4b7197d56120d565b7d92417ee8464d828d9957e786d81be5de179e35d585dfa

Sharing

Copy URL Twitter E-mail

General

Target

4b7197d56120d565b7d92417ee8464d828d9957e786d81be5de179e35d585dfa
Size

730KB
MD5

91c38ec33b9ee70b36e64bb8332de8a0
SHA1

b3d15cf4a61144f32001c643cec5cd07727c06b5
SHA256

4b7197d56120d565b7d92417ee8464d828d9957e786d81be5de179e35d585dfa
SHA512

f31aaa630c129f42a989a8556199687c9d745e889a0f148a0b80323d82a207047acdfc8ff3edc60a1cd41ed83479b7686f0224389c28d5822ef6b8be92f25859
SSDEEP

12288:bz0aEbUAXzlxeJnME05sgK2GWAapfhMrdMqosnrYs0uQFMPboPaGM:bz0a2xjF5sgEW8rdvosnrXUPaGM

Score

N/A

Malware Config

Signatures

Files

4b7197d56120d565b7d92417ee8464d828d9957e786d81be5de179e35d585dfa
.exe windows x86

29c94b3edafd781c97de589a97f62de6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
GetModuleHandleA
GetProcAddress
SetLastError
FindFirstFileA
FindNextFileA
FindClose
UnmapViewOfFile
GetCurrentProcess
DuplicateHandle
CreateFileMappingA
MapViewOfFile
GetFileType
GetFileInformationByHandle
GetSystemTime
GetLocalTime
SystemTimeToFileTime
SetFilePointer
FileTimeToDosDateTime
FileTimeToSystemTime
WriteFile
lstrcpynA
lstrcpyA
GetLocaleInfoA
GetNumberFormatA
MulDiv
CopyFileA
GetCommandLineA
lstrlenA
lstrlenW
GetPrivateProfileStringA
GetLastError
GetModuleFileNameA
SetCurrentDirectoryA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
DeleteFileA
FormatMessageA
LocalFree
MultiByteToWideChar
CreateFileA
GetFileSize
ReadFile
CloseHandle
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
SetEnvironmentVariableA
CompareStringW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
LCMapStringW
LCMapStringA
GetDriveTypeA
GetConsoleMode
GetConsoleCP
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
FatalAppExitA
GetStdHandle
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
IsValidCodePage
GetACP
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapSize
SetStdHandle
CreateThread
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GlobalFree
GetModuleFileNameW
InterlockedDecrement
GetVersionExA
lstrcmpW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
FreeResource
GetCurrentProcessId
FileTimeToLocalFileTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
lstrcmpA
InterlockedExchange
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
SetThreadPriority
ResumeThread
WaitForSingleObject
SetEvent
SuspendThread
CreateEventA
GetModuleHandleW
InterlockedIncrement
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
GetAtomNameA
GetThreadLocale
GetFileAttributesExA
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
GetFileAttributesA
GetFileSizeEx
GetFileTime
MoveFileA
GetStringTypeExA
lstrcmpiA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetCurrentDirectoryA
SetErrorMode
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
Sleep
ExitProcess
GetStartupInfoA
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
ExitThread

user32

IntersectRect
OffsetRect
SetWindowPos
GetWindowLongA
GetMenu
CallWindowProcA
DefWindowProcA
GetDlgCtrlID
CopyRect
SetWindowPlacement
SetScrollInfo
GetScrollInfo
DeferWindowPos
EqualRect
AdjustWindowRectEx
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
MessageBoxA
PostMessageA
IsWindowVisible
ShowScrollBar
SetForegroundWindow
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
SetMenu
GetKeyState
TrackPopupMenu
TrackPopupMenuEx
ScrollWindow
MapWindowPoints
PeekMessageA
GetMessageTime
DestroyWindow
GetTopWindow
GetDlgItem
EndDeferWindowPos
BeginDeferWindowPos
DispatchMessageA
SetActiveWindow
GetLastActivePopup
GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
SetFocus
RemovePropA
GetPropA
SetPropA
GetClassNameA
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExA
GetCapture
IsChild
WinHelpA
SendDlgItemMessageA
CheckMenuItem
EnableMenuItem
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
IsDialogMessageA
SetWindowTextA
SystemParametersInfoA
ShowWindow
IsWindowEnabled
ScrollWindowEx
GetKeyNameTextA
MapVirtualKeyA
WindowFromPoint
GetCursorPos
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
GetActiveWindow
GetDesktopWindow
GetWindowThreadProcessId
PostQuitMessage
ValidateRect
TranslateMessage
GetMessageA
ShowOwnedPopups
WaitMessage
GetSysColorBrush
UnregisterClassA
GetMenuItemInfoA
DestroyMenu
GetDialogBaseUnits
CharUpperA
DeleteMenu
SetCapture
ReleaseCapture
DestroyIcon
SetRectEmpty
TranslateAcceleratorA
BringWindowToTop
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
GetMenuBarInfo
LoadMenuA
ReuseDDElParam
UnpackDDElParam
SetRect
IsRectEmpty
GetSystemMenu
SetParent
UnionRect
GetDCEx
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
SendMessageA
GetWindowRect
LockWindowUpdate
EnableWindow
PtInRect
ScreenToClient
SetTimer
LoadCursorA
LoadIconA
SetCursor
GetMessagePos
DestroyCursor
CopyIcon
wsprintfA
GetAsyncKeyState
GetSysColor
DrawIcon
GetSystemMetrics
GetClientRect
FillRect
RedrawWindow
InvalidateRect
InflateRect
TabbedTextOutA
DrawTextA
IsIconic
GetWindowPlacement
GetWindow
EndPaint
BeginPaint
GetWindowDC
MoveWindow
ClientToScreen
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
GetClassLongA
UpdateWindow
GetFocus
DrawEdge
RegisterWindowMessageA
GetParent
GetDC
ReleaseDC
IsWindow
MessageBeep
SetWindowLongA
KillTimer
GrayStringA
DrawTextExA

