4b4105e5037540db869ed20f6a09ff0eaa0d2145d6b7e9d1e4285e6e3faf1953

Sharing

Copy URL

Twitter E-mail

General

Target

4b4105e5037540db869ed20f6a09ff0eaa0d2145d6b7e9d1e4285e6e3faf1953
Size

1.1MB
MD5

761f325c6ad0b8271c49a9b89570222b
SHA1

24a62d8c1be2219affdf7379b7fde867757924e7
SHA256

4b4105e5037540db869ed20f6a09ff0eaa0d2145d6b7e9d1e4285e6e3faf1953
SHA512

705299a85c3b39a8f337ebab36bbcddbe0518734b82e9b82f86ab57f0cde62fb3de66cd88d55105c5c007290ab4bec1580aa6484ab4ff3108ae7ade46c2e7eb7
SSDEEP

24576:I3ReVX8ux8vZPrL3GURYZVD46oDDz+ElGn9521Ex:bwhP/PR2joDDz+ElGn9521Ex

Score

N/A

Malware Config

Signatures

Files

4b4105e5037540db869ed20f6a09ff0eaa0d2145d6b7e9d1e4285e6e3faf1953
.exe windows x86

fd9940b1bb6f179f6469de20476e40f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

loadstring

ord3
ord2
ord1

kernel32

RtlUnwind
GetTimeZoneInformation
HeapReAlloc
GetStartupInfoA
GetCommandLineA
RaiseException
TerminateProcess
HeapSize
GetACP
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
FormatMessageA
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
GetOEMCP
GetCPInfo
GetFileTime
GetStringTypeExA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
ReadFile
DuplicateHandle
GetThreadLocale
GetProcessVersion
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalFree
LocalAlloc
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalFree
GlobalDeleteAtom
GetCurrentThread
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
FlushInstructionCache
VirtualProtect
SetLastError
GetCurrentProcess
WriteProcessMemory
VirtualQuery
GetCurrentProcessId
GetSystemInfo
MulDiv
SetEvent
CreateEventA
GlobalAlloc
GlobalLock
GlobalUnlock
HeapFree
GetProcessHeap
HeapAlloc
GetTempPathA
GetTempFileNameA
InterlockedExchange
GetProfileStringA
lstrlenA
GetVersionExA
lstrcpyA
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetModuleHandleA
LeaveCriticalSection
lstrcmpA
lstrcpynA
GetCurrentThreadId
lstrcmpiA
DeleteFileA
GetFileInformationByHandle
GetSystemTime
CreateDirectoryA
SetFileAttributesA
SetFileTime
SuspendThread
ResumeThread
FreeLibrary
GetComputerNameA
GetLocalTime
SystemTimeToFileTime
IsDBCSLeadByte
GetLastError
GetProcAddress
Sleep
FindFirstFileA
FindNextFileA
FindClose
ExitThread
UnmapViewOfFile
GetFileSize
CreateFileMappingA
MapViewOfFile
IsBadReadPtr
GetTickCount
CreateThread
GetFullPathNameA
CreateFileA
SetFilePointer
WriteFile
GetCurrentDirectoryA
GetWindowsDirectoryA
SetCurrentDirectoryA
GetDriveTypeA
ExitProcess
CreateMutexA
WaitForSingleObject
ReleaseMutex
CloseHandle
LoadLibraryA
GetModuleFileNameA
GetSystemDirectoryA
GetFileAttributesA
GetVersion
GetEnvironmentStrings

