a19c2bd6bec5ad666c39e4a9a8bb35641ed45d1662d45107d2b337d07e37f91b

Sharing

Copy URL Twitter E-mail

General

Target

a19c2bd6bec5ad666c39e4a9a8bb35641ed45d1662d45107d2b337d07e37f91b
Size

684KB
MD5

09a53545daa58730a60d59d12e2e836e
SHA1

5cfa04b3d96877b9efbf42a011d5bb95d42ebf96
SHA256

a19c2bd6bec5ad666c39e4a9a8bb35641ed45d1662d45107d2b337d07e37f91b
SHA512

72d3b9abfa48c34569b4290d0951880486c33063cb374033bc55fd1bbeedb1cf5c5e8caa00cda90960e730e83345909937787ceb20fe8d97ef84c213dfa2a207
SSDEEP

12288:BoX1YCXkOJSKx28sDomQ7dC1cPXwWLEm+u9mqdKLawyyy:BGzX98Ku3Q7dCi/9au9mqdcawyR

Score

N/A

Malware Config

Signatures

Files

a19c2bd6bec5ad666c39e4a9a8bb35641ed45d1662d45107d2b337d07e37f91b
.exe windows x86

6892744b9f70b9c4bc8a5536d6aece0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

inet_ntoa
sendto
inet_addr
htons
socket
WSAStartup
WSACleanup
recvfrom
select
getsockname
setsockopt
recv
send
connect
closesocket
shutdown

kernel32

GetVolumeInformationA
GetFullPathNameA
SetEndOfFile
UnlockFile
GetFileAttributesA
GetFileTime
SetEnvironmentVariableA
SetCurrentDirectoryA
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
ExitProcess
RaiseException
GetCommandLineA
HeapFree
CreateThread
ExitThread
GetACP
HeapReAlloc
SetFilePointer
LockFile
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
FlushFileBuffers
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
GetCurrentDirectoryA
DuplicateHandle
SetErrorMode
WritePrivateProfileStringA
HeapSize
GetOEMCP
GetDriveTypeA
ResetEvent
GetCurrentProcessId
GetTickCount
GetCurrentProcess
GetLastError
CreateToolhelp32Snapshot
Process32First
Process32Next
lstrcmpiA
GetProcAddress
GetSystemDirectoryA
DeleteFileA
Sleep
CopyFileA
GetExitCodeProcess
OpenProcess
TerminateProcess
CreateProcessA
CloseHandle
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
FindFirstFileA
FindNextFileA
SetEvent
WaitForSingleObject
InterlockedExchange
GetProfileStringA
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SizeofResource
GlobalFlags
GetThreadLocale
lstrcmpA
GetCurrentThread
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageA
LocalFree
lstrcpynA
MulDiv
SetLastError
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
SuspendThread
SetThreadPriority
ResumeThread
CreateEventA
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GlobalFree
LockResource
FindResourceA
LoadResource
WriteFile
SetFileAttributesA
CreateFileA
GetFileSize
GlobalAlloc
GlobalLock
ReadFile
GlobalUnlock
GetModuleFileNameA
FindClose
RemoveDirectoryA
GetLogicalDrives
IsBadWritePtr
GetStringTypeA
HeapAlloc
HeapCreate

user32

CharNextA
GetClassNameA
GetDesktopWindow
CopyAcceleratorTableA
GetNextDlgGroupItem
CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
GetWindowDC
TranslateMessage
ValidateRect
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
MoveWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
SetFocus
AdjustWindowRectEx
ScreenToClient
GetTopWindow
MessageBoxA
IsChild
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
DestroyMenu
TrackPopupMenu
GetWindowTextLengthA
GetDlgCtrlID
DefWindowProcA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
LoadStringA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
GetDlgItem
IsWindowEnabled
ClipCursor
GetMessageA
DispatchMessageA
GetUpdateRect
BeginPaint
EndPaint
GetWindowTextA
GetKeyState
GetFocus
IsWindowVisible
LoadBitmapA
SetTimer
KillTimer
LoadMenuA
GetCursorPos
GetSubMenu
IsIconic
GetSystemMetrics
DrawIcon
GetSystemMenu
AppendMenuA
LoadCursorA
CopyIcon
GetDC
ReleaseDC
IsWindow
SetWindowLongA
MessageBeep
SetWindowPos
ShowWindow
DestroyWindow
LoadIconA
CreateWindowExA
GetSysColorBrush
SetRect
UpdateWindow
PostMessageA
PtInRect
DrawFrameControl
GrayStringA
DrawTextA
TabbedTextOutA
GetWindowRect
SetCursor
GetWindowLongA
FrameRect
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
GetMenuItemCount
GetMenuItemID
CallWindowProcA
FillRect
OffsetRect
DrawStateA
DrawFocusRect
GetActiveWindow
GetParent
GetCapture
SetCapture
ClientToScreen
WindowFromPoint
ReleaseCapture
LoadImageA
GetIconInfo
RedrawWindow
CopyRect
GetClientRect
SetRectEmpty
UnionRect
InflateRect
GetSysColor
InvalidateRect
SendMessageA
EnableWindow
RemovePropA
GetNextDlgTabItem
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode

gdi32

CreateCompatibleBitmap
RectVisible
GetTextExtentPoint32A
CreateCompatibleDC
PtVisible
GetDeviceCaps
TextOutA
Escape
GetObjectA
GetStockObject
SelectObject
BitBlt
GetTextExtentPointA
CreateDIBitmap
OffsetViewportOrgEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
IntersectClipRect
MoveToEx
LineTo
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
CreatePatternBrush
GetMapMode
SetRectRgn
CombineRgn
DPtoLP
GetTextColor
GetBkColor
LPtoDP
SetMapMode
SetBkMode
RestoreDC
SaveDC
PatBlt
SetBkColor
SetTextColor
GetClipBox
CreatePen
CreateBitmap
RoundRect
DeleteDC
CreateSolidBrush
DeleteObject
CreateFontIndirectA
CreateRectRgnIndirect
ExtTextOutA
SetViewportExtEx

comdlg32

GetOpenFileNameA
GetFileTitleA
ChooseFontA
GetSaveFileNameA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegSetValueExA
RegCloseKey
RegQueryValueA
AdjustTokenPrivileges
RegCreateKeyExA
RegQueryValueExA
OpenProcessToken
LookupPrivilegeValueA
RegOpenKeyExA

shell32

ShellExecuteA

comctl32

ImageList_Create
ImageList_Destroy
ImageList_Draw
ord17
ImageList_AddMasked
ImageList_SetBkColor
ImageList_ReplaceIcon
_TrackMouseEvent

oledlg

ord8

ole32

ReleaseStgMedium
CLSIDFromString
OleSetContainedObject
OleDuplicateData
OleCreateStaticFromData
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromProgID
CoTaskMemAlloc
OleInitialize
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemFree

olepro32

ord253

oleaut32

VariantChangeType
VariantCopy
SysAllocString
SysAllocStringByteLen
SysStringLen
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

Sections

.text
Size: 320KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 280KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6892744b9f70b9c4bc8a5536d6aece0d

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 320KB - Virtual size: 317KB

.rdata Size: 64KB - Virtual size: 62KB

.data Size: 16KB - Virtual size: 37KB

.rsrc Size: 280KB - Virtual size: 277KB

.text
Size: 320KB - Virtual size: 317KB

.rdata
Size: 64KB - Virtual size: 62KB

.data
Size: 16KB - Virtual size: 37KB

.rsrc
Size: 280KB - Virtual size: 277KB