4fd0c963b80c1d029003f0c6604f589fabdae7f354af3d27de27d5c00ed36bdb

Sharing

Copy URL Twitter E-mail

General

Target

4fd0c963b80c1d029003f0c6604f589fabdae7f354af3d27de27d5c00ed36bdb
Size

1.3MB
MD5

f0b7eb4d73247f8cc0c22b83fb1627e1
SHA1

a9ee71d348f1722e375930561ba28e17a6f67f8b
SHA256

4fd0c963b80c1d029003f0c6604f589fabdae7f354af3d27de27d5c00ed36bdb
SHA512

5db20806bc4cea6338d138f07714b722c84aeb560253de18846ba1bf513df379484023a5969ef5b3b27f4ccd315354f65224f272586e7669a573c1f4a6ae4aa3
SSDEEP

24576:i3JsXi1Gg1EhE+OmexolcGqYiiGw9dgYp8:imquOdKcGpYYp8

Score

N/A

Malware Config

Signatures

Files

4fd0c963b80c1d029003f0c6604f589fabdae7f354af3d27de27d5c00ed36bdb
.exe windows x86

ac102910ce6f2685e5cc02c3da7fee91

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

gethostbyname
getservbyname
WSAStartup
listen
bind
ntohs
sendto
WSACleanup
gethostname
shutdown
accept
send
WSAGetLastError
inet_addr
getprotobyname
socket
connect
recv
htons

kernel32

GetProfileStringA
SetLastError
CreateThread
InterlockedIncrement
InterlockedDecrement
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
GlobalAlloc
GlobalLock
CloseHandle
WaitForSingleObject
SetEvent
SuspendThread
CreateEventA
FreeResource
LoadResource
FindResourceA
LockResource
GlobalFree
GlobalUnlock
GetLastError
lstrcatA
GetVersion
SetThreadPriority
GetThreadPriority
ResumeThread
SetEnvironmentVariableA
GetLocaleInfoW
GetLocaleInfoA
SetStdHandle
GetUserDefaultLCID
IsValidCodePage
IsValidLocale
IsBadCodePtr
GetStringTypeW
GetStringTypeA
Sleep
SetConsoleCtrlHandler
SetUnhandledExceptionFilter
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
VirtualAlloc
HeapFree
HeapReAlloc
HeapAlloc
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
FatalAppExitA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
GetOEMCP
GetACP
GetCPInfo
OutputDebugStringA
GetStdHandle
DebugBreak
RaiseException
ExitThread
HeapValidate
GetCommandLineA
GetStartupInfoA
RtlUnwind
TerminateProcess
ExitProcess
GlobalSize
CopyFileA
GetTickCount
lstrlenW
GetModuleHandleA
FormatMessageA
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetDiskFreeSpaceA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
SetErrorMode
GetVersionExA
SizeofResource
GetProfileIntA
VirtualProtect
FileTimeToLocalFileTime
FileTimeToSystemTime
GetModuleFileNameA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
LoadLibraryA
GetProcAddress
FreeLibrary
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetProcessVersion
GetCurrentDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
lstrcpyA
GlobalGetAtomNameA
GlobalAddAtomA
IsBadReadPtr
IsBadWritePtr
IsBadStringPtrA
IsBadStringPtrW
lstrcpynA
MulDiv

