67f3d21fb6d93e0d619f5f823bc9dd35301865920600be8129685684856de00b

Sharing

Copy URL Twitter E-mail

General

Target

67f3d21fb6d93e0d619f5f823bc9dd35301865920600be8129685684856de00b
Size

1.1MB
MD5

0c4705a7982c590b6b03c4d668d2fef0
SHA1

6502ae72b87ca6296682da20d16673570e2b80a2
SHA256

67f3d21fb6d93e0d619f5f823bc9dd35301865920600be8129685684856de00b
SHA512

a69ede512c76b01a1cc0ecab28c2a151a7f8b2c834bdb26e6886a4a35119e6bc3b4a77231cdb89408a73085ec17b1087c8b59d1910480f76c87a1c4b41d0d5b1
SSDEEP

24576:xTObXnVaTy9LqT50PBGGwwf8FaHeTDS/jcGadTe/c:ghaTy90+GBwf8F2e/IcrT

Score

N/A

Malware Config

Signatures

Files

67f3d21fb6d93e0d619f5f823bc9dd35301865920600be8129685684856de00b
.exe windows x86

d177e4ec94872052289c085ef66b14fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

GetModuleFileNameExA

kernel32

IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
GetStringTypeW
GetProfileStringA
InterlockedExchange
InterlockedIncrement
CreateThread
CloseHandle
TerminateThread
WideCharToMultiByte
MultiByteToWideChar
GlobalFree
GlobalAlloc
GetExitCodeThread
WaitForSingleObject
GetTickCount
GetStringTypeA
FreeLibrary
LoadLibraryA
GetWindowsDirectoryA
lstrcpyA
WinExec
lstrlenA
lstrcatA
ExitProcess
LocalFree
FormatMessageA
GetModuleFileNameA
FindClose
FindFirstFileA
CreateDirectoryA
CreateProcessA
OpenProcess
GetCurrentDirectoryA
LockResource
SizeofResource
LoadResource
FindResourceA
DeleteFileA
HeapAlloc
HeapFree
HeapSize
HeapReAlloc
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
SetStdHandle
GetACP
GetLocalTime
GetSystemTime
GetTimeZoneInformation
GetDriveTypeA
SetEnvironmentVariableA
GetCommandLineA
GetStartupInfoA
TerminateProcess
RaiseException
RtlUnwind
WritePrivateProfileStringA
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetTempFileNameA
GetFileAttributesA
FindNextFileA
GetCurrentThread
lstrcmpA
ReleaseMutex
CreateMutexA
SetLastError
GetShortPathNameA
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
GetThreadLocale
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
lstrcpynA
lstrlenW
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
InterlockedDecrement
GlobalLock
GlobalUnlock
WriteFile
Sleep
GetSystemDefaultLangID
IsDBCSLeadByte
MulDiv
LoadLibraryExA
LocalAlloc
CreateFileA
GetFileSize
ReadFile
GetLastError
GetVersionExA

user32

GetDCEx
InvertRect
GetSysColorBrush
RegisterClipboardFormatA
ShowOwnedPopups
PostQuitMessage
GetSystemMenu
DeleteMenu
AppendMenuA
IsZoomed
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
DestroyMenu
TranslateAcceleratorA
LoadAcceleratorsA
GetMessageA
ValidateRect
BeginPaint
CharUpperA
CopyAcceleratorTableA
MapDialogRect
SetWindowContextHelpId
CharNextA
FindWindowA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
GetTopWindow
MessageBoxA
LockWindowUpdate
WinHelpA
wsprintfA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetWindowPos
RegisterWindowMessageA
IsIconic
GetWindowPlacement
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetDoubleClickTime
EnableWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
SendMessageA
GetClientRect
GetParent
AdjustWindowRectEx
GetKeyState
GrayStringA
TabbedTextOutA
IntersectRect
UnionRect
DrawTextExA
GetClassInfoA
DefWindowProcA
SetScrollPos
SetRectEmpty
CreateIconIndirect
GetIconInfo
IsWindowEnabled
GetDesktopWindow
IsRectEmpty
PostThreadMessageA
GetTabbedTextExtentA
IsChild
DrawFrameControl
DrawTextA
SetWindowLongA
GetActiveWindow
CallWindowProcA
GetSystemMetrics
SystemParametersInfoA
LoadStringA
LoadImageA
DestroyCursor
GetNextDlgGroupItem
ClientToScreen
GetCursorPos
WindowFromPoint
DrawEdge
GetWindowLongA
GetCapture
KillTimer
FillRect
SetWindowRgn
EqualRect
GetClassNameA
GetFocus
GetNextDlgTabItem
IsWindow
SetTimer
PostMessageA
GetWindowRect
LoadIconA
SetParent
GetWindow
RedrawWindow
DispatchMessageA
TranslateMessage
PeekMessageA
SetCapture
InvalidateRect
ReleaseCapture
PtInRect
SetCursor
GetSysColor
InflateRect
ReleaseDC
GetDC
CopyIcon
LoadCursorA
MessageBeep
DrawFocusRect
OffsetRect
SetRect
CopyRect
DestroyIcon
DrawStateA
ScreenToClient
GetMessagePos
SetFocus
IsWindowVisible
UpdateWindow
GetWindowThreadProcessId
LoadBitmapA
GetWindowDC
EndPaint