user32

AdjustWindowRectEx
TabbedTextOutA
GrayStringA
CharNextA
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
GetNextDlgTabItem
GetLastActivePopup
CreateIconIndirect
DrawTextExA
GetCapture
MapWindowPoints
CopyRect
CopyIcon
LoadStringA
LoadImageA
DestroyCursor
CharUpperA
CharLowerA
DrawMenuBar
IsMenu
EqualRect
ValidateRect
IntersectRect
SetRect
GetFocus
EnumChildWindows
DrawStateA
DestroyIcon
DrawFrameControl
CharUpperBuffA
GetIconInfo
GetDC
ShowScrollBar
SetScrollRange
SetScrollPos
SetScrollInfo
GetScrollRange
GetScrollPos
GetScrollInfo
EnableScrollBar
InflateRect
GetClassLongA
DrawIconEx
EnableMenuItem
InsertMenuItemA
GetMenuItemInfoA
GetDesktopWindow
LockWindowUpdate
DrawEdge
FillRect
DrawTextA
EndPaint
ClientToScreen
PtInRect
InvalidateRect
UnregisterClassA
RegisterClassExA
CopyAcceleratorTableA
GetMenu
SetMenu
OffsetRect
IsRectEmpty
GetWindowInfo
IsZoomed
ReleaseDC
GetWindowDC
SetWindowRgn
SetWindowPos
RemovePropA
SetPropA
RedrawWindow
GetSysColorBrush
GetSysColor
UnhookWindowsHookEx
SetWindowsHookExA
GetActiveWindow
GetClassNameA
GetPropA
GetMenuState
CallNextHookEx
CallWindowProcA
PeekMessageA
MoveWindow
GetWindowWord
SetWindowWord
SetActiveWindow
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SystemParametersInfoA
BringWindowToTop
GetDlgItemTextA
UpdateWindow
IsWindow
EndDialog
DestroyWindow
TranslateAcceleratorA
IsDialogMessageA
DialogBoxParamA
CreateDialogParamA
DefWindowProcA
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
GetMessageA
DispatchMessageA
TranslateMessage
SetDlgItemTextA
GetParent
GetDlgItem
GetWindowRect
CreateWindowExA
SendDlgItemMessageA
GetWindow
SetCapture
GetCursorPos
ScreenToClient
ReleaseCapture
GetWindowLongA
SetWindowLongA
CreatePopupMenu
BeginDeferWindowPos
IsWindowEnabled
DeferWindowPos
GetTopWindow
IsChild
WinHelpA
GetClassInfoA
GetWindowTextLengthA
GetDlgCtrlID
GetMessageTime
CreateDialogIndirectParamA
MapDialogRect
SetWindowContextHelpId
GetMenuCheckMarkDimensions
BeginPaint
LoadBitmapA
EndDeferWindowPos
IsWindowVisible
IsDlgButtonChecked
InvalidateRgn
GetWindowTextA
IsIconic
GetClientRect
DrawIcon
RegisterHotKey
UnregisterHotKey
SetCursor
PostMessageA
ShowWindow
GetWindowPlacement
SetWindowPlacement
SetFocus
SetClassLongA
FlashWindow
SetWindowTextA
GetMessagePos
TrackPopupMenu
CreateMenu
InsertMenuA
GetMenuItemID
GetSystemMenu
DeleteMenu
LoadMenuA
GetSubMenu
GetMenuItemCount
AppendMenuA
GetMenuStringA
DestroyMenu
GetAsyncKeyState
KillTimer
SetTimer
PostQuitMessage
RegisterWindowMessageA
LoadAcceleratorsA
EnableWindow
GetSystemMetrics
SendMessageA
MessageBoxA
LoadIconA
LoadCursorA
FindWindowA
RegisterClassA
SetForegroundWindow
wsprintfA
GetKeyState
HideCaret

gdi32

SetWindowExtEx
ScaleWindowExtEx
ScaleViewportExtEx
GetViewportExtEx
GetWindowExtEx
PtVisible
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
GetPixel
ExcludeClipRect
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
ExtTextOutA
CreatePatternBrush
SetBrushOrgEx
PatBlt
UnrealizeObject
GetTextMetricsA
GetRgnBox
IntersectClipRect
GetTextExtentPoint32A
TextOutA
GetClipRgn
SelectClipRgn
CreatePen
MoveToEx
CombineRgn
GetObjectA
CreateFontIndirectA
DeleteObject
PtInRegion
StretchDIBits
RectVisible
GetClipBox
ExtSelectClipRgn
SetStretchBltMode
SetDIBitsToDevice
CreateDIBSection
CreateDIBitmap
SaveDC
RestoreDC
Polygon
StretchBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetDeviceCaps
SelectPalette
RealizePalette
CreateBitmap
SetBkColor
CreateICA
GetDIBits
DeleteDC
GetRegionData
ExtCreateRegion
GetTextExtentPointA
CreateSolidBrush
SetTextColor
SelectObject
SetBkMode
GetStockObject
BitBlt
CreateRectRgnIndirect
OffsetRgn
CreateRectRgn
LineTo

comdlg32

ChooseFontA
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegQueryValueA
RegQueryValueExA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegEnumValueA
GetUserNameA

shell32

ExtractIconExA
DragQueryFileA
DragFinish
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
ExtractIconA
ShellExecuteExA
Shell_NotifyIconA
SHGetSpecialFolderPathA

comctl32

ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy
ord17
ImageList_DrawEx
ImageList_GetIconSize
_TrackMouseEvent
ImageList_Draw
ImageList_GetIcon
ImageList_GetImageCount

oledlg

ord8

ole32

StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoGetClassObject
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
CLSIDFromProgID
CLSIDFromString
OleIsCurrentClipboard
CoUninitialize
CoInitialize

olepro32

ord253

oleaut32

SysStringLen
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
SysAllocStringByteLen

wsock32

ntohl
connect
accept
WSAAsyncSelect
WSACleanup
WSAStartup
inet_ntoa
setsockopt
listen
gethostbyname
WSAGetLastError
send
select
recv
closesocket
htonl
ioctlsocket
sendto
recvfrom
socket
bind
htons
inet_addr
gethostname

imagehlp

ImageDirectoryEntryToData

Sections

.text
Size: 536KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 464KB - Virtual size: 462KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd9940b1bb6f179f6469de20476e40f9

Headers

File Characteristics

Imports

loadstring

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

imagehlp

Sections

.text Size: 536KB - Virtual size: 532KB

.rdata Size: 72KB - Virtual size: 69KB

.data Size: 32KB - Virtual size: 118KB

.rsrc Size: 464KB - Virtual size: 462KB

.text
Size: 536KB - Virtual size: 532KB

.rdata
Size: 72KB - Virtual size: 69KB

.data
Size: 32KB - Virtual size: 118KB

.rsrc
Size: 464KB - Virtual size: 462KB