04d032eb17a213901a846d1c2544688762f48bb03ad28b67084c565c1b4803df

Sharing

Copy URL

Twitter E-mail

General

Target

04d032eb17a213901a846d1c2544688762f48bb03ad28b67084c565c1b4803df
Size

1.6MB
MD5

fcd973916c15876e710d2d9ec8fb33e0
SHA1

063d54c3162a1c1c763f9ef1588562ef320734a1
SHA256

04d032eb17a213901a846d1c2544688762f48bb03ad28b67084c565c1b4803df
SHA512

eb692b6069675d2f419646608cddd8b1f5f09311be8b1eaad12425bf1c7a870891782153148a8fc231a147fc73ad12f58e60c72905c05f2b9aa0a50881cd02ed
SSDEEP

24576:EeI3gKygtkgcPsl92t+rx8RLDhLsT3UAubB0w3s9u5mY:CNOwk+Tdy0/jY

Score

N/A

Malware Config

Signatures

Files

04d032eb17a213901a846d1c2544688762f48bb03ad28b67084c565c1b4803df
.exe windows x86

c4ad91d37455f2af21bf228a3a0b2682

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscms

TranslateColors
CloseColorProfile
CreateColorTransformA
DeleteColorTransform
OpenColorProfileA

kernel32

HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
GetVersionExA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
InterlockedExchange
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
GetTimeZoneInformation
HeapSize
TerminateProcess
ExitThread
CreateThread
HeapReAlloc
HeapFree
HeapAlloc
RaiseException
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentDirectoryA
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SizeofResource
GlobalFlags
GetDiskFreeSpaceA
GetFileTime
GetProfileStringA
SetFileTime
GetFileAttributesA
GetPrivateProfileIntA
GetCurrentThread
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
MoveFileA
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
lstrcmpA
lstrcpynA
FormatMessageA
LocalFree
lstrlenA
InterlockedIncrement
MulDiv
SetLastError
InterlockedDecrement
FreeLibrary
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GlobalFree
LockResource
FindResourceA
LoadResource
GetPrivateProfileStringA
GetVersion
GetModuleFileNameA
GetACP
GetTempPathA
GetTempFileNameA
lstrcpyA
LoadLibraryA
GetProcAddress
GetLocalTime
CopyFileA
GetLastError
DeleteFileA
WritePrivateProfileStringA
MultiByteToWideChar
WideCharToMultiByte
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
Sleep

user32

SetWindowContextHelpId
MapDialogRect
GetClassNameA
GetSysColorBrush
GetDCEx
LockWindowUpdate
InvertRect
InsertMenuA
GetMenuStringA
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
PostThreadMessageA
SetRect
KillTimer
IsZoomed
FindWindowA
GetMessageA
TranslateMessage
ValidateRect
CharUpperA
wvsprintfA
UnpackDDElParam
ReuseDDElParam
SetMenu
DestroyMenu
GetDesktopWindow
LoadAcceleratorsA
DefMDIChildProcA
DrawMenuBar
TranslateAcceleratorA
TranslateMDISysAccel
DefFrameProcA
BringWindowToTop
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
SetCursorPos
RedrawWindow
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
LoadIconA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ShowOwnedPopups
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindowUnicode
GetDlgItem
IsWindowEnabled
GetSystemMetrics
ScreenToClient
GetCursorPos
EnableMenuItem
PtInRect
IntersectRect
EqualRect
SetTimer
MessageBoxA
GetWindowLongA
FrameRect
InflateRect
OffsetRect
DrawStateA
DrawFocusRect
GetActiveWindow
GetCapture
ClientToScreen
WindowFromPoint
GetIconInfo
DestroyIcon
DestroyCursor
GetWindow
LoadMenuA
PostQuitMessage
LoadStringA
GetSystemMenu
DeleteMenu
AppendMenuA
ScrollWindow
SetParent
GetSubMenu
ReleaseCapture
SetCapture
GetDC
ReleaseDC
CopyRect
CreateCaret
SetCaretPos
ShowCaret
GetCursor
LoadCursorA
LoadBitmapA
SetRectEmpty
IsRectEmpty
SetCursor
PostMessageA
IsClipboardFormatAvailable
GetClipboardData
OpenClipboard
EmptyClipboard
RegisterClipboardFormatA
SetClipboardData
CloseClipboard
FillRect
GetWindowRect
UpdateWindow
GetParent
SendMessageA
InvalidateRect
LoadImageA
GetSysColor
EnableWindow
GetClientRect
DefDlgProcA
ExcludeUpdateRgn
HideCaret
UnregisterClassA
IsWindowVisible

