0215c41aa0ffda271f1971a3b703c620219a5d4af015af525155df481bba4233

Sharing

Copy URL

Twitter E-mail

General

Target

0215c41aa0ffda271f1971a3b703c620219a5d4af015af525155df481bba4233
Size

981KB
MD5

a29093854b8552f640d58403d1fc2e40
SHA1

a2119ac70856ef113cc9a227605e2f0c6ec5d430
SHA256

0215c41aa0ffda271f1971a3b703c620219a5d4af015af525155df481bba4233
SHA512

e2814df22bb5cf7019a22e9e8d5820c9ea45958018eace846c6a128fa210ed6a8a5c12eae3dd7bbaa652446e0c66be608055f1adb03a3979d09b2d77546cb9e7
SSDEEP

12288:pA97ap+vsNRjbKFMrMpWeWG3+I6/syv7cXhjoRLDgkBRFejLwB:p0o0yRjeFMrVeWG3q/wXhqDBRyLG

Score

N/A

Malware Config

Signatures

Files

0215c41aa0ffda271f1971a3b703c620219a5d4af015af525155df481bba4233
.exe windows x86

21e16c4d5906b2e08eca8ad4e6c63898

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetVolumeInformationA
GetFullPathNameA
SetErrorMode
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
GetTimeFormatA
GetDateFormatA
GetStartupInfoA
RtlUnwind
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
ExitThread
SetStdHandle
GetFileType
HeapSize
GetACP
IsValidCodePage
SetHandleCount
GetStdHandle
GetConsoleCP
LockFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapCreate
VirtualFree
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetDriveTypeA
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
UnmapViewOfFile
GetSystemDirectoryA
CreateFileMappingA
MapViewOfFile
GetCurrentDirectoryA
WritePrivateProfileStringA
GetModuleHandleW
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetFileTime
GetFileSizeEx
GetFileAttributesA
CreateFileA
GetFileAttributesExA
GetThreadLocale
RaiseException
LocalAlloc
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
GetModuleFileNameW
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
GlobalUnlock
GlobalFree
GlobalLock
FreeResource
MulDiv
SetLastError
SetProcessWorkingSetSize
GetProcAddress
lstrlenW
GetModuleHandleA
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetCurrentProcess
FlushInstructionCache
InterlockedIncrement
GetLastError
ExpandEnvironmentStringsA
InterlockedDecrement
MultiByteToWideChar
Sleep
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
GetTickCount
DeleteCriticalSection
InitializeCriticalSection
GlobalAlloc
SetUnhandledExceptionFilter
CreateThread
GetCommandLineA
GetVersionExA
GetCurrentProcessId
ExitProcess
CloseHandle
lstrlenA
lstrcpyA
FreeLibrary
LoadLibraryA
GetWindowsDirectoryA
LocalFree
FormatMessageA
GetPrivateProfileStringA
GetModuleFileNameA
FindResourceA
LoadResource
LockResource
SizeofResource
GetConsoleMode
WideCharToMultiByte

user32

RegisterClipboardFormatA
PostThreadMessageA
GetNextDlgTabItem
EndDialog
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
TranslateAcceleratorA
SetWindowContextHelpId
MapDialogRect
GetMessageA
GetActiveWindow
ValidateRect
GetCursorPos
WindowFromPoint
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
EnableMenuItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
WinHelpA
GetCapture
GetClassLongA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
CharUpperA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
GetWindowPlacement
GetWindow
AdjustWindowRectEx
FillRect
GetMenuItemID
OffsetRect
SystemParametersInfoA
CopyRect
UnhookWindowsHookEx
TrackPopupMenuEx
IntersectRect
EnableWindow
SendMessageA
LoadIconA
GetClientRect
GetDesktopWindow
GetSubMenu
GetMenuStringA
GetMenuItemInfoA
GetMenuItemCount
LoadMenuA
ClientToScreen
FindWindowExA
DispatchMessageA
TranslateMessage
MessageBeep
GetNextDlgGroupItem
UnregisterClassA
PeekMessageA
CallNextHookEx
SetPropA
CreateDialogIndirectParamA
GetSysColorBrush
CharNextA
InvalidateRgn
CopyAcceleratorTableA
SetWindowRgn
IsZoomed
SetRect
UnionRect
IsRectEmpty
GetDC
InflateRect
SetCursor
LoadCursorA
PostMessageA
ShowOwnedPopups
GetMessageTime
GetParent
IsChild
GetFocus
GetWindowRect
FindWindowA
SetWindowLongA
PtInRect
ReleaseCapture
RedrawWindow
SetCapture
IsWindow
GetSysColor
InvalidateRect
ReleaseDC
CopyIcon
KillTimer
GetMessagePos
ScreenToClient
SetTimer
DestroyIcon
GetSystemMetrics
DrawIconEx
UpdateWindow
IsIconic
DrawIcon
SetWindowPos
DestroyMenu
GetClassInfoA
CheckMenuItem
GetKeyboardState
GetForegroundWindow
GetClassNameA
DefWindowProcW
SetWindowLongW
CallWindowProcW
GetPropA
RegisterWindowMessageA
SetWindowsHookExA
GetWindowLongA
PostQuitMessage
IsWindowVisible
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
TabbedTextOutA

