00549769649dc5d938f02d9b11c540264dd81ff68c1c199b726d69c6eed45b75

Sharing

Copy URL Twitter E-mail

General

Target

00549769649dc5d938f02d9b11c540264dd81ff68c1c199b726d69c6eed45b75
Size

284KB
MD5

a2b94b44acd2c5bf220ff17c6fd96393
SHA1

088eca3f5a40143fbf65683c55423931d36bd114
SHA256

00549769649dc5d938f02d9b11c540264dd81ff68c1c199b726d69c6eed45b75
SHA512

e9f47b705f813360087dd287f3c5779645c8886c669b2f013023d905a6248831d54473750a867365c5ef4156ca92190b65b32e14b024492d171b7cfe4ca996c9
SSDEEP

3072:B596VqoCrsNsbTdnvqMOcCdSRqwA20YZYlAmgrC/h5b8MUeNhGF5lTrCnom9JCm6:9u/NsbT9eSYwADhr3Uc8dCno/p

Score

N/A

Malware Config

Signatures

Files

00549769649dc5d938f02d9b11c540264dd81ff68c1c199b726d69c6eed45b75
.exe windows x86

e10f352b0c28c12fc25a2af56128b6a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cfgmgr32

CM_Locate_DevNodeA
CM_Reenumerate_DevNode

setupapi

SetupGetStringFieldA
SetupOpenInfFileA
SetupFindFirstLineA
SetupCloseInfFile
SetupGetFieldCount
SetupFindNextLine
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInstanceIdA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiRemoveDevice
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList

shlwapi

StrToIntA
StrRStrIA

psapi

GetModuleFileNameExA
EnumProcesses
EnumProcessModules
GetModuleBaseNameA

kernel32

LocalReAlloc
TlsGetValue
MulDiv
GlobalFlags
WritePrivateProfileStringA
GetCurrentDirectoryA
GetProcessVersion
SizeofResource
GetCPInfo
GetOEMCP
GetThreadLocale
SetErrorMode
DuplicateHandle
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
GetTickCount
GetFileSize
GetFileTime
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
GetTimeZoneInformation
GetACP
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
GetStringTypeW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
TlsFree
GlobalHandle
TlsAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetModuleHandleA
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
GlobalReAlloc
TlsSetValue
GlobalLock
GlobalAlloc
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
FindNextFileA
lstrcpynA
lstrcmpiA
InterlockedDecrement
InterlockedIncrement
FormatMessageA
GetProfileStringA
CloseHandle
DeviceIoControl
GetLastError
CreateFileA
LocalFree
LocalAlloc
GetProcAddress
LoadLibraryA
FreeLibrary
TerminateProcess
WaitForSingleObject
OpenProcess
OutputDebugStringA
SetLastError
WideCharToMultiByte
HeapFree
HeapAlloc
lstrlenA
lstrcpyA
GetFileAttributesA
lstrcatA
GetCurrentProcess
DeleteFileA
SetFileAttributesA
RemoveDirectoryA
GetWindowsDirectoryA
MultiByteToWideChar
FindClose
FindFirstFileA
GetVersion
GetModuleFileNameA
GetUserDefaultLCID
CreateProcessA
lstrcmpA
Sleep
GetPrivateProfileStringA
GetPrivateProfileIntA
GetSystemDirectoryA
GetVersionExA

user32

InvalidateRect
CharUpperA
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
ScreenToClient
GetClientRect
CopyRect
GetTopWindow
IsChild
GetCapture
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessagePos
SetForegroundWindow
GetWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
SetFocus
ShowWindow
SetWindowPos
MoveWindow
SetWindowLongA
GetDlgCtrlID
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
UnhookWindowsHookEx
EndDialog
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
MessageBeep
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
GetMenuState
GetNextDlgGroupItem
GetForegroundWindow
SetRect
CopyAcceleratorTableA
CharNextA
DestroyMenu
GetSysColorBrush
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
PtInRect
GetClassNameA
ClientToScreen
GetDesktopWindow
LoadIconA
LoadCursorA
MapDialogRect
SetWindowContextHelpId
GetMessageTime
LoadStringA
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SetCursor
PostQuitMessage
FindWindowA
EnableWindow
MessageBoxA
LoadImageA
UpdateWindow
ExitWindowsEx
IsWindow
SendMessageA
GetWindowThreadProcessId
PostMessageA
EnumWindows
WinHelpA

gdi32

CreateCompatibleDC
BitBlt
GetTextExtentPointA
PatBlt
GetMapMode
LPtoDP
DPtoLP
GetBkColor
GetTextColor
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateSolidBrush
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
DeleteObject
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
CreateDIBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueExA
LookupPrivilegeValueA
OpenProcessToken
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
CloseServiceHandle
AdjustTokenPrivileges
RegCreateKeyExA
OpenSCManagerA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA

comctl32

ord17

oledlg

ord8

ole32

CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
OleFlushClipboard
OleIsCurrentClipboard
OleInitialize
OleUninitialize
CoRegisterMessageFilter
CoGetClassObject
CoRevokeClassObject
StgCreateDocfileOnILockBytes

olepro32

ord253

oleaut32

VariantTimeToSystemTime
SysAllocStringByteLen
SysStringLen
SysAllocString
SysAllocStringLen
VariantChangeType
VariantClear
VariantCopy
SysFreeString

Sections

.text
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e10f352b0c28c12fc25a2af56128b6a5

Headers

File Characteristics

Imports

cfgmgr32

setupapi

shlwapi

psapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 168KB - Virtual size: 165KB

.rdata Size: 40KB - Virtual size: 37KB

.data Size: 24KB - Virtual size: 38KB

.rsrc Size: 48KB - Virtual size: 48KB

.text
Size: 168KB - Virtual size: 165KB

.rdata
Size: 40KB - Virtual size: 37KB

.data
Size: 24KB - Virtual size: 38KB

.rsrc
Size: 48KB - Virtual size: 48KB