69491c2060570d03ae911d888bd215b804109416da40fb464bd3da2b4202a360

Sharing

Copy URL Twitter E-mail

General

Target

69491c2060570d03ae911d888bd215b804109416da40fb464bd3da2b4202a360
Size

620KB
MD5

08ea9b7acceacfa4a87c42c53f6fdaeb
SHA1

8d5657be766801aac0e3fbcf1b2a136db18a3f72
SHA256

69491c2060570d03ae911d888bd215b804109416da40fb464bd3da2b4202a360
SHA512

692c79389b07af4663a0fc8b453cdee7126fcf4679125d6d1a74d7244052d8b171c5786238d4b5c850b57d0752ec7b8a2966401d75e8da32fef6b148128e7ac3
SSDEEP

12288:j2/7+kRdWUA3v/pEGumkfKEvIGJM62S8ZM98hsdC2cDxQ60CnRnTqIyqSFRj:1q98hsM30CnRnqF

Score

N/A

Malware Config

Signatures

Files

69491c2060570d03ae911d888bd215b804109416da40fb464bd3da2b4202a360
.exe windows x86

446362bea8b299c7ee18a6fda8488a10

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
getservbyname
htons
htonl
WSAGetLastError
gethostbyaddr
inet_addr
ntohs
getservbyport
WSASetLastError
inet_ntoa
WSACleanup
gethostbyname

kernel32

SetFilePointer
FlushFileBuffers
DuplicateHandle
UnlockFile
SetEndOfFile
WriteFile
LockFile
GetVolumeInformationA
GetCurrentDirectoryA
GetThreadLocale
GetFileSize
GetFileTime
GetFullPathNameA
GetFileAttributesA
GetTickCount
RtlUnwind
RaiseException
GetTimeZoneInformation
SetStdHandle
GetFileType
GetCPInfo
GetOEMCP
GetACP
HeapReAlloc
HeapSize
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
FileTimeToLocalFileTime
SetErrorMode
IsBadWritePtr
UnhandledExceptionFilter
GetProcessVersion
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
SizeofResource
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GetLocalTime
GetSystemTime
GlobalHandle
GetModuleHandleA
GetProcAddress
GetCurrentProcess
LocalAlloc
LocalFree
CloseHandle
GetEnvironmentVariableA
WinExec
GetCommandLineA
CreateMutexA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetPrivateProfileSectionA
WritePrivateProfileStringA
ExitProcess
GetLastError
GetPrivateProfileStringA
GetPrivateProfileIntA
GetTempPathA
GetModuleFileNameA
GetProfileStringA
TlsAlloc
lstrcpynA
FileTimeToSystemTime
FindClose
FindNextFileA
FindFirstFileA
MulDiv
GlobalAlloc
GetCurrentThread
GlobalGetAtomNameA
SetLastError
GetCurrentThreadId
GlobalFindAtomA
lstrcmpiA
GlobalAddAtomA
GlobalUnlock
GlobalDeleteAtom
GlobalLock
FindResourceA
GlobalFree
LockResource
WideCharToMultiByte
LoadResource
MultiByteToWideChar
InterlockedIncrement
lstrlenA
InterlockedDecrement
HeapAlloc
GetVersion
GetProcessHeap
SuspendThread
HeapFree
ResumeThread
lstrcmpA
DeviceIoControl
GetSystemDirectoryA
CreateFileA
FormatMessageA
ReleaseMutex
LoadLibraryA
ReadFile
GetVersionExA
lstrcpyA
FreeLibrary
OutputDebugStringA
DeleteCriticalSection
lstrcatA
GetWindowsDirectoryA
TerminateThread
WaitForSingleObject
GetExitCodeThread
CreateThread
GetCurrentProcessId
Sleep
VirtualFree
CreateProcessA
VirtualAlloc
GetStartupInfoA
TerminateProcess
FreeEnvironmentStringsA

