9d78234b1a57c31edb84e506cc8361d8fcf54ed03e3933473b926c156eb9f847

Sharing

Copy URL

Twitter E-mail

General

Target

9d78234b1a57c31edb84e506cc8361d8fcf54ed03e3933473b926c156eb9f847
Size

956KB
MD5

77ccab1699449baf7d7c5922ffbce26e
SHA1

9ca4de9cf777b5ad082d76ddd90ac720a3bbb349
SHA256

9d78234b1a57c31edb84e506cc8361d8fcf54ed03e3933473b926c156eb9f847
SHA512

df6ceb16f8a1569563681bcc61f4d5c7bda14b17192c46b23434c1bdae723e07cc4a8baa7851361ed8eb75d4193c7d5cf885d961baf0c303d495a2a7277155e2
SSDEEP

12288:SgBQ60+aORzlEPt4EEUuGdABm6pjXulG0WeAGgbA6gJF5eJDhtxtN2ao/W17Bkm/:Slt4EERGQgGxNGOgJF5u2e6WmX3Sh

Score

N/A

Malware Config

Signatures

Files

9d78234b1a57c31edb84e506cc8361d8fcf54ed03e3933473b926c156eb9f847
.exe windows x86

3e04ce9acc18ebee92d174e780cb5aa3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
SetFileAttributesW
SetErrorMode
GlobalGetAtomNameW
CopyFileW
GetStartupInfoW
ExitProcess
RtlUnwind
RaiseException
HeapFree
HeapAlloc
TerminateProcess
CreateThread
ExitThread
GetTimeZoneInformation
GetSystemTime
HeapSize
HeapReAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
FatalAppExitA
SystemTimeToFileTime
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetStdHandle
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
GetLocaleInfoW
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
LocalFileTimeToFileTime
GetFileTime
GetFileSize
GetFileAttributesW
SizeofResource
CreateFileA
IsBadStringPtrA
IsBadStringPtrW
FindResourceA
GlobalAddAtomA
GetProfileStringA
InterlockedExchange
GetLogicalDrives
GetDriveTypeW
QueryDosDeviceW
GetTempPathW
GetVersionExW
GetSystemDirectoryW
DeviceIoControl
GetCurrentDirectoryW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GetShortPathNameW
lstrcmpiW
GetThreadLocale
GetStringTypeExW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
LoadLibraryW
DeleteFileW
MoveFileW
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
ReadFile
GetCurrentProcess
DuplicateHandle
GetLastError
WaitForMultipleObjects
ReleaseMutex
CreateMutexW
ReleaseSemaphore
CreateSemaphoreW
lstrcpynW
GlobalFree
CreateEventW
SuspendThread
SetThreadPriority
ResumeThread
lstrcmpW
lstrcmpA
lstrcmpiA
GetCurrentThread
FormatMessageW
LocalFree
WaitForSingleObject
SetLastError
GetModuleHandleA
LoadLibraryA
FreeLibrary
FindResourceW
LoadResource
LockResource
GetVersion
lstrcatW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrcpyW
GetModuleHandleW
GetProcAddress
lstrlenA
lstrlenW
InterlockedDecrement
InterlockedIncrement
GetComputerNameW
CreateFileW
SetFilePointer
WriteFile
CloseHandle
MultiByteToWideChar
SetCurrentDirectoryW
GetTickCount
GetLocalTime
GetModuleFileNameW
CreateDirectoryW
ResetEvent
SetEvent
TerminateThread
Sleep
LeaveCriticalSection
EnterCriticalSection
MulDiv
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
GlobalAlloc
GlobalSize
GlobalLock
SetUnhandledExceptionFilter
GlobalUnlock

