP

6144:VndsXI9/52+IMK3/QpZ83sp8U8V5lXd2ij2QxyYGk94uR55m:cYxI+IMK3/Qp+3Af8V537xyBkauR55m

Score

N/A

Malware Config

Signatures

Files

1d99698c1628ce382801407fb0e37d6503c7be1ffa5469fbdd70718f675ef602
.exe windows x86

a92123ba036deba709674d437b917507

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

WSAStartup
gethostbyname
WSACleanup
inet_addr
gethostname

dsetup

ord11

winmm

timeEndPeriod
timeBeginPeriod

kernel32

SetEndOfFile
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTickCount
GetFileAttributesA
SetFileAttributesA
RtlUnwind
HeapFree
HeapAlloc
CreateThread
ExitThread
CreateDirectoryA
GetDriveTypeA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
TerminateProcess
HeapReAlloc
HeapSize
GetACP
GetEnvironmentVariableA
HeapDestroy
HeapCreate
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
UnlockFile
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetSystemInfo
GetFileSize
CreateFileA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
lstrcmpiA
EnterCriticalSection
lstrlenA
lstrcpynA
GetModuleFileNameA
lstrcmpA
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualFree
VirtualAlloc
SetFilePointer
WriteFile
ReadFile
LockFile
FlushFileBuffers
DuplicateHandle
SetErrorMode
GetCurrentDirectoryA
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
SizeofResource
SetEvent
Sleep
DeleteFileA
GetLastError
CreateMutexA
InterlockedExchange
GetProfileStringA
GlobalFlags
FormatMessageA
LocalFree
GetThreadLocale
MulDiv
SetLastError
ResumeThread
GetCurrentThread
CreateEventA
ReleaseMutex
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
LockResource
FindResourceA
LoadResource
SetFileTime
GetFileTime
CreateProcessA
GetCurrentProcess
GetVersionExA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalFree
OutputDebugStringA
WaitForSingleObject
SetThreadLocale
FreeLibrary
LCMapStringA

user32

MessageBeep
CharUpperA
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
GetDesktopWindow
PtInRect
GetClassNameA
CharNextA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
MapDialogRect
SetWindowContextHelpId
ValidateRect
SetCursor
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
GetNextDlgGroupItem
IsWindowVisible
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
LoadCursorA
GetMenuItemCount
GetSubMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetWindow
SetWindowLongA
CopyAcceleratorTableA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetCursorPos
DestroyMenu
WindowFromPoint
InvalidateRect
GetSysColorBrush
GetForegroundWindow
GetParent
GetDC
CopyRect
LoadImageA
SetTimer
KillTimer
SetRect
LoadBitmapA
SetWindowRgn
ReleaseDC
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
LoadIconA
FindWindowA
BringWindowToTop
SetForegroundWindow
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
DestroyWindow
MessageBoxA
LoadStringA
EnableWindow
IsWindowUnicode
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
HideCaret
GetMenu
UnregisterClassA
GetMenuItemID

gdi32

SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
RestoreDC
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CreateDIBSection
SelectObject
ExtCreateRegion
CombineRgn
GetDeviceCaps
GetStockObject
DeleteObject
DeleteDC
CreateCompatibleDC
BitBlt
GetTextExtentPointA
CreateDIBitmap
GetObjectA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoTaskMemFree
CoRegisterMessageFilter
CoTaskMemAlloc
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
StgOpenStorageOnILockBytes

olepro32

ord253

oleaut32

SysStringLen
SysAllocStringByteLen
VariantCopy
SysAllocString
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
VariantChangeType
SysFreeString

wininet

InternetReadFile
HttpQueryInfoA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetCloseHandle
InternetQueryDataAvailable

patchw32

ord1

msvcrt

_unlink
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z

Sections

.text
Size: 228KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a92123ba036deba709674d437b917507

Headers

File Characteristics

Imports

wsock32

dsetup

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wininet

patchw32

msvcrt

Sections

.text Size: 228KB - Virtual size: 225KB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 20KB - Virtual size: 38KB

.rsrc Size: 356KB - Virtual size: 356KB

.text
Size: 228KB - Virtual size: 225KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 20KB - Virtual size: 38KB

.rsrc
Size: 356KB - Virtual size: 356KB