af677b0839439f8f60d1f422c827ac067f2804f8385eb76461237f9b86ed8d69

Sharing

Copy URL Twitter E-mail

General

Target

af677b0839439f8f60d1f422c827ac067f2804f8385eb76461237f9b86ed8d69
Size

540KB
MD5

8c8221b82541800ed98ba8f1121bc298
SHA1

b35a448e24810570280ac8fa5e498cc32c86cd31
SHA256

af677b0839439f8f60d1f422c827ac067f2804f8385eb76461237f9b86ed8d69
SHA512

e97c6f44ef0d6247cd48e25125f71917e1cb3d585ff129773fc232402489095973df71c33588d1d352c0e5b4ade18a77ebbcba4ee63e3aea39cd5bb1781750e1
SSDEEP

12288:h0UrWlEhl3mnKCUMAiAgb/J3f+SsSB7GQzwUhWoN:h0UJZ0b5FBCQzw

Score

N/A

Malware Config

Signatures

Files

af677b0839439f8f60d1f422c827ac067f2804f8385eb76461237f9b86ed8d69
.exe windows x86

29ad9e28eda4a6c8f30a3d31b6ad0c04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
LCMapStringW
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
LCMapStringA
IsBadWritePtr
VirtualAlloc
VirtualFree
GetProfileStringA
InterlockedExchange
HeapCreate
HeapDestroy
GetVersionExA
LocalFree
GetEnvironmentVariableA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapSize
TerminateProcess
GetACP
HeapAlloc
GetCommandLineA
GetStartupInfoA
HeapFree
GetSystemTime
GetTimeZoneInformation
ExitThread
CreateThread
RaiseException
RtlUnwind
GetTickCount
SetErrorMode
GetFileTime
GetFileSize
GetFileAttributesA
SizeofResource
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
WritePrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
FormatMessageA
MulDiv
SetLastError
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
DuplicateHandle
GlobalLock
GlobalUnlock
GlobalFree
GetThreadLocale
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleFileNameA
WideCharToMultiByte
GetCurrentThread
GetCurrentProcess
CreateEventA
WaitForSingleObject
SetEvent
CreateToolhelp32Snapshot
Process32First
lstrcmpiA
Process32Next
GetLocalTime
GetSystemInfo
Sleep
ExitProcess
CreateFileA
WriteFile
CloseHandle
GetModuleHandleA
GetProcAddress
InterlockedIncrement
lstrlenA
MultiByteToWideChar
GetLastError
InterlockedDecrement
IsValidLocale

user32

GetNextDlgGroupItem
CopyAcceleratorTableA
GetSysColorBrush
GetDesktopWindow
GetClassNameA
SetRect
DestroyMenu
LoadStringA
PtInRect
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GetMessageA
ValidateRect
GetCursorPos
CharUpperA
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
CharNextA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
PostMessageA
SendDlgItemMessageA
MapWindowPoints
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
GetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
GetMenuItemID
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetKeyState
EnableWindow
DestroyIcon
SendMessageA
IsIconic
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
IntersectRect
RegisterClipboardFormatA
PostThreadMessageA
SystemParametersInfoA
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
DrawStateA
SetWindowRgn
InflateRect
OffsetRect
GetSystemMetrics
DrawIcon
DefDlgProcA
IsWindowUnicode
IsWindow
GetClientRect
CopyRect
GetWindowPlacement
GetWindow
SetWindowPos
EqualRect
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetClassLongA
GetDlgItem
SetClassLongA
SetTimer
KillTimer
GetWindowRect
IsZoomed
IsWindowVisible
LoadBitmapA
GetSysColor
LoadCursorA
GetParent
SetCursor
ReleaseDC
GetDC
UpdateWindow
InvalidateRect
RedrawWindow
TabbedTextOutA
DrawTextA
GrayStringA
MessageBeep
DispatchMessageA
TranslateMessage
GetMenu
LoadIconA
PeekMessageA

gdi32

PolyBezierTo
GetCurrentPositionEx
LineTo
MoveToEx
IntersectClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
DeleteDC
CreateFontIndirectA
PatBlt
GetDeviceCaps
CreateBitmap
SetBkColor
GetClipBox
GetTextColor
DeleteObject
GetStockObject
GetCurrentObject
Polygon
SetPixelV
CreatePolygonRgn
GetWindowExtEx
GetViewportExtEx
Rectangle
GetTextExtentPoint32A
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateCompatibleBitmap
CreateCompatibleDC
LPtoDP
GetMapMode
DPtoLP
GetBkColor
CreateSolidBrush
BitBlt
BeginPath
EndPath
StrokeAndFillPath
CreatePen
Ellipse
GetTextExtentPointA
CreateDIBitmap
SetTextColor
GetObjectA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

LookupPrivilegeValueA
OpenProcessToken
OpenThreadToken
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
AdjustTokenPrivileges

shell32

ShellExecuteA

comctl32

ImageList_GetIcon
ImageList_AddMasked
ImageList_Draw
ord17
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA

oledlg

ord8

ole32

CoTaskMemFree
CoTaskMemAlloc
CoGetClassObject
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleRun
CoInitialize
CoCreateInstance
CoUninitialize
OleFlushClipboard
OleIsCurrentClipboard
CLSIDFromProgID
StgOpenStorageOnILockBytes
CLSIDFromString

olepro32

ord253

oleaut32

VariantClear
SysAllocStringByteLen
SysStringByteLen
SysFreeString
VariantInit
VariantCopy
SysAllocString
VariantChangeType
SysAllocStringLen
SysStringLen
VariantTimeToSystemTime
GetErrorInfo

wsock32

WSAStartup
WSACleanup
ioctlsocket
socket
connect
send

Sections

.text
Size: 368KB - Virtual size: 364KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

29ad9e28eda4a6c8f30a3d31b6ad0c04

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

Sections

.text Size: 368KB - Virtual size: 364KB

.rdata Size: 76KB - Virtual size: 75KB

.data Size: 72KB - Virtual size: 88KB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: 368KB - Virtual size: 364KB

.rdata
Size: 76KB - Virtual size: 75KB

.data
Size: 72KB - Virtual size: 88KB

.rsrc
Size: 20KB - Virtual size: 19KB