95a229f82476f0e4adbe73d01f4eee3ff1f0cfa7928cbd0eeb64224050e103b8

Sharing

Copy URL Twitter E-mail

General

Target

95a229f82476f0e4adbe73d01f4eee3ff1f0cfa7928cbd0eeb64224050e103b8
Size

348KB
MD5

546e82a3b33140215085abdf42380f52
SHA1

898155d39bf7fa4638b6767d41d9df492c88b91f
SHA256

95a229f82476f0e4adbe73d01f4eee3ff1f0cfa7928cbd0eeb64224050e103b8
SHA512

c274a83a00ad5ad51bf522e9c4ae63d2488b3508b97c46043f8c4eed62d0a3e68795f005e5f5fce464988b95533b29c5771bb97517350fddda96c59ba0b4ddc9
SSDEEP

6144:teoehYIwPuk6MK9fudUq6Btj0WIOYI4ShRTUW:t8YBPuk6H0Oq6Bt4WIOYIlr

Score

N/A

Malware Config

Signatures

Files

95a229f82476f0e4adbe73d01f4eee3ff1f0cfa7928cbd0eeb64224050e103b8
.exe windows x86

3e550de154dbec854e029e7130592169

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

htonl
inet_addr
connect
htons
recv
ioctlsocket
closesocket
bind
socket
ntohl
send
gethostbyname
WSAStartup
WSAGetLastError
WSACleanup
setsockopt

kernel32

SetErrorMode
DuplicateHandle
GetCurrentProcess
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
RtlUnwind
GetFileType
GetDriveTypeA
ExitProcess
HeapAlloc
HeapFree
CreateDirectoryA
HeapReAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
CreateThread
ExitThread
GetStartupInfoA
GetCommandLineA
RaiseException
HeapSize
SetStdHandle
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetExitCodeProcess
CreateProcessA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
lstrcpyA
GlobalUnlock
GlobalFree
GlobalLock
GlobalAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetLastError
GetCurrentDirectoryA
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
WriteFile
lstrlenA
CloseHandle
ReadFile
CreateFileA
MoveFileA
DeleteFileA
SetFilePointer
TlsAlloc
InitializeCriticalSection
LocalAlloc
SizeofResource
GlobalFlags
lstrcpynA
MulDiv
SetLastError
GetThreadLocale
WaitForSingleObject
lstrcmpA
GetCurrentThread
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetVersion
lstrcatA
GetCurrentThreadId
lstrcmpiA
GlobalAddAtomA
SetFileAttributesA
GlobalFindAtomA
GlobalDeleteAtom
LockResource
FindResourceA
LoadResource
ReadProcessMemory
OpenProcess
TerminateProcess
GetModuleHandleA
GetTickCount
SetCurrentDirectoryA
GetACP
GlobalGetAtomNameA
GetVersionExA
FileTimeToSystemTime
GetFileSize
GetSystemDirectoryA
FindFirstFileA
FindNextFileA
FindClose
Sleep
LCMapStringW

user32

TabbedTextOutA
DrawTextA
GrayStringA
LoadStringA
DestroyMenu
WindowFromPoint
GetClassNameA
GetDesktopWindow
LoadCursorA
GetSysColorBrush
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
CharUpperA
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
GetCursorPos
SetCursor
PostQuitMessage
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
MoveWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
EndPaint
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindowEnabled
GetDC
ReleaseDC
ReleaseCapture
KillTimer
SetCapture
PtInRect
SetTimer
GetParent
GetKeyState
PeekMessageA
GetMessageA
PostMessageA
IsIconic
GetSystemMetrics
DrawIcon
FindWindowA
GetSystemMenu
AppendMenuA
GetWindowRect
SetWindowRgn
GetDlgItem
BeginPaint
GetWindowDC
ClientToScreen
MapDialogRect
SetWindowContextHelpId
IsWindowVisible
ValidateRect
DialogBoxParamA
EndDialog
SetDlgItemTextA
ShowWindow
wvsprintfA
MessageBoxA
SendMessageA
GetWindowLongA
SetWindowLongA
GetClientRect
IsWindow
InvalidateRect
LoadIconA
CharNextA
TranslateMessage
DispatchMessageA
RegisterWindowMessageA
EnableWindow
IsWindowUnicode
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
GetDlgCtrlID

gdi32

StretchBlt
GetTextMetricsA
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
GetTextColor
GetBkColor
GetStockObject
DeleteDC
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
CreatePatternBrush
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
DPtoLP
LPtoDP
GetMapMode
PatBlt
CreateRectRgn
CombineRgn
GetObjectA
GetDeviceCaps
GetSystemPaletteEntries
CreatePalette
SelectPalette
RealizePalette
StretchDIBits
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
GetTextExtentPointA
BitBlt
CreateDIBitmap
DeleteObject

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegOpenKeyExA

shell32

ShellExecuteA

comctl32

ord17
_TrackMouseEvent

oledlg

ord8

ole32

CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
OleUninitialize
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CoFreeUnusedLibraries
OleInitialize
CLSIDFromProgID
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes

olepro32

ord253

oleaut32

SysAllocStringByteLen
SysStringLen
VariantCopy
SysAllocString
VariantChangeType
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

Sections

.text
Size: 240KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3e550de154dbec854e029e7130592169

Headers

File Characteristics

Imports

wsock32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 240KB - Virtual size: 237KB

.rdata Size: 48KB - Virtual size: 47KB

.data Size: 28KB - Virtual size: 1.0MB

.rsrc Size: 28KB - Virtual size: 44KB

.text
Size: 240KB - Virtual size: 237KB

.rdata
Size: 48KB - Virtual size: 47KB

.data
Size: 28KB - Virtual size: 1.0MB

.rsrc
Size: 28KB - Virtual size: 44KB