723d0044cbae7e6624d54dde311f28036a9fbdd86dc3fe3636c615654a43abb7

Sharing

Copy URL Twitter E-mail

General

Target

723d0044cbae7e6624d54dde311f28036a9fbdd86dc3fe3636c615654a43abb7
Size

572KB
MD5

b9a29320e10674d13bd4a5d63cf2397a
SHA1

ab8a72ad03801c653fad128acb1655b05891fd09
SHA256

723d0044cbae7e6624d54dde311f28036a9fbdd86dc3fe3636c615654a43abb7
SHA512

4f74a6892fa7a24971ffaa483307b860a97f7aa155aa1f65e3d24c3e4a44e7b8422346efd0643b28583553cfe104f42a97456fb0c41788d389120568416322ec
SSDEEP

12288:IZXa7idS6dmPFewZw1MHleYqvtciV3/5:IZXmidXUpZwqHledvtcir

Score

N/A

Malware Config

Signatures

Files

723d0044cbae7e6624d54dde311f28036a9fbdd86dc3fe3636c615654a43abb7
.exe windows x86

58ee2d7d12dbbd2db7c9723e69bb58cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

bind
listen
closesocket
WSASocketA
WSAResetEvent
WSAWaitForMultipleEvents
WSAGetLastError
WSASend
WSARecv
inet_addr
htons
gethostname
WSAGetOverlappedResult
getpeername
inet_ntoa
WSAAccept
gethostbyname
setsockopt
WSACreateEvent
WSAEventSelect
WSACloseEvent
WSAEnumNetworkEvents

advapi32

RegDeleteValueA
ImpersonateSelf
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyA
RegOpenKeyA
RegEnumValueA
OpenThreadToken
GetTokenInformation
LookupAccountSidA
RevertToSelf
GetUserNameA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegDeleteKeyA
RegEnumKeyA
RegSetValueExA

shell32

ord2
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteA
SHGetPathFromIDListA
SHGetFileInfoA

kernel32

GetProcessVersion
GetProcessTimes
GetWindowsDirectoryA
GetTempPathA
GetVolumeInformationA
GetDriveTypeA
GetDiskFreeSpaceA
lstrlenA
GlobalMemoryStatus
GetSystemInfo
Sleep
GetLogicalDrives
FindClose
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
CreateDirectoryA
RemoveDirectoryA
LocalFree
LocalAlloc
GetPriorityClass
GetFileAttributesA
GetDiskFreeSpaceExA
lstrcmpiA
GetCurrentThreadId
CreateFileA
DeleteCriticalSection
WaitForSingleObject
CreateEventA
InitializeCriticalSection
SetUnhandledExceptionFilter
CreateMutexA
ResetEvent
SetEvent
WaitForMultipleObjects
FlushViewOfFile
CreateFileMappingA
MapViewOfFile
OpenFileMappingA
UnmapViewOfFile
ReleaseMutex
GetExitCodeProcess
MultiByteToWideChar
QueryPerformanceCounter
InterlockedIncrement
InterlockedDecrement
GetFileSize
GetFileTime
lstrcpynA
FormatMessageA
DuplicateHandle
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
GetFullPathNameA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVersion
lstrcmpA
lstrlenW
SuspendThread
GlobalFlags
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetCPInfo
GetOEMCP
GetCurrentDirectoryA
RtlUnwind
RaiseException
ExitProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitThread
GetStartupInfoA
GetCommandLineA
SetStdHandle
GetFileType
GetACP
HeapSize
HeapReAlloc
SetHandleCount
LCMapStringA
LCMapStringW
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentProcessId
GetVersionExA
SetLastError
GetLocaleInfoA
EnterCriticalSection
LeaveCriticalSection
TerminateThread
CreateThread
GetModuleHandleA
GetEnvironmentVariableA
lstrcpyA
lstrcatA
GetCurrentThread
SetThreadPriority
CreateProcessA
ResumeThread
CreateToolhelp32Snapshot
Process32First
Process32Next
TerminateProcess
DeleteFileA
GetCurrentProcess
WritePrivateProfileStringA
GetPrivateProfileStringA
GetComputerNameA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
OpenProcess
CloseHandle
GetSystemDirectoryA
GetStdHandle
CopyFileA
WideCharToMultiByte
GetTickCount
HeapCreate
HeapAlloc
HeapFree
HeapDestroy
GetLastError
GetProcAddress
FreeLibrary
GetModuleFileNameA
LoadLibraryA
AreFileApisANSI
LockFileEx
CreateFileW
GetTempPathW
GetFileAttributesW
DeleteFileW
GetFullPathNameW
LoadLibraryW
SetFileAttributesA
GetSystemTimeAsFileTime

