83fb28ba408c89ba1047bc112bbdc4043c08861c3222c6f283b4c6e7bc21402f

Sharing

Copy URL Twitter E-mail

General

Target

83fb28ba408c89ba1047bc112bbdc4043c08861c3222c6f283b4c6e7bc21402f
Size

829KB
MD5

039970585e52a1287a80dd70191a2b90
SHA1

fb5e9d0aed81c0fe11603a04a7340abd7165c899
SHA256

83fb28ba408c89ba1047bc112bbdc4043c08861c3222c6f283b4c6e7bc21402f
SHA512

0e3cda42c083349782812f831c293cd61e6daec5552669bdab1d0131128e775e7787f769b5bf979239301a9a97521c100a0db98ddcdf575959d05e8626b5ad8f
SSDEEP

6144:PQxcSCFyfvIIsgAxk7bDp5DHRYleiR5l1d3nf2GY49ucCEM7zGdn1FMsm5npy9:PQKyfvBDvjKeiR5DZ2P4ccCECzGV16w9

Score

N/A

Malware Config

Signatures

Files

83fb28ba408c89ba1047bc112bbdc4043c08861c3222c6f283b4c6e7bc21402f
.exe windows x86

50d816f0e457a26e26b1313e082ad034

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedExchangeAdd
InterlockedDecrement
InterlockedIncrement
IsBadWritePtr
GetModuleHandleW
DeviceIoControl
GetVersionExA
LockResource
LoadResource
SizeofResource
FindResourceA
MultiByteToWideChar
GetFileSize
SetFileAttributesA
GetFileAttributesA
lstrcmpiA
GetCurrentProcessId
ExitProcess
WritePrivateProfileStringA
SetUnhandledExceptionFilter
CopyFileA
ResumeThread
FindClose
FindNextFileA
FindFirstFileA
SetProcessWorkingSetSize
HeapFree
FreeLibrary
GetWindowsDirectoryA
GetProcessHeap
HeapAlloc
VirtualFreeEx
Module32Next
ReadProcessMemory
GetVersion
GetCommandLineA
GetExitCodeThread
WaitForSingleObject
CreateRemoteThread
IsBadReadPtr
DeleteFileA
TerminateProcess
CreateProcessA
Module32First
CreateFileA
GetModuleFileNameA
GetCurrentThreadId
lstrlenW
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetCurrentProcess
FlushInstructionCache
WideCharToMultiByte
GetModuleHandleA
FormatMessageA
OutputDebugStringA
GlobalAlloc
GlobalFree
LocalFree
Sleep
GetTickCount
CreateThread
CloseHandle
OpenProcess
Thread32Next
Thread32First
Process32Next
Process32First
CreateToolhelp32Snapshot
GetLastError
GetProcAddress
LoadLibraryA
WriteProcessMemory
VirtualAllocEx
lstrcpyA
lstrcatA
RtlMoveMemory
UnmapViewOfFile
lstrcmpW
SetLastError
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrlenA
GlobalUnlock
GlobalLock
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
lstrcmpA
GlobalFlags
GetLocaleInfoA
GetCPInfo
GetOEMCP
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
UnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetStartupInfoA
RtlUnwind
RaiseException
VirtualAlloc
HeapReAlloc
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetACP
IsValidCodePage
VirtualFree
HeapCreate
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MapViewOfFile
CreateFileMappingA
GetSystemDirectoryA

user32

IsWindowEnabled
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
GetDC
ReleaseDC
DestroyMenu
ValidateRect
GetSysColorBrush
GetWindow
GetWindowPlacement
IsIconic
SystemParametersInfoA
GetLastActivePopup
GetForegroundWindow
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
SetWindowsHookExA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetKeyState
GetMenu
CallWindowProcA
GetDlgCtrlID
CopyRect
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
GetClientRect
SetWindowTextA
RegisterHotKey
PostQuitMessage
EnableWindow
PostThreadMessageA
UpdateWindow
CreateWindowExA
DefWindowProcA
GetSubMenu
TrackPopupMenu
PostMessageA
EndPaint
BeginPaint
EndMenu
IsWindowVisible
GetSystemMetrics
WindowFromPoint
GetCursorPos
LoadMenuA
SetTimer
GetWindowLongA
SetWindowLongA
GetWindowTextA
ScreenToClient
DispatchMessageA
TranslateMessage
PeekMessageA
PtInRect
RegisterClassExA
LoadCursorA
SendMessageW
SendMessageA
FindWindowA
ShowWindow
FindWindowExA
SetWindowPos
AdjustWindowRectEx
GetWindowRect
IsWindow
GetParent
EnumChildWindows
GetClassNameA
GetWindowThreadProcessId
EnumWindows
RemovePropA
GetFocus
GetWindowTextLengthA
GetMessagePos
GetSysColor
RegisterClassA
GetClassInfoA
GetClassInfoExA
MessageBoxA
GetMenuItemCount
GetMenuItemID
SetForegroundWindow
SetMenu
MapWindowPoints

gdi32

PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
DeleteObject
SetMapMode
CreateFontIndirectA
GetObjectA
DeleteDC
GetDeviceCaps
CreateDCA
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetStockObject

advapi32

RegSetValueExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegOpenKeyExA
RegDeleteValueA
RegCloseKey
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetNamedSecurityInfoA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueA
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
CloseServiceHandle
RegEnumKeyA
RegCreateKeyExA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetSpecialFolderPathA

ole32

OleInitialize
CoCreateInstance
OleUninitialize
CoInitialize
CoUninitialize
StgCreateDocfile
OleCreate

oleaut32

VariantChangeType
VariantInit
SysAllocString
SysFreeString
VariantClear
SafeArrayCreate
SafeArrayAccessData
SafeArrayDestroy

shlwapi

StrStrW
StrStrIA
StrStrIW

psapi

GetModuleFileNameExA
GetProcessImageFileNameA
GetModuleInformation

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

dbghelp

MiniDumpWriteDump

wininet

FindNextUrlCacheEntryA
DeleteUrlCacheEntry
FindFirstUrlCacheEntryA

oleacc

LresultFromObject
CreateStdAccessibleObject

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

Sections

.text
Size: 197KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 535KB - Virtual size: 535KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50d816f0e457a26e26b1313e082ad034

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

psapi

version

dbghelp

wininet

oleacc

winspool.drv

Sections

.text Size: 197KB - Virtual size: 196KB

.rdata Size: 49KB - Virtual size: 49KB

.data Size: 9KB - Virtual size: 37KB

.rsrc Size: 535KB - Virtual size: 535KB

.reloc Size: 37KB - Virtual size: 36KB

.text
Size: 197KB - Virtual size: 196KB

.rdata
Size: 49KB - Virtual size: 49KB

.data
Size: 9KB - Virtual size: 37KB

.rsrc
Size: 535KB - Virtual size: 535KB

.reloc
Size: 37KB - Virtual size: 36KB