30397cb978e7414f99a1ea515064a2d03b32dfb8b214ff8e35f4b94a33899e80

Sharing

Copy URL Twitter E-mail

General

Target

30397cb978e7414f99a1ea515064a2d03b32dfb8b214ff8e35f4b94a33899e80
Size

584KB
MD5

0d1c026770c1a02ef782756953ed2d74
SHA1

af238caead33cd33779b9ffc0e5a27a80e22ffc5
SHA256

30397cb978e7414f99a1ea515064a2d03b32dfb8b214ff8e35f4b94a33899e80
SHA512

beb21c62bd947440da8e4a7bd99b61890e0386066f2d928bdc92b0518b2ef337bbc749d4b1fe336d2749a4940d11e71e0e81f303f0c989cbff240ccd6f93e72f
SSDEEP

12288:7zP+MsesrkCep8BSxIIk5+/qsxiTJmkiBNF9yIu4lv16QY2yeP4zkH:/+neSLep8lIk5+/qsxiTJmkiBNF9yIuQ

Score

N/A

Malware Config

Signatures

Files

30397cb978e7414f99a1ea515064a2d03b32dfb8b214ff8e35f4b94a33899e80
.exe windows x86

e6eab80fdf07d77a8a82d70a8ad31cd5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

passdll

_GetGeoPWVersion@8
_CheckOptionDlg@28

kernel32

GetOEMCP
RtlUnwind
GetSystemTimeAsFileTime
GetTimeFormatA
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapReAlloc
TerminateProcess
HeapSize
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetCPInfo
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
SetErrorMode
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcmpA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
LocalFileTimeToFileTime
FileTimeToLocalFileTime
SystemTimeToFileTime
FileTimeToSystemTime
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
CreateEventA
GetCurrentThreadId
GetShortPathNameA
FindClose
lstrcpyA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
InterlockedDecrement
SetLastError
GlobalFree
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetModuleHandleA
CreateFileA
CloseHandle
LoadLibraryA
GetProcAddress
FreeLibrary
GetDiskFreeSpaceA
GetVolumeInformationA
SetEvent
GetLogicalDriveStringsA
GetDriveTypeA
GetCurrentThread
CreateMutexA
GetWindowsDirectoryA
GetTickCount
GetPrivateProfileIntA
GetPrivateProfileStringA
ReleaseMutex
GetStringTypeExA
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
GetLastError
MultiByteToWideChar
WritePrivateProfileStringA
WaitForSingleObject
SetFileAttributesA
GetFileAttributesA
GetTempPathA
GetModuleFileNameA
GetDateFormatA
FindNextFileA
CopyFileA
FindFirstFileA
CreateDirectoryA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapDestroy

user32

ShowOwnedPopups
PostQuitMessage
KillTimer
SetParent
GetSystemMenu
DeleteMenu
IsRectEmpty
GetMenuItemInfoA
InflateRect
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
TabbedTextOutA
IsZoomed
LoadMenuA
DestroyMenu
UnpackDDElParam
ReuseDDElParam
SetCursor
ReleaseCapture
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
SetMenu
TranslateAcceleratorA
WindowFromPoint
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
ReleaseDC
GetDC
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
GetWindowTextLengthA
GetSysColorBrush
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
MessageBoxA
TrackPopupMenu
GetClientRect
ScreenToClient
DeferWindowPos
SendMessageA
EnableWindow
LoadBitmapA
GetSubMenu
RemoveMenu
PostMessageA
GetMenu
IsWindowVisible
SetTimer
CharUpperA
GetClassLongA
GetClassInfoA
RegisterClassA
UnregisterClassA
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
PtInRect
LoadCursorA
GetWindow
GetDlgCtrlID
IsChild
AdjustWindowRectEx
SetWindowsHookExA
CallNextHookEx
GetMessageA
GetActiveWindow
GetKeyState
GetCursorPos
ValidateRect
wsprintfA
GetSystemMetrics
DestroyIcon
SetCapture
LockWindowUpdate
GetWindowTextA
GetDCEx
SetMenuItemBitmaps
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
DispatchMessageA
TranslateMessage
PeekMessageA
CopyRect
FillRect
DrawTextA
InvalidateRect
GetSysColor
SetRect
EqualRect
UpdateWindow
IsWindow
GetWindowRect
LoadIconA
IsIconic
GetLastActivePopup
SetForegroundWindow
BringWindowToTop
SetWindowPos
GetMenuItemCount
GetMenuItemID
AppendMenuA
UnhookWindowsHookEx
GetMenuState

gdi32

CreatePen
CreateSolidBrush
CreateFontIndirectA
GetBkColor
SetRectRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetStockObject
CreatePatternBrush
GetPixel
BitBlt
GetDeviceCaps
GetTextExtentPoint32A
CombineRgn
CreateRectRgnIndirect
CreateRectRgn
SelectClipRgn
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateFontA
GetCharWidthA
DeleteObject
StretchDIBits
DeleteDC
GetTextMetricsA
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
PatBlt
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap

comdlg32

GetFileTitleA
PrintDlgA
GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegQueryValueA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegCreateKeyExA
RegCloseKey
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegSetValueA

shell32

SHGetFileInfoA
DragFinish
DragQueryFileA
ExtractIconA
ShellExecuteA

comctl32

ImageList_Draw
ImageList_LoadImageA
ImageList_Create
ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_GetImageInfo

shlwapi

PathIsUNCA
PathFindExtensionA
PathStripToRootA
PathFindFileNameA

avifil32

AVIStreamLength
AVIFileGetStream
AVIStreamRelease
AVIFileOpenA
AVIFileRelease
AVIFileReadData

winmm

mmioOpenA
mmioStringToFOURCCA
mmioDescend
mmioClose
mmioRead

oleaut32

SystemTimeToVariantTime
VarUdateFromDate
VariantTimeToSystemTime
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen

Sections

.text
Size: 316KB - Virtual size: 314KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PTCODE
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PTDATA
Size: 4KB - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6eab80fdf07d77a8a82d70a8ad31cd5

Headers

File Characteristics

Imports

passdll

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

avifil32

winmm

oleaut32

Sections

.text Size: 316KB - Virtual size: 314KB

PTCODE Size: 4KB - Virtual size: 2KB

.rdata Size: 68KB - Virtual size: 65KB

.data Size: 8KB - Virtual size: 63KB

PTDATA Size: 4KB - Virtual size: 560B

.rsrc Size: 88KB - Virtual size: 85KB

.text
Size: 316KB - Virtual size: 314KB

PTCODE
Size: 4KB - Virtual size: 2KB

.rdata
Size: 68KB - Virtual size: 65KB

.data
Size: 8KB - Virtual size: 63KB

PTDATA
Size: 4KB - Virtual size: 560B

.rsrc
Size: 88KB - Virtual size: 85KB