f0d697e3fa47d9e5122f447b24c9b907c1ccabfa8e98311cea16cbe96fd3ef26

Sharing

Copy URL Twitter E-mail

General

Target

f0d697e3fa47d9e5122f447b24c9b907c1ccabfa8e98311cea16cbe96fd3ef26
Size

512KB
MD5

84cfac66a890f62512060bab33950cf3
SHA1

697c9bc56fd34edd1ef907b0726b8cc1377d3b35
SHA256

f0d697e3fa47d9e5122f447b24c9b907c1ccabfa8e98311cea16cbe96fd3ef26
SHA512

e87b4f271fc861417b2f54ae32d78c803d727d0d4e4bebfa35deb76a4b4e0feb4c5e63798462a3d199e64caa9fffc38d5b8ddb9e3a442af3525580676c347eaa
SSDEEP

12288:WKh5INYTIDEIrrbQ3yeEkgBu0nXj9SryV6tb:WiON8IDrfQCXBrz6yV

Score

N/A

Malware Config

Signatures

Files

f0d697e3fa47d9e5122f447b24c9b907c1ccabfa8e98311cea16cbe96fd3ef26
.exe windows x86

4458d2030703e98f8f80581f899299d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

LoadTypeLi

kernel32

HeapAlloc
HeapDestroy
TlsAlloc
CreateFileA
InterlockedExchange
HeapReAlloc
HeapSize
Sleep
WriteConsoleW
GetOEMCP
LCMapStringA
GetSystemTimeAsFileTime
HeapFree
TlsFree
GetTickCount
FlushFileBuffers
WideCharToMultiByte
TlsGetValue
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCurrentProcessId
WriteFile
ReadFile
LoadLibraryW
VirtualQuery
VirtualFree
InterlockedIncrement
CloseHandle
GetStartupInfoA
InterlockedDecrement
GetDateFormatA
SetHandleCount
GetCurrentThreadId
TlsSetValue
GetConsoleMode
GetLocaleInfoA
HeapCreate
SetStdHandle
UnhandledExceptionFilter
EnterCriticalSection
TerminateProcess
WriteConsoleA
GetConsoleOutputCP
SetUnhandledExceptionFilter
GetCurrentProcess
GetCommandLineA
GetProcAddress
SetEnvironmentVariableA
IsDebuggerPresent
CompareStringW
ExitProcess
GetStartupInfoW
GetACP
GetModuleFileNameA
InitializeCriticalSection
SetLastError
LCMapStringW
LeaveCriticalSection
RaiseException
GetModuleFileNameW
GetEnvironmentStringsW
GetProcessHeap
GetEnvironmentStrings
GetConsoleCP
GetStdHandle
LoadLibraryA
GetModuleHandleA
CompareStringA
GetStringTypeA
GetCommandLineW
GetFileType
QueryPerformanceCounter
RtlUnwind
GetVersionExA
MultiByteToWideChar
GetTimeFormatA
VirtualAlloc
IsValidCodePage
SetFilePointer
GetTimeZoneInformation
CreateMutexW
GetLastError
GetStringTypeW
GetCPInfo
GetModuleHandleW

comdlg32

ChooseColorA
GetSaveFileNameA

ole32

StgCreateDocfileOnILockBytes
CoTaskMemFree
CoRevokeClassObject
CoGetClassObject
CoCreateInstance
OleSetContainedObject
CoFreeUnusedLibraries
StgCreateDocfile
OleUninitialize
OleSetClipboard
CLSIDFromString
StringFromCLSID
OleGetClipboard
OleRun
CoDisconnectObject
OleInitialize
CoRegisterClassObject
CoTaskMemAlloc
CreateILockBytesOnHGlobal
OleIsCurrentClipboard
WriteClassStg
OleCreateFromData
OleFlushClipboard
CoGetMalloc
GetRunningObjectTable
StgOpenStorageOnILockBytes
OleRegGetUserType
CoUninitialize
StringFromGUID2

