732443aa039cc888319644707efb1e128debccb62d50134ac2277d348e9d3641

Sharing

Copy URL

Twitter E-mail

General

Target

732443aa039cc888319644707efb1e128debccb62d50134ac2277d348e9d3641
Size

1.1MB
MD5

12b11c648c43ea458767cb5f47153f30
SHA1

aa44262f5460fa6ae315466ee768bee2eb41e761
SHA256

732443aa039cc888319644707efb1e128debccb62d50134ac2277d348e9d3641
SHA512

88ad26fdec92a4baaf3232809cda9f7c9a1fc5f668a5e6464eb8141d9c83fc86ab53eaaab92d7dcb4d50fe54308fec606ea3984e84554816592e3d986ffcc313
SSDEEP

24576:xDCMA6kxsKEeULRyQ+2CrhSHZnd0iDHsWMr:YzxULRr+2EhSD0iDMW

Score

N/A

Malware Config

Signatures

Files

732443aa039cc888319644707efb1e128debccb62d50134ac2277d348e9d3641
.exe windows x86

a1a64f2a0bf446519b9824480abf8e5c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

ws2_32

getsockname
shutdown
ioctlsocket
getpeername
getsockopt
setsockopt
htons
inet_addr
WSASetLastError
connect
listen
send
recv
bind
WSAGetLastError
WSAAsyncSelect
ntohl
WSAStartup
WSACleanup
gethostbyname
accept
WSACancelAsyncRequest
ntohs
inet_ntoa
WSAAsyncGetHostByName
closesocket
socket

kernel32

GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetAtomNameW
GetThreadLocale
GlobalFlags
GetPrivateProfileIntW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetCurrentDirectoryW
MoveFileW
DeleteFileW
GetStringTypeExW
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileW
GetVolumeInformationW
GetFullPathNameW
GetShortPathNameW
TlsGetValue
SetErrorMode
GetTempFileNameW
GetDiskFreeSpaceW
LocalUnlock
LocalLock
GetStartupInfoW
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
Sleep
ExitProcess
ExitThread
CreateThread
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
FatalAppExitA
VirtualAlloc
LCMapStringA
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
SetStdHandle
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
LocalAlloc
InterlockedIncrement
GetFileTime
GetFileSizeEx
GetFileAttributesW
SetFileAttributesW
CreateFileW
SetFileTime
LocalFileTimeToFileTime
GetFileAttributesExW
FileTimeToLocalFileTime
GlobalGetAtomNameW
SystemTimeToFileTime
InterlockedDecrement
CreateEventW
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
CloseHandle
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
LoadLibraryExW
CompareStringA
InterlockedExchange
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
GetCurrentProcessId
GetModuleHandleA
GlobalFree
CopyFileW
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
MulDiv
GetVersion
GetVersionExW
lstrcmpiW
GetLocaleInfoW
GetModuleFileNameW
FileTimeToSystemTime
GetDateFormatW
GetTimeFormatW
GetTickCount
GetWindowsDirectoryW
lstrcatW
WinExec
CreateProcessW
lstrcpyW
lstrlenA
SetLastError
GetCurrentThreadId
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetLastError
FreeLibrary
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FindResourceW
LoadResource
LockResource
SizeofResource
GetLocalTime
GetSystemDirectoryW

