39cad3398b95266f0dd5ef45c184e12cbfd74ee7dc2d490a2c94a19d69b7b4f5

Sharing

Copy URL

Twitter E-mail

General

Target

39cad3398b95266f0dd5ef45c184e12cbfd74ee7dc2d490a2c94a19d69b7b4f5
Size

916KB
MD5

a32af84ff4ef737cf7d8a7e116ec9720
SHA1

801893d421cd41adf47636a5dd544e508c61f237
SHA256

39cad3398b95266f0dd5ef45c184e12cbfd74ee7dc2d490a2c94a19d69b7b4f5
SHA512

37f79352cf0ed56482aba7670ed1163de3c048e415cdd48b262626c8c03bb5ae5815eefded7d91f54a7d4ef334ea7ee9b2082fcae7da9e7e7a202864cc13ed12
SSDEEP

24576:VvvT2i9x80MtLdm5fQoqWnSf3p37IVwpSoV:NO2u39kwRV

Score

N/A

Malware Config

Signatures

Files

39cad3398b95266f0dd5ef45c184e12cbfd74ee7dc2d490a2c94a19d69b7b4f5
.exe windows x86

50ec35810ad543bdc4d76a97ae990439

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

inet_ntoa
htonl
getservbyname
gethostbyaddr
gethostbyname
inet_addr
WSASetLastError
connect
socket
closesocket
setsockopt
sendto
recvfrom
accept
listen
__WSAFDIsSet
select
ioctlsocket
gethostname
getpeername
getsockopt
htons
bind
ntohs
getsockname
send
recv
WSAGetLastError
WSAStartup
getservbyport
WSACleanup

wldap32

ord30
ord32
ord35
ord79
ord200
ord33
ord301
ord27
ord41
ord46
ord50
ord60
ord143
ord211
ord22
ord26

gdiplus

GdiplusShutdown
GdipBitmapLockBits
GdipCreateBitmapFromFile
GdiplusStartup
GdipBitmapUnlockBits
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdipGetImagePixelFormat
GdipFree
GdipCloneImage
GdipAlloc
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipGetImagePaletteSize
GdipGetImagePalette

iphlpapi

GetAdaptersInfo

kernel32

SleepEx
FreeLibrary
GetSystemDirectoryA
WaitForSingleObject
FormatMessageA
GetTickCount
ReadFile
PeekNamedPipe
WaitForMultipleObjects
GetFileType
GetStdHandle
ExpandEnvironmentStringsA
SetConsoleTextAttribute
AllocConsole
SetConsoleTitleA
SetConsoleScreenBufferSize
GetCommandLineA
GetCurrentDirectoryA
GetLocalTime
GetComputerNameA
IsProcessorFeaturePresent
InterlockedIncrement
InterlockedDecrement
CreateThread
GetModuleFileNameW
SetThreadPriority
GetCurrentThreadId
SetEvent
SuspendThread
CreateEventA
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
OpenMutexA
GlobalUnlock
GlobalLock
lstrcmpA
GetCurrentProcessId
LocalFree
GlobalAlloc
GlobalFree
GetThreadLocale
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
WritePrivateProfileStringA
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetOEMCP
SetErrorMode
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
CreateDirectoryA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
GetProcessHeap
GetStartupInfoA
GetSystemTimeAsFileTime
ExitThread
GetFileInformationByHandle
GetDriveTypeA
FindNextFileA
RtlUnwind
RaiseException
HeapSize
VirtualFree
HeapDestroy
HeapCreate
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
SetStdHandle
SetCurrentDirectoryA
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
SetFileAttributesA
GetFileAttributesA
DeleteFileA
ResumeThread
TerminateProcess
Sleep
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
WinExec
CopyFileA
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
DeleteCriticalSection
InitializeCriticalSection
CompareStringW
RemoveDirectoryA
InterlockedExchange
CompareStringA
CloseHandle
WriteFile
CreateFileA
WideCharToMultiByte
SetLastError
lstrcmpiA
LockResource
lstrlenW
LoadResource
FindResourceA
MultiByteToWideChar
lstrlenA
GetCPInfo
GetVersionExA
FreeResource
GetVersion
GetProcAddress
GetModuleHandleA
LoadLibraryA
SizeofResource
GetLastError
MulDiv

