6b301332f8bf4cf574a851964190b0683e96fc3ebbc170e4f1cda2cdd9efff37

Sharing

Copy URL

Twitter E-mail

General

Target

6b301332f8bf4cf574a851964190b0683e96fc3ebbc170e4f1cda2cdd9efff37
Size

740KB
MD5

9396aab89011f23a75961f549738ad80
SHA1

62b7d11aad93f38af509ad90df83c470cd6d9588
SHA256

6b301332f8bf4cf574a851964190b0683e96fc3ebbc170e4f1cda2cdd9efff37
SHA512

32b002858bdb4405cc735a2dbbf8f5f384ec9aa89019f080cf087fe5805e527bed60f979481c401e196ee1338a3ecbdcbe2a66d5837ddd9a324575e67458df44
SSDEEP

12288:iWaCZzzSNvb46hDBWz6bNPPhO3NBNRUyCvenAVUIl/WB4h6c/BfFYwXALktk/8lj:oR2BNR6xk/8QsrpfyM

Score

N/A

Malware Config

Signatures

Files

6b301332f8bf4cf574a851964190b0683e96fc3ebbc170e4f1cda2cdd9efff37
.exe windows x86

fba5d950f3aaf3c097b7cfe83e0992b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

getservbyport
htons
gethostbyname
getservbyname
WSACleanup
WSASetLastError
htonl
WSAStartup
inet_addr
WSAGetLastError
gethostbyaddr
inet_ntoa
ntohs

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

GlobalFlags
lstrcmpiW
TlsGetValue
SizeofResource
GetCurrentDirectoryW
GetThreadLocale
DuplicateHandle
GetProcessVersion
WriteFile
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationW
SetFilePointer
GetFullPathNameW
GetFileSize
GetFileTime
SetErrorMode
GetTickCount
GetStartupInfoW
RtlUnwind
GetFileAttributesW
GetTimeZoneInformation
TerminateProcess
SetStdHandle
GetFileType
GetSystemTime
TlsSetValue
LocalReAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineA
SetHandleCount
GetStdHandle
GetStartupInfoA
GlobalGetAtomNameW
lstrcpynW
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetCPInfo
GetDriveTypeA
CompareStringA
CompareStringW
GetOEMCP
SetEnvironmentVariableA
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
HeapReAlloc
GetLocalTime
FindNextFileW
HeapAlloc
HeapFree
GetCommandLineW
CreateMutexW
InitializeCriticalSection
lstrlenW
EnterCriticalSection
LeaveCriticalSection
lstrcmpW
GetPrivateProfileSectionW
WritePrivateProfileStringW
ExitProcess
GetLastError
GetPrivateProfileStringW
GetPrivateProfileIntW
ExpandEnvironmentStringsW
LoadLibraryW
GetProcAddress
FreeLibrary
GetTempPathW
GetModuleFileNameW
GetProfileStringA
GlobalAddAtomA
FindResourceA
FindFirstFileW
FindClose
GlobalAlloc
lstrcmpA
lstrcmpiA
GetCurrentThread
MulDiv
SetLastError
GetModuleHandleA
lstrcatW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceW
LoadResource
InterlockedDecrement
InterlockedIncrement
GetVersion
GetACP
GetSystemDirectoryW
ResumeThread
SuspendThread
DeviceIoControl
GetSystemDirectoryA
LoadLibraryA
MultiByteToWideChar
lstrlenA
GetExitCodeProcess
lstrcpyW
FormatMessageW
WideCharToMultiByte
ReleaseMutex
CreateFileW
ReadFile
GetVersionExW
GetWindowsDirectoryW
WinExec
DeleteCriticalSection
WaitForSingleObject
GetExitCodeThread
TerminateThread
GetCurrentProcessId
Sleep
CreateThread
OutputDebugStringW
GetModuleHandleW
GetCurrentProcess
LocalAlloc
LocalFree
CloseHandle
GetEnvironmentVariableW
CreateProcessW
GetProcessHeap
GetEnvironmentVariableA
RaiseException
GetModuleFileNameA

