30b4808fcc37bac4b000a00b0d4295d4ca76dc9b82eb052e350adbcbce6c4e96

Sharing

Copy URL Twitter E-mail

General

Target

30b4808fcc37bac4b000a00b0d4295d4ca76dc9b82eb052e350adbcbce6c4e96
Size

942KB
MD5

481138eb9b40e146c68bf61aa599cbf0
SHA1

b73c54ce04d4a397287a5d408f2d3c1383d13a71
SHA256

30b4808fcc37bac4b000a00b0d4295d4ca76dc9b82eb052e350adbcbce6c4e96
SHA512

5e56bcdb7ca3bee3be6b04764063517495ba3e5c08d24828385266cd5d679d943d5548256dd7c5a0d8ed42c345c3468a3fed4f2f709a124a9edd7a6c9605e8a3
SSDEEP

24576:Emh2ecOWYqk5sWqIYJVsg/lLPIDnof8i3J/wyV3Io:dkis62VzlLQnXyV3Io

Score

N/A

Malware Config

Signatures

Files

30b4808fcc37bac4b000a00b0d4295d4ca76dc9b82eb052e350adbcbce6c4e96
.exe windows x86

caa5662d044acba195fb44e9ff7a9572

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameW
FindFirstFileW
FindClose
MultiByteToWideChar
GetLogicalDriveStringsW
lstrcpyW
GetLocalTime
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
LockResource
LoadResource
SizeofResource
FindResourceW
CreateMutexW
GetLastError
Process32NextW
Process32FirstW
CreateEventW
GetExitCodeThread
SetEvent
WaitForSingleObject
LoadLibraryW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetLogicalDrives
WriteFile
FreeResource
SetLastError
FindNextFileW
RemoveDirectoryW
GetModuleHandleW
GetProcAddress
GetCommandLineW
MoveFileExW
CreateToolhelp32Snapshot
lstrcmpiA
lstrcmpA
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
SetConsoleCtrlHandler
LoadLibraryA
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
LCMapStringW
LCMapStringA
Module32FirstW
GetStartupInfoA
GetStdHandle
SetHandleCount
GetCommandLineA
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
FlushFileBuffers
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetCPInfo
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetCurrentThread
FatalAppExitA
HeapSize
TerminateProcess
RaiseException
ExitProcess
GetVersion
GetStartupInfoW
GetModuleHandleA
ExitThread
CreateThread
HeapReAlloc
WideCharToMultiByte
RtlUnwind
LoadLibraryExW
SystemTimeToFileTime
LocalFileTimeToFileTime
TlsGetValue
OpenThread
TlsSetValue
GetEnvironmentVariableW
GetProcessHeap
HeapAlloc
TlsAlloc
SetEnvironmentVariableW
ReleaseMutex
TlsFree
HeapFree
GetCurrentProcessId
CreateFileW
DeviceIoControl
CloseHandle
GetDiskFreeSpaceExW
GetTempFileNameW
DeleteFileW
GetDriveTypeW
MulDiv
GetTickCount
VirtualProtect
lstrlenA
OutputDebugStringW
DebugBreak
GetCurrentProcess
InterlockedDecrement
FlushInstructionCache
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
GetTempPathW
InterlockedIncrement
Sleep
GetVersionExW
EnterCriticalSection
GetCurrentThreadId
LeaveCriticalSection
SetEndOfFile
SetFilePointerEx
GetFileSizeEx
SetFilePointer
ReadFile
GetFileType
FormatMessageW
GetSystemTime
LocalFree
FreeLibrary
GetSystemTimeAsFileTime
CreateFileA
GetModuleFileNameW
lstrlenW
SetUnhandledExceptionFilter

user32

IsIconic
IsWindow
MessageBoxW
RedrawWindow
CharNextW
wvsprintfW
SetWindowLongW
ShowWindow
SetWindowPos
SendMessageW
CreateDialogParamW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
LoadStringW
GetClassInfoExW
RegisterClassExW
DefWindowProcW
LoadCursorW
DestroyWindow
SetWindowRgn
CopyRect
ClientToScreen
AdjustWindowRectEx
GetDlgCtrlID
FindWindowExW
GetWindowThreadProcessId
FindWindowW
IsRectEmpty
CreateWindowExW
wsprintfW
DrawTextW
GetFocus
SetFocus
GetDesktopWindow
UpdateLayeredWindow
GetWindowDC
EnableWindow
SetCursor
InflateRect
OffsetRect
GetWindowTextW
IsWindowEnabled
EndDialog
GetActiveWindow
DialogBoxParamW
SetRect
UpdateWindow
CallWindowProcW
InvalidateRect
BringWindowToTop
LoadIconW
KillTimer
PostMessageW
MoveWindow
ScreenToClient
GetDC
ReleaseDC
GetParent
GetWindow
SystemParametersInfoW
BeginPaint
EndPaint
PostQuitMessage
GetClientRect
GetWindowRect
MapWindowPoints
SetWindowTextW
GetSystemMetrics
LoadImageW
SetTimer
GetClassNameW
IsDialogMessageW
GetDlgItem
GetWindowLongW
IsWindowVisible

gdi32

SetBkMode
GetTextExtentPoint32W
SetTextColor
CreateFontIndirectW
GetDeviceCaps
CreateFontW
DeleteObject
SetViewportOrgEx
DeleteDC
SaveDC
OffsetViewportOrgEx
RestoreDC
CreateCompatibleDC
SelectObject
BitBlt
StretchBlt
GetTextExtentPointA
GetTextMetricsA
EnumFontFamiliesW
CreateDIBSection
CombineRgn
CreateRectRgn
CreateCompatibleBitmap

advapi32

RegOpenKeyExA
RegDeleteValueW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegEnumKeyExA
RegQueryValueExA
RegQueryValueExW
RegEnumKeyExW
RegSetValueExW

shell32

SHFileOperationW
SHBrowseForFolderW
ShellExecuteExW
SHGetSpecialFolderPathW
SHCreateDirectoryExW
SHGetPathFromIDListW
SHAppBarMessage
ShellExecuteW
Shell_NotifyIconW
ord165

ole32

CoCreateInstance
CLSIDFromProgID
CoUninitialize
CoInitialize
CoCreateGuid
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CreateStreamOnHGlobal

oleaut32

SysAllocString
SysFreeString
VariantClear

comctl32

_TrackMouseEvent
InitCommonControlsEx

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

wininet

InternetOpenW
InternetConnectW
InternetCloseHandle
InternetGetConnectedState
HttpSendRequestW
HttpQueryInfoW
HttpOpenRequestW

iphlpapi

GetAdaptersInfo
GetIpAddrTable

setupapi

SetupIterateCabinetW

shlwapi

SHGetValueA
SHSetValueA
PathCombineW
StrToIntExW
StrCmpW
PathIsPrefixW
PathFindFileNameW
PathFileExistsW
SHGetValueW
PathRemoveFileSpecW
PathIsRelativeW
PathAppendW

netapi32

Netbios

Sections

.text
Size: 316KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 560KB - Virtual size: 560KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

caa5662d044acba195fb44e9ff7a9572

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

version

wininet

iphlpapi

setupapi

shlwapi

netapi32

Sections

.text Size: 316KB - Virtual size: 312KB

.rdata Size: 32KB - Virtual size: 29KB

.data Size: 28KB - Virtual size: 35KB

.rsrc Size: 560KB - Virtual size: 560KB

.text
Size: 316KB - Virtual size: 312KB

.rdata
Size: 32KB - Virtual size: 29KB

.data
Size: 28KB - Virtual size: 35KB

.rsrc
Size: 560KB - Virtual size: 560KB