gdi32

RestoreDC
SetDIBitsToDevice
SetStretchBltMode
ExtSelectClipRgn
GetClipBox
SaveDC
RectVisible
StretchDIBits
GetBkColor
GetBkMode
GetCurrentObject
PolyPolyline
SetBitmapBits
PtVisible
Escape
LPtoDP
DPtoLP
GetTextColor
SetMapMode
StartDocA
SetPolyFillMode
SetROP2
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
IntersectClipRect
PatBlt
SetTextAlign
GetCurrentPositionEx
GetViewportExtEx
GetWindowExtEx
SetRectRgn
GetCharWidthA
CreateFontA
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
CreateDCA
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetROP2
GetTextFaceA
GetWindowOrgEx
CreateBitmap
CreateDIBSection
SetPixel
CreateEllipticRgnIndirect
ExtTextOutA
GetDeviceCaps
SetTextJustification
TextOutA
MoveToEx
LineTo
SetBkMode
SetTextColor
SetBkColor
GetTextMetricsA
GetPixel
CreateRectRgn
SelectClipRgn
SelectObject
DeleteDC
Rectangle
DeleteObject
StretchBlt
CreateCompatibleDC
GetMapMode
BitBlt
Polygon
CreatePen
CreateFontIndirectA
GetObjectA
GetStockObject
GetTextExtentPoint32A
CreateSolidBrush
FillRgn
CombineRgn
CreateRectRgnIndirect
CreatePatternBrush
CreatePolygonRgn
CreateDIBitmap
CreateCompatibleBitmap
GetTextExtentPointA

comdlg32

GetOpenFileNameA
PrintDlgA
GetSaveFileNameA
CommDlgExtendedError
GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
SetFileSecurityA
GetFileSecurityA
RegSetValueExA
RegCreateKeyA
RegSetValueA
RegCreateKeyExA
RegQueryValueA

shell32

DragQueryFileA
DragFinish
SHGetFileInfoA
ShellExecuteA
ExtractIconA

comctl32

ImageList_Create
ImageList_AddMasked
ord17
ImageList_GetImageInfo
_TrackMouseEvent
ImageList_GetIconSize
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_Draw
ImageList_DragEnter
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragLeave
ImageList_DragShowNolock
ImageList_DragMove
ImageList_Destroy
ImageList_LoadImageA
ImageList_GetImageCount

oledlg

ord8

ole32

CoTaskMemFree
CoTaskMemAlloc
CoDisconnectObject
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
OleFlushClipboard
OleIsCurrentClipboard
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject

olepro32

ord253

oleaut32

SysAllocStringByteLen
LoadTypeLi
SysFreeString
VariantCopy
VariantClear
SysAllocStringLen
SysStringLen
VariantChangeType
SysAllocString
VariantTimeToSystemTime
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate

wininet

InternetGetLastResponseInfoA
InternetErrorDlg
InternetQueryDataAvailable
InternetSetFilePointer
InternetSetStatusCallback
InternetSetOptionExA
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
HttpQueryInfoA
InternetReadFile
InternetWriteFile
HttpOpenRequestA
HttpSendRequestA
InternetConnectA
InternetOpenA
InternetCloseHandle

Sections

.text
Size: 740KB - Virtual size: 737KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d177e4ec94872052289c085ef66b14fe

Headers

File Characteristics

Imports

psapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wininet

Sections

.text Size: 740KB - Virtual size: 737KB

.rdata Size: 136KB - Virtual size: 132KB

.data Size: 64KB - Virtual size: 88KB

.rsrc Size: 72KB - Virtual size: 71KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 740KB - Virtual size: 737KB

.rdata
Size: 136KB - Virtual size: 132KB

.data
Size: 64KB - Virtual size: 88KB

.rsrc
Size: 72KB - Virtual size: 71KB

.rmnet
Size: 60KB - Virtual size: 60KB