4b20bab2f01a268ab2b69d91552b037c92a9e4a59369165b4163eda259ef818e

Sharing

Copy URL Twitter E-mail

General

Target

4b20bab2f01a268ab2b69d91552b037c92a9e4a59369165b4163eda259ef818e
Size

464KB
MD5

45119d908bc69dfe62caca1dd4643c10
SHA1

a7167c00fe52cbb421424033cc0172c42e740cd0
SHA256

4b20bab2f01a268ab2b69d91552b037c92a9e4a59369165b4163eda259ef818e
SHA512

3a1779a04d1354d8d88ab8511bda2bc864396624f7bebd35920e0a06833e68e7c186e3e20a92e63a2e5350959651cbfbdc8f8d88d302855ea518e1b6542ebb55
SSDEEP

12288:m4nc/mItflWM2EnouCopQNxDIBuOFe7/uT:XItkM2btIoOFdT

Score

N/A

Malware Config

Signatures

Files

4b20bab2f01a268ab2b69d91552b037c92a9e4a59369165b4163eda259ef818e
.exe windows x86

fb5e37556fe0d903577a67af806f1306

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

siusbxp

ord2
ord1

kernel32

GetFileTime
FormatMessageA
ExitProcess
TerminateProcess
GetCommandLineA
RtlUnwind
HeapAlloc
GetStartupInfoA
GetTimeZoneInformation
GetACP
HeapReAlloc
HeapFree
CompareStringA
CompareStringW
LCMapStringA
RaiseException
GetFileSize
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapSize
GetThreadLocale
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
GetFileAttributesA
SetStdHandle
SetEnvironmentVariableA
GetTickCount
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
SetErrorMode
GetOEMCP
GetCPInfo
UnhandledExceptionFilter
GetCurrentThread
GetCurrentThreadId
GetProcAddress
GetModuleHandleA
GetWindowsDirectoryA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
LoadLibraryA
GetModuleFileNameA
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
FreeLibrary
GetProcessVersion
GetLastError
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
lstrcpynA
FileTimeToLocalFileTime
FileTimeToSystemTime
MulDiv
SetLastError
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetFileType
HeapDestroy
LCMapStringW
IsBadCodePtr

user32

TranslateAcceleratorA
ReleaseCapture
LoadAcceleratorsA
DestroyMenu
SetRectEmpty
GetDesktopWindow
SetMenu
ReuseDDElParam
LoadMenuA
BringWindowToTop
UnpackDDElParam
GetClassNameA
GetSysColorBrush
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
MoveWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
GetMessagePos
ShowWindow
GetPropA
GetMessageTime
LoadStringA
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
GetWindowPlacement
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
ShowOwnedPopups
PostQuitMessage
PostMessageA
ScreenToClient
SetCursor
DrawFrameControl
DrawIconEx
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GetWindowRect
GetCursorPos
PtInRect
KillTimer
SetTimer
SystemParametersInfoA
GetDC
ReleaseDC
FindWindowA
GetSysColor
LoadCursorA
CopyIcon
DestroyCursor
DestroyIcon
wsprintfA
EnableWindow
CharUpperA
LoadImageA
InvalidateRect
UnregisterDeviceNotification
RegisterDeviceNotificationA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
LoadIconA
SetPropA
UnhookWindowsHookEx
RemovePropA
CallWindowProcA
UnregisterClassA

gdi32

GetStockObject
GetObjectA
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
SelectObject
RestoreDC
SaveDC
DeleteDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
CreateFontIndirectA
GetTextExtentPoint32A

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA

shell32

DragQueryFileA
DragFinish
SHAppBarMessage

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
CoRegisterMessageFilter
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
OleUninitialize

olepro32

ord253

oleaut32

SysFreeString
SysStringLen
SysAllocStringByteLen
VariantChangeType
SysAllocString
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tc
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fb5e37556fe0d903577a67af806f1306

Headers

File Characteristics

Imports

siusbxp

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 140KB - Virtual size: 136KB

.rdata Size: 40KB - Virtual size: 37KB

.data Size: 12KB - Virtual size: 22KB

.rsrc Size: 16KB - Virtual size: 14KB

.tc Size: 252KB - Virtual size: 252KB

.text
Size: 140KB - Virtual size: 136KB

.rdata
Size: 40KB - Virtual size: 37KB

.data
Size: 12KB - Virtual size: 22KB

.rsrc
Size: 16KB - Virtual size: 14KB

.tc
Size: 252KB - Virtual size: 252KB