a977e7d2fb1d65254ccc8ff967459965c485b7854ee792f8daa26487c1dc5f30

Sharing

Copy URL Twitter E-mail

General

Target

a977e7d2fb1d65254ccc8ff967459965c485b7854ee792f8daa26487c1dc5f30
Size

1.7MB
MD5

ea9c56cb7e7fd2500e98419d974f7dd2
SHA1

f128ebf89e9f79418978e3e0efb360c63fb83671
SHA256

a977e7d2fb1d65254ccc8ff967459965c485b7854ee792f8daa26487c1dc5f30
SHA512

b1212931e6c98e39077a580e79d89a704d09cc58f1c71edd75153a4b49aa4e553344771af9970d205557ddf13a732fb32e159a211e8c1c908782a780fba25302
SSDEEP

24576:Lf+mboS0vml0QYiNgeh43R4z1dwgvPHaL6dh9:D+mscQi83R4zEgvzdh9

Score

N/A

Malware Config

Signatures

Files

a977e7d2fb1d65254ccc8ff967459965c485b7854ee792f8daa26487c1dc5f30
.exe windows x86

c5a01208eec4ff48043f6085c8cd4efd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
RtlUnwind
ExitProcess
HeapReAlloc
RaiseException
HeapSize
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
TerminateProcess
IsValidCodePage
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCurrentDirectoryA
GetDriveTypeA
CreateFileA
SetEnvironmentVariableA
GetStartupInfoW
HeapFree
GetSystemDirectoryA
MoveFileExA
LocalLock
LocalUnlock
GetFileTime
GetFileAttributesW
SetErrorMode
SizeofResource
FindResourceExW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
TlsGetValue
LocalAlloc
GlobalFlags
GetFullPathNameW
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GlobalGetAtomNameW
GlobalReAlloc
GetThreadLocale
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
VirtualProtect
GetModuleHandleA
FreeResource
GlobalFree
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
CompareStringA
InterlockedExchange
GetFileSize
lstrcmpW
IsBadStringPtrW
lstrlenA
GetWindowsDirectoryW
MulDiv
LoadLibraryExW
lstrcatW
LocalFree
GetCurrentThreadId
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalDeleteAtom
GlobalAddAtomW
GetSystemDefaultLangID
TerminateThread
CreateThread
GetNumberFormatW
GetCurrentDirectoryW
GetACP
GetPrivateProfileSectionW
WritePrivateProfileStringW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateDirectoryW
GetVersion
Sleep
lstrcpynW
CopyFileW
GetPrivateProfileIntW
GetPrivateProfileStringW
WideCharToMultiByte
WinExec
GetVolumeInformationW
WaitForSingleObject
lstrcpyW
GetModuleFileNameW
GetLongPathNameW
FreeLibrary
GetVersionExW
GetTickCount
GetLocaleInfoW
CloseHandle
WriteFile
CreateFileW
GetCurrencyFormatW
GetProcessHeap
MultiByteToWideChar
HeapAlloc
MoveFileW
InterlockedIncrement
InterlockedDecrement
FormatMessageW
DeleteFileW
lstrlenW
GetProcAddress
GetModuleHandleW
FindResourceW
LoadLibraryW
LoadResource
GetLastError
LockResource
SetLastError
GetOEMCP

user32

CharUpperW
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
SetMenu
IsZoomed
DestroyMenu
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetClassLongW
GetWindowTextLengthW
GetMessageTime
MapWindowPoints
TrackPopupMenu
CreateWindowExW
GetClassInfoExW
AdjustWindowRectEx
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetAsyncKeyState
GetWindowDC
GetMenuStringW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
GetLastActivePopup
ShowOwnedPopups
GetActiveWindow
PostQuitMessage
CharNextW
GetTopWindow
IsWindowEnabled
GetMenuState
GetWindowTextW
CreateIconIndirect
GetIconInfo
EndPaint
SetFocus
BeginPaint
GetSystemMenu
IsMenu
CallNextHookEx
GetMenuItemInfoW
GetPropW
GetForegroundWindow
RemovePropW
SetPropW
UnhookWindowsHookEx
SetWindowsHookExW
GetMenuItemRect
SetMenuItemInfoW
WindowFromPoint
CloseClipboard
SetClipboardData
EmptyClipboard
GetClientRect
GetWindowRect
UnregisterClassA
MessageBoxA
wsprintfA
IsWindowVisible
OpenClipboard
RegisterClipboardFormatW
GetWindow
ModifyMenuW
MsgWaitForMultipleObjects
SetActiveWindow
RegisterWindowMessageW
SetParent
GetClassNameW
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
UnregisterClassW
DestroyWindow
UpdateWindow
ValidateRect
EqualRect
IsRectEmpty
GrayStringW
TabbedTextOutW
DrawIconEx
DrawStateW
ClientToScreen
GetDCEx
LockWindowUpdate
PostThreadMessageW
MessageBeep
GetSystemMetrics
ScreenToClient
PostMessageW
ShowWindowAsync
DrawIcon
KillTimer
MoveWindow
GetWindowLongW
SetForegroundWindow
EnableMenuItem
GetMenu
GetMenuItemCount
LoadIconW
GetSubMenu
GetMenuItemID
SendMessageW
BringWindowToTop
DestroyIcon
TranslateAcceleratorW
LoadMenuW
PtInRect
GetCursorPos
EnableWindow
SetTimer
InvalidateRect
IsIconic
LoadAcceleratorsW
ShowWindow
IsWindow
MessageBoxW
GetSysColor
DrawFrameControl
DrawTextW
DrawFocusRect
CallWindowProcA
GetParent
CallWindowProcW
SetWindowLongW
CopyRect
GetSysColorBrush
FrameRect
DrawTextExW
LoadImageW
FindWindowW
SetWindowPos
GetDlgCtrlID
GetFocus
AppendMenuW
CreatePopupMenu
GetDlgItem
PeekMessageW
LoadBitmapW
ReleaseDC
GetKeyState
GetDC
GetCursor
SetCursor
SetRectEmpty
DispatchMessageW
TranslateMessage
GetMessageW
DestroyCursor
CopyIcon
LoadCursorW
DefWindowProcW
GetClassInfoW
GetCapture
SetCapture
SystemParametersInfoW
ReleaseCapture
GetMessagePos
SetRect
RedrawWindow
FillRect
OffsetRect
InflateRect
DrawEdge
RegisterClassW