user32

PostThreadMessageW
RemoveMenu
RegisterClipboardFormatW
InflateRect
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
TranslateAcceleratorW
LoadAcceleratorsW
SetRectEmpty
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableW
CharNextW
GetDialogBaseUnits
GetMenuStringW
DeleteMenu
InsertMenuW
WindowFromPoint
GetWindowThreadProcessId
WaitMessage
ReleaseCapture
SetCapture
GetSysColorBrush
LoadCursorW
GetDesktopWindow
PtInRect
CharUpperW
LoadStringW
wvsprintfW
MapDialogRect
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamW
GetMessageW
GetActiveWindow
ValidateRect
SetCursor
PostQuitMessage
DestroyMenu
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
SetMenuItemBitmaps
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
GrayStringW
DrawTextW
TabbedTextOutW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
UpdateWindow
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
CloseClipboard
GetClipboardData
OpenClipboard
SetClipboardData
EmptyClipboard
UnregisterClassW
GetWindowTextLengthA
HideCaret
BeginDeferWindowPos
EndDeferWindowPos
IsWindowVisible
ScrollWindow
DestroyIcon
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxW
IsChild
GetCapture
WinHelpW
wsprintfW
GetClassInfoW
RegisterClassW
GetMenu
SetWindowPlacement
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
DrawTextA
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
ShowOwnedPopups
SetWindowLongA
SetPropA
GetPropA
EnumWindows
GetSysColor
KillTimer
InvalidateRect
SetTimer
PostMessageW
EnableWindow
IsMenu
IsWindow
GetClassNameW
GetWindowLongW
EnumChildWindows
SendMessageW
ModifyMenuW
GetMenuItemID
GetMenuItemCount
LoadIconW
MsgWaitForMultipleObjects
TranslateMessage
GetDlgItem
GetWindowTextLengthW
GetWindowTextW
GetDlgCtrlID
GetKeyState
DestroyWindow
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongW
SetWindowPos
RegisterWindowMessageW
OffsetRect
IntersectRect
SystemParametersInfoW
GetWindowPlacement
GetWindowRect
GetParent
LoadMenuW
GetSubMenu
GetDC
ReleaseDC
CopyRect
DrawFocusRect
CheckMenuItem
RedrawWindow
GetScrollInfo
PeekMessageW
DispatchMessageW
CreatePopupMenu
AppendMenuW
GetCursorPos
TrackPopupMenu
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu

gdi32

LPtoDP
GetMapMode
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
CopyMetaFileW
DPtoLP
GetBkColor
GetTextColor
CreateBitmap
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateDIBPatternBrushPt
CreatePatternBrush
CreateHatchBrush
ExtCreatePen
CreatePen
GetViewportExtEx
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
ExtSelectClipRgn
CreateDCW
CreateFontIndirectW
SelectClipPath
CreateRectRgn
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
GetStockObject
SelectObject
RestoreDC
SaveDC
StartDocW
GetObjectW
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
GetTextMetricsW
GetCharWidthW
GetTextExtentPoint32W
CreateFontW
CreateICW
GetDeviceCaps
DeleteDC
CreateSolidBrush
DeleteObject
ExtTextOutA
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateDIBitmap
GetWindowExtEx

comdlg32

GetOpenFileNameW
GetSaveFileNameW
GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegDeleteValueW
RegCreateKeyW
RegEnumKeyW
RegQueryValueW
RegSetValueW
RegDeleteKeyW
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegOpenKeyW
RegCloseKey

shell32

DragFinish
DragQueryFileW
ExtractIconW
SHGetFileInfoW
SHFileOperationW
DragAcceptFiles

comctl32

ord17

oledlg

OleUIBusyW

ole32

ReleaseStgMedium
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
CoRevokeClassObject
CoFreeUnusedLibraries
OleUninitialize
CoRegisterMessageFilter
OleRun
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoCreateGuid
CoUninitialize
OleSetClipboard
OleInitialize
CoRegisterClassObject
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
OleDuplicateData
CoDisconnectObject

olepro32

ord253

oleaut32

LoadTypeLi
SysStringLen
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysReAllocStringLen
SafeArrayLock
SysAllocString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
SysStringByteLen
SysAllocStringByteLen
VarCyFromStr
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement

shlwapi

PathFileExistsW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

setupapi

CM_Get_Device_IDW
SetupDiEnumDeviceInterfaces
CM_Locate_DevNodeW
CM_Get_Parent
SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInterfaceW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
CM_Get_Child
CM_Get_DevNode_Registry_PropertyW
CM_Get_Sibling

newdev

UpdateDriverForPlugAndPlayDevicesW

Sections

.text
Size: 668KB - Virtual size: 668KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cggxhat
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3e04ce9acc18ebee92d174e780cb5aa3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

shlwapi

version

setupapi

newdev

Sections

.text Size: 668KB - Virtual size: 668KB

.rdata Size: 108KB - Virtual size: 104KB

.data Size: 76KB - Virtual size: 159KB

.rsrc Size: 100KB - Virtual size: 100KB

cggxhat Size: - Virtual size: 4KB

.text
Size: 668KB - Virtual size: 668KB

.rdata
Size: 108KB - Virtual size: 104KB

.data
Size: 76KB - Virtual size: 159KB

.rsrc
Size: 100KB - Virtual size: 100KB

cggxhat
Size: - Virtual size: 4KB