1bb12cd51574840e939ca9033fd3773e0e0809d462630950cb325c8a721ff8ac

Sharing

Copy URL Twitter E-mail

General

Target

1bb12cd51574840e939ca9033fd3773e0e0809d462630950cb325c8a721ff8ac
Size

1.5MB
MD5

dfac17da088365fe168259d238877999
SHA1

fe5587062280dd8ab616812e4e7bb1b3ca8c6953
SHA256

1bb12cd51574840e939ca9033fd3773e0e0809d462630950cb325c8a721ff8ac
SHA512

1972407e0db901e2666ec066208bf14b8485e1c8c4c7e213348d8bdda41e8cf67248c52a2129efa89e36ab6092804360ba1c05facc72b1b4f5a76cea9d754124
SSDEEP

24576:5rUzyXeS0xVV4kjgp6OymfudNnBUXyzgakc3Z9S67Oisgk3A/mdFe5so6MG8f5r1:5K7S0LV4UlHmfudNnBUXyzgakc3Z9S6p

Score

N/A

Malware Config

Signatures

Files

1bb12cd51574840e939ca9033fd3773e0e0809d462630950cb325c8a721ff8ac
.exe windows x86

fd5c7f9d715179ce955f32ff9b3acd66

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetErrorMode
HeapAlloc
HeapFree
RtlUnwind
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
HeapReAlloc
ExitProcess
ExitThread
SetStdHandle
GetFileType
HeapSize
GetACP
IsValidCodePage
VirtualFree
HeapCreate
GetStdHandle
GetOEMCP
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetUserDefaultLCID
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
GetCPInfo
GlobalFlags
InterlockedCompareExchange
GetProcessHeap
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetFileTime
GetFileSizeEx
ReleaseMutex
CreateMutexA
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
GetStringTypeExA
MoveFileA
WritePrivateProfileStringA
GetModuleFileNameW
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
GetCurrentProcessId
lstrcmpA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
LoadLibraryA
lstrcmpW
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
SetLastError
FormatMessageA
LocalFree
WriteFile
GetFileAttributesA
ReadFile
CreateFileA
SetFilePointer
GetVersionExA
CreateThread
WaitForSingleObject
CreateEventA
CloseHandle
Sleep
DeleteFileA
GetSystemDefaultLCID
GetVersion
FindFirstFileA
FindClose
GetTickCount
GetModuleHandleW
LoadLibraryExA
FreeLibrary
GetModuleFileNameA
IsDBCSLeadByte
InterlockedDecrement
InterlockedIncrement
lstrcmpiA
lstrlenA
GetModuleHandleA
GetProcAddress
GetLastError
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
LCMapStringA
MultiByteToWideChar

user32

InvalidateRgn
SetRect
CopyAcceleratorTableA
UnregisterClassA
WindowFromPoint
GetSysColorBrush
DestroyMenu
GetMenuItemInfoA
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SetRectEmpty
ReleaseCapture
SetCapture
IsRectEmpty
ShowOwnedPopups
GetMessageA
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
PostQuitMessage
InflateRect
GetWindowThreadProcessId
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
TranslateAcceleratorA
GetClassLongA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
SetActiveWindow
DispatchMessageA
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
UpdateWindow
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetScrollInfo
SetScrollInfo
GetDlgCtrlID
DefWindowProcA
CharNextA
SendMessageA
LoadStringA
PtInRect
GetMenu
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
PostThreadMessageA
MessageBeep
GetNextDlgGroupItem
UnpackDDElParam
TabbedTextOutA
FillRect
ReuseDDElParam
LoadMenuA
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
CallNextHookEx
BringWindowToTop
GetParent
EnableWindow
GetSysColor
SetCursor
LoadCursorA
CharUpperA
IsIconic
FindWindowA
GetLastActivePopup
SetForegroundWindow
CharNextW
DrawIcon
AppendMenuA
GetSystemMenu
GetClientRect
InvalidateRect
SetTimer
KillTimer
LoadIconA
GetDlgItem
GetSystemMetrics
MessageBoxA
GetWindowRect
IsWindow
AdjustWindowRectEx
IsMenu
GetWindowLongA
CallWindowProcA
SetWindowLongA
RemovePropA
GetPropA
IsZoomed
SetWindowRgn
SetPropA
EqualRect
DeferWindowPos
EndDeferWindowPos
BeginDeferWindowPos
GetClassNameA
GetWindowRgn
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
CopyRect
IsWindowVisible

gdi32

CreateSolidBrush
CreateFontIndirectA
GetMapMode
CreateEllipticRgn
LPtoDP
Ellipse
GetTextMetricsA
GetTextExtentPoint32A
GetCharWidthA
StretchDIBits
CreateCompatibleBitmap
GetRgnBox
GetBkColor
GetTextColor
CreateCompatibleDC
GetStockObject
CreateBitmap
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
CreateFontA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
GetObjectA
DeleteObject
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
DPtoLP
OffsetRgn
CombineRgn
SetRectRgn
CreateRectRgnIndirect
CreateRectRgn
SelectObject

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegQueryValueExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA

shell32

DragQueryFileA
SHChangeNotify
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteExA
ShellExecuteA
DragFinish

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
UrlUnescapeA
PathFindExtensionA

oledlg

ord8

ole32

CoTaskMemRealloc
CoTaskMemFree
CoRegisterClassObject
StringFromGUID2
CoCreateInstance
CoGetClassObject
OleRun
CoUninitialize
CoInitialize
CLSIDFromProgID
CLSIDFromString
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoTaskMemAlloc
CoRevokeClassObject

oleaut32

SysStringLen
VarUI4FromStr
LoadRegTypeLi
LoadTypeLi
SysAllocString
UnRegisterTypeLi
RegisterTypeLi
VariantTimeToSystemTime
VariantInit
VariantClear
VariantChangeType
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
VariantCopy
SystemTimeToVariantTime
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayDestroy
OleCreateFontIndirect
GetErrorInfo
SysFreeString

urlmon

CoInternetGetSession

ws2_32

WSAGetLastError
WSARecv
WSAWaitForMultipleEvents
WSAEventSelect
shutdown
closesocket

wininet

InternetCrackUrlA
HttpOpenRequestA
InternetOpenUrlA
InternetConnectA
HttpSendRequestA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle
HttpQueryInfoA
HttpAddRequestHeadersA
InternetQueryDataAvailable
InternetCanonicalizeUrlA
InternetQueryOptionA

Sections

.text
Size: 559KB - Virtual size: 559KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 772KB - Virtual size: 771KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd5c7f9d715179ce955f32ff9b3acd66

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

ws2_32

wininet

Sections

.text Size: 559KB - Virtual size: 559KB

.rdata Size: 136KB - Virtual size: 136KB

.data Size: 16KB - Virtual size: 31KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 772KB - Virtual size: 771KB

.text
Size: 559KB - Virtual size: 559KB

.rdata
Size: 136KB - Virtual size: 136KB

.data
Size: 16KB - Virtual size: 31KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 772KB - Virtual size: 771KB