bba82d2fb208aa12ac7aff28cd8ffe88d46d2c770610cc118428d3081f2cec07

Sharing

Copy URL Twitter E-mail

General

Target

bba82d2fb208aa12ac7aff28cd8ffe88d46d2c770610cc118428d3081f2cec07
Size

804KB
MD5

20324ef0f676628962f3c834d897d137
SHA1

965dd806171786bc346aef365321cd90ea7240fb
SHA256

bba82d2fb208aa12ac7aff28cd8ffe88d46d2c770610cc118428d3081f2cec07
SHA512

aaeaf9de6145ccfa1827184279400446e039c68c50df86beaa077788a17f81a2d79988287c46e7e9844bf046a1532cd8d0d87b2c8e74575818ca512e1f7e445f
SSDEEP

12288:l2lubkl410Vo4OPGGBpI35/1LnXfbF8V/Tcr6TVMaqfnQ2N:lkl4yOL7I4q

Score

N/A

Malware Config

Signatures

Files

bba82d2fb208aa12ac7aff28cd8ffe88d46d2c770610cc118428d3081f2cec07
.exe windows x86

ca99c11aea4dcb4caff9d98cc5c62db0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetFileType
HeapDestroy
SetHandleCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetEnvironmentStrings
LCMapStringW
GetStringTypeA
HeapCreate
VirtualFree
LCMapStringA
TerminateProcess
GetTickCount
CompareStringW
SetEnvironmentVariableA
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetTimeZoneInformation
GetACP
HeapSize
HeapReAlloc
GetStringTypeW
GlobalLock
lstrcpyA
RaiseException
HeapFree
HeapAlloc
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
IsBadCodePtr
IsBadReadPtr
GlobalGetAtomNameA
GlobalAddAtomA
GetVersion
GetModuleHandleA
GetProcAddress
lstrlenA
MultiByteToWideChar
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
MulDiv
lstrcpynA
WritePrivateProfileStringA
FormatMessageA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentDirectoryA
SizeofResource
SetErrorMode
GetOEMCP
TlsGetValue
GetCPInfo
GetProfileStringA
GlobalReAlloc
LocalReAlloc
TlsSetValue
TlsAlloc
TlsFree
GlobalHandle
GlobalFlags
LocalFree
LocalAlloc
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SystemTimeToFileTime
InitializeCriticalSection
GetProcessVersion
LocalFileTimeToFileTime
GetFileSize
GetCurrentThread
GetPrivateProfileStringA
GlobalAlloc
GetModuleFileNameA
lstrcmpA
GlobalFree
GetStringTypeExA
GetShortPathNameA
GetThreadLocale
FindClose
GetVolumeInformationA
FindFirstFileA
SetEndOfFile
DeleteFileA
MoveFileA
CloseHandle
UnlockFile
LockFile
WriteFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
ReadFile
CreateFileA
InterlockedDecrement
DuplicateHandle
WideCharToMultiByte
LoadLibraryA
InterlockedIncrement
SetLastError
LoadResource
FreeLibrary
FindResourceA
lstrcmpiA
LockResource
GetCurrentThreadId
lstrcatA
GlobalFindAtomA
GlobalDeleteAtom
SetStdHandle
CompareStringA
GlobalUnlock
GetPrivateProfileIntA

