3855326ee83a40d7daaaec0bf7265fce984739bbea9d67a98c7b2482f9704c35

Sharing

Copy URL Twitter E-mail

General

Target

3855326ee83a40d7daaaec0bf7265fce984739bbea9d67a98c7b2482f9704c35
Size

964KB
MD5

25ee7939c45a02d2242aed653d07bab3
SHA1

3de4770ceb2ddac28a34a5a1fb72f16078c752e2
SHA256

3855326ee83a40d7daaaec0bf7265fce984739bbea9d67a98c7b2482f9704c35
SHA512

3474c09c93f40bc6d7ebfece666de7231bb0f50004564dc30678e78fe8cc55e11ccf89e2c1b422e8c8b836878c458273196903bb0409689deefcc1c37e4ddd38
SSDEEP

24576:ks905k0FcapZf4dMLG9CIfzPwe1nuC4LdpDWeP:kq05k0FatwaPwe1O5gS

Score

N/A

Malware Config

Signatures

Files

3855326ee83a40d7daaaec0bf7265fce984739bbea9d67a98c7b2482f9704c35
.exe windows x86

33ec4d5721917e2f06e69cbe1af820aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
RtlUnwind
ExitProcess
TerminateProcess
PeekNamedPipe
GetFileType
ExitThread
CreateThread
SetStdHandle
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
LCMapStringA
HeapFree
SetHandleCount
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
HeapAlloc
FindResourceExA
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
InterlockedIncrement
GetFileTime
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
RaiseException
WritePrivateProfileStringA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
CreateEventA
SuspendThread
WaitForSingleObject
ResumeThread
SetThreadPriority
SetErrorMode
CreateFileA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
VirtualProtect
InterlockedDecrement
GetCurrentThreadId
GlobalFindAtomA
lstrcmpW
FreeResource
SetLastError
MulDiv
FormatMessageA
LocalAlloc
LocalFree
GetTempPathA
GetTempFileNameA
DeleteFileA
WriteFile
GetStdHandle
FindNextChangeNotification
ResetEvent
WaitForMultipleObjects
FindCloseChangeNotification
FindFirstChangeNotificationA
Sleep
LeaveCriticalSection
EnterCriticalSection
SetEvent
DeleteCriticalSection
InitializeCriticalSection
GetFileInformationByHandle
CompareStringA
GetLastError
CompareStringW
GetComputerNameA
CreateDirectoryA
SearchPathA
GetProfileIntA
LoadLibraryExA
GlobalAddAtomA
CloseHandle
ReleaseMutex
GetVersion
FindClose
FindFirstFileA
GetModuleHandleA
GetModuleFileNameA
lstrcmpiA
lstrcmpA
WinExec
lstrcatA
lstrcpyA
FreeLibrary
GetWindowsDirectoryA
GetProcAddress
LoadLibraryA
GlobalDeleteAtom
GlobalGetAtomNameA
lstrcpynA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
lstrlenA
FindResourceA
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
WideCharToMultiByte
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
LCMapStringW
InterlockedExchange

