7038a81e9b08a18c2ab9bc047d24da3b04bbb97082c9107090a035b64486019f

Sharing

Copy URL Twitter E-mail

General

Target

7038a81e9b08a18c2ab9bc047d24da3b04bbb97082c9107090a035b64486019f
Size

1.0MB
MD5

0bcba86ff7932db625fd1ddc68b3ef3a
SHA1

127810c132da5683a07bf4a3e069cbc0fb7daf0c
SHA256

7038a81e9b08a18c2ab9bc047d24da3b04bbb97082c9107090a035b64486019f
SHA512

d442f32511b4de5f160b4ac47a2ad51f00fecede48f12afded78a6aa62529e0a4511a66f8cb2a615bf786bc6fb48ef67f9bb20b596990637756d5e96f590f7e0
SSDEEP

12288:L8X8hAFgNlgUtCf2l5L957k00LlcjX0ZjBqnDrvBo3kTFFmdQwgSYOkWx:L8Xz8lThDj7k0VjX0xBOwkTOdWTu

Score

N/A

Malware Config

Signatures

Files

7038a81e9b08a18c2ab9bc047d24da3b04bbb97082c9107090a035b64486019f
.exe windows x86

bc0970d3ca4bba3d2fed0fda4fb8b8ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEndOfFile
DuplicateHandle
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
FileTimeToLocalFileTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetAtomNameA
SystemTimeToFileTime
GetCPInfo
GetOEMCP
SetErrorMode
LocalFileTimeToFileTime
SetFileTime
GetSystemTimeAsFileTime
ExitProcess
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
UnlockFile
GetStartupInfoA
ExitThread
SetStdHandle
GetFileType
HeapSize
FatalAppExitA
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
SetConsoleCtrlHandler
GetACP
LCMapStringA
LCMapStringW
SetHandleCount
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetDriveTypeA
GetLocaleInfoW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetThreadLocale
InterlockedIncrement
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
InterlockedDecrement
GetModuleFileNameW
FreeResource
GlobalAddAtomA
CreateEventA
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GlobalDeleteAtom
GlobalFree
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
MulDiv
SetLastError
ReleaseMutex
OpenMutexA
OpenFileMappingA
CreateMutexA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
MoveFileA
FileTimeToSystemTime
GetFileSize
GetFileTime
HeapAlloc
GetTickCount
GetProcessHeap
HeapFree
CreateThread
TerminateThread
GetModuleHandleA
FindNextFileA
RemoveDirectoryA
LocalFree
FindFirstFileA
FindClose
WaitForSingleObject
CreateProcessA
WriteFile
WritePrivateProfileStringA
WinExec
SetCurrentDirectoryA
CreateDirectoryA
GetWindowsDirectoryA
GetSystemDirectoryA
GetPrivateProfileStringA
CreateFileA
GlobalMemoryStatus
GetFileAttributesA
SetFileAttributesA
GetCurrentProcessId
CreateToolhelp32Snapshot
Process32First
Process32Next
CopyFileA
Sleep
DeleteFileA
LoadLibraryA
GetPrivateProfileIntA
GetModuleFileNameA
GetCurrentDirectoryA
GetStringTypeExW
GetStringTypeExA
GetEnvironmentVariableW
GetEnvironmentVariableA
lstrlenA
lstrcmpiW
lstrcmpiA
CompareStringW
CompareStringA
lstrlenW
GetCurrentProcess
OpenProcess
TerminateProcess
CloseHandle
FreeLibrary
GetProcAddress
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineA
InterlockedExchange

user32

GetNextDlgGroupItem
MessageBeep
UnregisterClassA
TranslateAcceleratorA
SetMenu
BringWindowToTop
SetRectEmpty
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
ReuseDDElParam
UnpackDDElParam
RegisterClipboardFormatA
SetParent
UnionRect
PostThreadMessageA
GetDCEx
LockWindowUpdate
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
DefWindowProcA
CallWindowProcA
OffsetRect
IntersectRect
IsIconic
GetWindowPlacement
GetWindowTextLengthA
ScrollWindowEx
SetFocus
MoveWindow
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
SendDlgItemMessageA
GetDlgItemTextA
InvalidateRgn
CheckRadioButton
CheckDlgButton
SystemParametersInfoA
DestroyMenu
GetMenuItemInfoA
InflateRect
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
FillRect
UnhookWindowsHookEx
SetWindowContextHelpId
MapDialogRect
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetLastActivePopup
IsWindowEnabled
ShowOwnedPopups
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
PeekMessageA
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
CheckMenuItem
PostMessageA
GetMenuState
GetMenuStringA
InsertMenuA
GetMenuItemCount
RemoveMenu
EnumDisplaySettingsA
CharLowerA
CharLowerW
SetRect
IsRectEmpty
CharUpperA
CharUpperW
LoadImageA
SetMenuDefaultItem
TrackPopupMenu
GetMenuItemID
CopyIcon
ReleaseCapture
IsWindow
DestroyCursor
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetCapture
GetWindowRect
CopyRect
LoadBitmapA
CopyAcceleratorTableA
GetDialogBaseUnits
DestroyIcon
WaitMessage
DeleteMenu
GetCapture
GetSysColorBrush
WindowFromPoint
MapVirtualKeyA
GetKeyNameTextA
CharNextA
RegisterWindowMessageA
WinHelpA
IsChild
GetDlgItemInt
ShowWindow
SetForegroundWindow
FlashWindow
GetWindowTextA
GetWindowThreadProcessId
EnumWindows
MessageBoxA
DrawIcon
AppendMenuA
EnableMenuItem
GetSubMenu
ModifyMenuA
LoadMenuA
SendMessageA
GetSystemMenu
SetWindowRgn
GetClientRect
ScreenToClient
GetDC
UpdateWindow
InvalidateRect
IsWindowVisible
GetWindow
GetParent
GetForegroundWindow
EnableWindow
LoadCursorA
LoadIconA
PtInRect
PostQuitMessage
SetCursor
GetCursorPos
GetSystemMetrics
SetWindowLongA
GetWindowLongA
ReleaseDC
KillTimer
SetTimer
SetWindowPos
SetScrollRange

