638b037f6ebed4a6e9e7ed28e464152793232cc2090a99b7e7913b008a42d56f

Sharing

Copy URL Twitter E-mail

General

Target

638b037f6ebed4a6e9e7ed28e464152793232cc2090a99b7e7913b008a42d56f
Size

1.4MB
MD5

ffbb4ea6724e7140dd41f73ba04c3dea
SHA1

5e9f06c5ca96010fd9c05264fe17ac77c57bc482
SHA256

638b037f6ebed4a6e9e7ed28e464152793232cc2090a99b7e7913b008a42d56f
SHA512

a5e181bf775bc08483fb91cd6b82a8a0cc08d1f55a7774b761be4e21302285f45f36dca1f18f2409634652a13369ff33a4829561f7bbdfabb6208a6e37973827
SSDEEP

24576:0xTvbcdJpFaV/l7KR9RvcqRpMphAOKYL0i2w6n+aO6QaWBbsDsHKtE8NpVCkXTB:c8dJpFa2RfhM6YwU6q6CCh/NzrF

Score

N/A

Malware Config

Signatures

Files

638b037f6ebed4a6e9e7ed28e464152793232cc2090a99b7e7913b008a42d56f
.exe windows x86

d91d072fa06e120d26cadf57e477f19a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
CompareStringW
SetEnvironmentVariableA
SetFileTime
CreateDirectoryA
GetFileAttributesA
LocalFileTimeToFileTime
lstrlenA
lstrcpyA
GetCurrentDirectoryA
SystemTimeToFileTime
SetFilePointer
lstrcatA
DeleteFileA
WriteFile
ExitProcess
FlushViewOfFile
FindClose
FindFirstFileA
GetSystemInfo
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetLastError
CreateFileA
GetPrivateProfileIntA
GetPrivateProfileStringA
ReadFile
CloseHandle
CreateProcessA
GetStartupInfoA
CreatePipe
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
FreeResource
GlobalFree
GlobalUnlock
GlobalLock
MultiByteToWideChar
MulDiv
LocalFree
FormatMessageA
GlobalAlloc
SetLastError
GetVersionExA
GetProcAddress
GetModuleHandleA
lstrcmpW
LoadLibraryA
CompareStringA
FreeLibrary
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
GetThreadLocale
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GetModuleFileNameA
SetThreadPriority
ResumeThread
WaitForSingleObject
SetEvent
SuspendThread
CreateEventA
GetCurrentProcessId
lstrcmpA
InterlockedExchange
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GetModuleFileNameW
InterlockedDecrement
FileTimeToSystemTime
FileTimeToLocalFileTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetModuleHandleW
InterlockedIncrement
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetCPInfo
GetOEMCP
SetErrorMode
GetFileSizeEx
GetFileTime
WritePrivateProfileStringA
GetTickCount
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
HeapFree
HeapAlloc
GetCommandLineA
RtlUnwind
HeapReAlloc
RaiseException
VirtualProtect
VirtualAlloc
VirtualQuery
ExitThread
CreateThread
SetStdHandle
GetFileType
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
GetTimeZoneInformation
LCMapStringA
LCMapStringW
HeapCreate
VirtualFree
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
Sleep

user32

SetMenu
GetKeyState
MapWindowPoints
PeekMessageA
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
GetTopWindow
DispatchMessageA
GetLastActivePopup
GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
SetFocus
GetFocus
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
GetCapture
IsChild
WinHelpA
SendDlgItemMessageA
RegisterWindowMessageA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
CheckMenuItem
EnableMenuItem
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetDC
ReleaseDC
CharUpperA
ValidateRect
GetCursorPos
TranslateMessage
GetMessageA
GetWindowThreadProcessId
WaitMessage
PostQuitMessage
MapDialogRect
SetWindowContextHelpId
SetCursor
DestroyMenu
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
GetWindowDC
GetClassInfoA
SetForegroundWindow
GetSysColorBrush
LoadCursorA
SetCapture
ReleaseCapture
CharNextA
CopyAcceleratorTableA
IsRectEmpty
SetRect
InvalidateRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
UnregisterClassA
RegisterClipboardFormatA
PostThreadMessageA
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
EnableWindow
SendMessageA
SetTimer
KillTimer
LoadIconA
GetSystemMenu
AppendMenuA
GetClientRect
IsIconic
GetSystemMetrics
DrawIcon
wsprintfA
RegisterClassA
GetSysColor
IsWindowVisible
UpdateWindow
PostMessageA
MessageBoxA
CreateWindowExA
EndPaint
GetClassInfoExA
AdjustWindowRectEx
EqualRect
BeginPaint
CallWindowProcA

shell32

ShellExecuteA

ole32

CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitializeEx
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoRegisterMessageFilter
CoUninitialize
CoCreateInstance
CoTaskMemFree
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize

shlwapi

UrlUnescapeA
PathFindFileNameA
PathFindExtensionA
PathIsUNCA
PathStripToRootA
PathRemoveFileSpecW

oledlg

ord8

ws2_32

recvfrom
WSAIoctl
send
recv
sendto
WSASetLastError
WSACleanup
accept
gethostbyaddr
getservbyport
WSAAsyncSelect
ntohs
select
htonl
WSAGetLastError
WSAStartup
socket
inet_addr
htons
connect
shutdown
closesocket
gethostname
gethostbyname
inet_ntoa
WSASocketA
setsockopt
bind

netapi32

NetApiBufferFree
NetLocalGroupEnum
NetUserEnum
NetGroupEnum

iphlpapi

SendARP

mpr

WNetAddConnection2A
WNetCancelConnection2A

psapi

EnumProcesses

snmpapi

SnmpUtilMemReAlloc
SnmpUtilVarBindListFree
SnmpUtilMemFree

mgmtapi

SnmpMgrClose
SnmpMgrRequest
SnmpMgrOpen
SnmpMgrOidToStr
SnmpMgrStrToOid

oleacc

LresultFromObject
CreateStdAccessibleObject

wininet

InternetCanonicalizeUrlA
InternetCrackUrlA

gdi32

Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
GetClipBox
SetTextColor
SetBkColor
GetObjectA
CreateBitmap
CreateRectRgnIndirect
TextOutA
ExtTextOutA
SaveDC
RestoreDC
SetMapMode
RectVisible
PtVisible
GetDeviceCaps
GetWindowExtEx
GetViewportExtEx
DeleteObject
GetMapMode
GetBkColor
GetTextColor
GetRgnBox

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

comdlg32

GetFileTitleA

advapi32

RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA

oleaut32

SysFreeString
SysAllocStringByteLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString
VariantCopy

Sections

.text
Size: 315KB - Virtual size: 314KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 28.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.exdata
Size: 892KB - Virtual size: 892KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d91d072fa06e120d26cadf57e477f19a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

ole32

shlwapi

oledlg

ws2_32

netapi32

iphlpapi

mpr

psapi

snmpapi

mgmtapi

oleacc

wininet

gdi32

winspool.drv

comdlg32

advapi32

oleaut32

Sections

.text Size: 315KB - Virtual size: 314KB

.rdata Size: 82KB - Virtual size: 81KB

.data Size: 11KB - Virtual size: 28.7MB

.exdata Size: 892KB - Virtual size: 892KB

.rsrc Size: 83KB - Virtual size: 82KB

.text
Size: 315KB - Virtual size: 314KB

.rdata
Size: 82KB - Virtual size: 81KB

.data
Size: 11KB - Virtual size: 28.7MB

.exdata
Size: 892KB - Virtual size: 892KB

.rsrc
Size: 83KB - Virtual size: 82KB