bb93aa631e1d1b6c926227bdc0dff5777dbebb5a708cd88bd22cb5f824d239a0

Sharing

Copy URL

Twitter E-mail

General

Target

bb93aa631e1d1b6c926227bdc0dff5777dbebb5a708cd88bd22cb5f824d239a0
Size

126KB
MD5

049d0333a668d2764c540db1f965c812
SHA1

7d901803f27a5a0c82e2b43a7b745b9e82ae4f5f
SHA256

bb93aa631e1d1b6c926227bdc0dff5777dbebb5a708cd88bd22cb5f824d239a0
SHA512

cb9b4572d776171bc94b9b260cb5c5817ee4a85fb93652f310d781835832e1b0f4b2ad02cd1518b9df11b46434e5642bb1e434363e19f7a6fac90daa0806c2e9
SSDEEP

3072:8TrOGE4+8V3ENTRs0wRnaEQOd7687QlGA5c3/hp:8FE4iTRs0w8EQOU6Uk35

Score

N/A

Malware Config

Signatures

Files

bb93aa631e1d1b6c926227bdc0dff5777dbebb5a708cd88bd22cb5f824d239a0
.exe windows x86

c5fa71a058fe326b31fec759f6a5bb47

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
GlobalAlloc
GetCurrentThreadId
FindResourceA
MapViewOfFile
Sleep
GetTempPathA
LoadResource
HeapAlloc
HeapFree
HeapCreate
MulDiv
VirtualProtectEx
GetModuleHandleA
FreeLibrary
lstrlenW
GlobalUnlock
GetFileTime
ResumeThread
GetSystemTime
GetProcAddress
CloseHandle
SystemTimeToFileTime
GetDriveTypeA
SetEndOfFile
GetDiskFreeSpaceA
GetVersion
GetVersionExA
CreateFileA
GetLastError
IsBadReadPtr
LoadLibraryA
GetCurrentThread
MoveFileA
WaitForSingleObject
GetModuleFileNameA
lstrcmpA
GetPrivateProfileStringA
SetFilePointer
RemoveDirectoryA
LocalAlloc
GetSystemInfo
GetComputerNameA
CreateFileMappingA
InterlockedExchange
SetFileAttributesA
FormatMessageA
EnterCriticalSection
SetFileTime
SetThreadPriority
lstrlenA
DeleteCriticalSection
GetVolumeInformationA
GetLocaleInfoA
ReadFile
lstrcatA
GlobalFree
MultiByteToWideChar
LockResource
LocalFree
WideCharToMultiByte
CreateMutexA
FileTimeToSystemTime
GetFileSize
WritePrivateProfileStringA
GetFileAttributesA
UnmapViewOfFile
GetStartupInfoA
InterlockedIncrement
HeapDestroy
GlobalMemoryStatus
GetThreadPriority
lstrcpyA
WriteFile
CreateProcessA
InitializeCriticalSection
InterlockedDecrement
GetTickCount
ExitProcess

user32

RegisterClipboardFormatA
DrawEdge
BringWindowToTop
SetCursor
ShowCaret
DrawFrameControl
PostMessageA
GetTopWindow
EndDeferWindowPos
FlashWindow
GetCursorPos
IsZoomed
IsMenu
GetMenuStringA
ScreenToClient
GetWindowRect
MessageBoxA
SetParent
WaitMessage
SetWindowsHookExA
GetDC
CheckMenuItem
GetMenuDefaultItem
SetRectEmpty
TrackPopupMenu
ReleaseCapture
EnableWindow
AdjustWindowRectEx
RedrawWindow
AppendMenuA
UnhookWindowsHookEx
DrawTextA
SetTimer
SetWindowPos
SetWindowLongA
SetMenuItemInfoA
CreatePopupMenu
MapWindowPoints
DrawIconEx
LoadMenuA
GetActiveWindow
PostQuitMessage
GetClassLongA
wvsprintfA
DeleteMenu
IntersectRect
LoadImageA
SetWindowContextHelpId
IsIconic
UpdateWindow
GetMessageA
GetMenuItemID
PtInRect
RemoveMenu
GetClientRect
RegisterWindowMessageA
InflateRect
LoadBitmapA
CreateWindowExA
GetParent
ClientToScreen
SystemParametersInfoA
SetRect
GetKeyState
OffsetRect
GetWindowLongA
IsRectEmpty
SetCapture
DestroyMenu
WindowFromPoint
GetDlgCtrlID
IsWindow
KillTimer
HideCaret
CallNextHookEx
GetSystemMenu
GetDesktopWindow
GetMessagePos
GetMenuItemCount
SendMessageA
GetMenuState
GetSystemMetrics
InsertMenuA
GetMenuItemInfoA
SetForegroundWindow
ReleaseDC
LockWindowUpdate
GetDCEx
PeekMessageA
BeginDeferWindowPos
CreateCaret
DeferWindowPos
EqualRect
LoadCursorA
SetMenuDefaultItem
DestroyCaret
IsWindowVisible
GetSubMenu
GetSysColor
ModifyMenuA
MapDialogRect
GetMenu
GetNextDlgTabItem
GetCapture
EnableMenuItem
UnionRect
InvalidateRect
SetCaretPos
GetWindow
FillRect
CopyRect
DispatchMessageA
PostThreadMessageA