user32

ScreenToClient
LoadCursorW
GetDesktopWindow
GetMessageTime
GetKeyState
GetMenuItemCount
CreateWindowExW
SetCursor
ShowWindow
InvalidateRect
GetWindowLongW
EnableMenuItem
OpenClipboard
MapWindowPoints
GetDC
OffsetRect
WindowFromPoint
GetWindowPlacement
DeleteMenu
RedrawWindow
EnableWindow
GetAsyncKeyState
UnregisterClassW
ChildWindowFromPoint
GetMenuItemInfoW
SetParent
CloseClipboard
SetMenu
GetWindowDC
GetSystemMenu
LoadIconW
EndPaint
CreateMenu
LoadMenuW
DeferWindowPos
PostQuitMessage
BeginDeferWindowPos
DefWindowProcA
GetWindowThreadProcessId
MessageBoxW
DrawFrameControl
SetWindowLongW
EmptyClipboard
IsWindow
SendDlgItemMessageA
LoadStringW
BringWindowToTop
SetCapture
SetActiveWindow
SetMenuDefaultItem
BeginPaint
IntersectRect
SetMenuItemInfoW
GetFocus
SetDlgItemTextW
KillTimer
EnumWindows
DefFrameProcW
GetDlgCtrlID
GetMenuItemID
MoveWindow
IsClipboardFormatAvailable
ScrollWindow
SetScrollPos
CreatePopupMenu
UnhookWindowsHookEx
LockWindowUpdate
RemoveMenu
DefWindowProcW
TrackPopupMenu
FrameRect
DestroyCursor
ReleaseDC
GetClipboardData
DispatchMessageW
DrawMenuBar
SetForegroundWindow
GetMenuDefaultItem
SystemParametersInfoA
DestroyIcon
IsWindowEnabled
GetMessageW
GetMenu
RegisterClassExW
WaitMessage
TranslateMessage
SetScrollInfo
DrawStateW
wsprintfA
InflateRect
CopyRect
GetWindowRect
IsZoomed
SystemParametersInfoW
GetSysColor
SetWindowRgn
RegisterClassW
DrawTextW
GetForegroundWindow
LoadImageW
GetMessagePos
SetTimer
GetSysColorBrush
EndDialog
SetWindowPos
GetCursorPos
GetIconInfo
CheckMenuItem
GetScrollPos
MessageBeep
SetRect
SetRectEmpty
AdjustWindowRectEx
GetNextDlgTabItem
PostThreadMessageW
GetWindowTextLengthW
MapDialogRect
FillRect
DrawIconEx
LoadBitmapW
IsDlgButtonChecked
EnumChildWindows
GetParent
GetTopWindow
SetClipboardData
UpdateWindow
GetWindow
IsWindowVisible
GetUpdateRect
SendMessageA
GetWindowLongA
IsChild
EndDeferWindowPos
ClientToScreen
SetCursorPos
GetScrollInfo
CallNextHookEx
GetDlgItem
SetWindowTextW
GetActiveWindow
DestroyMenu
GetKeyboardLayout
IsIconic
DestroyWindow
ValidateRect
GetSubMenu

shlwapi

PathCanonicalizeA
PathRemoveArgsA
PathStripToRootA
PathParseIconLocationA
PathRemoveExtensionA
PathFindFileNameA
PathAppendA
PathRelativePathToA
PathMakePrettyA

winspool.drv

ord204
StartDocPrinterW
AbortPrinter
OpenPrinterW
ClosePrinter

wininet

InternetOpenUrlA
InternetCloseHandle
InternetSetFilePointer
InternetSetOptionExA
InternetQueryOptionA
InternetConnectA
InternetWriteFile
FtpOpenFileA
InternetQueryDataAvailable
FtpSetCurrentDirectoryA
InternetReadFile
InternetGetLastResponseInfoA
HttpSendRequestA

comctl32

ord17
ImageList_GetDragImage
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_Merge

advapi32

RegDeleteKeyA
RegEnumKeyExA

Sections

.text
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4458d2030703e98f8f80581f899299d3

Headers

File Characteristics

Imports

oleaut32

kernel32

comdlg32

ole32

user32

shlwapi

winspool.drv

wininet

comctl32

advapi32

Sections

.text Size: 116KB - Virtual size: 112KB

.rdata Size: 268KB - Virtual size: 267KB

.data Size: 76KB - Virtual size: 105KB

.rsrc Size: 48KB - Virtual size: 47KB

.text
Size: 116KB - Virtual size: 112KB

.rdata
Size: 268KB - Virtual size: 267KB

.data
Size: 76KB - Virtual size: 105KB

.rsrc
Size: 48KB - Virtual size: 47KB