aa838a688d412fcd5cca934b0d9bda56440fbb5cd575ddc20529c65a5785b505

Sharing

Copy URL

Twitter E-mail

General

Target

aa838a688d412fcd5cca934b0d9bda56440fbb5cd575ddc20529c65a5785b505
Size

1.6MB
MD5

2791628b7cd2953d972d46d15860f7cb
SHA1

7d3f79a247d10574bffae6bfe66113988fd501f6
SHA256

aa838a688d412fcd5cca934b0d9bda56440fbb5cd575ddc20529c65a5785b505
SHA512

96daa421bc51b31911b4f843989507b3e6769b7d5384af9a13e5a83cf1cc9464fab26a31e0de92af6eee2997e739c45b68a1b4b7b1642ade47a02f3da8d131c7
SSDEEP

49152:2LPEg5M11thMPYwU6q6CCh/NzrLZPEe1jsaIy:2LMg5MPtiP8FlYrxFsy

Score

N/A

Malware Config

Signatures

Files

aa838a688d412fcd5cca934b0d9bda56440fbb5cd575ddc20529c65a5785b505
.exe windows x86

d91d072fa06e120d26cadf57e477f19a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
CompareStringW
SetEnvironmentVariableA
SetFileTime
CreateDirectoryA
GetFileAttributesA
LocalFileTimeToFileTime
lstrlenA
lstrcpyA
GetCurrentDirectoryA
SystemTimeToFileTime
SetFilePointer
lstrcatA
DeleteFileA
WriteFile
ExitProcess
FlushViewOfFile
FindClose
FindFirstFileA
GetSystemInfo
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetLastError
CreateFileA
GetPrivateProfileIntA
GetPrivateProfileStringA
ReadFile
CloseHandle
CreateProcessA
GetStartupInfoA
CreatePipe
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
FreeResource
GlobalFree
GlobalUnlock
GlobalLock
MultiByteToWideChar
MulDiv
LocalFree
FormatMessageA
GlobalAlloc
SetLastError
GetVersionExA
GetProcAddress
GetModuleHandleA
lstrcmpW
LoadLibraryA
CompareStringA
FreeLibrary
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
GetThreadLocale
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GetModuleFileNameA
SetThreadPriority
ResumeThread
WaitForSingleObject
SetEvent
SuspendThread
CreateEventA
GetCurrentProcessId
lstrcmpA
InterlockedExchange
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GetModuleFileNameW
InterlockedDecrement
FileTimeToSystemTime
FileTimeToLocalFileTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetModuleHandleW
InterlockedIncrement
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetCPInfo
GetOEMCP
SetErrorMode
GetFileSizeEx
GetFileTime
WritePrivateProfileStringA
GetTickCount
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
HeapFree
HeapAlloc
GetCommandLineA
RtlUnwind
HeapReAlloc
RaiseException
VirtualProtect
VirtualAlloc
VirtualQuery
ExitThread
CreateThread
SetStdHandle
GetFileType
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
GetTimeZoneInformation
LCMapStringA
LCMapStringW
HeapCreate
VirtualFree
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
Sleep

user32

SetMenu
GetKeyState
MapWindowPoints
PeekMessageA
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
GetTopWindow
DispatchMessageA
GetLastActivePopup
GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
SetFocus
GetFocus
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
GetCapture
IsChild
WinHelpA
SendDlgItemMessageA
RegisterWindowMessageA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
CheckMenuItem
EnableMenuItem
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetDC
ReleaseDC
CharUpperA
ValidateRect
GetCursorPos
TranslateMessage
GetMessageA
GetWindowThreadProcessId
WaitMessage
PostQuitMessage
MapDialogRect
SetWindowContextHelpId
SetCursor
DestroyMenu
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
GetWindowDC
GetClassInfoA
SetForegroundWindow
GetSysColorBrush
LoadCursorA
SetCapture
ReleaseCapture
CharNextA
CopyAcceleratorTableA
IsRectEmpty
SetRect
InvalidateRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
UnregisterClassA
RegisterClipboardFormatA
PostThreadMessageA
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
EnableWindow
SendMessageA
SetTimer
KillTimer
LoadIconA
GetSystemMenu
AppendMenuA
GetClientRect
IsIconic
GetSystemMetrics
DrawIcon
wsprintfA
RegisterClassA
GetSysColor
IsWindowVisible
UpdateWindow
PostMessageA
MessageBoxA
CreateWindowExA
EndPaint
GetClassInfoExA
AdjustWindowRectEx
EqualRect
BeginPaint
CallWindowProcA

shell32

ShellExecuteA

ole32

CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitializeEx
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoRegisterMessageFilter
CoUninitialize
CoCreateInstance
CoTaskMemFree
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize

shlwapi

UrlUnescapeA
PathFindFileNameA
PathFindExtensionA
PathIsUNCA
PathStripToRootA
PathRemoveFileSpecW

oledlg

ord8

ws2_32

recvfrom
WSAIoctl
send
recv
sendto
WSASetLastError
WSACleanup
accept
gethostbyaddr
getservbyport
WSAAsyncSelect
ntohs
select
htonl
WSAGetLastError
WSAStartup
socket
inet_addr
htons
connect
shutdown
closesocket
gethostname
gethostbyname
inet_ntoa
WSASocketA
setsockopt
bind

netapi32

NetApiBufferFree
NetLocalGroupEnum
NetUserEnum
NetGroupEnum

iphlpapi

SendARP

mpr

WNetAddConnection2A
WNetCancelConnection2A

psapi

EnumProcesses

snmpapi

SnmpUtilMemReAlloc
SnmpUtilVarBindListFree
SnmpUtilMemFree

mgmtapi

SnmpMgrClose
SnmpMgrRequest
SnmpMgrOpen
SnmpMgrOidToStr
SnmpMgrStrToOid

oleacc

LresultFromObject
CreateStdAccessibleObject

wininet

InternetCanonicalizeUrlA
InternetCrackUrlA

gdi32

Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
GetClipBox
SetTextColor
SetBkColor
GetObjectA
CreateBitmap
CreateRectRgnIndirect
TextOutA
ExtTextOutA
SaveDC
RestoreDC
SetMapMode
RectVisible
PtVisible
GetDeviceCaps
GetWindowExtEx
GetViewportExtEx
DeleteObject
GetMapMode
GetBkColor
GetTextColor
GetRgnBox

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

comdlg32

GetFileTitleA

advapi32

RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA

oleaut32

SysFreeString
SysAllocStringByteLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString
VariantCopy

Sections

.text
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1003KB - Virtual size: 29.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 223KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d91d072fa06e120d26cadf57e477f19a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

ole32

shlwapi

oledlg

ws2_32

netapi32

iphlpapi

mpr

psapi

snmpapi

mgmtapi

oleacc

wininet

gdi32

winspool.drv

comdlg32

advapi32

oleaut32

Sections

.text Size: 332KB - Virtual size: 331KB

.rdata Size: 82KB - Virtual size: 81KB

.data Size: 1003KB - Virtual size: 29.6MB

.rsrc Size: 223KB - Virtual size: 223KB

.text
Size: 332KB - Virtual size: 331KB

.rdata
Size: 82KB - Virtual size: 81KB

.data
Size: 1003KB - Virtual size: 29.6MB

.rsrc
Size: 223KB - Virtual size: 223KB