gdi32

GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
CreateDIBPatternBrushPt
CreatePatternBrush
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
CreatePen
ExtCreatePen
ScaleWindowExtEx
CreateHatchBrush
CreateFontIndirectA
GetTextExtentPoint32A
GetDCOrgEx
GetBkColor
GetTextColor
CreateRectRgnIndirect
SetRectRgn
GetMapMode
PatBlt
DPtoLP
GetTextMetricsA
GetRgnBox
GetCharWidthA
StretchDIBits
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
StartDocA
GetWindowExtEx
GetViewportExtEx
SelectClipPath
GetClipRgn
SelectClipRgn
SetColorAdjustment
CreateSolidBrush
CreateFontA
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
GetDeviceCaps
SelectObject
SetBkColor
DeleteObject
DeleteDC
Escape
ExtTextOutA
RectVisible
PtVisible
StretchBlt
CreateCompatibleBitmap
GetStockObject
BitBlt
CreateBitmap
TextOutA
GetPixel
CreateCompatibleDC
CombineRgn
CreateRectRgn
GetObjectA
SetArcDirection

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegSetValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyA

shell32

ShellExecuteA
Shell_NotifyIconA
SHGetFileInfoA
ExtractIconA
DragFinish
DragQueryFileA

shlwapi

PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
UrlUnescapeA
PathFindExtensionA
PathRemoveFileSpecA

oledlg

ord8

ole32

CoUninitialize
CoCreateInstance
CoInitialize
OleRun
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
CreateBindCtx
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoDisconnectObject
StringFromGUID2
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CreateStreamOnHGlobal

oleaut32

SysFreeString
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
OleCreateFontIndirect
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
CreateErrorInfo
SysReAllocStringLen
VarDateFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromDate
SysAllocString
LoadTypeLi
GetErrorInfo
SetErrorInfo
SysStringLen

psapi

GetModuleFileNameExA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

d3d9

Direct3DCreate9

winmm

timeGetTime

ws2_32

closesocket
gethostbyaddr
WSACleanup
WSAStartup
recvfrom
WSAGetLastError
sendto
gethostbyname
inet_addr
setsockopt
WSASocketA
inet_ntoa

wininet

InternetConnectA
FtpFindFirstFileA
GopherCreateLocatorA
FtpCommandA
FtpOpenFileA
GopherGetAttributeA
HttpSendRequestExA
HttpEndRequestA
HttpSendRequestA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
GopherFindFirstFileA
InternetCloseHandle
GopherOpenFileA
HttpQueryInfoA
HttpAddRequestHeadersA
InternetErrorDlg
FtpGetFileA
FtpPutFileA
FtpGetCurrentDirectoryA
FtpSetCurrentDirectoryA
FtpRemoveDirectoryA
FtpCreateDirectoryA
FtpRenameFileA
FtpDeleteFileA
InternetQueryDataAvailable
InternetGetCookieA
InternetSetCookieA
InternetSetOptionExA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetOpenUrlA
HttpOpenRequestA
InternetFindNextFileA
InternetCrackUrlA

Sections

.text
Size: 724KB - Virtual size: 722KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

snailsec
Size: 4KB - Virtual size: 5B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc0970d3ca4bba3d2fed0fda4fb8b8ae

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

psapi

version

d3d9

winmm

ws2_32

wininet

Sections

.text Size: 724KB - Virtual size: 722KB

.rdata Size: 180KB - Virtual size: 176KB

.data Size: 16KB - Virtual size: 39KB

snailsec Size: 4KB - Virtual size: 5B

.rsrc Size: 116KB - Virtual size: 113KB

.text
Size: 724KB - Virtual size: 722KB

.rdata
Size: 180KB - Virtual size: 176KB

.data
Size: 16KB - Virtual size: 39KB

snailsec
Size: 4KB - Virtual size: 5B

.rsrc
Size: 116KB - Virtual size: 113KB