226199392e0c5c46215bce3ec183da6e1265ccb9c971400c7082cf6de963cbf6

Sharing

Copy URL

Twitter E-mail

General

Target

226199392e0c5c46215bce3ec183da6e1265ccb9c971400c7082cf6de963cbf6
Size

3.5MB
MD5

819218bbd0cea207c1d8f2fa608d58f2
SHA1

2f0142bed0bc1aa05a30856bb0dbc8d382ad386b
SHA256

226199392e0c5c46215bce3ec183da6e1265ccb9c971400c7082cf6de963cbf6
SHA512

b351d49adbf9df3719ae5f5e463871453a0017e743acc61dd6fcc9886f9b6fb9aebe7fb50a9bbd45e49c30a59d036d7b321cccaab37b94a8ded31592699a1efa
SSDEEP

24576:W8/uomE9Q8mT3i5OJ11D7840V8dq8ZDuQItBV9kTbcDeuAe2te67lRzCK1ObQ4oP:Z+ig1A40eIHV8bcDs/hROBf7l1r2

Score

N/A

Malware Config

Signatures

Files

226199392e0c5c46215bce3ec183da6e1265ccb9c971400c7082cf6de963cbf6
.exe windows x86

2babbdb0f47a25d9e8c4c0c241bdf7f3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

getservbyport
htons
ntohs
ntohl
WSAStartup
gethostbyaddr
htonl

mpr

WNetGetConnectionA

comctl32

ImageList_ReplaceIcon
ImageList_DrawEx
ImageList_Destroy
InitCommonControlsEx
CreateToolbarEx
CreatePropertySheetPageA
ord6
ImageList_Create
ord17
PropertySheetA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

kernel32

GetLocaleInfoA
FormatMessageA
OutputDebugStringA
TerminateProcess
GetProcessWorkingSetSize
DeviceIoControl
GetDriveTypeA
GetCurrentDirectoryA
GetFileTime
GetExitCodeThread
TerminateThread
DuplicateHandle
VirtualFree
VirtualAlloc
GetPriorityClass
GetThreadContext
ResetEvent
MultiByteToWideChar
GlobalAddAtomA
GetSystemInfo
InterlockedExchange
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetEnvironmentStringsW
SetProcessWorkingSetSize
GetEnvironmentStrings
FreeEnvironmentStringsA
GetFileType
SetHandleCount
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
GetConsoleMode
GetConsoleCP
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleW
HeapDestroy
HeapCreate
FatalAppExitA
GetStartupInfoA
GetCurrentThreadId
RaiseException
HeapReAlloc
RtlUnwind
CreateThread
ResumeThread
ExitThread
lstrlenW
GlobalReAlloc
GlobalLock
GlobalAlloc
GlobalUnlock
CreateEventA
SetEnvironmentVariableA
FindFirstFileA
EnumSystemLocalesA
IsValidLocale
SetStdHandle
FlushFileBuffers
FindClose
SetPriorityClass
GetCurrentProcessId
SetErrorMode
WaitForMultipleObjects
GlobalMemoryStatus
PulseEvent
CreateFileMappingA
MapViewOfFile
IsBadReadPtr
UnmapViewOfFile
FreeLibrary
ReadFile
SetFilePointer
OpenProcess
VirtualQueryEx
ReadProcessMemory
GetCommandLineA
DeleteFileA
WaitForSingleObject
GetCurrentThread
SetThreadAffinityMask
Sleep
GetProcessAffinityMask
GetSystemDirectoryA
GetVersion
lstrcpynA
WideCharToMultiByte
GetNumberFormatA
GetFileAttributesA
SearchPathA
ExpandEnvironmentStringsA
CreateProcessA
MulDiv
GetEnvironmentVariableA
lstrcmpiA
lstrcmpA
SetEvent
GetDateFormatA
InterlockedDecrement
GetProcessHeap
HeapAlloc
lstrcpyA
HeapFree
lstrcatA
GetTickCount
InterlockedIncrement
OpenEventA
GetCommandLineW
LoadLibraryA
GetModuleHandleA
GetProcAddress
SetLastError
CreateFileA
FindResourceA
LoadResource
SizeofResource
LockResource
GetCurrentProcess
CloseHandle
IsBadStringPtrA
lstrlenA
InitializeCriticalSection
GetSystemTimeAsFileTime
DeleteCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
GetTimeFormatA
EnterCriticalSection
LeaveCriticalSection
GetLastError
LocalFree
LocalAlloc
GetModuleFileNameA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
GetTimeZoneInformation
SetEndOfFile
CompareStringA
CompareStringW
FreeEnvironmentStringsW
GetUserDefaultLCID

