54713a4f37e57c85442225f9af5a7eb49994467caa27a4d4a0c4915389756125

Sharing

Copy URL Twitter E-mail

General

Target

54713a4f37e57c85442225f9af5a7eb49994467caa27a4d4a0c4915389756125
Size

1.4MB
MD5

30aeaa1baf097076605ed81f601adac0
SHA1

db6ae8b5f1b70ec89ff003d8d9bed0e6e2fcd209
SHA256

54713a4f37e57c85442225f9af5a7eb49994467caa27a4d4a0c4915389756125
SHA512

dc791624a66f7a1628765dbdc47697c21277f3feda76eae20c54f97d705cb81281d95e07f3f1fc4278f434b11c727923b5a7a9d5376a8835874bbcfcaa964740
SSDEEP

24576:X+Tp70RRlelZjqjp46BMoug0mUTLyB1Pi2k27MYr:XWIR6jrQOLyB1xMY

Score

N/A

Malware Config

Signatures

Files

54713a4f37e57c85442225f9af5a7eb49994467caa27a4d4a0c4915389756125
.exe windows x86

2597f30e8c8d52d3c036484010a44f07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowCaret
GetClipboardData
RegisterClipboardFormatA
SetCursorPos
GetMessageTime
GetDoubleClickTime
HideCaret
DefWindowProcA
LoadCursorA
SetCursor
IsClipboardFormatAvailable
UnpackDDElParam
ReuseDDElParam
EnableMenuItem
GetMenu
GetMessagePos
TranslateAcceleratorA
TranslateMDISysAccel
ModifyMenuA
DestroyAcceleratorTable
GetFocus
IsChild
AdjustWindowRectEx
CopyRect
GetDlgCtrlID
GetDesktopWindow
WinHelpA
LoadStringA
RemoveMenu
CreatePopupMenu
GetKeyboardLayout
CreateAcceleratorTableA
CopyAcceleratorTableA
FindWindowA
OpenClipboard
GetSysColor
GetSysColorBrush
CharLowerA
CharUpperA
IsCharUpperA
IsCharLowerA
IsCharAlphaNumericA
IsCharUpperW
IsCharLowerW
IsCharAlphaNumericW
IsWindowEnabled
GetActiveWindow
SetActiveWindow
EmptyClipboard
SetClipboardData
CloseClipboard
ClientToScreen
GetDlgItem
SetWindowPos
DrawTextA
MessageBeep
SetWindowTextA
GetWindowTextLengthA
GetWindowTextA
AppendMenuA
GetMenuStringA
InsertMenuA
DestroyMenu
CreateCaret
SetForegroundWindow
LoadMenuA
GetSubMenu
DeleteMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenuEx
SystemParametersInfoA
LoadAcceleratorsA
DdeClientTransaction
DdeDisconnect
DdeCreateStringHandleA
DdeConnect
DdeFreeStringHandle
DdeInitializeA
DdeUninitialize
SetWindowTextW
GetWindow
GetWindowTextLengthW
GetWindowTextW
RegisterWindowMessageA
InvalidateRgn
GetDC
ReleaseDC
InvalidateRect
LoadBitmapA
InflateRect
GetNextDlgGroupItem
PostThreadMessageA
InvertRect
LockWindowUpdate
GetDCEx
DestroyIcon
MapDialogRect
SetRect
OffsetRect
IsIconic
UpdateWindow
ChangeClipboardChain
SetClipboardViewer
IsZoomed
GetKeyState
CharUpperW
IsWindow
IsWindowVisible
GetClassLongA
SetClassLongA
CharLowerW
TabbedTextOutA
FillRect
EnableWindow
GetCapture
KillTimer
GetCursorPos
ScreenToClient
PtInRect
SetCapture
SetTimer
ReleaseCapture
PostMessageA
GetParent
SendMessageA
GetWindowRect
GetClientRect
SetCaretPos
GetCaretPos
SetFocus
GetTabbedTextExtentA
GetScrollPos
PostQuitMessage
SetRectEmpty
DrawFocusRect
GetKeyNameTextA
MapVirtualKeyA
GetMenuItemInfoA
GetForegroundWindow
DrawMenuBar
wsprintfA
SetWindowContextHelpId
CharNextA
GetClassNameA
GetSystemMenu
IsRectEmpty
SetParent
WindowFromPoint
GetWindowThreadProcessId
WaitMessage
GetMessageA
TranslateMessage
ValidateRect
ShowOwnedPopups
DestroyCursor
SetMenu
RedrawWindow
DefMDIChildProcA
DefFrameProcA
BringWindowToTop
GrayStringA
EndPaint
BeginPaint
GetWindowDC
wvsprintfA
ShowWindow
MoveWindow
IsDialogMessageA
ScrollWindowEx
SetDlgItemTextA
GetMenuCheckMarkDimensions
GetMenuState
GetSystemMetrics
GetWindowPlacement
IntersectRect
SetWindowLongA
GetWindowLongA
GetLastActivePopup
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
DestroyWindow
SetWindowPlacement
TrackPopupMenu
RegisterClassA
GetClassInfoA
MessageBoxA
GetTopWindow
SetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
EqualRect
DispatchMessageA
PeekMessageA
MapWindowPoints
SendDlgItemMessageA
LoadIconA
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
CheckMenuItem
SetMenuItemBitmaps
UnregisterClassA

comctl32

ImageList_LoadImageA
ord17
ImageList_Destroy
ImageList_Create
ImageList_Draw
ImageList_AddMasked

