022ea3cf2fb9d0659cb1715dbecfcc8fb18f28ebd8f344e43cd0b5445b58899f

Sharing

Copy URL Twitter E-mail

General

Target

022ea3cf2fb9d0659cb1715dbecfcc8fb18f28ebd8f344e43cd0b5445b58899f
Size

936KB
MD5

a05e161e94db91d2239fd56aad245c60
SHA1

e6a7547a645279954567cfc7356bcdaab7207b54
SHA256

022ea3cf2fb9d0659cb1715dbecfcc8fb18f28ebd8f344e43cd0b5445b58899f
SHA512

5bdde94f844f9a6d8cf5dc868ab96b3d778e94aa8bf7af71a2dab6d452ce6e2d35be8374879f74c8e9e10891d265ccddd8ae27a6adbe2eaee039a25969b423b5
SSDEEP

24576:Wb+YkO5G9vh7GkuAXqQ2t4sg6+CZDJt3HKSoQ:Wb+YkO5GBn6tjlZDJtXOQ

Score

N/A

Malware Config

Signatures

Files

022ea3cf2fb9d0659cb1715dbecfcc8fb18f28ebd8f344e43cd0b5445b58899f
.exe windows x86

db7d99fbab6525957ccab49c56207487

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

winmm

PlaySoundA

kernel32

RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapReAlloc
GetACP
HeapSize
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
ExitProcess
OutputDebugStringA
GetLastError
CreateProcessA
GetExitCodeProcess
lstrcmpiA
GetCommandLineA
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrlenW
HeapDestroy
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
ExitThread
ResumeThread
CreateThread
CloseHandle
WaitForSingleObject
GetExitCodeThread
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount
Sleep
MulDiv
GlobalDeleteAtom
GetStartupInfoA
HeapAlloc
HeapFree
RtlUnwind
SetErrorMode
GetFileSize
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
GlobalFindAtomA
GlobalAddAtomA
InterlockedExchange
GetProfileStringA
DuplicateHandle
GetThreadLocale
SizeofResource
GetOEMCP
GetCPInfo
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GetProcessVersion
GetFileTime
GetFullPathNameA
GetFileAttributesA
GlobalAlloc
lstrcmpA
GetCurrentThread
SetLastError
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcpynA
GlobalLock
GlobalUnlock
GlobalFree
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageA
LocalFree
FindResourceA
LoadResource
LockResource
GetVersion
GlobalGetAtomNameA
TerminateProcess

user32

CharUpperA
SetParent
RegisterClipboardFormatA
PostThreadMessageA
LockWindowUpdate
GetDCEx
GetClassNameA
GetSysColorBrush
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
SetRect
UnionRect
IsZoomed
DestroyCursor
SetCursorPos
PtInRect
ClientToScreen
WindowFromPoint
GetWindowThreadProcessId
WaitMessage
SetCapture
LoadCursorA
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
DestroyMenu
GetDesktopWindow
SetCursor
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
LoadStringA
EndDialog
CreateDialogIndirectParamA
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
GetDC
ReleaseDC
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
SetMenuItemBitmaps
GetNextDlgGroupItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
SetActiveWindow
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
GetCapture
WinHelpA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetKeyState
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CopyAcceleratorTableA
MessageBeep
CheckMenuItem
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
IntersectRect
GetWindowPlacement
GetSystemMetrics
IsRectEmpty
RegisterWindowMessageA
FindWindowA
SystemParametersInfoA
GetDlgCtrlID
IsIconic
InvalidateRect
AdjustWindowRectEx
GetWindow
SetFocus
GetFocus
IsChild
CharNextA
LoadIconA
UpdateWindow
ModifyMenuA
RemoveMenu
LoadMenuA
GetSubMenu
InflateRect
RedrawWindow
OffsetRect
GetWindowRect
GetParent
MessageBoxA
KillTimer
SetTimer
EnableWindow
IsWindow
GetClientRect
PostMessageA
GetActiveWindow
FlashWindow
SendMessageA

gdi32

SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
DeleteObject
CreateRectRgn
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
SetRectRgn
CombineRgn
CreateFontIndirectA
GetTextColor
GetBkColor
CreateCompatibleDC
BitBlt
CreateDIBitmap
GetTextExtentPointA
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
RestoreDC
SaveDC
DeleteDC
GetTextMetricsA
GetTextExtentPoint32A
SelectObject
CreateRectRgnIndirect
PatBlt
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
LPtoDP
DPtoLP
GetClipBox

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey

shell32

DragQueryFileA
DragFinish
ShellExecuteA

comctl32

ord17
ImageList_Destroy
ImageList_LoadImageA

oledlg

ord8

ole32

CreateItemMoniker
GetRunningObjectTable
StringFromGUID2
CoCreateInstance
CoUninitialize
CoRegisterClassObject
CoInitialize
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

VariantTimeToSystemTime
VariantChangeType
SysAllocStringByteLen
VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear
SysAllocStringLen
LoadRegTypeLi
SysStringLen
RegisterTypeLi
LoadTypeLi
SysAllocString
RevokeActiveObject
SysFreeString

ws2_32

setsockopt
getsockopt
WSAGetLastError
connect
htons
inet_addr
socket
ioctlsocket
WSAStartup
htonl
gethostbyname
gethostname
recvfrom
sendto
accept
ntohl
bind
listen
getsockname
ntohs
closesocket
recv
select
send
WSACleanup

Sections

.text
Size: 480KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 344KB - Virtual size: 341KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db7d99fbab6525957ccab49c56207487

Headers

File Characteristics

Imports

iphlpapi

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

ws2_32

Sections

.text Size: 480KB - Virtual size: 476KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 28KB - Virtual size: 46KB

.rsrc Size: 344KB - Virtual size: 341KB

.text
Size: 480KB - Virtual size: 476KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 28KB - Virtual size: 46KB

.rsrc
Size: 344KB - Virtual size: 341KB