gdi32

MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
DeleteObject
SelectClipRgn
GetClipRgn
SelectClipPath
GetViewportExtEx
LineTo
GetPixel
StartDocA
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
ModifyWorldTransform
SetWorldTransform
CreateRectRgn
SetGraphicsMode
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetWindowExtEx
PlayMetaFileRecord
StretchDIBits
CreateFontA
GetCharWidthA
GetTextMetricsA
DPtoLP
GetMapMode
CombineRgn
SetRectRgn
PatBlt
CreateRectRgnIndirect
GetDCOrgEx
CreateHatchBrush
ExtCreatePen
CreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
CopyMetaFileA
SelectPalette
CreateBitmap
CreatePatternBrush
CreateDIBPatternBrushPt
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
CreateFontIndirectA
GetObjectA
DeleteDC
GetDeviceCaps
CreateDCA
GetStockObject
GetCurrentObject
GetBkColor
BitBlt
CreateCompatibleDC
GetTextExtentPoint32A
CreateCompatibleBitmap
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateSolidBrush

advapi32

RegSetValueExA
RegSetValueA
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegCreateKeyExA
RegCreateKeyA
RegDeleteValueA
RegCloseKey
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueA

shell32

ShellExecuteA
SHGetFileInfoA
DragFinish
DragQueryFileA
CommandLineToArgvW
ShellExecuteExA
ExtractIconA

shlwapi

UrlUnescapeA
PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFindExtensionA

ws2_32

WSACleanup
closesocket
accept
socket
select
gethostbyname
htonl
WSAStartup
gethostname
inet_ntoa
ntohs
htons
inet_addr
bind
WSAGetLastError
getsockname
getpeername
WSASetLastError
connect
sendto
recvfrom
WSAAsyncSelect
send
recv

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

wininet

InternetErrorDlg
FtpGetFileA
FtpPutFileA
FtpGetCurrentDirectoryA
FtpSetCurrentDirectoryA
FtpRemoveDirectoryA
FtpCreateDirectoryA
FtpRenameFileA
FtpDeleteFileA
InternetQueryDataAvailable
InternetGetCookieA
HttpAddRequestHeadersA
InternetSetOptionExA
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
HttpQueryInfoA
GopherFindFirstFileA
InternetGetLastResponseInfoA
InternetOpenA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetReadFile
HttpSendRequestA
InternetFindNextFileA
InternetSetCookieA
HttpOpenRequestA
InternetOpenUrlA
GopherOpenFileA
InternetConnectA
FtpFindFirstFileA
GopherCreateLocatorA
FtpCommandA
FtpOpenFileA
GopherGetAttributeA
HttpSendRequestExA
HttpEndRequestA
InternetCloseHandle

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

comdlg32

GetFileTitleA

ole32

CoInitializeEx
CoUninitialize
CLSIDFromString
CoCreateInstance
StringFromGUID2
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CoDisconnectObject

oleaut32

VarBstrFromDate
VarCyFromStr
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarDateFromStr
SysReAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
SysStringByteLen
SysAllocStringByteLen
SysFreeString
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear

Exports

Exports

?Net_GetErrorString@@YAHAAV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z

Sections

.text
Size: 511KB - Virtual size: 511KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

29c94b3edafd781c97de589a97f62de6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

ws2_32

version

wininet

winspool.drv

comdlg32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 511KB - Virtual size: 511KB

.rdata Size: 118KB - Virtual size: 118KB

.data Size: 11KB - Virtual size: 26KB

.rsrc Size: 87KB - Virtual size: 87KB

.text
Size: 511KB - Virtual size: 511KB

.rdata
Size: 118KB - Virtual size: 118KB

.data
Size: 11KB - Virtual size: 26KB

.rsrc
Size: 87KB - Virtual size: 87KB