60b2cb747ec4ab7669cd1c3893768b2563941989b055580e4583d41fcf2890f3

Sharing

Copy URL

Twitter E-mail

General

Target

60b2cb747ec4ab7669cd1c3893768b2563941989b055580e4583d41fcf2890f3
Size

340KB
MD5

3b0b485a73d6d9d52ba27833786e4930
SHA1

d78abd45e38820bb588a2c769c435026e21b96f8
SHA256

60b2cb747ec4ab7669cd1c3893768b2563941989b055580e4583d41fcf2890f3
SHA512

1de125494d1c226142a983f1988edfe5e3873006efd742452417c8641041d983701cbeab6790b30dc99d526453dc67f8a888f5222b82f8ab7b2ee9144f8c2cb3
SSDEEP

6144:KBpewAwtLpN6Yn5J7q0GhbfKMbwo+/tDVXo:Ypjs8q0cbXJ+/tto

Score

N/A

Malware Config

Signatures

Files

60b2cb747ec4ab7669cd1c3893768b2563941989b055580e4583d41fcf2890f3
.exe windows x86

fdacd23b39bd04b0ab33fabbd7b17b1e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shfolder

SHGetFolderPathA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

kernel32

ReadFile
SetFilePointer
FlushFileBuffers
SetErrorMode
ExitProcess
RtlUnwind
HeapFree
ExitThread
CreateThread
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
HeapSize
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
UnhandledExceptionFilter
GetTimeZoneInformation
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GlobalFlags
WritePrivateProfileStringA
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
GetModuleHandleA
GetProcAddress
SetLastError
MulDiv
GlobalAlloc
lstrcpynA
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
CompareStringW
CompareStringA
GetVersion
ResetEvent
GetPrivateProfileIntA
lstrcpyA
GetPrivateProfileStringA
GetTickCount
GetComputerNameA
CreateProcessA
GetCurrentProcessId
GetShortPathNameA
GetCurrentProcess
GetTempPathA
CreateDirectoryA
GetLocalTime
CopyFileA
lstrcmpiA
CreateEventA
SetEvent
lstrlenA
GetModuleFileNameA
LoadLibraryA
FormatMessageA
LocalFree
FreeLibrary
DeleteFileA
WriteFile
CreateFileA
GetLastError
InterlockedDecrement
InterlockedIncrement
IsBadReadPtr
WaitForSingleObject
CloseHandle
MultiByteToWideChar
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
VirtualQuery

user32

BeginPaint
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RegisterClipboardFormatA
GetMessageA
GetCursorPos
ValidateRect
SetCursor
PostQuitMessage
wsprintfA
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
ShowWindow
MoveWindow
IsDialogMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
SetFocus
GetWindowTextLengthA
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
MessageBoxA
GetKeyState
IsWindowVisible
UpdateWindow
GetMenu
AdjustWindowRectEx
ScreenToClient
GetClassInfoA
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
CopyRect
PtInRect
GetWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
MessageBeep
SetForegroundWindow
KillTimer
SetTimer
BringWindowToTop
EnumChildWindows
GetWindowTextA
PostThreadMessageA
GetSysColorBrush
DestroyMenu
GetLastActivePopup
EndPaint
SetWindowTextA
LoadBitmapA
LoadCursorA
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA
GetSysColor
GetSystemMetrics
LoadIconA
GetClientRect
GetWindowRect
IsIconic
DrawIcon
PostMessageA
IsWindow
RegisterWindowMessageA
UnregisterClassA
SendMessageA
EnableWindow

gdi32

DeleteDC
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
DeleteObject
ScaleWindowExtEx
SetWindowExtEx
GetDeviceCaps
GetStockObject
GetObjectA
CreateFontIndirectA
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

comctl32

ord17

shlwapi

PathFindFileNameA
PathFindExtensionA
SHGetValueA
PathRemoveFileSpecA
PathAppendA
PathFileExistsA
PathIsDirectoryA
SHRegOpenUSKeyA
SHRegDeleteUSValueA
SHRegCloseUSKey
PathQuoteSpacesA
SHRegSetUSValueA

oledlg

ord8

ole32

CoRevokeClassObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoCreateInstance

oleaut32

SysAllocString
SysFreeString
VarBstrCat
VariantChangeType
SysAllocStringLen
VariantClear
VariantInit
VarBstrCmp
SysStringByteLen
SysAllocStringByteLen

iphlpapi

GetIfTable

wininet

HttpQueryInfoA
InternetCloseHandle
InternetOpenUrlA
InternetCrackUrlA
InternetReadFile
InternetQueryDataAvailable
InternetOpenA
InternetQueryOptionA

Sections

.text
Size: 136KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fdacd23b39bd04b0ab33fabbd7b17b1e

Headers

File Characteristics

Imports

shfolder

version

kernel32

user32

gdi32

winspool.drv

comctl32

shlwapi

oledlg

ole32

oleaut32

iphlpapi

wininet

Sections

.text Size: 136KB - Virtual size: 133KB

.rdata Size: 36KB - Virtual size: 34KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 8KB - Virtual size: 5KB

.text Size: 148KB - Virtual size: 148KB

.text
Size: 136KB - Virtual size: 133KB

.rdata
Size: 36KB - Virtual size: 34KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 8KB - Virtual size: 5KB

.text
Size: 148KB - Virtual size: 148KB