gdi32

RestoreDC
MoveToEx
SetBkMode
SetROP2
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
SaveDC
GetWindowExtEx
CreatePatternBrush
PtVisible
TextOutA
ExtTextOutA
Escape
CreateRectRgnIndirect
GetMapMode
SetRectRgn
CombineRgn
LPtoDP
GetTextExtentPoint32A
GetTextMetricsA
StretchDIBits
GetCharWidthA
GetTextColor
GetBkColor
LineTo
EndPath
SelectClipPath
SetDIBitsToDevice
SetTextColor
SetBkColor
GetClipBox
SetTextAlign
GetBitmapBits
SetDIBits
PatBlt
GetClipRgn
SetPolyFillMode
WidenPath
CreateBrushIndirect
SetBrushOrgEx
CreateFontA
GetTextFaceA
GetFontData
SetMiterLimit
CreateSolidBrush
StrokeAndFillPath
FillPath
ExtCreatePen
StrokePath
IntersectClipRect
PolyBezierTo
DeleteObject
RectVisible
Arc
DPtoLP
GetTextExtentPointA
GetViewportExtEx
CreatePen
SetStretchBltMode
StretchBlt
CreateDIBitmap
CreateBitmap
GetOutlineTextMetricsA
CreateFontIndirectA
CreateDCA
GetDIBits
DeleteDC
GetDeviceCaps
StartDocA
StartPage
EndPage
EndDoc
GetStockObject
CreateCompatibleBitmap
SelectObject
CreateRectRgn
SelectClipRgn
GetObjectA
CreateCompatibleDC
BitBlt
BeginPath

comdlg32

GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError
PrintDlgA
ChooseFontA
GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

GetFileSecurityA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegSetValueA
RegCreateKeyA
RegCloseKey
SetFileSecurityA
RegDeleteValueA

shell32

SHGetFileInfoA
DragQueryFileA
DragFinish
ShellExecuteA
ExtractIconA

comctl32

ord17
ImageList_Destroy

oledlg

ord8

ole32

CoGetClassObject
StgOpenStorageOnILockBytes
CLSIDFromProgID
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CLSIDFromString

olepro32

ord253

oleaut32

SysStringLen
SysAllocStringByteLen
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

wsock32

sendto
recvfrom
WSAStartup
gethostname
gethostbyname
socket
htonl
htons
bind
WSAAsyncSelect
setsockopt

Sections

.text
Size: 944KB - Virtual size: 943KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 192KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 240KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

splasher
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c4ad91d37455f2af21bf228a3a0b2682

Headers

File Characteristics

Imports

mscms

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

Sections

.text Size: 944KB - Virtual size: 943KB

.rdata Size: 192KB - Virtual size: 190KB

.data Size: 240KB - Virtual size: 257KB

.rsrc Size: 216KB - Virtual size: 215KB

splasher Size: 32KB - Virtual size: 36KB

.text
Size: 944KB - Virtual size: 943KB

.rdata
Size: 192KB - Virtual size: 190KB

.data
Size: 240KB - Virtual size: 257KB

.rsrc
Size: 216KB - Virtual size: 215KB

splasher
Size: 32KB - Virtual size: 36KB