f4645f8111cef722445e54d9e37569e4e081e48cb17a544c6e7b0b11b46e0b1e

Sharing

Copy URL Twitter E-mail

General

Target

f4645f8111cef722445e54d9e37569e4e081e48cb17a544c6e7b0b11b46e0b1e
Size

780KB
MD5

f02d1613fcd42b41a7fb36343fefa3c8
SHA1

896180796686811656529eaf22c6e4b5eecbffce
SHA256

f4645f8111cef722445e54d9e37569e4e081e48cb17a544c6e7b0b11b46e0b1e
SHA512

3139c278b86c190b41e6c3e35bdfda4b518f7db6ee5df8a3e45f68b3e44e18e80fefd846b3e90b5bd0b96f602715a3f946c8c9e411902b47cd6659137965de00
SSDEEP

12288:5XjR7Az+3d/dWOrYXcLGU3Gz/9Gu8HY3Qsez26SkbTn+WuYYa15zv5zZU82:5XjRHlGU3Y/9Gu84Asez2XDWula151t

Score

N/A

Malware Config

Signatures

Files

f4645f8111cef722445e54d9e37569e4e081e48cb17a544c6e7b0b11b46e0b1e
.exe windows x86

d8d214cec7c58e09f4733234226d0ab9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

netapi32

Netbios

kernel32

VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
SetUnhandledExceptionFilter
GetCurrentProcessId
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualFree
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapCreate
GetProfileStringA
HeapDestroy
HeapSize
GetACP
HeapReAlloc
GetFileType
TerminateProcess
RaiseException
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
GetFileTime
GetFileAttributesA
GetFullPathNameA
DeleteFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
GetOEMCP
GetCPInfo
GetThreadLocale
GetProcessVersion
GetCurrentDirectoryA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcpynA
MulDiv
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetModuleHandleA
GetProcAddress
FindNextFileA
lstrcpyA
FindFirstFileA
SetLastError
FindClose
FormatMessageA
LocalFree
LoadLibraryA
FreeLibrary
GetTickCount
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
FindResourceA
LoadResource
LockResource
SizeofResource
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CloseHandle
GlobalAlloc
GlobalLock
GlobalUnlock
SetErrorMode
GlobalFree
GetVersionExA
GetTempPathA
GetVolumeInformationA
QueryDosDeviceA
GetLastError
DefineDosDeviceA
CreateFileA
DeviceIoControl
GetDriveTypeA

user32

IsDlgButtonChecked
CheckRadioButton
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
RegisterClipboardFormatA
MapDialogRect
IsDialogMessageA
GetWindow
SetWindowContextHelpId
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
wsprintfA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
LoadIconA
CharUpperA
PostQuitMessage
PostMessageA
GetDC
FillRect
ReleaseDC
PeekMessageA
DispatchMessageA
TranslateMessage
EnableWindow
LoadCursorA
SetWindowTextA
MoveWindow
ShowWindow
LoadStringA
DestroyMenu
ClientToScreen
SetWindowPos
SetCursor
GetWindowRect
PtInRect
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
InflateRect
InvalidateRect
PostThreadMessageA
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
GetClassNameA
GetDesktopWindow
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC

gdi32

GetClipBox
SetTextColor
SetBkColor
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
CreateBitmap
SetDIBitsToDevice
StretchDIBits
GetObjectA
SetEnhMetaFileBits
SetWinMetaFileBits
GetEnhMetaFileHeader
GetDeviceCaps
CreateCompatibleBitmap
GetEnhMetaFilePaletteEntries
CreatePalette
SelectPalette
RealizePalette
GetStockObject
PlayEnhMetaFile
DeleteEnhMetaFile
GetDIBits
CreateDIBSection
CreateCompatibleDC
SelectObject
SetDIBColorTable
BitBlt
DeleteDC
CreateDIBitmap
GetTextExtentPointA
DeleteObject

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA

comctl32

ord17

oledlg

ord8

ole32

OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
CoTaskMemFree

olepro32

ord253

oleaut32

SysAllocStringByteLen
SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysStringLen

Sections

.text
Size: 516KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 156KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

splasher
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d8d214cec7c58e09f4733234226d0ab9

Headers

File Characteristics

Imports

netapi32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 516KB - Virtual size: 512KB

.rdata Size: 156KB - Virtual size: 153KB

.data Size: 52KB - Virtual size: 74KB

.rsrc Size: 12KB - Virtual size: 10KB

splasher Size: 32KB - Virtual size: 36KB

.text
Size: 516KB - Virtual size: 512KB

.rdata
Size: 156KB - Virtual size: 153KB

.data
Size: 52KB - Virtual size: 74KB

.rsrc
Size: 12KB - Virtual size: 10KB

splasher
Size: 32KB - Virtual size: 36KB