b7afa8048467bf12bba613b24b3b71981facb9312e648873d7abe5c05b069062

Sharing

Copy URL Twitter E-mail

General

Target

b7afa8048467bf12bba613b24b3b71981facb9312e648873d7abe5c05b069062
Size

630KB
MD5

83a0dc6b146c20bc4d4ccc20083ec040
SHA1

5ccee5d932a979a54be54f55395ec1a95d526c7a
SHA256

b7afa8048467bf12bba613b24b3b71981facb9312e648873d7abe5c05b069062
SHA512

9758bd7cd2a262646d4b1a8234403a6544f5e6b7b3ee3751edd31363d015341bb4429b9d59ee667ce410fff7380f5370ec89d95301db4e907c15d4d2313aebe5
SSDEEP

12288:O91dAnGlMo0Fm53HUaZrbsI3Ae53hjOx6Gbthqm1h/UQc48R3/HaTH+IKXV7r:O91dAnGlMo0Fm53HUaZrbtnODbn1h98P

Score

N/A

Malware Config

Signatures

Files

b7afa8048467bf12bba613b24b3b71981facb9312e648873d7abe5c05b069062
.exe windows x86

656574f981952139a8b57e379b84824f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

kernel32

InterlockedDecrement
LocalAlloc
GlobalReAlloc
GlobalHandle
LocalReAlloc
TlsFree
lstrcatW
SetErrorMode
WritePrivateProfileStringW
GlobalAddAtomW
GlobalFlags
GetModuleHandleA
GlobalFindAtomW
GetCurrentProcess
ExitProcess
RtlUnwind
HeapFree
ExitThread
CreateThread
GetTimeFormatA
GetDateFormatA
HeapAlloc
TerminateProcess
HeapReAlloc
VirtualProtect
VirtualAlloc
GetCurrentThread
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
UnhandledExceptionFilter
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetOEMCP
GetCPInfo
SetStdHandle
GetStringTypeA
GetStringTypeW
GetDriveTypeA
CompareStringA
CompareStringW
SetEnvironmentVariableA
lstrcmpW
GlobalDeleteAtom
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
LoadLibraryW
GetLocaleInfoW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
SetLastError
GlobalFree
lstrcpyW
lstrlenW
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
lstrcpynW
LocalFree
CreateFileA
TlsAlloc
TlsGetValue
TlsSetValue
GetSystemTimeAsFileTime
GetSystemTime
GetFullPathNameW
GetFullPathNameA
UnlockFile
LockFileEx
LockFile
GetFileSize
SetEndOfFile
FlushFileBuffers
GetTempPathW
GetTempPathA
GetFileAttributesA
DeleteFileA
GetVersionExA
RemoveDirectoryW
GetModuleFileNameW
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
WriteFile
SetFileTime
GetCurrentDirectoryW
GetFileAttributesW
WideCharToMultiByte
LocalFileTimeToFileTime
SystemTimeToFileTime
ReadFile
CreateFileW
SetFilePointer
GetCommandLineW
GetModuleHandleW
MultiByteToWideChar
CreateEventW
ResetEvent
InterlockedIncrement
GetCurrentThreadId
SetEvent
WaitForMultipleObjects
TerminateThread
GetLastError
EnterCriticalSection
LeaveCriticalSection
ReleaseMutex
WaitForSingleObject
CloseHandle
CreateMutexW
FindResourceW
LoadResource
LockResource
SizeofResource
Sleep
DeleteFileW
FindFirstFileW
FindClose
CreateDirectoryW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetSystemInfo

user32

RegisterWindowMessageW
WinHelpW
GetCapture
CreateWindowExW
GetClassInfoExW
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
LoadIconW
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
AdjustWindowRectEx
GetClassInfoW
RegisterClassW
DefWindowProcW
CallWindowProcW
SystemParametersInfoA
IsIconic
CopyRect
SetWindowPos
SetWindowLongW
GetDlgItem
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
SetWindowTextW
GetClassNameW
SetMenuItemBitmaps
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
DestroyMenu
ShowWindow
GetWindowTextW
SendMessageW
MessageBoxW
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
PostMessageW
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
wsprintfW
UnregisterClassW
PtInRect
GetWindowPlacement

gdi32

DeleteDC
GetStockObject
TextOutW
RectVisible
PtVisible
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
GetDeviceCaps
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
DeleteObject
CreateBitmap
ExtTextOutW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegSetValueExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW
RegCloseKey

comctl32

ord17

shlwapi

PathFindExtensionW
PathFindFileNameW

oleaut32

VariantInit
VariantChangeType
VariantClear

wininet

InternetCloseHandle
InternetOpenW
InternetOpenUrlW
HttpQueryInfoW
InternetReadFile

ws2_32

getservbyname
htonl
gethostbyaddr
socket
inet_addr
connect
getservbyport
ntohs
gethostbyname
WSACleanup
inet_ntoa
select
htons
WSAStartup
WSASocketW
bind
listen
WSAAccept
WSACreateEvent
WSAGetLastError
recv
closesocket
send
WSACloseEvent
WSASend
WSARecv
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSAEventSelect

Sections

.text
Size: 448KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

656574f981952139a8b57e379b84824f

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

shlwapi

oleaut32

wininet

ws2_32

Sections

.text Size: 448KB - Virtual size: 444KB

.rdata Size: 84KB - Virtual size: 81KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 80KB - Virtual size: 80KB

.text
Size: 448KB - Virtual size: 444KB

.rdata
Size: 84KB - Virtual size: 81KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 80KB - Virtual size: 80KB