841613f12912e6910901d26ec99ab036807282c48b6a8ec977e3bee2996ccb2d

Sharing

Copy URL Twitter E-mail

General

Target

841613f12912e6910901d26ec99ab036807282c48b6a8ec977e3bee2996ccb2d
Size

700KB
MD5

0861952164ef351f2a3b131ecefaf270
SHA1

dde4c07381098990f38b0aaba5cf2f562c4a83ae
SHA256

841613f12912e6910901d26ec99ab036807282c48b6a8ec977e3bee2996ccb2d
SHA512

8eedcc852ab68fc14fdbc16dbdd1799827106a29076326dc16813c7af471c7ebf3935fe1730532c92f52f533e5660782a2310587f181bc24e68dbbd6fef07167
SSDEEP

12288:bWaCZzzSNvb46hDBWz6bNPPhO3NBNRUyCvenA3UIl/WB4h6c/BfFYwXALktk/8lB:tR2BNRgxk/8QSr3

Score

N/A

Malware Config

Signatures

Files

841613f12912e6910901d26ec99ab036807282c48b6a8ec977e3bee2996ccb2d
.exe windows x86

fba5d950f3aaf3c097b7cfe83e0992b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

getservbyport
htons
gethostbyname
getservbyname
WSACleanup
WSASetLastError
htonl
WSAStartup
inet_addr
WSAGetLastError
gethostbyaddr
inet_ntoa
ntohs

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

GlobalFlags
lstrcmpiW
TlsGetValue
SizeofResource
GetCurrentDirectoryW
GetThreadLocale
DuplicateHandle
GetProcessVersion
WriteFile
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationW
SetFilePointer
GetFullPathNameW
GetFileSize
GetFileTime
SetErrorMode
GetTickCount
GetStartupInfoW
RtlUnwind
GetFileAttributesW
GetTimeZoneInformation
TerminateProcess
SetStdHandle
GetFileType
GetSystemTime
TlsSetValue
LocalReAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineA
SetHandleCount
GetStdHandle
GetStartupInfoA
GlobalGetAtomNameW
lstrcpynW
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetCPInfo
GetDriveTypeA
CompareStringA
CompareStringW
GetOEMCP
SetEnvironmentVariableA
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
HeapReAlloc
GetLocalTime
FindNextFileW
HeapAlloc
HeapFree
GetCommandLineW
CreateMutexW
InitializeCriticalSection
lstrlenW
EnterCriticalSection
LeaveCriticalSection
lstrcmpW
GetPrivateProfileSectionW
WritePrivateProfileStringW
ExitProcess
GetLastError
GetPrivateProfileStringW
GetPrivateProfileIntW
ExpandEnvironmentStringsW
LoadLibraryW
GetProcAddress
FreeLibrary
GetTempPathW
GetModuleFileNameW
GetProfileStringA
GlobalAddAtomA
FindResourceA
FindFirstFileW
FindClose
GlobalAlloc
lstrcmpA
lstrcmpiA
GetCurrentThread
MulDiv
SetLastError
GetModuleHandleA
lstrcatW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceW
LoadResource
InterlockedDecrement
InterlockedIncrement
GetVersion
GetACP
GetSystemDirectoryW
ResumeThread
SuspendThread
DeviceIoControl
GetSystemDirectoryA
LoadLibraryA
MultiByteToWideChar
lstrlenA
GetExitCodeProcess
lstrcpyW
FormatMessageW
WideCharToMultiByte
ReleaseMutex
CreateFileW
ReadFile
GetVersionExW
GetWindowsDirectoryW
WinExec
DeleteCriticalSection
WaitForSingleObject
GetExitCodeThread
TerminateThread
GetCurrentProcessId
Sleep
CreateThread
OutputDebugStringW
GetModuleHandleW
GetCurrentProcess
LocalAlloc
LocalFree
CloseHandle
GetEnvironmentVariableW
CreateProcessW
GetProcessHeap
GetEnvironmentVariableA
RaiseException
GetModuleFileNameA

