0f820f8449571fae2a4b595b7d38e00466adf51c914fd05c036a511e5ff3e6db

Sharing

Copy URL Twitter E-mail

General

Target

0f820f8449571fae2a4b595b7d38e00466adf51c914fd05c036a511e5ff3e6db
Size

1.1MB
MD5

0c9451f22320bd40be94382dc0c6d3f0
SHA1

3559eaeec4d3f0571e146bacea1418d60fbd6ea3
SHA256

0f820f8449571fae2a4b595b7d38e00466adf51c914fd05c036a511e5ff3e6db
SHA512

59319ad3e762f532072b028b927f31bbce2cbf5f0f8ee88be540eaf673d8a0ece92ca5ab14cb70c6066d91c0e44dcb83654e272349c716a9acf731e8a38e39c9
SSDEEP

12288:sqIIN567M+Yg6T9Q+0itIwP6xkR03Nh9yHM++FRtJdiNwRNUsh:eZYg6T9Q+0JY0Zyf+zoNwzUq

Score

N/A

Malware Config

Signatures

Files

0f820f8449571fae2a4b595b7d38e00466adf51c914fd05c036a511e5ff3e6db
.exe windows x86

65ad7576b821829ab9c1dd07ab4973b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

nhlminst

HaspLMRemove
HaspLMInstall

kernel32

VirtualFree
VirtualAlloc
IsBadWritePtr
HeapCreate
IsValidLocale
GetEnvironmentVariableA
HeapDestroy
EnumSystemLocalesA
GetUserDefaultLCID
LCMapStringA
LCMapStringW
GetLocaleInfoA
GetStdHandle
GetFileType
IsValidCodePage
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
LockResource
CreateMutexA
GetACP
HeapSize
LocalFree
GlobalAlloc
GlobalLock
DeleteFileA
GetSystemDirectoryA
CopyFileA
Sleep
UnmapViewOfFile
CloseHandle
GlobalUnlock
GlobalFree
FindResourceA
LoadResource
CreateFileA
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
GetComputerNameA
OutputDebugStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
FormatMessageA
GetUserDefaultLangID
WritePrivateProfileStructA
GetPrivateProfileStructA
FreeLibrary
GetModuleFileNameA
WinExec
LoadLibraryA
SetThreadLocale
GetVersionExA
lstrlenA
GetProfileStringA
HeapReAlloc
TerminateProcess
GetStartupInfoA
RaiseException
ExitProcess
GetTimeZoneInformation
GetLocalTime
GetSystemTime
RtlUnwind
HeapAlloc
HeapFree
SystemTimeToFileTime
SetErrorMode
LocalFileTimeToFileTime
GetProcessVersion
GetOEMCP
GetCPInfo
TlsSetValue
TlsGetValue
LocalReAlloc
LeaveCriticalSection
EnterCriticalSection
GlobalReAlloc
DeleteCriticalSection
TlsFree
GlobalHandle
LocalAlloc
TlsAlloc
InitializeCriticalSection
GetDiskFreeSpaceA
SizeofResource
GlobalFlags
GetTempFileNameA
GetFileTime
SetFileTime
GetThreadLocale
GetFileAttributesA
GetShortPathNameA
GetVolumeInformationA
GetStringTypeExA
GetFullPathNameA
MoveFileA
FindFirstFileA
FindClose
LockFile
SetEndOfFile
UnlockFile
WriteFile
FlushFileBuffers
SetFilePointer
DuplicateHandle
ReadFile
GetCurrentProcess
lstrlenW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetTickCount
GetCurrentThread
lstrcmpA
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
MulDiv
InterlockedIncrement
lstrcpynA
lstrcatA
SetLastError
GetVersion
lstrcmpiA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
GetCommandLineA
lstrcpyA
ReleaseMutex
SetHandleCount
UnhandledExceptionFilter

