8e592f2b686356dfec4c6fcd6755e8243f6126508be684e32c228b5fd3c80346

Sharing

Copy URL Twitter E-mail

General

Target

8e592f2b686356dfec4c6fcd6755e8243f6126508be684e32c228b5fd3c80346
Size

280KB
MD5

95d68f5f80a3f415531a7652792a3ae7
SHA1

3bd2b14d4dfe61a79b87219a52e62d6f63a21306
SHA256

8e592f2b686356dfec4c6fcd6755e8243f6126508be684e32c228b5fd3c80346
SHA512

8fbf8ab2446907d3854f219fbd5f7fc1bc4cc69f696c267394b66fb78762c316d43f56a54f69ae0fad171ac17a470d4c80e65ff81f510530c977d930d1882750
SSDEEP

3072:p4Odqz0tnX9shfFPWigN7nCWiaPjzWLxJTBGpXtVkfmUQu/oNo3IIS9xswX+/ElN:p4OdqAPshfNWi+TCktedNIIS9xtHl

Score

N/A

Malware Config

Signatures

Files

8e592f2b686356dfec4c6fcd6755e8243f6126508be684e32c228b5fd3c80346
.exe windows x86

6fa3b2e97b0aaf1d846eaac6115b8cd6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathRemoveFileSpecA
PathAddBackslashA
PathFileExistsA

kernel32

GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
TerminateProcess
HeapSize
HeapReAlloc
SetStdHandle
GetFileType
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
RtlUnwind
GetProfileStringA
FreeLibrary
GetProcAddress
LoadLibraryA
GlobalUnlock
GlobalLock
GlobalAlloc
SizeofResource
LockResource
LoadResource
FindResourceA
MulDiv
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetWindowsDirectoryA
lstrcpyA
WinExec
lstrlenA
lstrcatA
GetModuleFileNameA
GlobalFree
GlobalReAlloc
GetLastError
CreateMutexA
GetSystemDirectoryA
WaitForSingleObject
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetCurrentThreadId
GetVersion
SetLastError
lstrcpynA
DuplicateHandle
GetCurrentProcess
CreateFileA
GetTickCount
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
CloseHandle
LockFile
UnlockFile
SetEndOfFile
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
GetCurrentThread
lstrcmpA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
EnterCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageA
LocalFree
GetFileTime
GetFileSize
GetFileAttributesA
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
MultiByteToWideChar
SetEnvironmentVariableA

user32

RegisterClipboardFormatA
PostThreadMessageA
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
LoadStringA
DestroyMenu
GetSysColorBrush
GetClassNameA
MapDialogRect
SetWindowContextHelpId
GetMessageA
ValidateRect
PostQuitMessage
EndDialog
CreateDialogIndirectParamA
CharUpperA
GetCursorPos
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
ReleaseDC
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
GetDC
GetClientRect
GetWindowLongA
InvalidateRect
ReleaseCapture
WindowFromPoint
ClientToScreen
SetCapture
GetCapture
GetParent
GetActiveWindow
SendMessageA
ScreenToClient
SetWindowRgn
SetCursor
EnableWindow
CopyRect
GetDesktopWindow
PtInRect
GetSysColor
IsWindow
InflateRect
GetWindowRect
CopyIcon
LoadCursorA
MessageBeep
TranslateMessage
DispatchMessageA
PeekMessageA
SetRect
LoadIconA
SetTimer
GetSystemMetrics
DrawIcon
IsIconic
IntersectRect
SystemParametersInfoA
GetWindowPlacement
KillTimer
PostMessageA
GrayStringA

gdi32

CreateDIBSection
OffsetRgn
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
IntersectClipRect
ExtCreateRegion
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
PatBlt
DPtoLP
GetTextColor
GetBkColor
LPtoDP
DeleteObject
DeleteDC
GetTextExtentPoint32A
GetStockObject
CreateFontIndirectA
GetDeviceCaps
CreateRectRgn
CombineRgn
BitBlt
GetObjectA
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
CreateDIBitmap
GetTextExtentPointA
StretchBlt

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueA

shell32

ShellExecuteA
ShellExecuteExA

comctl32

ord17

oledlg

ord8

ole32

CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CreateStreamOnHGlobal

olepro32

ord253
ord251

oleaut32

SysStringLen
SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen

wininet

InternetGetLastResponseInfoA
HttpQueryInfoA
HttpSendRequestA
HttpAddRequestHeadersA
InternetErrorDlg
HttpOpenRequestA
InternetConnectA
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetOpenA
InternetCloseHandle

Sections

.text
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6fa3b2e97b0aaf1d846eaac6115b8cd6

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wininet

Sections

.text Size: 180KB - Virtual size: 179KB

.rdata Size: 48KB - Virtual size: 44KB

.data Size: 12KB - Virtual size: 27KB

.rsrc Size: 36KB - Virtual size: 32KB

.text
Size: 180KB - Virtual size: 179KB

.rdata
Size: 48KB - Virtual size: 44KB

.data
Size: 12KB - Virtual size: 27KB

.rsrc
Size: 36KB - Virtual size: 32KB