gdi32

CreatePatternBrush
CreatePen
CreateSolidBrush
DeleteDC
CreateRectRgnIndirect
GetMapMode
DPtoLP
CreateEllipticRgn
Ellipse
GetRgnBox
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
LPtoDP
GetWindowExtEx
GetViewportExtEx
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
SetTextColor
GetClipBox
CreateBitmap
CreateCompatibleBitmap
GetTextColor
DeleteObject
BitBlt
CreateCompatibleDC
SelectObject
Rectangle
GetDeviceCaps
SetBkColor
GetBkColor
GetTextExtentPoint32A
CreateFontIndirectA
GetObjectA
GetTextMetricsA
GetStockObject
PatBlt
GetPixel

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

SetSecurityDescriptorDacl
RegEnumKeyA
RegDeleteKeyA
InitializeSecurityDescriptor
RegOpenKeyA
RegCreateKeyExA
RegQueryValueA
RegCreateKeyA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA

shell32

DragFinish
DragQueryFileA
ShellExecuteA

comctl32

ImageList_LoadImageA
InitCommonControlsEx

shlwapi

PathFindExtensionA
StrStrW
PathFindFileNameA
PathStripToRootA
PathIsUNCA
UrlUnescapeA

oledlg

ord8

ole32

CoTaskMemAlloc
CLSIDFromProgID
CoGetClassObject
StgOpenStorageOnILockBytes
CoTaskMemFree
CreateILockBytesOnHGlobal
CoDisconnectObject
CoFreeUnusedLibraries
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CLSIDFromString
CoGetInterfaceAndReleaseStream
CoUninitialize
OleUninitialize
OleInitialize
CoInitialize
CoMarshalInterThreadInterfaceInStream
StgCreateDocfileOnILockBytes
CoCreateInstance

oleaut32

SysAllocStringLen
VariantClear
VariantInit
SysStringLen
SysAllocString
VariantChangeType
VariantCopy
SysAllocStringByteLen
DispCallFunc
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
LoadTypeLi
SysFreeString

wininet

GetUrlCacheEntryInfoA
InternetCrackUrlA
InternetCanonicalizeUrlA

psapi

GetModuleInformation

Sections

.text
Size: 339KB - Virtual size: 339KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

MyHotWor
Size: 250KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 225KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

21e16c4d5906b2e08eca8ad4e6c63898

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

wininet

psapi

Sections

.text Size: 339KB - Virtual size: 339KB

.rdata Size: 93KB - Virtual size: 92KB

.data Size: 14KB - Virtual size: 31KB

MyHotWor Size: 250KB - Virtual size: 250KB

.rsrc Size: 225KB - Virtual size: 228KB

.reloc Size: 49KB - Virtual size: 49KB

.text
Size: 339KB - Virtual size: 339KB

.rdata
Size: 93KB - Virtual size: 92KB

.data
Size: 14KB - Virtual size: 31KB

MyHotWor
Size: 250KB - Virtual size: 250KB

.rsrc
Size: 225KB - Virtual size: 228KB

.reloc
Size: 49KB - Virtual size: 49KB