user32

IsWindowEnabled
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
PostQuitMessage
LoadCursorA
GetSysColorBrush
DestroyMenu
IsIconic
GetWindowPlacement
GetWindowRect
GrayStringA
TabbedTextOutA
ClientToScreen
CharUpperA
IsCharAlphaA
WaitForInputIdle
DrawTextA
keybd_event
GetClientRect
GetCursorPos
SetTimer
PeekMessageA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
GetWindow
IsWindow
GetClassLongA
GetWindowDC
EnumDisplaySettingsA
RegisterClassA
CreateWindowExA
PostMessageA
DefWindowProcA
DestroyWindow
CreateDialogParamA
DialogBoxParamA
MoveWindow
SetWindowPos
GetWindowLongA
SetWindowLongA
ShowWindow
ExitWindowsEx
SystemParametersInfoA
EnumWindows
EnumChildWindows
GetWindowTextA
GetClassNameA
RegisterWindowMessageA
SendMessageTimeoutA
GetDesktopWindow
GetDC
ReleaseDC
GetForegroundWindow
GetWindowThreadProcessId
GetSystemMetrics
SetWindowTextA
PtInRect
GetMessageA
GetActiveWindow
ValidateRect
LoadStringA
LoadIconA
MapWindowPoints
GetSysColor
GetFocus
SetFocus
AdjustWindowRectEx
CopyRect
IsWindowVisible
EnableWindow
mouse_event
GetTopWindow
MessageBoxA
GetParent
GetCapture
WinHelpA
GetClassInfoA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetDlgCtrlID
GetKeyState
SetWindowsHookExA
CallNextHookEx
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
SetForegroundWindow
SendMessageA

gdi32

Escape
ExtTextOutA
RectVisible
CreateBitmap
PtVisible
GetTextExtentPoint32A
TextOutA
DeleteObject
GetStockObject
SelectPalette
RealizePalette
GetDIBits
GetObjectA
DeleteDC
BitBlt
SelectObject
CreateCompatibleBitmap
GetTextMetricsA
GetDeviceCaps
CreateICA
GetPixel
SetTextColor
SaveDC
RestoreDC
SetBkColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
CreateCompatibleDC

comdlg32

GetFileTitleA

winspool.drv

EnumPrintersA
OpenPrinterA
FindClosePrinterChangeNotification
FreePrinterNotifyInfo
FindNextPrinterChangeNotification
FindFirstPrinterChangeNotification
ClosePrinter
DocumentPropertiesA

comctl32

ord17

ole32

CoCreateGuid
CoInitialize

oleaut32

VarBstrFromDate
VariantClear

msdisplayui

ord8

mpegencode

ord3
ord5
ord6
ord7
ord9

ppdata

ord4
ord40
ord2
ord6
ord18
ord17
ord9
ord45
ord52
ord47
ord39
ord38
ord8
ord5
ord26

shlwapi

PathFileExistsA

wsock32

WSAStartup
WSACleanup

Sections

.text
Size: 456KB - Virtual size: 453KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

58ee2d7d12dbbd2db7c9723e69bb58cc

Headers

File Characteristics

Imports

ws2_32

advapi32

shell32

kernel32

user32

gdi32

comdlg32

winspool.drv

comctl32

ole32

oleaut32

msdisplayui

mpegencode

ppdata

shlwapi

wsock32

Sections

.text Size: 456KB - Virtual size: 453KB

.rdata Size: 44KB - Virtual size: 42KB

.data Size: 40KB - Virtual size: 68KB

.rsrc Size: 28KB - Virtual size: 25KB

.text
Size: 456KB - Virtual size: 453KB

.rdata
Size: 44KB - Virtual size: 42KB

.data
Size: 40KB - Virtual size: 68KB

.rsrc
Size: 28KB - Virtual size: 25KB