user32

GetMenuContextHelpId
SetMenuContextHelpId
LoadMenuIndirectA
CheckMenuRadioItem
LoadMenuA
RemoveMenu
ModifyMenuA
InsertMenuA
GetSubMenu
GetMenuStringA
GetMenuState
GetMenuItemID
GetMenuItemCount
EnableMenuItem
CheckMenuItem
AppendMenuA
DeleteMenu
IsMenu
CreatePopupMenu
CreateMenu
ScrollDC
GrayStringA
GetTabbedTextExtentA
DrawTextA
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateA
DrawIcon
InvertRect
FrameRect
FillRect
ExcludeUpdateRgn
WindowFromDC
GetSysColorBrush
SubtractRect
UnionRect
IntersectRect
OffsetRect
InflateRect
LoadStringA
wvsprintfA
SetRect
IsRectEmpty
CloseWindow
LoadCursorA
PostThreadMessageA
GetWindowContextHelpId
SetWindowContextHelpId
SendNotifyMessageA
GetForegroundWindow
SetForegroundWindow
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
GetOpenClipboardWindow
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
ChildWindowFromPointEx
ChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExA
DlgDirSelectExA
DlgDirListComboBoxA
DlgDirListA
GetDesktopWindow
SetCapture
KillTimer
SetTimer
EnableScrollBar
RedrawWindow
LockWindowUpdate
GetDCEx
SetRectEmpty
PtInRect
ValidateRgn
InvalidateRgn
InvalidateRect
WaitMessage
ReleaseCapture
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
EndPaint
BeginPaint
ClientToScreen
BringWindowToTop
GetWindowRgn
SetWindowRgn
ArrangeIconicWindows
LoadAcceleratorsA
TranslateAcceleratorA
HiliteMenuItem
GetSystemMenu
DrawMenuBar
SetMenu
GetMenu
PostMessageA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
LoadIconA
SystemParametersInfoA
GetClientRect
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetWindowRect
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
GetLastActivePopup
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
TrackPopupMenu
SetWindowPlacement
GetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
DestroyMenu
ReuseDDElParam
CharUpperA
GetClipboardFormatNameA
GetAsyncKeyState
SetCursorPos
DestroyCursor
GetDialogBaseUnits
MessageBeep
GetClassNameA
GetDlgCtrlID
CreateWindowExA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
SetWindowLongA
RegisterWindowMessageA
MapDialogRect
SetWindowPos
GetWindow
GetWindowThreadProcessId
GetUpdateRgn
GetUpdateRect
ShowOwnedPopups
IsWindowVisible
DestroyIcon
GetParent
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
TabbedTextOutA
IsWindow
GetMenuCheckMarkDimensions
LoadBitmapA
SetMenuItemBitmaps
GetFocus
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
GetCursorPos
SetWindowsHookExA
EnableWindow
SetCursor
PostQuitMessage
OemToCharA
CharToOemA
SendDlgItemMessageA
GetSystemMetrics
FindWindowA
SendMessageA
MessageBoxA
CharNextA
CopyAcceleratorTableA
IsClipboardFormatAvailable
RegisterClipboardFormatA
InSendMessage
IsZoomed
IsIconic
OpenIcon
UnpackDDElParam
DefDlgProcA
IsWindowUnicode
UnregisterClassA

gdi32

ExtCreatePen
SetColorAdjustment
CopyMetaFileA
StretchDIBits
CreateFontIndirectA
CreateFontA
CreateBitmapIndirect
SetBitmapBits
GetBitmapBits
SetBitmapDimensionEx
GetBitmapDimensionEx
CreateCompatibleBitmap
CreateDiscardableBitmap
CreateDIBPatternBrushPt
CreatePalette
CreateHalftonePalette
GetPaletteEntries
SetPaletteEntries
AnimatePalette
GetNearestPaletteIndex
ResizePalette
CreateRectRgn
CreateRectRgnIndirect
CreateEllipticRgn
CreateEllipticRgnIndirect
CreatePolygonRgn
CreatePolyPolygonRgn
CreateRoundRectRgn
PathToRegion
ExtCreateRegion
GetRegionData
SetRectRgn
CombineRgn
EqualRgn
OffsetRgn
GetRgnBox
PtInRegion
RectInRegion
CreateDCA
CreateICA
CreateCompatibleDC
GetDeviceCaps
GetBrushOrgEx
SetBrushOrgEx
EnumObjects
SelectObject
GetNearestColor
RealizePalette
UpdateColors
GetBkColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetMapMode
GetViewportOrgEx
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
DPtoLP
LPtoDP
FillRgn
FrameRgn
InvertRgn
PaintRgn
PtVisible
CreatePatternBrush
RectVisible
GetCurrentPositionEx
Arc
Polyline
Chord
Ellipse
Pie
Polygon
PolyPolygon
Rectangle
RoundRect
PatBlt
BitBlt
StretchBlt
GetPixel
SetPixel
FloodFill
ExtFloodFill
TextOutA
GetTextExtentPointA
GetTextAlign
GetTextFaceA
GetTextMetricsA
GetTextCharacterExtra
GetCharWidthA
GetAspectRatioFilterEx
Escape
SetBoundsRect
GetBoundsRect
ResetDCA
GetOutlineTextMetricsA
GetCharABCWidthsA
GetFontData
GetKerningPairsA
GetGlyphOutlineA
StartDocA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
MaskBlt
PlgBlt
SetPixelV
AngleArc
GetArcDirection
PolyPolyline
GetColorAdjustment
GetCurrentObject
PolyBezier
DrawEscape
ExtEscape
GetCharABCWidthsFloatA
GetCharWidthFloatA
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetMiterLimit
GetPath
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
GdiComment
PlayEnhMetaFile
DeleteDC
SaveDC
RestoreDC
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
CreatePenIndirect
CreatePen
GetObjectType
UnrealizeObject
GetStockObject
CreateDIBitmap
GetObjectA
SetBkColor
SetTextColor
ExtTextOutA
CloseEnhMetaFile
CreateEnhMetaFileA
CloseMetaFile
CreateMetaFileA
CreateBitmap
CreateSolidBrush
CreateHatchBrush
CreateBrushIndirect
PolyBezierTo
IntersectClipRect
ExcludeClipRect
PlayMetaFile
EnumMetaFile
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
GetClipRgn
DeleteObject
OffsetClipRgn
SetMapperFlags
PolylineTo
PolyDraw
SetArcDirection
ArcTo
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
MoveToEx

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

GetFileSecurityA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyA
RegSetValueA
SetFileSecurityA

shell32

ExtractIconA
DragQueryFileA
DragFinish
SHGetFileInfoA
DragAcceptFiles

comctl32

ImageList_Merge
ord17
ord8
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ord13
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Read
ImageList_Write
ord14
ImageList_GetImageCount
ImageList_Add
ImageList_AddMasked
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Draw
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_SetOverlayImage
ImageList_GetImageInfo
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragMove
ImageList_SetDragCursorImage
ImageList_DragShowNolock
ImageList_GetDragImage
ImageList_DragEnter
ImageList_DragLeave

oledlg

ord3
ord7
ord5
ord4
ord8
ord6
ord9

ole32

CreateItemMoniker
CreateStreamOnHGlobal
CoGetMalloc
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
OleLockRunning
OleSetContainedObject
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateFromFile
OleCreateLinkToFile
OleCreate
OleIsCurrentClipboard
OleSave
StgIsStorageILockBytes
StringFromCLSID
ReadClassStg
WriteClassStm
CreateGenericComposite
CreateFileMoniker
OleQueryCreateFromData
OleQueryLinkFromData
OleGetClipboard
OleSetMenuDescriptor
DoDragDrop
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoRegisterClassObject
CoRegisterMessageFilter
ReleaseStgMedium
CoTreatAsClass
CoGetClassObject
StringFromGUID2
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleFlushClipboard
OleSetClipboard
OleSaveToStream
StgOpenStorageOnILockBytes
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
OleDuplicateData
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoDisconnectObject
OleRun
GetHGlobalFromILockBytes
OleGetIconOfClass
OleLoad
OleIsRunning

oleaut32

SafeArrayUnlock
SysAllocStringLen
LoadTypeLi
SysStringLen
DosDateTimeToVariantTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
VarBstrFromCy
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromDate
VarDateFromStr
SysFreeString
VariantClear
VariantCopy
OleCreateFontIndirect
SysReAllocStringLen
SysAllocString
VariantChangeType
SafeArrayGetElemsize
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SysStringByteLen
SafeArrayGetDim
SafeArrayRedim
SafeArrayCreate
VarCyFromStr
SysAllocStringByteLen

urlmon

CreateAsyncBindCtx
CreateURLMoniker
RegisterBindStatusCallback

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac102910ce6f2685e5cc02c3da7fee91

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

urlmon

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.rdata Size: 99KB - Virtual size: 99KB

.data Size: 75KB - Virtual size: 93KB

.idata Size: 22KB - Virtual size: 22KB

.rsrc Size: 15KB - Virtual size: 15KB

.reloc Size: 61KB - Virtual size: 60KB

.text
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 99KB - Virtual size: 99KB

.data
Size: 75KB - Virtual size: 93KB

.idata
Size: 22KB - Virtual size: 22KB

.rsrc
Size: 15KB - Virtual size: 15KB

.reloc
Size: 61KB - Virtual size: 60KB