9014c9e69b6c4e55a5f211adc0dfa9947d4ffb92eb5cd6678184cd4aa37e54e1

Sharing

Copy URL Twitter E-mail

General

Target

9014c9e69b6c4e55a5f211adc0dfa9947d4ffb92eb5cd6678184cd4aa37e54e1
Size

760KB
MD5

20d2e50f6598decc368d760d49c97f90
SHA1

3ba19c470e9613c332c88420624f01b779e19167
SHA256

9014c9e69b6c4e55a5f211adc0dfa9947d4ffb92eb5cd6678184cd4aa37e54e1
SHA512

42608fb930dac030d1f116ed3a38a9a8d283b4ae90d72c61360b8f53c144e0897a6e0a152e413bfcbf741eed65582a827bc110fa502b211bbc9dd953b5bced04
SSDEEP

12288:tCitBqHRvkC5fzx6ZeW6RpdvT3DiLKK2DXZJedp1tEmvKqlVQPaGl:tCSW5VRpJiNKjlmiEQPaGl

Score

N/A

Malware Config

Signatures

Files

9014c9e69b6c4e55a5f211adc0dfa9947d4ffb92eb5cd6678184cd4aa37e54e1
.exe windows x86

34f8bda8a3cafa4cb64103f1b782fefc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA

ws2_32

WSAStartup
ntohs
htons
htonl
ntohl
WSACleanup

atl

ord20
ord32
ord30
ord58
ord17
ord18
ord57
ord16
ord21
ord23

kernel32

CompareStringA
LocalFileTimeToFileTime
GetFileSize
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
CreateFileA
GetTempFileNameA
DuplicateHandle
GetCurrentProcess
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
GetVolumeInformationA
GetStringTypeExA
GetShortPathNameA
IsBadWritePtr
IsBadReadPtr
GetProcessVersion
GlobalFlags
SizeofResource
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetCPInfo
GetOEMCP
WritePrivateProfileStringA
SetErrorMode
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
HeapFree
HeapReAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
ExitProcess
RaiseException
TerminateProcess
HeapSize
GetACP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
IsBadCodePtr
SetStdHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetPrivateProfileStringA
FindFirstFileA
FindClose
WideCharToMultiByte
SetCurrentDirectoryA
DeleteFileA
GetCurrentDirectoryA
OutputDebugStringA
FindResourceA
LoadResource
LockResource
LoadLibraryA
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
lstrlenW
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
HeapCreate
GetSystemInfo
HeapAlloc
GetFileAttributesA
GetTickCount
GlobalAlloc
GetCurrentThread
lstrcmpA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
InterlockedExchange
GetProfileStringA
GetCurrentThreadId
lstrcpynA
FormatMessageA
LocalFree
MulDiv
GetCommandLineA
lstrcmpiA
OpenMutexA
CreateMutexA
CreateEventA
CreateThread
WaitForSingleObject
CloseHandle
InterlockedDecrement
SetEvent
lstrlenA
MultiByteToWideChar
GetFullPathNameA
SystemTimeToFileTime
GetThreadLocale
GlobalFree
GlobalUnlock
GlobalLock
GetProcAddress
GetModuleHandleA
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcatA
GetVersion
SetLastError

user32

SetRect
OffsetRect
LoadCursorA
DrawTextA
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringA
ModifyMenuA
CheckMenuItem
EnableMenuItem
LoadMenuA
GetSubMenu
GetParent
CopyRect
DrawFocusRect
GetWindowLongA
GetSysColor
GetSysColorBrush
SetWindowPos
LoadStringA
ShowWindow
ClientToScreen
WindowFromPoint
GetActiveWindow
RedrawWindow
LoadBitmapA
CreatePopupMenu
InsertMenuItemA
GetCursorPos
LoadIconA
UpdateWindow
SendMessageA
SetTimer
FillRect
CharNextA
PostThreadMessageA
InvalidateRect
GetSystemMetrics
GetDC
ReleaseDC
KillTimer
SetMenu
IsWindow
GetWindowRect
GetClientRect
PtInRect
EnableWindow
PostMessageA
DrawIconEx
CreateWindowExA
ReleaseCapture
SetCapture
GetCapture
SetCursor
GetDlgItem
SendDlgItemMessageA
SetDlgItemTextA
IsDialogMessageA
IsWindowVisible
GetWindowTextA
GetWindowTextLengthA
GetDlgCtrlID
SetWindowLongA
MoveWindow
IsWindowEnabled
SetFocus
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
EndDialog
GetNextDlgTabItem
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
RegisterWindowMessageA
GetWindow
SetForegroundWindow
GetForegroundWindow
GetLastActivePopup
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
DefWindowProcA
GetKeyState
SetWindowPlacement
TrackPopupMenu
GetMenu
RegisterClassA
GetClassInfoA
wsprintfA
WinHelpA
IsChild
MessageBoxA
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
GetFocus
DispatchMessageA
PeekMessageA
MapWindowPoints
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
GrayStringA
ValidateRect
TranslateMessage
GetMessageA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
GetDesktopWindow
DestroyMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
PostQuitMessage
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
InflateRect
ShowOwnedPopups
DestroyCursor
CharUpperA
CopyAcceleratorTableA
GetClassNameA
DestroyIcon
GetNextDlgGroupItem
MessageBeep
FindWindowA
GetTabbedTextExtentA
GetDCEx
LockWindowUpdate
SetParent
IsWindowUnicode
DefDlgProcA
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
SetWindowTextA