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

kernel32

GetSystemTime
GetCurrentDirectoryA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
FreeLibrary
CloseHandle
FindFirstFileA
CreateFileMappingA
OpenFileMappingA
FindNextFileA
SetCurrentDirectoryA
GetModuleFileNameA
GetACP
LoadLibraryA
GetCPInfo
GetStringTypeExA
GetThreadLocale
lstrlenA
lstrcmpiA
GetFullPathNameA
GetProcAddress
LocalFree
LocalAlloc
GetCurrentProcess
GetLastError
GetCurrentThread
MulDiv
DeleteFileA
GetTempFileNameA
GetTempPathA
SystemTimeToFileTime
WaitForSingleObject
LoadResource
LockResource
IsValidCodePage
GetVersionExA
SetEndOfFile
CreateFileA
GetFileSize
ReadFile
WriteFile
SetFilePointer
GetShortPathNameA
FormatMessageA
GetLocaleInfoA
IsDBCSLeadByte
CreateProcessA
GlobalAddAtomA
GlobalGetAtomNameA
SearchPathA
GetProfileIntA
ExpandEnvironmentStringsA
CreateDirectoryA
FileTimeToSystemTime
FileTimeToLocalFileTime
EnumSystemCodePagesA
GetExitCodeProcess
UnmapViewOfFile
GetStdHandle
SetConsoleCtrlHandler
CreatePipe
MapViewOfFile
SuspendThread
ResumeThread
GetVolumeInformationA
lstrcpyA
GetDriveTypeA
InterlockedExchange
RaiseException
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GetCurrentThreadId
lstrcatA
GetVersion
InterlockedIncrement
InterlockedDecrement
SetLastError
lstrcmpA
lstrcpynA
SetEvent
SetThreadPriority
CreateEventA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
DuplicateHandle
FlushFileBuffers
LockFile
UnlockFile
MoveFileA
GetFileAttributesA
SetFileTime
GetFileTime
GetDiskFreeSpaceA
GlobalFlags
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GetOEMCP
SetErrorMode
LocalFileTimeToFileTime
GlobalSize
RtlUnwind
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
CreateThread
ExitThread
HeapReAlloc
HeapSize
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
FindClose
GetDateFormatA
GetTimeFormatA
WideCharToMultiByte
MultiByteToWideChar
CopyFileA
GetTickCount
FindResourceA
GlobalMemoryStatus
Sleep
SetEnvironmentVariableA

gdi32

GetPolyFillMode
GetStretchBltMode
GetNearestColor
CopyMetaFileA
LPtoDP
GetViewportOrgEx
SetAbortProc
StartPage
EndPage
EndDoc
AbortDoc
SetRectRgn
Escape
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetTextAlign
GetCurrentPositionEx
IntersectClipRect
ExcludeClipRect
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetStretchBltMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
StartDocA
GetClipBox
StretchDIBits
CreateDIBitmap
CreatePatternBrush
ExtTextOutW
SetTextAlign
SelectClipRgn
CreatePolygonRgn
CreateRectRgn
CombineRgn
GetRgnBox
Polygon
GetBkColor
GetCharABCWidthsA
GetOutlineTextMetricsA
GetDeviceCaps
GetTextExtentPoint32W
CreateICA
EnumFontFamiliesExA
GetTextMetricsA
Rectangle
CreateRectRgnIndirect
GetStockObject
CreateSolidBrush
DPtoLP
CreateBitmap
GetMapMode
SetMapMode
GetBkMode
GetTextColor
CreatePen
MoveToEx
LineTo
PatBlt
SetBkColor
CreateDCA
SelectObject
GetROP2
GetTextFaceA
GetCharWidthA
GetWindowOrgEx
CreateCompatibleDC
BitBlt
DeleteDC
SetTextColor
SetBkMode
ExtTextOutA
CreateFontIndirectA
DeleteObject
GetObjectA
GetTextExtentPoint32A
CreateCompatibleBitmap

comdlg32

CommDlgExtendedError
ChooseColorA
GetFileTitleA
PrintDlgA
GetSaveFileNameA
GetOpenFileNameA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

SetSecurityDescriptorDacl
RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegEnumKeyA
RegOpenKeyA
OpenThreadToken
OpenProcessToken
DuplicateToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
RegCloseKey
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
FreeSid
RegOpenKeyExA
RegEnumValueA
RegSetValueA
RegQueryValueA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA

shell32

DragFinish
DragAcceptFiles
SHGetSpecialFolderLocation
SHGetFileInfoA
DragQueryFileA
ShellExecuteExA
SHFileOperationA
SHBrowseForFolderA
SHGetMalloc
SHGetDesktopFolder
SHGetPathFromIDListA
SHChangeNotify
ShellExecuteA
ExtractIconA

oledlg

ord8

ole32

CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoFreeUnusedLibraries
OleUninitialize
CoRegisterMessageFilter
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CoTaskMemFree
ReleaseStgMedium
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CoRevokeClassObject
OleDuplicateData
OleGetClipboard
CreateStreamOnHGlobal
OleInitialize

Sections

.text
Size: 1003KB - Virtual size: 1002KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2597f30e8c8d52d3c036484010a44f07

Headers

File Characteristics

Imports

user32

comctl32

version

kernel32

gdi32

comdlg32

winspool.drv

advapi32

shell32

oledlg

ole32

Sections

.text Size: 1003KB - Virtual size: 1002KB

.rdata Size: 159KB - Virtual size: 158KB

.data Size: 46KB - Virtual size: 255KB

.rsrc Size: 124KB - Virtual size: 124KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 1003KB - Virtual size: 1002KB

.rdata
Size: 159KB - Virtual size: 158KB

.data
Size: 46KB - Virtual size: 255KB

.rsrc
Size: 124KB - Virtual size: 124KB

.rmnet
Size: 56KB - Virtual size: 60KB