7faa34fc16fb95c1761d9f8edfbf5aabea3cc7105b418812e4286e5ea0e2a1d9

Sharing

Copy URL Twitter E-mail

General

Target

7faa34fc16fb95c1761d9f8edfbf5aabea3cc7105b418812e4286e5ea0e2a1d9
Size

320KB
MD5

0e6f0c24f49924d705d9bbc7df9710cb
SHA1

aae7a741836923fde254cf67ceb37d79c8e606c5
SHA256

7faa34fc16fb95c1761d9f8edfbf5aabea3cc7105b418812e4286e5ea0e2a1d9
SHA512

1f131aabfbd3e55d4bdfb976e1861a97a542b6e178504270b0e7b95e5b5da81c93f9cd438d12999282a3fe6c4fd6aafdd7377de6169c9ad5a482bc50f605629b
SSDEEP

6144:hCL0fKcdV1DMn/w0MEyfhZH6b5zUaG99chNXMyjtx:hCL0icrNMnXnyfhU/hNcyjX

Score

N/A

Malware Config

Signatures

Files

7faa34fc16fb95c1761d9f8edfbf5aabea3cc7105b418812e4286e5ea0e2a1d9
.exe windows x86

f475ca65ec210950ee6cadf96eccc3c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSize
GetTimeZoneInformation
GetACP
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapReAlloc
GetFileType
SetStdHandle
ExitThread
GetProfileStringA
CreateThread
TerminateProcess
RaiseException
LoadLibraryA
GetModuleFileNameA
FreeLibrary
GetFileAttributesA
SetLastError
LocalFree
FormatMessageA
GetLastError
lstrlenA
LocalAlloc
Sleep
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA
GetSystemDefaultLangID
GetCurrentProcess
GetVersionExA
GetModuleHandleA
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
DuplicateHandle
CreateFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
CloseHandle
LockFile
UnlockFile
SetEndOfFile
lstrcpyA
FindClose
GetVolumeInformationA
lstrcpynA
GetFullPathNameA
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
RtlUnwind
GetTickCount
SizeofResource
GetCurrentDirectoryA
WritePrivateProfileStringA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
SetErrorMode
GetFileTime
GetFileSize
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MulDiv
GlobalUnlock
GlobalFree
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
GlobalLock
GlobalAlloc
lstrcmpA
GetCurrentThread
FindNextFileA
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpiA
GetThreadLocale
GetProcAddress

user32

CopyAcceleratorTableA
CharNextA
DestroyMenu
GetSysColorBrush
LoadCursorA
PtInRect
LoadStringA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
MapDialogRect
SetWindowContextHelpId
CreateDialogIndirectParamA
GetMessageA
TranslateMessage
GetActiveWindow
ValidateRect
GetCursorPos
SetCursor
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetRect
PostMessageA
UpdateWindow
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
IsWindowVisible
SendMessageA
GetWindowLongA
GetDlgItem
ShowWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetDlgCtrlID
GetKeyState
DefWindowProcA
GetNextDlgGroupItem
MessageBeep
DestroyWindow
CreateWindowExA
DrawFocusRect
DefDlgProcA
IsWindowUnicode
FindWindowA
wsprintfA
EnableWindow
PostQuitMessage
PostThreadMessageA
RegisterClipboardFormatA
InflateRect
InvalidateRect
SendDlgItemMessageA
MessageBoxA
LoadIconA
GetWindowRect
GetSystemMetrics
DrawIcon
GetClientRect
IsIconic
ExitWindowsEx
GetParent
GetClassNameA
GetWindowThreadProcessId
GetDesktopWindow
EnumWindows
SetWindowPos
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
CharUpperA
GetWindow
GetWindowTextA
EndDialog

gdi32

IntersectClipRect
DeleteObject
GetDeviceCaps
GetViewportExtEx
ScaleWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
Escape
GetClipBox
GetWindowExtEx
CreateCompatibleDC
GetTextExtentPointA
BitBlt
CreateDIBitmap

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

SetEntriesInAclA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
GetNamedSecurityInfoA
BuildExplicitAccessWithNameA
RegCloseKey
SetNamedSecurityInfoA
RegDeleteValueA
RegOpenKeyA
RegCreateKeyExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
OleUninitialize

olepro32

ord253
ord251

oleaut32

SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiCallClassInstaller
SetupDiGetINFClassA
SetupDiSetDeviceRegistryPropertyA
SetupDiCreateDevRegKeyA
SetupDiRegisterDeviceInfo
SetupDiCreateDeviceInfoA
SetupDiCreateDeviceInfoList
SetupDiSetClassInstallParamsA

cfgmgr32

CM_Reenumerate_DevNode
CM_Locate_DevNodeA

Exports

Exports

_mdmInstallModemDrivers@8
_mdmInstallOtherDrivers@8
_mdmInstallPortDrivers@8
_mdmInstallUsbDrivers@8
_mdmUninstallModemDrivers@0
_mdmUninstallOtherDrivers@0
_mdmUninstallPortDrivers@0
_mdmUninstallUsbDrivers@0

Sections

.text
Size: 180KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f475ca65ec210950ee6cadf96eccc3c2

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

setupapi

cfgmgr32

Exports

Exports

Sections

.text Size: 180KB - Virtual size: 178KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 16KB - Virtual size: 36KB

.rsrc Size: 80KB - Virtual size: 80KB

.text
Size: 180KB - Virtual size: 178KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 16KB - Virtual size: 36KB

.rsrc
Size: 80KB - Virtual size: 80KB