user32

CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorA
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
ShowWindow
MoveWindow
IsDialogMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetWindowTextLengthA
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
ScrollWindow
SetScrollRange
SetScrollPos
GetScrollPos
GetMenu
AdjustWindowRectEx
SetScrollInfo
RegisterClassA
UnregisterClassA
CallWindowProcA
GetWindowPlacement
CopyRect
GetWindow
DestroyWindow
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetWindowDC
FillRect
GetMenuState
wvsprintfA
GetFocus
ClientToScreen
IsWindowVisible
MapWindowPoints
DrawIconEx
GetIconInfo
GetCursor
TranslateMessage
PeekMessageA
DestroyCursor
IsChild
EndPaint
BeginPaint
GetUpdateRect
OffsetRect
IntersectRect
IsRectEmpty
UnionRect
EqualRect
DrawAnimatedRects
SetParent
SystemParametersInfoA
GetMenuItemID
TrackPopupMenu
SetMenuDefaultItem
GetSubMenu
LoadMenuA
RegisterWindowMessageA
CharUpperA
DrawIcon
RemoveMenu
GetSystemMenu
LoadIconA
SendMessageA
SetTimer
GetDlgItem
GetSystemMetrics
SetRect
DrawTextA
EnableWindow
TabbedTextOutA
DrawTextExA
GrayStringA
GetParent
GetDlgCtrlID
SetWindowPos
RedrawWindow
UpdateWindow
OpenIcon
IsIconic
DestroyIcon
wsprintfA
FindWindowA
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
CharNextA
EnumChildWindows
GetWindowLongA
SetWindowTextA
GetWindowTextA
GetClassNameA
SetMenuItemInfoA
GetMenuItemInfoA
GetMenuItemCount
GetSysColorBrush
GetDCEx
ShowOwnedPopups
PostQuitMessage
IsZoomed
GetMessageA
ValidateRect
MapDialogRect
GetAsyncKeyState
GetKeyState
DefWindowProcA
CopyIcon
InflateRect
GetWindowRect
GetSysColor
InvalidateRect
PtInRect
ScreenToClient
GetMessagePos
MessageBeep
GetClientRect
SetWindowLongA
SetActiveWindow
SetFocus
DestroyMenu
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
DispatchMessageA
InsertMenuItemA
GetClassInfoA
MessageBoxA
PostMessageA
ReleaseCapture
KillTimer
RegisterHotKey
UnregisterHotKey
GetActiveWindow
GetCursorPos
WindowFromPoint
GetDesktopWindow
GetForegroundWindow
SetCursor
LoadCursorA
IsWindow
SetForegroundWindow
LockWindowUpdate
OpenClipboard
SetCapture
SetClipboardData
ReleaseDC
GetDC
CloseClipboard
EmptyClipboard
CreateDialogIndirectParamA

gdi32

SetWindowOrgEx
ScaleWindowExtEx
CreatePatternBrush
ScaleViewportExtEx
CreateSolidBrush
CreateRectRgnIndirect
SetRectRgn
CombineRgn
EnumFontFamiliesExA
GetBkColor
SetViewportOrgEx
GetPixel
CreateRectRgn
SelectClipRgn
MoveToEx
LineTo
Polyline
IntersectClipRect
ExcludeClipRect
SetTextColor
SetBkMode
GetDIBits
CreateDIBitmap
CreateBitmap
SetBkColor
SetDIBitsToDevice
GetClipBox
CreateDIBSection
CreateICA
CreatePen
Rectangle
CreatePenIndirect
DeleteDC
BitBlt
StretchBlt
RealizePalette
SelectPalette
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreatePalette
DeleteObject
PatBlt
GetObjectA
GetStockObject
StretchDIBits
SetStretchBltMode
EndDoc
EndPage
AbortDoc
StartPage
RestoreDC
StartDocA
OffsetViewportOrgEx
SetViewportExtEx
SetWindowExtEx
SetMapMode
SaveDC
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetTextMetricsA
GetDeviceCaps
GetTextExtentPoint32A
CreateFontIndirectA
CreateDCA

comdlg32

PrintDlgA
GetFileTitleA
GetOpenFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegQueryValueA
RegOpenKeyA
GetUserNameA
RegQueryInfoKeyA
RegEnumKeyA
RegDeleteKeyA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA

shell32

SHAppBarMessage
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
DragQueryFileA
DragFinish
ShellExecuteA
Shell_NotifyIconA
SHBrowseForFolderA
SHGetDesktopFolder

comctl32

ord17
ImageList_Draw
ImageList_GetImageInfo
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_Destroy

shlwapi

PathIsUNCA
PathFindFileNameA
PathFindExtensionA
PathStripToRootA

oleaut32

SystemTimeToVariantTime
VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 560KB - Virtual size: 558KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 224KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nrdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

33ec4d5721917e2f06e69cbe1af820aa

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oleaut32

Sections

.text Size: 560KB - Virtual size: 558KB

.rdata Size: 224KB - Virtual size: 222KB

.data Size: 20KB - Virtual size: 62KB

.rsrc Size: 84KB - Virtual size: 83KB

.nrdata Size: 72KB - Virtual size: 72KB

.text
Size: 560KB - Virtual size: 558KB

.rdata
Size: 224KB - Virtual size: 222KB

.data
Size: 20KB - Virtual size: 62KB

.rsrc
Size: 84KB - Virtual size: 83KB

.nrdata
Size: 72KB - Virtual size: 72KB