ab7676ba520e23fca0b49866d35032e9a4b2200a85859c2f65350124dff0d457

Sharing

Copy URL Twitter E-mail

General

Target

ab7676ba520e23fca0b49866d35032e9a4b2200a85859c2f65350124dff0d457
Size

1.4MB
MD5

a019e5dcb333ff5ef6c5208785e756ba
SHA1

cb1c234c617132321d4b481df29fd8738c77749a
SHA256

ab7676ba520e23fca0b49866d35032e9a4b2200a85859c2f65350124dff0d457
SHA512

9b170a1606196bcefc95cbaf4789a902b1e0b2411712fc4d28e4b8b5f4fe0ad31bf6d3f5b0540dd8ea1af6ca301913413f99b0af4f9a4b05a4c22fe28cd7444d
SSDEEP

12288:q0aV0KHC6FNgjK2RunYzwp7ICpv9wmEUpk/dHqWt+9FQVQN:buC6FaGh

Score

N/A

Malware Config

Signatures

Files

ab7676ba520e23fca0b49866d35032e9a4b2200a85859c2f65350124dff0d457
.exe windows x86

37beeaaca1e7190897aec6ac38fd4f72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ltfil10n

ord101

ltkrn10n

ord157
ord134
ord125
ord197

ltdis10n

ord132

kernel32

GetProcessVersion
SizeofResource
GetCPInfo
GetCurrentDirectoryA
GetOEMCP
SetErrorMode
GlobalFlags
RtlUnwind
GetStartupInfoA
TlsGetValue
HeapFree
SetStdHandle
GetTickCount
LocalReAlloc
RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapAlloc
HeapReAlloc
ExitProcess
GetFileType
TlsSetValue
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
TerminateProcess
GetACP
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GlobalReAlloc
CompareStringA
CompareStringW
SetEnvironmentVariableA
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
GetThreadLocale
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalFree
GlobalUnlock
MulDiv
GetModuleHandleA
SetLastError
LCMapStringA
GetProcAddress
lstrlenA
MultiByteToWideChar
lstrlenW
InitializeCriticalSection
GetCurrentThreadId
GetCommandLineA
DeleteCriticalSection
HeapDestroy
GetModuleFileNameA
lstrcmpiA
Sleep
GetShortPathNameA
WinExec
FreeLibrary
GetStdHandle
SetHandleCount
GetProfileStringA
CreateDirectoryA
SetCurrentDirectoryA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
CreateFileA
CloseHandle
GetLastError
FindFirstFileA
FindClose
lstrcpynA
GetFileTime
GetFileSize
GetFileAttributesA
FormatMessageA
LocalFree
InterlockedDecrement
InterlockedIncrement
FindResourceA
LoadResource
LockResource
GetPrivateProfileIntA
GetPrivateProfileStringA
CopyFileA
GetSystemDirectoryA
GetWindowsDirectoryA
WritePrivateProfileStringA
WideCharToMultiByte
lstrcatA
lstrcpyA
LoadLibraryA
HeapCreate
VirtualFree
HeapSize

user32

InflateRect
RegisterClipboardFormatA
PostThreadMessageA
DestroyMenu
GetSysColorBrush
LoadCursorA
CharUpperA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
MapDialogRect
SetWindowContextHelpId
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
CopyRect
IsChild
GetCapture
WinHelpA
GetClassInfoA
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
CopyAcceleratorTableA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
MessageBeep
GetNextDlgGroupItem
SetRect
GetMenu
RegisterClassA
SetForegroundWindow
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SetCursor
PostQuitMessage
LoadStringA
SetWindowRgn
EnableWindow
PtInRect
EqualRect
SetCapture
ReleaseCapture
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
LoadBitmapA
GetDesktopWindow
GetWindowRect
LoadIconA
CharNextA
wsprintfA
GetTopWindow
GetParent
GetClassNameA
GetWindow
SendMessageA
FindWindowA
PostMessageA
GetDlgItem
InvalidateRect
UpdateWindow
MessageBoxA
GetForegroundWindow
GetMessagePos
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode

gdi32

CreateCompatibleBitmap
GetDeviceCaps
SelectPalette
RealizePalette
CreateBitmap
ExtCreateRegion
CreateCompatibleDC
BitBlt
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
DeleteObject
RectVisible
TextOutA
ExtTextOutA
Escape
GetObjectA
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
CreateDIBitmap
IntersectClipRect
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkMode
SetBkColor
GetStockObject
RestoreDC
SaveDC
DeleteDC
GetTextExtentPointA
SelectObject

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
CoTaskMemAlloc
OleUninitialize
OleInitialize
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoRegisterClassObject
CoRevokeClassObject
CoUninitialize
CoGetClassObject
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes

olepro32

ord253
ord252

oleaut32

SysAllocStringByteLen
VariantCopy
VariantChangeType
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SysStringLen

Sections

.text
Size: 180KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

37beeaaca1e7190897aec6ac38fd4f72

Headers

File Characteristics

Imports

ltfil10n

ltkrn10n

ltdis10n

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 180KB - Virtual size: 177KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.mrdata Size: 20KB - Virtual size: 20KB

.text
Size: 180KB - Virtual size: 177KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

.mrdata
Size: 20KB - Virtual size: 20KB