gdi32

GetRgnBox
EnumFontFamiliesExW
SetViewportOrgEx
GetWindowExtEx
StretchDIBits
GetCharWidthW
GetMapMode
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
GetObjectW
GetViewportExtEx
IntersectClipRect
ExcludeClipRect
SetMapMode
RestoreDC
SaveDC
CreateRectRgnIndirect
GetBkColor
EnumFontsW
CombineRgn
FrameRgn
SelectClipRgn
CreateRoundRectRgn
SetTextJustification
SetBkMode
SetBrushOrgEx
SetRectRgn
CreateRectRgn
CreatePatternBrush
Ellipse
SetPixel
GetTextColor
GetCurrentObject
GetClipBox
Escape
TextOutW
PatBlt
RectVisible
PtVisible
LineTo
MoveToEx
CreateSolidBrush
SelectPalette
CreateFontW
GetStockObject
CreateBitmap
FillRgn
CreatePolygonRgn
GetPixel
CreateCompatibleBitmap
PtInRegion
RealizePalette
GetDeviceCaps
CreatePalette
CreateFontIndirectW
GetTextExtentPoint32W
CreatePen
Rectangle
ExtTextOutW
SetTextColor
SetBkColor
GetTextMetricsW
BitBlt
SelectObject
CreateDIBSection
DeleteObject
DeleteDC
StretchBlt
CreateCompatibleDC
OffsetViewportOrgEx

msimg32

TransparentBlt
GradientFill

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegQueryValueExW
RegCloseKey
RegCreateKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
IsTextUnicode
RegQueryValueW
RegCreateKeyExW
RegOpenKeyExW
RegOpenKeyW
RegEnumKeyW

shell32

DragFinish
ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
DragQueryFileW
ExtractIconW
SHGetSpecialFolderPathW
Shell_NotifyIconW

comctl32

InitCommonControlsEx
_TrackMouseEvent
ImageList_GetIcon
ImageList_Draw
ImageList_GetIconSize
ord17
ImageList_GetImageCount

shlwapi

PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoGetClassObject
StgOpenStorageOnILockBytes
CoTaskMemAlloc
StgCreateDocfileOnILockBytes
CoTaskMemFree
OleUninitialize
OleInitialize
CoInitialize
CoUninitialize
CLSIDFromString
OleRun
CLSIDFromProgID
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
CoRevokeClassObject
CoCreateInstance
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

OleCreateFontIndirect
SafeArrayDestroy
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocString
VariantChangeType
SysFreeString
VarUdateFromDate
SysAllocStringLen
VariantClear
VariantCopy
VariantInit
GetErrorInfo

cximage

??0CxImage@@QAE@K@Z
?Decode@CxImage@@QAE_NPAVCxFile@@K@Z
??1CxMemFile@@UAE@XZ
??0CxMemFile@@QAE@PAEK@Z
?Destroy@CxImage@@QAE_NXZ
?Draw@CxImage@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z
?Load@CxImage@@QAE_NPBDK@Z

odbc32

ord141
ord110
ord2
ord1
ord15
ord9
ord14
ord3
ord61
ord16
ord111
ord18
ord13
ord145
ord150
ord51
ord5

Sections

.text
Size: 984KB - Virtual size: 983KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 468KB - Virtual size: 467KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c5a01208eec4ff48043f6085c8cd4efd

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

cximage

odbc32

Sections

.text Size: 984KB - Virtual size: 983KB

.rdata Size: 240KB - Virtual size: 236KB

.data Size: 36KB - Virtual size: 50KB

.rsrc Size: 468KB - Virtual size: 467KB

.text
Size: 984KB - Virtual size: 983KB

.rdata
Size: 240KB - Virtual size: 236KB

.data
Size: 36KB - Virtual size: 50KB

.rsrc
Size: 468KB - Virtual size: 467KB