advapi32

SetFileSecurityA
GetFileSecurityA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyA
RegQueryValueA
RegOpenKeyExA
RegCreateKeyA
RegSetValueA
RegCloseKey

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetClassObject
CoTaskMemAlloc
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
CoTaskMemFree
CoInitialize
CoUninitialize
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
CoFreeUnusedLibraries
OleUninitialize
OleInitialize

oleaut32

GetErrorInfo
CreateErrorInfo
VariantInit
SysAllocStringLen
VariantChangeType
SysAllocString
VariantTimeToSystemTime
VariantCopy
SysAllocStringByteLen
QueryPathOfRegTypeLi
SysStringLen
LoadRegTypeLi
SysFreeString
VariantClear

gdiplus

GdiplusStartup
GdipDrawImagePointsI
GdipCreateFromHDC
GdipAlloc
GdipFree
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipDisposeImage
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdiplusShutdown
GdipCloneBitmapAreaI
GdipCreateBitmapFromFile
GdipDrawImageRectI
GdipDeleteGraphics

gdi32

GetROP2
GetBkMode
GetTextAlign
GetPolyFillMode
GetStretchBltMode
GetNearestColor
GetTextMetricsA
LPtoDP
CreateDCA
SetAbortProc
StartPage
EndPage
EndDoc
AbortDoc
GetViewportOrgEx
Rectangle
DPtoLP
CreateFontIndirectA
CreateRectRgnIndirect
CombineRgn
SetRectRgn
PatBlt
GetMapMode
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetTextFaceA
GetWindowExtEx
GetViewportExtEx
GetCharWidthA
CreateRectRgn
GetCurrentPositionEx
SetTextAlign
LineTo
MoveToEx
IntersectClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
StartDocA
DeleteDC
SetBkColor
GetWindowOrgEx
GetTextExtentPointA
GetClipBox
GetStockObject
GetDeviceCaps
GetBkColor
GetTextColor
CreatePen
CreateBitmap
StretchBlt
CreateCompatibleBitmap
GetObjectA
SetTextColor
SetBkMode
SelectObject
CreatePatternBrush
CreateCompatibleDC
BitBlt
CreateFontA
DeleteObject
GetTextExtentPoint32A
CreateSolidBrush
CreateDIBitmap

comdlg32

PrintDlgA
CommDlgExtendedError
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

shell32

DragFinish
ShellExecuteA
DragQueryFileA
SHGetFileInfoA
ExtractIconA

comctl32

ImageList_Destroy
ImageList_ReplaceIcon
_TrackMouseEvent
ord17
ImageList_Create

oledlg

ord8

olepro32

ord253

Sections

.text
Size: 556KB - Virtual size: 554KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

34f8bda8a3cafa4cb64103f1b782fefc

Headers

File Characteristics

Imports

winmm

ws2_32

atl

kernel32

user32

advapi32

ole32

oleaut32

gdiplus

gdi32

comdlg32

winspool.drv

shell32

comctl32

oledlg

olepro32

Sections

.text Size: 556KB - Virtual size: 554KB

.rdata Size: 108KB - Virtual size: 106KB

.data Size: 24KB - Virtual size: 42KB

.rsrc Size: 68KB - Virtual size: 67KB

.text
Size: 556KB - Virtual size: 554KB

.rdata
Size: 108KB - Virtual size: 106KB

.data
Size: 24KB - Virtual size: 42KB

.rsrc
Size: 68KB - Virtual size: 67KB