user32

LoadStringA
InflateRect
GrayStringA
TabbedTextOutA
DrawTextA
BeginPaint
GetWindowDC
EndPaint
MoveWindow
SetWindowTextA
IsDialogMessageA
PostMessageA
GetMenuCheckMarkDimensions
ModifyMenuA
SetMenuItemBitmaps
AdjustWindowRectEx
EqualRect
SendDlgItemMessageA
BeginDeferWindowPos
EndDeferWindowPos
IsWindowVisible
GetTopWindow
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetKeyState
DefWindowProcA
MapWindowPoints
SetFocus
CallNextHookEx
GetDCEx
DeferWindowPos
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
SetParent
SetRect
GetForegroundWindow
SetWindowLongA
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetSystemMetrics
GetWindow
CopyRect
KillTimer
ReleaseDC
ScreenToClient
GetSysColor
DrawStateA
ReleaseCapture
PostThreadMessageA
GetSysColorBrush
GetClassNameA
SetCapture
ClientToScreen
OffsetRect
GetDC
GetAsyncKeyState
FindWindowExA
ShowWindow
BringWindowToTop
SetForegroundWindow
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetMenuState
CheckMenuItem
LoadCursorA
SetCursor
GetMenu
LoadMenuA
GetSubMenu
InsertMenuA
SetTimer
LockWindowUpdate
GetClassLongA
DestroyIcon
SetPropA
CreateWindowExA
SetWindowsHookExA
UnionRect
MapDialogRect
GetParent
PeekMessageA
DispatchMessageA
RedrawWindow
EnableMenuItem
LoadIconA
GetDlgCtrlID
InvalidateRect
UpdateWindow
LoadBitmapA
GetFocus
SendMessageA
RegisterWindowMessageA
GetTabbedTextExtentA
GetClientRect
GetWindowRect
EnableWindow
IsRectEmpty
IsZoomed
PtInRect
GetWindowThreadProcessId
WaitMessage
CharUpperA
UnpackDDElParam
ReuseDDElParam
SetMenu
DestroyMenu
GetDesktopWindow
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
wvsprintfA
RegisterClipboardFormatA
GetMessageA
TranslateMessage
ValidateRect
ShowOwnedPopups
PostQuitMessage
GetCursorPos
WindowFromPoint
GetMessagePos
GetLastActivePopup
IsChild
MessageBoxA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
IsWindowUnicode
UnregisterClassA

gdi32

SetTextColor
GetTextExtentPointA
GetTextExtentPoint32A
SelectObject
SetBkMode
RealizePalette
SelectPalette
CreateFontA
SetDIBitsToDevice
StretchDIBits
DeleteObject
GetSystemPaletteEntries
CreatePalette
CreateDIBitmap
CreateSolidBrush
GetDeviceCaps
GetBitmapDimensionEx
GetBkMode
GetTextMetricsA
GetBkColor
GetTextColor
SetBkColor
CreateBitmap
GetClipBox
SaveDC
DeleteDC
RestoreDC
SetMapMode
SetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
GetObjectA
SetWindowExtEx
ScaleWindowExtEx
CreateFontIndirectA
ExcludeClipRect
IntersectClipRect
SelectClipRgn
MoveToEx
LineTo
SetTextAlign
CreateRectRgn
CreatePen
PtVisible
CreatePatternBrush
ExtTextOutA
Escape
RectVisible
PatBlt
SetRectRgn
CreateRectRgnIndirect
DPtoLP
CombineRgn
CreateCompatibleBitmap
GetCharWidthA
CreateCompatibleDC
BitBlt
TextOutA
GetStockObject

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

GetFileSecurityA
DeleteService
RegCloseKey
QueryServiceStatus
RegCreateKeyA
RegSetValueA
RegSetValueExA
RegCreateKeyExA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
RegOpenKeyExA
RegQueryValueA
ControlService
OpenServiceA
RegDeleteKeyA
StartServiceA
RegEnumKeyA
RegOpenKeyA
RegQueryValueExA
SetFileSecurityA

shell32

ExtractIconA
DragFinish
DragQueryFileA
SHGetFileInfoA
ShellExecuteA

comctl32

ImageList_DragLeave
ImageList_DragMove
ImageList_ReplaceIcon
ImageList_DragShowNolock
ImageList_BeginDrag
ImageList_SetDragCursorImage
ImageList_EndDrag
ImageList_DragEnter
ord17
ImageList_Destroy
ImageList_Create

oledlg

ord8

ole32

CoRevokeClassObject
OleFlushClipboard
OleInitialize
OleIsCurrentClipboard
CoFreeUnusedLibraries
OleUninitialize
CoRegisterMessageFilter

oleaut32

VariantClear
VarBstrFromDate

shlwapi

PathFileExistsA

Sections

.text
Size: 304KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 544KB - Virtual size: 541KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nrdata
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

65ad7576b821829ab9c1dd07ab4973b2

Headers

File Characteristics

Imports

version

nhlminst

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

shlwapi

Sections

.text Size: 304KB - Virtual size: 301KB

.rdata Size: 68KB - Virtual size: 67KB

.data Size: 28KB - Virtual size: 44KB

.rsrc Size: 544KB - Virtual size: 541KB

.nrdata Size: 128KB - Virtual size: 128KB

.text
Size: 304KB - Virtual size: 301KB

.rdata
Size: 68KB - Virtual size: 67KB

.data
Size: 28KB - Virtual size: 44KB

.rsrc
Size: 544KB - Virtual size: 541KB

.nrdata
Size: 128KB - Virtual size: 128KB