user32

SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
LoadStringW
ReleaseCapture
DestroyMenu
GetSysColorBrush
PtInRect
CharNextW
GetNextDlgGroupItem
MessageBeep
CharUpperW
InflateRect
RegisterClipboardFormatW
PostThreadMessageW
ValidateRect
SetCursor
ShowOwnedPopups
PostQuitMessage
GrayStringW
DrawTextW
TabbedTextOutW
CopyAcceleratorTableW
EndPaint
GetWindowDC
ClientToScreen
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageW
DispatchMessageW
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
BeginPaint
SetRectEmpty
GetTopWindow
TranslateMessage
IsChild
GetCapture
WinHelpW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetMenuItemID
GetWindowTextW
GetDlgCtrlID
GetKeyState
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
SetPropW
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetWindow
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetParent
GetDlgItem
IsWindowEnabled
UnhookWindowsHookEx
SetRect
LoadMenuW
GetSubMenu
EnableMenuItem
CheckMenuItem
AppendMenuW
DeleteMenu
GetCursorPos
TrackPopupMenu
SetMenuDefaultItem
ReleaseDC
GetDC
GetClientRect
GetSystemMetrics
GetDesktopWindow
GetShellWindow
FindWindowExW
GetForegroundWindow
IsWindow
IsIconic
IsWindowVisible
EnumChildWindows
SystemParametersInfoW
GetClassNameW
GetWindowRect
SetForegroundWindow
KillTimer
SetTimer
PostMessageW
SendMessageTimeoutW
TranslateAcceleratorW
LoadAcceleratorsW
GetMessageW
MapDialogRect
SetWindowContextHelpId
MessageBoxW
OpenInputDesktop
CloseDesktop
GetWindowLongW
LoadImageW
RegisterWindowMessageW
LoadIconW
LoadCursorW
FindWindowW
SendMessageW
EnableWindow
wsprintfW
GetLastActivePopup
GetMessagePos
SendDlgItemMessageW
CallWindowProcA
UnregisterClassW
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
DrawTextA
DrawFocusRect
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
GetClassNameA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
SetWindowLongA
SetPropA
GetPropA

gdi32

GetObjectW
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
CreateDIBitmap
Rectangle
GetWindowExtEx
ExtTextOutA
GetTextExtentPointA
BitBlt
CreateCompatibleDC
GetPixel
CreateSolidBrush
DeleteObject
GetDeviceCaps
GetViewportExtEx
CreatePen
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
FreePrinterNotifyInfo
ClosePrinter
GetPrinterW
ord203
FindClosePrinterChangeNotification
DocumentPropertiesW
FindNextPrinterChangeNotification
FindFirstPrinterChangeNotification
EnumPortsW
EnumPrintersW

advapi32

RegSetValueExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
OpenProcessToken
GetTokenInformation
GetSidSubAuthorityCount
RegEnumKeyExW
GetSidSubAuthority
RegEnumKeyW
RegQueryInfoKeyW

shell32

DragFinish
DragQueryFileW
Shell_NotifyIconW
SHAppBarMessage

comctl32

ord17

oledlg

OleUIBusyW

ole32

StgOpenStorageOnILockBytes
CoGetClassObject
StgCreateDocfileOnILockBytes
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
CoTaskMemFree
CreateILockBytesOnHGlobal
CoUninitialize
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoInitialize
CoCreateInstance
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysFreeString
VariantChangeType
SysAllocString
VariantCopy
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
SysStringLen

Sections

.text
Size: 344KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xgflisk
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fba5d950f3aaf3c097b7cfe83e0992b5

Headers

File Characteristics

Imports

ws2_32

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 344KB - Virtual size: 344KB

.rdata Size: 56KB - Virtual size: 54KB

.data Size: 80KB - Virtual size: 138KB

.rsrc Size: 216KB - Virtual size: 216KB

xgflisk Size: - Virtual size: 4KB

.text
Size: 344KB - Virtual size: 344KB

.rdata
Size: 56KB - Virtual size: 54KB

.data
Size: 80KB - Virtual size: 138KB

.rsrc
Size: 216KB - Virtual size: 216KB

xgflisk
Size: - Virtual size: 4KB