4b204365eaf371b395ef362926244197f72b46bf910522d5c5be3837a122d6a6

Sharing

Copy URL

Twitter E-mail

General

Target

4b204365eaf371b395ef362926244197f72b46bf910522d5c5be3837a122d6a6
Size

6.4MB
MD5

91cbaf213d8cc2dd15f1290917203f79
SHA1

49a01234bc3dde8a1b4d4b36ee842dfe229ae6bd
SHA256

4b204365eaf371b395ef362926244197f72b46bf910522d5c5be3837a122d6a6
SHA512

b6f6c849e69e76a4cb60d543d2def8757a6a34e7ba54e26158b86353e033f4f562f85db1ef9520a82c2e926cac5ddddc23ab08d95cd4c86c2500cfbfe85419ba
SSDEEP

98304:P7nocV/mC0r0aC0r0Ser2ZC0r0IC0r03C0r0uC0r0zC0r0T:kcog

Score

N/A

Malware Config

Signatures

Files

4b204365eaf371b395ef362926244197f72b46bf910522d5c5be3837a122d6a6
.exe windows x86

e5e9022b1ad4f8b35d840923a3839a79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

zimgload

ord3
ord2

gdiplus

GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToFile
GdipDisposeImage
GdipLoadImageFromFileICM
GdipLoadImageFromFile
GdipAlloc
GdipFree
GdipCloneImage
GdiplusStartup

sti

StiCreateInstanceW

kernel32

GetTickCount
RtlUnwind
HeapAlloc
RaiseException
HeapFree
GetStartupInfoA
ExitProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
TerminateProcess
CreateThread
ExitThread
HeapReAlloc
HeapSize
FatalAppExitA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
GetDriveTypeA
WritePrivateProfileStringA
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
GetProfileStringA
GetWindowsDirectoryA
GetVersion
MultiByteToWideChar
DeleteFileA
CloseHandle
CreateFileA
FormatMessageA
GetLastError
lstrcmpA
lstrcpyA
GetPrivateProfileIntA
SetErrorMode
SetFileAttributesA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSize
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
SizeofResource
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetPrivateProfileStringA
GetVersionExA
GlobalLock
GlobalAlloc
FindFirstFileA
GetCurrentDirectoryA
GetFileAttributesA
CreateDirectoryA
GlobalUnlock
GlobalFree
IsBadReadPtr
GlobalSize
MapViewOfFile
InitializeCriticalSection
CopyFileA
lstrlenW
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
GetCurrentThread
FindNextFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetShortPathNameA
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
FindClose
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
lstrcpynA
GetThreadLocale
LocalFree
MulDiv
SetLastError
CreateFileMappingA
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LockResource
FindResourceA
LoadResource
InterlockedDecrement
InterlockedIncrement
lstrlenA
GetModuleHandleA
WideCharToMultiByte
CreateMutexA
GetModuleFileNameA
GetCommandLineA
WaitForSingleObject
FreeLibrary
LoadLibraryA
GetProcAddress
UnmapViewOfFile

user32

GetWindowThreadProcessId
DeleteMenu
MessageBeep
RegisterClipboardFormatA
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
PostThreadMessageA
DestroyIcon
GetMessageA
TranslateMessage
ValidateRect
ShowOwnedPopups
PostQuitMessage
CharUpperA
wvsprintfA
CharNextA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetSubMenu
GetMenuItemID
WaitMessage
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
OemToCharA
CharToOemA
GetWindowLongA
DrawEdge
GetNextDlgGroupItem
ClientToScreen
GetCursorPos
WindowFromPoint
OffsetRect
DrawFocusRect
GetSysColor
LoadIconA
FindWindowA
SetForegroundWindow
SetRectEmpty
CopyRect
GetDesktopWindow
MessageBoxA
CopyAcceleratorTableA
DestroyMenu
GetSysColorBrush
GetDialogBaseUnits
LoadStringA
RemoveMenu
GetMenuStringA
AppendMenuA
InsertMenuA
InflateRect
MapDialogRect
KillTimer
SetTimer
SetCapture
GetCapture
PtInRect
ReleaseCapture
SetCursor
LoadCursorA
GetWindowRect
SetWindowRgn
PostMessageA
GetClassNameA
LoadImageA
SendMessageA
GetParent
InvalidateRect
ReleaseDC
GetDC
GetClientRect
LoadBitmapA
SetRect
EnableWindow
TrackPopupMenu
SetWindowContextHelpId
IsWindowUnicode
DefDlgProcA
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
GetMenuItemCount

gdi32

SelectClipRgn
DeleteObject
StretchBlt
GetDCOrgEx
GetClipBox
SetTextColor
SetBkColor
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
CreateFontA
SetColorAdjustment
PolyBezierTo
GetClipRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetViewportExtEx
GetWindowExtEx
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextColor
GetBkColor
PatBlt
CreateRectRgnIndirect
GetMapMode
SetRectRgn
CreateFontIndirectA
DPtoLP
CopyMetaFileA
GetTextExtentPoint32A
GetTextMetricsA
LPtoDP
CreateBitmap
CreatePalette
SelectPalette
SetStretchBltMode
SetDIBitsToDevice
StretchDIBits
CreateDCA
StartDocA
DeleteDC
StartPage
EndPage
EndDoc
GetPixel
CombineRgn
CreateRectRgn
CreateCompatibleBitmap
GetStockObject
BitBlt
SelectObject
GetDeviceCaps
CreateCompatibleDC
GetTextExtentPointA
PolylineTo
CreateDIBitmap
GetObjectA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

DeviceCapabilitiesA
EnumPrintersA
DocumentPropertiesA
GetPrinterA
ord201
GetPrinterDriverA
OpenPrinterA
ClosePrinter

advapi32

RegCreateKeyA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegOpenKeyA
RegSetValueExA
RegSetValueA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA
RegCloseKey
RegEnumKeyA

shell32

DragAcceptFiles
ExtractIconA
DragQueryFileA
DragFinish
SHGetFileInfoA
SHGetMalloc
ShellExecuteExA
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA

comctl32

_TrackMouseEvent
ord17
ord13
ord14
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Merge
ImageList_Read
ImageList_Write

oledlg

ord8

ole32

CoTaskMemFree
CoDisconnectObject
CoTaskMemAlloc
OleRun
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CreateBindCtx
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
ReleaseStgMedium
CreateStreamOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoCreateInstance
CoGetClassObject

olepro32

ord253

oleaut32

SafeArrayGetUBound
SafeArrayDestroy
SafeArrayUnlock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromDate
VarDateFromStr
VarBstrFromCy
VarCyFromStr
SysStringByteLen
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayLock
SafeArrayAccessData
SafeArrayUnaccessData
SysReAllocStringLen
SysAllocStringByteLen
SysStringLen
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
LoadTypeLi
VariantCopy
SysAllocStringLen
VariantClear
VariantChangeType
SysAllocString
SysFreeString

Sections

.text
Size: 532KB - Virtual size: 531KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e5e9022b1ad4f8b35d840923a3839a79

Headers

File Characteristics

Imports

zimgload

gdiplus

sti

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 532KB - Virtual size: 531KB

.rdata Size: 88KB - Virtual size: 86KB

.data Size: 28KB - Virtual size: 46KB

.rsrc Size: 5.8MB - Virtual size: 5.8MB

.text
Size: 532KB - Virtual size: 531KB

.rdata
Size: 88KB - Virtual size: 86KB

.data
Size: 28KB - Virtual size: 46KB

.rsrc
Size: 5.8MB - Virtual size: 5.8MB