user32

RegisterClipboardFormatA
SetCapture
PostThreadMessageA
SetParent
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
DestroyIcon
GetMenuStringA
DeleteMenu
InsertMenuA
GetTabbedTextExtentA
GetClassNameA
GetSysColorBrush
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
GetMessageA
TranslateMessage
ValidateRect
EndDialog
CreateDialogIndirectParamA
wvsprintfA
CharUpperA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
FindWindowA
GetCursorPos
PtInRect
SetRect
LoadCursorA
DestroyCursor
LoadStringA
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemInt
CheckRadioButton
SendDlgItemMessageA
MapWindowPoints
GetSysColor
DispatchMessageA
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
GetDCEx
LockWindowUpdate
EndDeferWindowPos
ScrollWindow
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
IsChild
RegisterClassA
SetTimer
GetWindowTextA
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetLastActivePopup
BringWindowToTop
IsIconic
EqualRect
GetDlgItem
InvalidateRect
SetWindowLongA
GetKeyState
SetWindowPos
GetDlgCtrlID
GetMenuItemCount
GetSubMenu
GetMenuItemID
UnpackDDElParam
ReuseDDElParam
SetActiveWindow
WinHelpA
SetMenu
GetMenu
LoadIconA
GetClassInfoA
LoadMenuA
DestroyMenu
SetFocus
GetActiveWindow
ShowWindow
GetWindowLongA
IsWindow
GetWindow
IsWindowEnabled
SetCursor
InflateRect
WindowFromPoint
KillTimer
BeginDeferWindowPos
GetClientRect
GetWindowTextLengthA
PeekMessageA
PostMessageA
GetCapture
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
RegisterWindowMessageA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
IsWindowVisible
GetDesktopWindow
GetDC
ReleaseDC
UpdateWindow
EnableWindow
SendMessageA
CopyRect
IsCharAlphaNumericA
wsprintfA
SetScrollInfo
GetScrollInfo
FillRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode

gdi32

GetDeviceCaps
GetClipBox
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
SelectClipRgn
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
DeleteObject
CreateRectRgn
SetWindowOrgEx
ResetDCA
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
CreatePatternBrush
TextOutA
ExtTextOutA
RectVisible
GetBkColor
GetNearestColor
Escape
GetStretchBltMode
GetPolyFillMode
GetTextColor
GetBkMode
GetROP2
GetTextAlign
GetTextFaceA
GetCharWidthA
GetTextMetricsA
GetWindowOrgEx
GetMapMode
GetTextExtentPoint32A
CombineRgn
CreateRectRgnIndirect
SetRectRgn
BitBlt
CreateCompatibleDC
CreateDIBitmap
GetTextExtentPointA
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SelectObject
RestoreDC
SaveDC
LPtoDP
DeleteDC
CreateDCA
SetAbortProc
StartDocA
StartPage
EndPage
EndDoc
CreatePen
DPtoLP
GetViewportOrgEx
GetStockObject
PatBlt
Rectangle
CreateBitmap
GetObjectA
CreateFontIndirectA
SetBkColor
SetTextColor
AbortDoc
SetBkMode

comdlg32

PrintDlgA
CommDlgExtendedError
ChooseFontA
GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegEnumKeyA
SetFileSecurityA
GetFileSecurityA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCreateKeyA
RegSetValueA

shell32

ExtractIconA
SHGetFileInfoA
DragQueryFileA
DragFinish

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
StgCreateDocfileOnILockBytes
OleIsCurrentClipboard
OleFlushClipboard
CoTaskMemFree
CoTaskMemAlloc
CreateILockBytesOnHGlobal

olepro32

ord253

oleaut32

SysStringLen
SysFreeString
SysAllocStringByteLen
SysAllocString
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
VariantCopy
VariantChangeType

Sections

.text
Size: 212KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 500KB - Virtual size: 1.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ca99c11aea4dcb4caff9d98cc5c62db0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 212KB - Virtual size: 208KB

.rdata Size: 56KB - Virtual size: 52KB

.data Size: 12KB - Virtual size: 25KB

.rsrc Size: 20KB - Virtual size: 18KB

.vmp0 Size: 500KB - Virtual size: 1.6MB

.text
Size: 212KB - Virtual size: 208KB

.rdata
Size: 56KB - Virtual size: 52KB

.data
Size: 12KB - Virtual size: 25KB

.rsrc
Size: 20KB - Virtual size: 18KB

.vmp0
Size: 500KB - Virtual size: 1.6MB