625d63a67b612ab77e932244a2d6f2e61fee1684b6724691bd18bd423af0368e

Sharing

Copy URL Twitter E-mail

General

Target

625d63a67b612ab77e932244a2d6f2e61fee1684b6724691bd18bd423af0368e
Size

668KB
MD5

09433287d33e508f35061a95eb747990
SHA1

827cb93bff03abb4c24d7b99cf2afdfd90d53891
SHA256

625d63a67b612ab77e932244a2d6f2e61fee1684b6724691bd18bd423af0368e
SHA512

396a6bd052c2ee4b1394756c93dc047b3aeda4d29a3b8b2b0d0c128dedd12cb8eed0c1e76e2f2e97ae5e981e69182ecc4f2e5a79711999ad9b646f89719265c8
SSDEEP

6144:qpMLnUOubHZiyvKH/L3ix1SjExv1z9aJ3H2FHJ4N3HK8plGoipzo0naGd:qpbsixRv1JaBW7iPpYnPaG

Score

N/A

Malware Config

Signatures

Files

625d63a67b612ab77e932244a2d6f2e61fee1684b6724691bd18bd423af0368e
.exe windows x86

7b833860aee200155199263fc86c275b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

winmm

joyGetPosEx

kernel32

GetFileAttributesA
GetFileTime
WritePrivateProfileStringA
HeapAlloc
HeapFree
RtlUnwind
GetSystemTimeAsFileTime
HeapReAlloc
GetTimeFormatA
GetDateFormatA
GetStartupInfoA
RaiseException
ExitProcess
TerminateProcess
SetStdHandle
GetFileType
SetErrorMode
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetTimeZoneInformation
LCMapStringA
LCMapStringW
VirtualQuery
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcessId
IsBadReadPtr
IsBadCodePtr
GetLocaleInfoW
SetEnvironmentVariableA
GetOEMCP
GetCPInfo
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GlobalFlags
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
InterlockedDecrement
VirtualProtect
GetModuleFileNameA
CreateFileA
GetFullPathNameA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
lstrcpyA
MulDiv
GlobalAlloc
FormatMessageA
lstrcpynA
LocalFree
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
GetWindowsDirectoryA
ExpandEnvironmentStringsA
CloseHandle
OpenProcess
GetModuleHandleA
OutputDebugStringA
Sleep
GetSystemInfo
SetThreadPriority
GetCurrentThread
GetTickCount
GetLogicalDriveStringsA
GetDriveTypeA
GetDiskFreeSpaceA
GetVolumeInformationA
GetTempPathA
GlobalMemoryStatus
CreateMutexA
GetUserDefaultLangID
GetCommandLineA
FreeLibrary
LoadLibraryA
GetProcAddress
GetProfileIntA
SearchPathA
GetCurrentDirectoryA
GetSystemDirectoryA
SetCurrentDirectoryA
CreateProcessA
GetLastError
FindResourceA
LoadResource
LockResource
SizeofResource
SetLastError
lstrlenA
lstrcmpiA
CompareStringW
CompareStringA
GetVersion
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapSize

user32

DestroyMenu
LoadCursorA
GetSysColorBrush
SetTimer
KillTimer
WaitMessage
GetMessageA
GetCursorPos
ValidateRect
SetCursor
PostQuitMessage
MapDialogRect
GetAsyncKeyState
EndPaint
BeginPaint
ReleaseDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
wsprintfA
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
ShowWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
GetWindowTextLengthA
GetWindowTextA
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessagePos
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
PostMessageA
GetSysColor
AdjustWindowRectEx
ScreenToClient
GetClassInfoA
RegisterClassA
UnregisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
CopyRect
PtInRect
GetWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
EnumDisplaySettingsA
GetDesktopWindow
GetKeyboardType
GetSystemMetrics
LoadIconA
GetClientRect
GetPropA
GetWindowRect
IsIconic
DrawIcon
MessageBoxA
SetFocus
ReleaseCapture
GetForegroundWindow
SetCapture
SetActiveWindow
TranslateMessage
DispatchMessageA
PeekMessageA
GetDC
LoadImageA
MessageBeep
SendMessageA
GetParent
EnableWindow
CharUpperA
GetMessageTime

gdi32

RectVisible
PtVisible
DeleteObject
GetStockObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
GetBitmapDimensionEx
GetDeviceCaps
GetBitmapBits
SetBitmapBits
CreateDIBitmap
SetMapMode
RestoreDC
SaveDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
TextOutA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegQueryValueExA

comctl32

ord17
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_Destroy

shlwapi

PathIsUNCA
PathFindExtensionA
PathStripToRootA
PathFindFileNameA

ole32

CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

VariantClear
VariantChangeType
VariantInit

wsock32

socket
gethostbyname
htonl
htons
ioctlsocket
bind
WSAGetLastError
accept
closesocket
WSACleanup
WSAStartup
inet_addr
connect
sendto
WSASetLastError
recvfrom
WSAAsyncSelect
send
recv
select
ntohs

oleacc

CreateStdAccessibleObject
LresultFromObject

Sections

.text
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

i.�b�uD
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7b833860aee200155199263fc86c275b

Headers

File Characteristics

Imports

version

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

ole32

oleaut32

wsock32

oleacc

Sections

.text Size: 240KB - Virtual size: 236KB

.rdata Size: 96KB - Virtual size: 95KB

.data Size: 36KB - Virtual size: 240KB

.rsrc Size: 272KB - Virtual size: 271KB

i.�b�uD Size: 20KB - Virtual size: 20KB

.text
Size: 240KB - Virtual size: 236KB

.rdata
Size: 96KB - Virtual size: 95KB

.data
Size: 36KB - Virtual size: 240KB

.rsrc
Size: 272KB - Virtual size: 271KB

i.�b�uD
Size: 20KB - Virtual size: 20KB