b3c2477dbab0d17248cc312dd663d36a4991b4820977b373ebc8ce716b285c74

Sharing

Copy URL Twitter E-mail

General

Target

b3c2477dbab0d17248cc312dd663d36a4991b4820977b373ebc8ce716b285c74
Size

552KB
MD5

a16b834c8a38583591e1b6eec5c67b11
SHA1

e9156d3c1fc7d2a113ca842189be49cb7891d3e1
SHA256

b3c2477dbab0d17248cc312dd663d36a4991b4820977b373ebc8ce716b285c74
SHA512

ab700c740f41acc76e76e28e85124e684b39da5dc28c4a55ea41226f07dd92eebdf49ee4ec2b3c1df0e6d188134ebaeb0ca0d00b068778f1b1a29df6afc2c866
SSDEEP

12288:0CqCmXUCEkNGY8pmaaVCQon8SF/oigoTEIT4yqbJVgBPjDumd4CX12x77Ts/eorZ:0Cq3VCQonhTEITVqfgwmdOV7TsrSod

Score

N/A

Malware Config

Signatures

Files

b3c2477dbab0d17248cc312dd663d36a4991b4820977b373ebc8ce716b285c74
.exe windows x86

c33e3661df9efc75f869c292deb7e691

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
ExitProcess
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
GetStartupInfoA
GetCommandLineA
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
SetUnhandledExceptionFilter
QueryPerformanceCounter
HeapDestroy
SetErrorMode
VirtualFree
IsBadWritePtr
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
SetEnvironmentVariableA
GetOEMCP
GetCPInfo
GetVolumeInformationA
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
GlobalFlags
InterlockedIncrement
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
InterlockedDecrement
SetLastError
MulDiv
FormatMessageA
lstrcpynA
LocalFree
FreeResource
GlobalAddAtomA
GetCurrentThread
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetModuleHandleA
ConvertDefaultLocale
EnumResourceLanguagesA
OutputDebugStringA
ReleaseMutex
IsDebuggerPresent
DebugBreak
GetCurrentProcess
TerminateProcess
CreateMutexA
GetCurrentThreadId
GetModuleFileNameW
CreateProcessW
lstrcatA
lstrcpyA
CreateDirectoryA
GetFileTime
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
GetFullPathNameA
GetTempPathA
GetModuleFileNameA
WaitForSingleObject
RemoveDirectoryA
FindNextFileA
SetFileAttributesA
GetFileAttributesA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetCurrentProcessId
GetTickCount
LoadLibraryA
GetProcAddress
GetFileSize
SetFilePointer
CreateFileA
WriteFile
CloseHandle
ReadFile
LeaveCriticalSection
EnterCriticalSection
Sleep
DeleteFileA
WritePrivateProfileStringA
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
DeleteCriticalSection
InitializeCriticalSection
GetLastError
RaiseException
MultiByteToWideChar
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapCreate
GetPrivateProfileIntA

user32

MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
GetWindowDC
ReleaseDC
ClientToScreen
DestroyMenu
ShowWindow
MoveWindow
SetWindowTextA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
SetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
IsChild
GetWindowTextA
GetForegroundWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
GetSysColor
AdjustWindowRectEx
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SystemParametersInfoA
GetWindowPlacement
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
wsprintfA
UnhookWindowsHookEx
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
DrawIcon
AppendMenuA
SendMessageA
GetSystemMenu
GetTopWindow
IsIconic
GetClientRect
InvalidateRect
EnableWindow
LoadIconA
GetSystemMetrics
CharUpperA
LoadBitmapA
SetWindowsHookExA
CallNextHookEx
GetMessageA
GetActiveWindow
IsWindowVisible
GetCursorPos
ValidateRect
MessageBoxA
GetParent
GetLastActivePopup
IsWindowEnabled
PostQuitMessage
MessageBoxW
PostThreadMessageA
RegisterClipboardFormatA
PeekMessageA
DispatchMessageA
IsDialogMessageA
TranslateMessage
GetDC
GetWindowLongA
LoadCursorA
GetWindowThreadProcessId
RedrawWindow
ReleaseCapture
SetCapture
TrackMouseEvent
GetClassInfoA
UnregisterClassA
GetClassNameA
GetPropA
EnumChildWindows
EnumWindows
IsWindow
CopyRect
PtInRect
PostMessageA
ScreenToClient
SetWindowRgn
SetRect
OffsetRect
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetWindowRect
GetKeyState
SetCursor
IsRectEmpty
IntersectRect
UnionRect
EndPaint
BeginPaint
EqualRect

gdi32

CreatePen
CreateRectRgnIndirect
GetMapMode
GetTextColor
GetRgnBox
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
GetBkColor
DeleteObject
IntersectClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetDeviceCaps
CreateBitmap
GetStockObject
CreateFontIndirectA
CombineRgn
ExtCreateRegion
GetClipRgn
CreateRectRgn
SelectClipRgn
Rectangle
BitBlt
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetClipBox
CreateCompatibleBitmap
GetObjectA
DeleteDC
CreateDIBSection
CreateCompatibleDC
SelectObject

msimg32

AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

comctl32

ord17

shlwapi

PathFindFileNameA
PathStripToRootA
PathFileExistsA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemFree
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoTaskMemAlloc
OleInitialize

oleaut32

SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysStringLen
SysAllocStringByteLen
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy

Sections

.text
Size: 368KB - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c33e3661df9efc75f869c292deb7e691

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 368KB - Virtual size: 365KB

.rdata Size: 96KB - Virtual size: 95KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 72KB - Virtual size: 69KB

.text
Size: 368KB - Virtual size: 365KB

.rdata
Size: 96KB - Virtual size: 95KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 72KB - Virtual size: 69KB