gdi32

StretchDIBits
GetStockObject
SetTextColor
SelectObject
TextOutA
CreateCompatibleBitmap
StretchBlt
DeleteDC
CreateRectRgnIndirect
GetDIBits
SetDIBits
SetBitmapBits
GetTextMetricsA
ExtTextOutA
CreateDCA
RectInRegion
CreatePatternBrush
PatBlt
CreateSolidBrush
GetCurrentObject
Rectangle
GetBitmapBits
CreateFontIndirectA
CreateRectRgn
CreateBitmap
CreateCompatibleDC
GetTextExtentPoint32A
GetTextExtentPointA
GetObjectA
CombineRgn
DeleteObject
GetDeviceCaps
BitBlt
Polygon
CreateDIBitmap

advapi32

RegConnectRegistryA
RegCreateKeyExA
RegRestoreKeyA
RegSetKeySecurity
RegFlushKey
RegOpenKeyExA
RegSaveKeyA
RegQueryValueExA
RegSetValueExA
RegReplaceKeyA
RegLoadKeyA
RegDeleteValueA
RegNotifyChangeKeyValue
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
RegGetKeySecurity
RegUnLoadKeyA
RegCloseKey
RegDeleteKeyA

shell32

SHBrowseForFolderA
SHGetSpecialFolderLocation
SHFileOperationA
SHGetPathFromIDListA
ShellExecuteA
SHGetMalloc

ole32

CoCreateGuid
CoGetClassObject
CoTaskMemFree
CLSIDFromString
StringFromGUID2
StringFromCLSID

oleaut32

SysAllocStringLen
VariantClear
SysFreeString

comctl32

ord8
ImageList_BeginDrag
ImageList_EndDrag
ImageList_AddMasked
ImageList_DragLeave
ImageList_GetImageCount
ImageList_SetBkColor
ImageList_DragEnter

winmm

PlaySoundA
mciSendCommandA
mciGetErrorStringA
mciSendStringA

wininet

InternetDial
InternetGetConnectedState
InternetAutodialHangup

wsock32

gethostbyname
ntohs
socket
getpeername
listen
WSASetLastError
connect
getsockname
inet_addr
WSAAsyncSelect
recv
send
WSAGetLastError
accept
ioctlsocket
shutdown
closesocket
htons
bind

oledlg

ord10

msvcrt

_lseek
wcscpy
fclose
_chdir
malloc
_endthread
_itoa
_initterm
_mbscmp
__p__commode
fprintf
fseek
_CxxThrowException
__setusermatherr
__p__fmode
ctime
_except_handler3
vsprintf
_mbctoupper
isalnum
__getmainargs
_close
??8type_info@@QBEHABV0@@Z
?terminate@@YAXXZ
atof
_setmbcp
memmove
wcslen
localtime
clock
sprintf
free
fgets
atol
isdigit
_ftime
rand
_exit
strncpy
_XcptFilter
atoi
fopen
_acmdln
longjmp
_setjmp3
_onexit
_strdup
isalpha
_CIacos
_ftol
_fstat
_chdrive
_purecall
_mbschr
_open
??1type_info@@UAE@XZ
qsort
__set_app_type
_mbsinc
time
exit
__RTDynamicCast
_adjust_fdiv
_CIpow
strncat
__CxxFrameHandler
floor
__dllonexit
gmtime

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c5fa71a058fe326b31fec759f6a5bb47

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

winmm

wininet

wsock32

oledlg

msvcrt

Sections

.text Size: 37KB - Virtual size: 36KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 72KB - Virtual size: 114KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 37KB - Virtual size: 36KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 72KB - Virtual size: 114KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB