0f2346355c896ab2a262af4585e2d76ce3e4b8b67904d7872e5a5889a65a3a8f

Sharing

Copy URL

Twitter E-mail

General

Target

0f2346355c896ab2a262af4585e2d76ce3e4b8b67904d7872e5a5889a65a3a8f
Size

356KB
MD5

52ac17cfac3ea3fd761f5d9ba67e3f70
SHA1

19e2a246ec2ae8f57f65ae27ba8a99f197e61e31
SHA256

0f2346355c896ab2a262af4585e2d76ce3e4b8b67904d7872e5a5889a65a3a8f
SHA512

1ea7f97952a45efedfa3e38ade378f3cfa1d7585c1ed1cb60fd0f33106d0a398782ff799403b46aeb928b8eff8afbfc58059151edd2566a679b96f185f830114
SSDEEP

6144:8g27CHbEH4s/0oOerJlvLryvT2HopOUpzo0naGR:8feoH4sMoOe1ljryvrYQPaGR

Score

N/A

Malware Config

Signatures

Files

0f2346355c896ab2a262af4585e2d76ce3e4b8b67904d7872e5a5889a65a3a8f
.exe windows x86

88709eacd0a1b8693b92ef1a470b4a96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

setsockopt
closesocket
select
connect
htons
WSAGetLastError
socket
send
recv
inet_addr
gethostname
ioctlsocket
WSAStartup
inet_ntoa
WSACleanup
gethostbyname

kernel32

GlobalFlags
GetProcessVersion
SizeofResource
GetThreadLocale
GetCPInfo
GetOEMCP
SetErrorMode
DuplicateHandle
GetCurrentProcess
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapFree
RaiseException
HeapReAlloc
HeapSize
GetACP
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
TlsGetValue
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
CreateProcessA
lstrcpyA
GetModuleFileNameA
CloseHandle
ReleaseMutex
GetLastError
CreateMutexA
GetPrivateProfileIntA
GetPrivateProfileStringA
Process32Next
Process32First
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
lstrcpynA
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
MoveFileA
DeleteFileA
lstrcatA
CopyFileA
Sleep
GetModuleHandleA
GetProcAddress
FormatMessageA
LocalFree
LockResource
FindResourceA
LoadResource
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WaitForSingleObject
InitializeCriticalSection
CreateDirectoryA
WritePrivateProfileStringA
SetThreadPriority
OutputDebugStringA
GetTickCount
GetFileAttributesA
FindFirstFileA
FindClose
CreateFileA
GetFileSize
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
ReadFile
CreateThread
ResumeThread
FreeEnvironmentStringsW

user32

EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadStringA
DestroyMenu
InflateRect
GetDesktopWindow
GetClassNameA
GetSysColorBrush
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
BeginPaint
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
SystemParametersInfoA
GetWindowPlacement
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
EnableWindow
GetCursorPos
PtInRect
LoadCursorA
SetCursor
GetDC
KillTimer
SetTimer
PostQuitMessage
GetWindowRect
InvalidateRect
PostMessageA
GetWindowDC
ReleaseDC
ClientToScreen
ShowWindow
MoveWindow
SetWindowTextA
RegisterClassA
IsDialogMessageA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
LoadImageA
IsWindowVisible
MessageBoxA
LoadIconA
EnumWindows
GetWindowThreadProcessId
GetParent
SendMessageA
IsWindowUnicode
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
IntersectRect

gdi32

SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
PatBlt
DPtoLP
GetTextColor
GetBkColor
LPtoDP
DeleteDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
GetObjectA
GetStockObject
CreateFontA
GetTextExtentPointA
CreateDIBitmap
DeleteObject

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA

shell32

SHFileOperationA
ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

CoGetClassObject
CoTaskMemAlloc
CLSIDFromProgID
CreateStreamOnHGlobal
StgOpenStorageOnILockBytes
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CLSIDFromString

olepro32

ord253
ord251

oleaut32

SysAllocStringByteLen
SysAllocString
SysStringLen
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

Sections

.text
Size: 240KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

88709eacd0a1b8693b92ef1a470b4a96

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 240KB - Virtual size: 238KB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 20KB - Virtual size: 37KB

.rsrc Size: 48KB - Virtual size: 46KB

.text
Size: 240KB - Virtual size: 238KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 20KB - Virtual size: 37KB

.rsrc
Size: 48KB - Virtual size: 46KB