5b0449466d5e09e7753f531bd205125af32194f58ec5dd8ebc6db303d0c103c8

Sharing

Copy URL Twitter E-mail

General

Target

5b0449466d5e09e7753f531bd205125af32194f58ec5dd8ebc6db303d0c103c8
Size

713KB
MD5

0c7116bcef698e62796e770b368bcfb0
SHA1

49512254147314f437892d959ec3c13b3f3609d3
SHA256

5b0449466d5e09e7753f531bd205125af32194f58ec5dd8ebc6db303d0c103c8
SHA512

6c1749032d6914d974882e46d6fa5656f5d58bc713b65373200755a809b80e9f8931458892b454911e902c23b47c144010438ec84e9142d53bfe7a008e51e9ac
SSDEEP

12288:oI9Rn1+a6XtjkgrKpk1J3WyNltCDcZA2d9nmBRg:L1+aUku1nltVZA2dRmBRg

Score

N/A

Malware Config

Signatures

Files

5b0449466d5e09e7753f531bd205125af32194f58ec5dd8ebc6db303d0c103c8
.exe windows x86

cea49979bd74d2d7974208a26a43a808

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

RpcStringFreeW
UuidToStringW

shell32

ShellExecuteW

setupxml

??0CXMLFileManagerInterface@@QAE@XZ
??1CXMLFileManagerInterface@@UAE@XZ
?Select@CXMLFileManagerInterface@@QAEJPB_W@Z
?CreateXML@CXMLFileManagerInterface@@QAEJPB_W@Z
?GetAttribute@CXMLFileManagerInterface@@QAE?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PB_W@Z
?SetFileIndex@CXMLFileManagerInterface@@QAEXW4XMLFILENAMES@@@Z
?Initialize@CXMLFileManagerInterface@@QAEJXZ
?UnInitialize@CXMLFileManagerInterface@@QAEXXZ

kernel32

TlsSetValue
LocalReAlloc
TlsFree
WritePrivateProfileStringW
InterlockedIncrement
lstrlenA
GetThreadLocale
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
GetVolumeInformationW
GetFullPathNameW
SetErrorMode
GetTickCount
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
ExitProcess
GetSystemTimeAsFileTime
TlsAlloc
ExitThread
CreateThread
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapSize
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryA
GetDriveTypeA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetFileTime
GetFileSize
GetFileAttributesW
SetFileAttributesW
CreateFileW
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetModuleHandleA
InterlockedDecrement
RaiseException
MulDiv
GlobalUnlock
GetCurrentProcessId
GlobalFree
FreeResource
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
CreateEventW
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
GlobalLock
lstrcmpW
GlobalAlloc
GetModuleHandleW
WideCharToMultiByte
FindFirstFileW
lstrlenW
SetLastError
FileTimeToLocalFileTime
FileTimeToSystemTime
MultiByteToWideChar
FindNextFileW
FindClose
RemoveDirectoryW
FreeLibrary
GetProcAddress
LoadLibraryW
FindResourceW
LocalFree
FormatMessageW
LoadResource
LockResource
GetTempPathW
SizeofResource
GetModuleFileNameW
GetLastError
CloseHandle
WaitForSingleObject
GetVersionExW
OpenEventW
Sleep
CreateDirectoryW
CopyFileW
DeleteFileW
RtlUnwind

user32

UnregisterClassW
RegisterClipboardFormatW
PostThreadMessageW
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
IsWindowEnabled
SetWindowContextHelpId
MapDialogRect
SetCursor
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
IsWindow
SetFocus
GetWindowTextW
GetLastActivePopup
SetActiveWindow
GetDlgItem
GetTopWindow
GetSysColorBrush
UnhookWindowsHookEx
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
PostMessageW
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetFocus
GetParent
MessageBeep
GetNextDlgGroupItem
ReleaseCapture
SetCapture
InvalidateRgn
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
SendMessageW
EnableWindow
IsIconic
LoadIconW
SetLayeredWindowAttributes
GetWindowLongW
SetWindowLongW
GetClientRect
GetSystemMetrics
RegisterWindowMessageW
GetForegroundWindow
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableW
CharNextW
CharUpperW
DestroyMenu
GetMessageTime
LoadCursorW
GetDC
DestroyWindow
ClientToScreen
UnregisterClassA

gdi32

SetMapMode
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SetViewportOrgEx
ExtSelectClipRgn
DeleteDC
GetStockObject
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
RestoreDC
SaveDC
GetDeviceCaps
GetObjectW
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetWindowExtEx
GetViewportExtEx
DeleteObject
OffsetViewportOrgEx

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegQueryValueW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW

oledlg

OleUIBusyW

ole32

StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
StgCreateDocfileOnILockBytes
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoUninitialize
CoInitialize
CoCreateGuid
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard

oleaut32

SafeArrayGetElemsize
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SafeArrayCreate
SysAllocStringLen
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
DispCallFunc
SysAllocString
VariantCopy
VariantInit
VariantChangeType
VariantClear
OleCreateFontIndirect
SysStringLen
SysFreeString

Sections

.text
Size: 236KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 396KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cea49979bd74d2d7974208a26a43a808

Headers

File Characteristics

Imports

rpcrt4

shell32

setupxml

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 236KB - Virtual size: 233KB

.rdata Size: 60KB - Virtual size: 58KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 396KB - Virtual size: 396KB

.text
Size: 236KB - Virtual size: 233KB

.rdata
Size: 60KB - Virtual size: 58KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 396KB - Virtual size: 396KB