c3a3864957846925ceb8372a18de0e133f44c2690ad62a08cd054ac733e40031

Sharing

Copy URL Twitter E-mail

General

Target

c3a3864957846925ceb8372a18de0e133f44c2690ad62a08cd054ac733e40031
Size

344KB
MD5

919498a89d89f9a456f39a4901e4da32
SHA1

66bb0a32c60be65517303a9fcf08b7c713c206be
SHA256

c3a3864957846925ceb8372a18de0e133f44c2690ad62a08cd054ac733e40031
SHA512

7cce28066abe2e76ec4f444978f7a48b6b1169fc03e12c7d20423fcceb3a450cdf07347cb2108d39805ca3759ce7e023aaef2a134b154f2f7fd0664830d9185c
SSDEEP

6144:D7s8yWNdIwz9FREFBB54WvTcKuYENn86tYfG4Z4zytbLL:fFyufpzELA4fMn8+YfGG4zkv

Score

N/A

Malware Config

Signatures

Files

c3a3864957846925ceb8372a18de0e133f44c2690ad62a08cd054ac733e40031
.exe windows x86

7280513ff9d31d32b7663fc412d84a16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

virsubm

VSB_SubmitVirus

w32tools

StringCutTailChar
StringEnumEx
CreateDirectories
LoadStringForLanguageDirect
DeleteDirectory
AutoSetWindowText
SetListBoxHS
LoadStringForLanguage
StringEnumWithWideChar

psmgr

PSM_KillProcessBasePath

quarantine

??0CQuarantine@@QAE@XZ
?ClearRebootRequired@CQuarantine@@QAEXXZ
?IsRebootRequired@CQuarantine@@QAEHXZ
?DeleteFileEx@CQuarantine@@QAEHPBDH@Z
??1CQuarantine@@QAE@XZ

kernel32

MultiByteToWideChar
GetCPInfo
GetOEMCP
WideCharToMultiByte
GetProcessVersion
SetErrorMode
WriteFile
GetCurrentProcess
HeapFree
RtlUnwind
HeapAlloc
GetStartupInfoA
ExitProcess
TerminateProcess
WritePrivateProfileStringA
RaiseException
HeapSize
GetACP
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GlobalFlags
MulDiv
lstrcpynA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetModuleHandleA
GetProcAddress
InterlockedDecrement
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
CloseHandle
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
lstrlenA
SetLastError
GetFileAttributesA
GetLastError
SetFileAttributesA
RemoveDirectoryA
DeleteFileA
GetModuleFileNameA
lstrcpyA
CreateDirectoryA
GetSystemDefaultLangID
GetCommandLineA
HeapReAlloc

user32

GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
GetDlgItemTextA
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
ShowWindow
LoadCursorA
ClientToScreen
GetClassNameA
PtInRect
GetDC
ReleaseDC
TabbedTextOutA
DrawTextA
GrayStringA
GetSysColorBrush
LoadStringA
DestroyMenu
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
EndDialog
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
LoadBitmapA
GetMenuState
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
PostQuitMessage
PostMessageA
EnableWindow
wsprintfA
SendMessageA
LoadIconA
GetMenuCheckMarkDimensions
GetDlgItem
SetMenuItemBitmaps
ModifyMenuA
UnhookWindowsHookEx
UnregisterClassA

gdi32

GetStockObject
GetClipBox
SetTextColor
SetBkColor
GetObjectA
DeleteObject
DeleteDC
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectObject
RestoreDC
SaveDC
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap

comdlg32

GetOpenFileNameA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA

shell32

ShellExecuteA

comctl32

ord17

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7280513ff9d31d32b7663fc412d84a16

Headers

File Characteristics

Imports

virsubm

w32tools

psmgr

quarantine

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 56KB - Virtual size: 54KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 13KB

.rsrc Size: 12KB - Virtual size: 9KB

.text Size: 156KB - Virtual size: 156KB

.text
Size: 56KB - Virtual size: 54KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 13KB

.rsrc
Size: 12KB - Virtual size: 9KB

.text
Size: 156KB - Virtual size: 156KB