user32

UpdateWindow
SetForegroundWindow
TrackPopupMenu
MapWindowPoints
GetMessagePos
GetMessageTime
DestroyWindow
GetTopWindow
GetDlgItem
SetActiveWindow
GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
SetFocus
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassLongA
GetCapture
IsChild
WinHelpA
SendDlgItemMessageA
RegisterWindowMessageA
DestroyMenu
GetMenuStringA
GetWindowDC
BeginPaint
EndPaint
IsWindowEnabled
GetWindowThreadProcessId
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
CharNextA
RegisterClipboardFormatA
MapDialogRect
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamA
UnregisterClassA
LoadCursorA
GetMenu
ReleaseCapture
SetCapture
CopyAcceleratorTableA
IsRectEmpty
InvalidateRgn
PostThreadMessageA
GetNextDlgGroupItem
MessageBeep
GetParent
SendMessageA
GetNextDlgTabItem
OffsetRect
IsMenu
InflateRect
LoadImageA
FrameRect
GetWindowLongA
PostMessageA
InvalidateRect
DrawStateA
GetWindowRect
GetActiveWindow
WindowFromPoint
ClientToScreen
GetSystemMetrics
DestroyIcon
GetSysColor
DrawTextExA
CreatePopupMenu
DrawIconEx
CreateMenu
TabbedTextOutA
SetRect
EnableWindow
GetSysColorBrush
FillRect
GetMenuItemID
ModifyMenuA
GetSubMenu
GetMenuItemCount
GetMenuState
AppendMenuA
ReleaseDC
SystemParametersInfoA
DrawTextA
GetMenuItemInfoA
GetDC
DrawEdge
LoadBitmapA
GetDesktopWindow
GrayStringA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
ScreenToClient
EqualRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowPos
IntersectRect
GetWindowPlacement
GetWindow
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
IsWindow
PtInRect
SetWindowLongA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
EnableMenuItem
CheckMenuItem
UnhookWindowsHookEx
GetLastActivePopup
PeekMessageA
MessageBoxA
PostQuitMessage
DrawIcon
IsIconic
LoadIconA
SetTimer
SetWindowRgn
GetAsyncKeyState
CharUpperA
DestroyCursor
SetCursor
GetClientRect
CopyRect

gdi32

ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
OffsetViewportOrgEx
GetBkColor
GetWindowExtEx
GetViewportExtEx
MoveToEx
SetViewportExtEx
LineTo
SetMapMode
CreateRectRgnIndirect
GetMapMode
GetTextColor
GetRgnBox
PatBlt
SetViewportOrgEx
GetTextExtentPoint32W
GetTextExtentPoint32A
GetBkMode
CreateFontIndirectA
Ellipse
CreatePen
CreateCompatibleDC
PtVisible
CreateDIBSection
GetDeviceCaps
SelectObject
RectVisible
BitBlt
TextOutA
CreateSolidBrush
ExtTextOutA
DeleteObject
DeleteDC
CreateCompatibleBitmap
GetObjectA
GetPixel
SetTextColor
GetStockObject
CreateBitmap
SetBkColor
SetDIBColorTable
CreateRectRgn
CombineRgn
GetDIBColorTable
CreateFontA
GetClipBox
SaveDC
RestoreDC
SetBkMode
Escape

msimg32

TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyExA
GetUserNameA
RegQueryValueExA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteExA

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

ole32

CoTaskMemFree
CoTaskMemAlloc
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CLSIDFromProgID
CLSIDFromString
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
CoGetClassObject
StgCreateDocfileOnILockBytes

oleaut32

SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
OleCreateFontIndirect
SysAllocStringByteLen
SysStringLen
SysFreeString
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen

oledlg

ord8

winmm

timeGetTime

Sections

.text
Size: 684KB - Virtual size: 683KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50ec35810ad543bdc4d76a97ae990439

Headers

File Characteristics

Imports

ws2_32

wldap32

gdiplus

iphlpapi

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

winmm

Sections

.text Size: 684KB - Virtual size: 683KB

.rdata Size: 132KB - Virtual size: 128KB

.data Size: 28KB - Virtual size: 260KB

.rsrc Size: 68KB - Virtual size: 65KB

.text
Size: 684KB - Virtual size: 683KB

.rdata
Size: 132KB - Virtual size: 128KB

.data
Size: 28KB - Virtual size: 260KB

.rsrc
Size: 68KB - Virtual size: 65KB