d100e0bd418ddda832cbd7066f0e47ebdfbde1ca39780481ce811c6976702e0f

Sharing

Copy URL Twitter E-mail

General

Target

d100e0bd418ddda832cbd7066f0e47ebdfbde1ca39780481ce811c6976702e0f
Size

684KB
MD5

83591ad79af620e808b700847902d5e0
SHA1

b436b07e0fc9807fe5be26ca13dea480f34e22ba
SHA256

d100e0bd418ddda832cbd7066f0e47ebdfbde1ca39780481ce811c6976702e0f
SHA512

5c79e45a3b62a4ec07dcabcccfc54a3d2b5c3b611313d0ecf9b0e7fe0b2abb304a37dfd51971f4347837d0c17629115d7b713eb4d91938f87ecff7ab639c575c
SSDEEP

6144:EpMLnUOubHZiyvoDH/L3ix1SjExv1z9aJ3H2FHJ4T3HK8plGoiokVEK1aAT0i:EpbMXixRv1JaBW7oPpYrEXAgi

Score

N/A

Malware Config

Signatures

Files

d100e0bd418ddda832cbd7066f0e47ebdfbde1ca39780481ce811c6976702e0f
.exe windows x86

7b833860aee200155199263fc86c275b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

winmm

joyGetPosEx

kernel32

GetFileAttributesA
GetFileTime
WritePrivateProfileStringA
HeapAlloc
HeapFree
RtlUnwind
GetSystemTimeAsFileTime
HeapReAlloc
GetTimeFormatA
GetDateFormatA
GetStartupInfoA
RaiseException
ExitProcess
TerminateProcess
SetStdHandle
GetFileType
SetErrorMode
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetTimeZoneInformation
LCMapStringA
LCMapStringW
VirtualQuery
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcessId
IsBadReadPtr
IsBadCodePtr
GetLocaleInfoW
SetEnvironmentVariableA
GetOEMCP
GetCPInfo
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GlobalFlags
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
InterlockedDecrement
VirtualProtect
GetModuleFileNameA
CreateFileA
GetFullPathNameA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
lstrcpyA
MulDiv
GlobalAlloc
FormatMessageA
lstrcpynA
LocalFree
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
GetWindowsDirectoryA
ExpandEnvironmentStringsA
CloseHandle
OpenProcess
GetModuleHandleA
OutputDebugStringA
Sleep
GetSystemInfo
SetThreadPriority
GetCurrentThread
GetTickCount
GetLogicalDriveStringsA
GetDriveTypeA
GetDiskFreeSpaceA
GetVolumeInformationA
GetTempPathA
GlobalMemoryStatus
CreateMutexA
GetUserDefaultLangID
GetCommandLineA
FreeLibrary
LoadLibraryA
GetProcAddress
GetProfileIntA
SearchPathA
GetCurrentDirectoryA
GetSystemDirectoryA
SetCurrentDirectoryA
CreateProcessA
GetLastError
FindResourceA
LoadResource
LockResource
SizeofResource
SetLastError
lstrlenA
lstrcmpiA
CompareStringW
CompareStringA
GetVersion
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapSize

user32

DestroyMenu
LoadCursorA
GetSysColorBrush
SetTimer
KillTimer
WaitMessage
GetMessageA
GetCursorPos
ValidateRect
SetCursor
PostQuitMessage
MapDialogRect
GetAsyncKeyState
EndPaint
BeginPaint
ReleaseDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
wsprintfA
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
ShowWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
GetWindowTextLengthA
GetWindowTextA
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessagePos
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
PostMessageA
GetSysColor
AdjustWindowRectEx
ScreenToClient
GetClassInfoA
RegisterClassA
UnregisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
CopyRect
PtInRect
GetWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
EnumDisplaySettingsA
GetDesktopWindow
GetKeyboardType
GetSystemMetrics
LoadIconA
GetClientRect
GetPropA
GetWindowRect
IsIconic
DrawIcon
MessageBoxA
SetFocus
ReleaseCapture
GetForegroundWindow
SetCapture
SetActiveWindow
TranslateMessage
DispatchMessageA
PeekMessageA
GetDC
LoadImageA
MessageBeep
SendMessageA
GetParent
EnableWindow
CharUpperA
GetMessageTime

gdi32

RectVisible
PtVisible
DeleteObject
GetStockObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
GetBitmapDimensionEx
GetDeviceCaps
GetBitmapBits
SetBitmapBits
CreateDIBitmap
SetMapMode
RestoreDC
SaveDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
TextOutA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegQueryValueExA

comctl32

ord17
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_Destroy

shlwapi

PathIsUNCA
PathFindExtensionA
PathStripToRootA
PathFindFileNameA

ole32

CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

VariantClear
VariantChangeType
VariantInit

wsock32

socket
gethostbyname
htonl
htons
ioctlsocket
bind
WSAGetLastError
accept
closesocket
WSACleanup
WSAStartup
inet_addr
connect
sendto
WSASetLastError
recvfrom
WSAAsyncSelect
send
recv
select
ntohs

oleacc

CreateStdAccessibleObject
LresultFromObject

Sections

.text
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 36KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 308KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7b833860aee200155199263fc86c275b

Headers

File Characteristics

Imports

version

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

ole32

oleaut32

wsock32

oleacc

Sections

.text Size: 240KB - Virtual size: 236KB

.rdata Size: 96KB - Virtual size: 95KB

.data Size: 36KB - Virtual size: 240KB

.rsrc Size: 308KB - Virtual size: 308KB

.text
Size: 240KB - Virtual size: 236KB

.rdata
Size: 96KB - Virtual size: 95KB

.data
Size: 36KB - Virtual size: 240KB

.rsrc
Size: 308KB - Virtual size: 308KB