91f749bd6c3e7b2c3fb9516ff9e025cf158cbc1cdc0dfe80a7380502469b79fb

Sharing

Copy URL Twitter E-mail

General

Target

91f749bd6c3e7b2c3fb9516ff9e025cf158cbc1cdc0dfe80a7380502469b79fb
Size

868KB
MD5

3f0bc4d0217eba69197fa71d5609bc50
SHA1

a86d22fb71d2078c548bbc22819f0634b8b795d6
SHA256

91f749bd6c3e7b2c3fb9516ff9e025cf158cbc1cdc0dfe80a7380502469b79fb
SHA512

b4932631bdf31722b5beedafcff9acf9c79f15c940fc8a126193284ee4011355d55f98849a78583487d82f6580ba348856d9e508f5c97d90b7631b136b80f248
SSDEEP

12288:JHNYrdkjZHB087eazLMC3Zf+zqg/AuzUI3HsNZQ:dNAQ5RMCF+zqg/AugI3MNO

Score

N/A

Malware Config

Signatures

Files

91f749bd6c3e7b2c3fb9516ff9e025cf158cbc1cdc0dfe80a7380502469b79fb
.exe windows x86

a70e80e5a9cdcd591b8145ada5fd66e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
FileTimeToSystemTime
WritePrivateProfileStringA
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
SetErrorMode
FileTimeToLocalFileTime
RtlUnwind
RaiseException
ExitThread
CreateThread
GetSystemTimeAsFileTime
ExitProcess
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetStartupInfoA
HeapSize
TlsAlloc
HeapDestroy
HeapCreate
GetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsValidCodePage
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedDecrement
GetModuleFileNameW
SuspendThread
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcmpA
GlobalAlloc
FormatMessageA
LocalFree
MulDiv
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
SetLastError
lstrcmpW
InterlockedIncrement
GetDateFormatA
GetTimeFormatA
FindNextFileA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ResetEvent
GlobalMemoryStatus
GetLocalTime
QueryPerformanceFrequency
CreateIoCompletionPort
PostQueuedCompletionStatus
GetQueuedCompletionStatus
GetProcessHeap
HeapAlloc
HeapFree
lstrcatA
WinExec
lstrcpyA
GetWindowsDirectoryA
CompareStringW
CompareStringA
UnmapViewOfFile
FlushViewOfFile
CreateFileMappingA
MapViewOfFile
SleepEx
FlushInstructionCache
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetVersion
MultiByteToWideChar
GetDiskFreeSpaceExA
CreateDirectoryA
GetFileTime
FindClose
FindFirstFileA
DeleteFileA
lstrlenA
OutputDebugStringA
GetFileSize
WriteFile
CreateFileA
ReadFile
FindResourceA
LoadResource
LockResource
SizeofResource
SetCurrentDirectoryA
CreateMutexA
GetFileAttributesA
GetModuleHandleA
CreateProcessA
GetLastError
GetSystemDirectoryA
CreateEventA
GetModuleFileNameA
LoadLibraryA
GetTickCount
GetCurrentProcessId
Process32First
Process32Next
OpenProcess
GetExitCodeProcess
TerminateProcess
TerminateThread
GetProcAddress
FreeLibrary
CreateToolhelp32Snapshot
SetEvent
WaitForSingleObject
Module32First
Module32Next
CloseHandle
Sleep
InterlockedExchange
VirtualFree
WideCharToMultiByte

user32

RegisterClipboardFormatA
PostThreadMessageA
IsRectEmpty
CopyAcceleratorTableA
GetSysColorBrush
DestroyMenu
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
TabbedTextOutA
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
GetMessageA
TranslateMessage
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuState
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
RegisterWindowMessageA
WinHelpA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
DefWindowProcA
CallWindowProcA
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetWindowTextLengthA
GetWindowTextA
SetWindowPos
SetFocus
IsWindowEnabled
ShowWindow
MoveWindow
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
GetDlgItem
UnregisterClassA
MessageBeep
GetNextDlgGroupItem
GetForegroundWindow
InvalidateRgn
GetWindow
OffsetRect
UnionRect
ScreenToClient
SetWindowLongA
GetCursorPos
PtInRect
GetWindowLongA
ReleaseCapture
IsWindow
GetFocus
SetCapture
GetCapture
GetComboBoxInfo
RedrawWindow
CopyRect
LoadCursorA
LoadBitmapA
SetCursor
DrawTextA
CharNextA
CharUpperA
GetParent
SetRect
PostQuitMessage
wsprintfA
LoadIconA
KillTimer
SetTimer
IsWindowVisible
InvalidateRect
ReleaseDC
GetDC
GetClientRect
PostMessageA
SendMessageA
MessageBoxA
UpdateWindow
EnableWindow
GetMenu

gdi32

OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
SetViewportOrgEx
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
CreateCompatibleBitmap
SetMapMode
RestoreDC
SaveDC
SetBkColor
GetClipBox
GetDeviceCaps
GetTextExtentPoint32A
CreateRectRgn
GetStockObject
CreateSolidBrush
GetTextMetricsA
CreateBitmap
SetBkMode
SetTextColor
StretchBlt
PatBlt
GetObjectA
CreateDIBitmap
CreateFontA
DeleteObject
BitBlt
SelectObject
CreateCompatibleDC

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegCloseKey
RegSetValueExA
RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA

shell32

ShellExecuteA

comctl32

_TrackMouseEvent

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize
StgOpenStorageOnILockBytes
OleFlushClipboard
CoRegisterMessageFilter
CoCreateGuid

oleaut32

SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VariantClear
VariantInit
VariantChangeType
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen

ws2_32

WSAWaitForMultipleEvents
WSASetEvent
ntohs
WSASendTo
WSASend
getsockopt
getpeername
accept
connect
getsockname
WSARecv
shutdown
listen
WSASocketA
recvfrom
htons
socket
bind
WSACreateEvent
WSACleanup
WSAStartup
inet_ntoa
gethostbyname
inet_addr
WSAGetLastError
WSAIoctl
WSARecvFrom
setsockopt
WSACloseEvent
closesocket
sendto
WSAGetOverlappedResult
WSAResetEvent

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

winmm

timeKillEvent
timeSetEvent

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 580KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a70e80e5a9cdcd591b8145ada5fd66e6

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

version

winmm

iphlpapi

Sections

.text Size: 580KB - Virtual size: 576KB

.rdata Size: 132KB - Virtual size: 129KB

.data Size: 24KB - Virtual size: 364KB

.rsrc Size: 20KB - Virtual size: 16KB

.text Size: 108KB - Virtual size: 108KB

.text
Size: 580KB - Virtual size: 576KB

.rdata
Size: 132KB - Virtual size: 129KB

.data
Size: 24KB - Virtual size: 364KB

.rsrc
Size: 20KB - Virtual size: 16KB

.text
Size: 108KB - Virtual size: 108KB