user32

GetWindowDC
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
DestroyMenu
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
LoadStringA
PtInRect
GetSysColorBrush
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
CharUpperA
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
MapDialogRect
SetRectEmpty
ClientToScreen
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
BeginPaint
TranslateMessage
GetTopWindow
MessageBoxA
IsChild
PostQuitMessage
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetWindow
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetDlgItem
IsWindowEnabled
UnhookWindowsHookEx
SetRect
LoadMenuA
GetSubMenu
EnableMenuItem
CheckMenuItem
AppendMenuA
DeleteMenu
GetCursorPos
TrackPopupMenu
SetMenuDefaultItem
ReleaseDC
GetDC
GetClientRect
GetSystemMetrics
GetDesktopWindow
GetShellWindow
FindWindowExA
GetForegroundWindow
GetWindowTextLengthA
IsWindow
IsIconic
IsWindowVisible
EnumChildWindows
SystemParametersInfoA
GetClassNameA
GetWindowRect
SetForegroundWindow
KillTimer
SetTimer
PostMessageA
SendMessageTimeoutA
SetWindowContextHelpId
GetMessageA
ShowOwnedPopups
ValidateRect
SetCursor
GetCapture
OpenInputDesktop
CloseDesktop
GetWindowLongA
LoadImageA
RegisterWindowMessageA
RegisterDeviceNotificationA
LoadIconA
LoadCursorA
FindWindowA
SendMessageA
EnableWindow
wsprintfA
SetPropA
GetClassLongA
PeekMessageA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode

gdi32

SetBkColor
SetTextColor
GetClipBox
GetObjectA
CreateDIBitmap
Rectangle
GetWindowExtEx
GetTextExtentPointA
BitBlt
CreateCompatibleDC
GetPixel
DeleteObject
GetDeviceCaps
GetViewportExtEx
CreatePen
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA
GetBkColor
DPtoLP
GetTextColor
LPtoDP
PatBlt
GetMapMode
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
SetViewportExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
SetMapMode
SetViewportOrgEx
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
CreateSolidBrush

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
FindNextPrinterChangeNotification
FindFirstPrinterChangeNotification
ord201
ClosePrinter
GetPrinterA
OpenPrinterA
FindClosePrinterChangeNotification
FreePrinterNotifyInfo
EnumPortsA
EnumPrintersA

advapi32

RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegEnumValueA
OpenProcessToken
GetTokenInformation
GetSidSubAuthorityCount
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
GetSidSubAuthority
RegEnumKeyA
RegQueryInfoKeyA

shell32

DragFinish
DragQueryFileA
Shell_NotifyIconA
SHAppBarMessage

comctl32

ord17

oledlg

ord8

ole32

OleFlushClipboard
OleIsCurrentClipboard
CLSIDFromString
CoRegisterMessageFilter
OleUninitialize
OleInitialize
CLSIDFromProgID
CoRevokeClassObject
StgCreateDocfileOnILockBytes
CoGetClassObject
StgOpenStorageOnILockBytes
CoTaskMemAlloc
CreateILockBytesOnHGlobal
CoTaskMemFree
CoFreeUnusedLibraries

olepro32

ord253

oleaut32

VariantCopy
SysFreeString
VariantChangeType
SysAllocStringByteLen
SysAllocString
VariantClear
VariantTimeToSystemTime
SysAllocStringLen
SysStringLen

Sections

.text
Size: 308KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

446362bea8b299c7ee18a6fda8488a10

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 308KB - Virtual size: 308KB

.rdata Size: 52KB - Virtual size: 50KB

.data Size: 48KB - Virtual size: 82KB

.rsrc Size: 208KB - Virtual size: 208KB

.text
Size: 308KB - Virtual size: 308KB

.rdata
Size: 52KB - Virtual size: 50KB

.data
Size: 48KB - Virtual size: 82KB

.rsrc
Size: 208KB - Virtual size: 208KB