user32

SetDlgItemTextW
IsDlgButtonChecked
IsDialogMessageW
SetWindowTextW
MoveWindow
ShowWindow
ScrollWindowEx
PostQuitMessage
ValidateRect
TranslateMessage
GetMessageW
ShowOwnedPopups
GetMenuItemInfoW
DestroyMenu
GetKeyNameTextW
MapVirtualKeyW
WindowFromPoint
TranslateAcceleratorW
BringWindowToTop
SetRectEmpty
CreatePopupMenu
InsertMenuItemW
LoadAcceleratorsW
GetMenuBarInfo
ReuseDDElParam
UnpackDDElParam
SetRect
IsZoomed
IsRectEmpty
UnionRect
SetCursorPos
DestroyCursor
GetSysColorBrush
GetDialogBaseUnits
DeleteMenu
CharUpperW
UnregisterClassW
GetSystemMenu
DrawIcon
SetWindowRgn
IsClipboardFormatAvailable
GetTabbedTextExtentW
GetDCEx
LockWindowUpdate
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
CheckMenuItem
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
IsWindowVisible
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
CallWindowProcW
CopyRect
GetMenu
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindow
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
MessageBoxW
EndPaint
BeginPaint
GetWindowDC
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemCount
RemoveMenu
DrawAnimatedRects
FindWindowW
EnumChildWindows
TrackPopupMenu
SetMenuDefaultItem
LoadImageW
SetForegroundWindow
SetParent
SetActiveWindow
RedrawWindow
GetMenuItemID
ClientToScreen
GetDlgCtrlID
GetClassNameW
IsChild
OffsetRect
GetClassInfoW
RegisterWindowMessageW
LoadBitmapW
LoadCursorW
CopyIcon
MessageBeep
ReleaseCapture
SetCapture
InvalidateRect
ReleaseDC
GetDC
GetWindowRect
InflateRect
PtInRect
GetSysColor
SetCursor
DestroyIcon
LoadIconW
GetCursorPos
GetParent
GetFocus
LoadMenuW
GetSubMenu
EnableMenuItem
UpdateWindow
EnableWindow
IsWindow
MapDialogRect
SystemParametersInfoW
GetClientRect
SendMessageW
DestroyWindow
RegisterClassExW
CreateWindowExW
SetWindowLongW
GetWindowLongW
DefWindowProcW
SetTimer
KillTimer
PeekMessageW
PostMessageW
InsertMenuW

gdi32

SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextColor
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
DeleteDC
CreateDIBPatternBrushPt
CreatePatternBrush
SelectPalette
PlayMetaFileRecord
SetBkColor
EnumMetaFile
SaveDC
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
GetDCOrgEx
CreateRectRgnIndirect
GetBkColor
SetWindowExtEx
GetCharWidthW
StretchDIBits
GetTextMetricsW
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
CreateEllipticRgn
LPtoDP
Ellipse
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetObjectType
RestoreDC
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
CreateDCW
CopyMetaFileW
GetDeviceCaps
PatBlt
CreateFontW
SelectObject
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
GetObjectW
GetStockObject
GetTextExtentPoint32W
PlayMetaFile
CreateFontIndirectW
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
StartDocW
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
DeleteObject
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
ScaleWindowExtEx

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
GetJobW
ClosePrinter

advapi32

SetFileSecurityW
RegDeleteValueW
RegSetValueExW
RegCreateKeyW
RegCreateKeyExW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegQueryValueExW
RegSetValueW
RegOpenKeyExW
RegQueryValueW
RegCloseKey
GetFileSecurityW

shell32

SHGetFileInfoW
ExtractIconW
DragQueryFileW
DragFinish
SHAppBarMessage
Shell_NotifyIconW
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc

ole32

CoTaskMemFree
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
CreateBindCtx
ReleaseStgMedium
CoTaskMemAlloc
StringFromCLSID
CLSIDFromString
StringFromGUID2
CoDisconnectObject
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTreatAsClass

oleaut32

SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
VarBstrFromDate
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
VarDateFromStr
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayGetUBound
SafeArrayGetLBound
SysFreeString
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock

shlwapi

PathFindExtensionW
PathRemoveExtensionW
PathRemoveFileSpecW
PathStripToRootW
PathIsUNCW
PathFindFileNameW

Sections

.text
Size: 730KB - Virtual size: 729KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a1a64f2a0bf446519b9824480abf8e5c

Headers

DLL Characteristics

File Characteristics

Imports

version

ws2_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

ole32

oleaut32

shlwapi

Sections

.text Size: 730KB - Virtual size: 729KB

.rdata Size: 190KB - Virtual size: 190KB

.data Size: 15KB - Virtual size: 31KB

.rsrc Size: 84KB - Virtual size: 83KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 730KB - Virtual size: 729KB

.rdata
Size: 190KB - Virtual size: 190KB

.data
Size: 15KB - Virtual size: 31KB

.rsrc
Size: 84KB - Virtual size: 83KB

.rmnet
Size: 56KB - Virtual size: 60KB