user32

CheckRadioButton
GetKeyState
SetUserObjectSecurity
GetUserObjectSecurity
GetWindow
SendMessageTimeoutA
GetDlgCtrlID
EnumWindows
RegisterWindowMessageA
CreateMenu
RemoveMenu
DrawMenuBar
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
ExitWindowsEx
RedrawWindow
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
IsDialogMessageA
DispatchMessageA
CreateDialogParamA
ReleaseCapture
GetDlgItemTextA
CheckMenuRadioItem
CheckMenuItem
PostQuitMessage
DrawIconEx
LoadMenuA
InsertMenuA
TrackPopupMenu
GetCapture
SetCapture
DrawEdge
DrawFrameControl
BeginDeferWindowPos
EnumChildWindows
MsgWaitForMultipleObjects
UnionRect
GetClassNameA
DeferWindowPos
wsprintfA
IsZoomed
GetMenuCheckMarkDimensions
SetForegroundWindow
GetDesktopWindow
FindWindowExA
IsIconic
GetWindowThreadProcessId
GetWindowDC
SetMenuItemInfoA
SetClassLongA
SetPropA
FillRect
CallWindowProcA
GetWindowTextA
DeleteMenu
EnableWindow
CheckDlgButton
IsDlgButtonChecked
GetWindowPlacement
ModifyMenuA
OffsetRect
CreatePopupMenu
TrackPopupMenuEx
AppendMenuA
GetMenu
GetSubMenu
GetMenuItemCount
GetMenuItemID
EnableMenuItem
GetPropA
DestroyIcon
FrameRect
GetDoubleClickTime
ScreenToClient
InvalidateRgn
MessageBoxA
PeekMessageA
ScrollWindowEx
SetScrollInfo
GetScrollInfo
IntersectRect
GetUpdateRgn
GetClassLongA
EndDeferWindowPos
SetFocus
SetTimer
GetCursorPos
PtInRect
WindowFromPoint
KillTimer
LoadStringA
LoadIconA
LoadImageA
RegisterClassExA
RegisterClassA
FindWindowA
PostMessageA
SetWindowPlacement
UpdateWindow
DialogBoxIndirectParamA
SetWindowTextA
InflateRect
SendMessageA
DefDlgProcA
DefFrameProcA
DefMDIChildProcA
GetWindowLongA
SetWindowLongA
BeginPaint
EndPaint
ShowWindow
ClientToScreen
GetSystemMetrics
SystemParametersInfoA
SetWindowPos
DefWindowProcA
GetClientRect
CreateIconIndirect
MapWindowPoints
DestroyWindow
CreateWindowExA
GetParent
IsWindowVisible
GetFocus
DrawTextA
GetDC
ReleaseDC
DialogBoxParamA
EndDialog
GetDlgItem
GetWindowRect
MoveWindow
SetDlgItemTextA
LoadCursorA
GetSysColorBrush
GetSysColor
ChildWindowFromPoint
InvalidateRect
SetCursor
ShowWindowAsync

gdi32

CreateCompatibleBitmap
LineTo
SaveDC
SetROP2
CreatePen
Rectangle
RestoreDC
SetTextAlign
ExtTextOutA
GetTextExtentPoint32A
MoveToEx
GetTextMetricsA
EndPage
Polyline
GetBkColor
SelectClipRgn
CreateRectRgnIndirect
RectInRegion
CreateRectRgn
Ellipse
SelectObject
SetTextColor
CreateSolidBrush
GetDeviceCaps
SetMapMode
StartDocA
SetBkMode
CreateFontIndirectA
GetObjectA
GetStockObject
EndDoc
SetBkColor
BitBlt
CreateDIBSection
CreateCompatibleDC
DeleteDC
DeleteObject
StartPage

comdlg32

GetOpenFileNameA
ChooseColorA
GetSaveFileNameA
FindTextA
ChooseFontA
PrintDlgA

advapi32

SetServiceObjectSecurity
LookupAccountNameA
LookupPrivilegeNameA
IsValidSecurityDescriptor
SetKernelObjectSecurity
GetKernelObjectSecurity
OpenSCManagerA
QueryServiceStatus
CloseServiceHandle
StartServiceA
ControlService
CreateProcessAsUserA
RegConnectRegistryA
AllocateAndInitializeSid
SetTokenInformation
GetSecurityInfo
InitializeAcl
GetAce
AddAce
AddAccessAllowedAce
SetSecurityInfo
FreeSid
LookupPrivilegeValueW
GetTokenInformation
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
EqualSid
LookupAccountSidA
GetLengthSid
CopySid
RegEnumValueA
OpenServiceA
QueryServiceConfigA
RegOpenKeyA
RegCreateKeyExA
RegDeleteValueA
RegCreateKeyA
RegSetValueExA
RegDeleteKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
MapGenericMask
QueryServiceObjectSecurity

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteExA
Shell_NotifyIconA
ShellExecuteA
SHGetFileInfoA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SysAllocString
SysFreeString
VariantClear
SysStringLen
VariantInit
SysAllocStringByteLen
GetErrorInfo
VariantChangeType
SetErrorInfo
CreateErrorInfo

Sections

.text
Size: 462KB - Virtual size: 461KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

OGRE2.01
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PACK
Size: 144KB - Virtual size: 380KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2babbdb0f47a25d9e8c4c0c241bdf7f3

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

mpr

comctl32

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 462KB - Virtual size: 461KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 17KB - Virtual size: 137KB

.rsrc Size: 2.8MB - Virtual size: 2.8MB

.reloc Size: 37KB - Virtual size: 37KB

OGRE2.01 Size: 2KB - Virtual size: 4KB

PACK Size: 144KB - Virtual size: 380KB

.text
Size: 462KB - Virtual size: 461KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 17KB - Virtual size: 137KB

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

.reloc
Size: 37KB - Virtual size: 37KB

OGRE2.01
Size: 2KB - Virtual size: 4KB

PACK
Size: 144KB - Virtual size: 380KB