user32

SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
LoadStringW
ReleaseCapture
DestroyMenu
GetSysColorBrush
PtInRect
CharNextW
GetNextDlgGroupItem
MessageBeep
CharUpperW
InflateRect
RegisterClipboardFormatW
PostThreadMessageW
ValidateRect
SetCursor
ShowOwnedPopups
PostQuitMessage
GrayStringW
DrawTextW
TabbedTextOutW
CopyAcceleratorTableW
EndPaint
GetWindowDC
ClientToScreen
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageW
DispatchMessageW
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
BeginPaint
SetRectEmpty
GetTopWindow
TranslateMessage
IsChild
GetCapture
WinHelpW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetMenuItemID
GetWindowTextW
GetDlgCtrlID
GetKeyState
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
SetPropW
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetWindow
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetParent
GetDlgItem
IsWindowEnabled
UnhookWindowsHookEx
SetRect
LoadMenuW
GetSubMenu
EnableMenuItem
CheckMenuItem
AppendMenuW
DeleteMenu
GetCursorPos
TrackPopupMenu
SetMenuDefaultItem
ReleaseDC
GetDC
GetClientRect
GetSystemMetrics
GetDesktopWindow
GetShellWindow
FindWindowExW
GetForegroundWindow
IsWindow
IsIconic
IsWindowVisible
EnumChildWindows
SystemParametersInfoW
GetClassNameW
GetWindowRect
SetForegroundWindow
KillTimer
SetTimer
PostMessageW
SendMessageTimeoutW
TranslateAcceleratorW
LoadAcceleratorsW
GetMessageW
MapDialogRect
SetWindowContextHelpId
MessageBoxW
OpenInputDesktop
CloseDesktop
GetWindowLongW
LoadImageW
RegisterWindowMessageW
LoadIconW
LoadCursorW
FindWindowW
SendMessageW
EnableWindow
wsprintfW
GetLastActivePopup
GetMessagePos
SendDlgItemMessageW
CallWindowProcA
UnregisterClassW
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
DrawTextA
DrawFocusRect
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
GetClassNameA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
SetWindowLongA
SetPropA
GetPropA

gdi32

GetObjectW
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
CreateDIBitmap
Rectangle
GetWindowExtEx
ExtTextOutA
GetTextExtentPointA
BitBlt
CreateCompatibleDC
GetPixel
CreateSolidBrush
DeleteObject
GetDeviceCaps
GetViewportExtEx
CreatePen
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
FreePrinterNotifyInfo
ClosePrinter
GetPrinterW
ord203
FindClosePrinterChangeNotification
DocumentPropertiesW
FindNextPrinterChangeNotification
FindFirstPrinterChangeNotification
EnumPortsW
EnumPrintersW

advapi32

RegSetValueExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
OpenProcessToken
GetTokenInformation
GetSidSubAuthorityCount
RegEnumKeyExW
GetSidSubAuthority
RegEnumKeyW
RegQueryInfoKeyW

shell32

DragFinish
DragQueryFileW
Shell_NotifyIconW
SHAppBarMessage

comctl32

ord17

oledlg

OleUIBusyW

ole32

StgOpenStorageOnILockBytes
CoGetClassObject
StgCreateDocfileOnILockBytes
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
CoTaskMemFree
CreateILockBytesOnHGlobal
CoUninitialize
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoInitialize
CoCreateInstance
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysFreeString
VariantChangeType
SysAllocString
VariantCopy
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
SysStringLen

Sections

.text
Size: 344KB - Virtual size: 341KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 80KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fba5d950f3aaf3c097b7cfe83e0992b5

Headers

File Characteristics

Imports

ws2_32

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 344KB - Virtual size: 341KB

.rdata Size: 56KB - Virtual size: 54KB

.data Size: 80KB - Virtual size: 138KB

.rsrc Size: 256KB - Virtual size: 256KB

.text
Size: 344KB - Virtual size: 341KB

.rdata
Size: 56KB - Virtual size: 54KB

.data
Size: 80KB - Virtual size: 138KB

.rsrc
Size: 256KB - Virtual size: 256KB