beb287e2babe8bd8165b5c83a8480182c0a3dd91c05cc297bd236aa29a86f060

Sharing

Copy URL

Twitter E-mail

General

Target

beb287e2babe8bd8165b5c83a8480182c0a3dd91c05cc297bd236aa29a86f060
Size

1.8MB
MD5

e17aa1fa0d3212530122dd9a37d1604a
SHA1

a402e6ccd0ce93d040ee9aa6f0c272856dadf77a
SHA256

beb287e2babe8bd8165b5c83a8480182c0a3dd91c05cc297bd236aa29a86f060
SHA512

7434a6d9682c2ba2d99675a9a35033d49c1a2450d28a8371ecc4ed016a345bffcdc0634cf65b1be0efaf6334ba0d928671f105741c42cb1bb379038c0d6f5533
SSDEEP

49152:0an6vpEdiukzJl8ns0dICBOlKRnVAVBIOPTl:0an6xE0uwJSs0dILKRnVAVKO

Score

N/A

Malware Config

Signatures

Files

beb287e2babe8bd8165b5c83a8480182c0a3dd91c05cc297bd236aa29a86f060
.exe windows x86

59d9a8f48caf195c0b164b9ca3302628

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetStartupInfoA
SetEnvironmentVariableA
GetExitCodeProcess
CreateProcessA
GetStdHandle
SetHandleCount
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetACP
HeapSize
RaiseException
GetCommandLineA
GetLocalTime
SetStdHandle
GetSystemTime
ExitProcess
LeaveCriticalSection
GetTimeZoneInformation
HeapReAlloc
TerminateProcess
HeapAlloc
HeapFree
RtlUnwind
CompareStringW
CompareStringA
MultiByteToWideChar
FindNextFileA
FindClose
FindFirstFileA
GetFileAttributesA
GetFullPathNameA
GetCurrentDirectoryA
LoadLibraryA
FindResourceA
LoadResource
LockResource
SizeofResource
GetTempPathA
GetTempFileNameA
FreeLibrary
DeleteFileA
GlobalLock
CreateFileA
WriteFile
GlobalUnlock
GlobalFree
CloseHandle
lstrlenA
GetTickCount
GetProfileStringA
GetDriveTypeA
GetFileTime
GetFileSize
FileTimeToLocalFileTime
FileTimeToSystemTime
GetVolumeInformationA
UnlockFile
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
DuplicateHandle
ReadFile
GetCurrentProcess
WritePrivateProfileStringA
SetErrorMode
GetThreadLocale
GetOEMCP
TlsGetValue
GetCPInfo
GetProcessVersion
GlobalReAlloc
LocalReAlloc
TlsSetValue
TlsAlloc
TlsFree
GlobalHandle
GetLastError
LocalAlloc
GlobalFlags
LocalFree
lstrcpynA
FormatMessageA
lstrcmpA
InterlockedIncrement
GetCurrentThread
InterlockedDecrement
GlobalGetAtomNameA
lstrcatA
GetCurrentThreadId
GlobalFindAtomA
lstrcmpiA
GlobalAddAtomA
GetModuleHandleA
GlobalDeleteAtom
lstrcpyA
MulDiv
SetLastError
WideCharToMultiByte
DeleteCriticalSection
WaitForSingleObject
TerminateThread
GetVersion
GlobalAlloc
GetModuleFileNameA
InitializeCriticalSection
CreateThread
GetProcAddress
EnterCriticalSection
Sleep

user32

MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
LoadCursorA
GetDesktopWindow
GetClassNameA
DestroyMenu
LoadStringA
wvsprintfA
MapDialogRect
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamA
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
PostQuitMessage
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
DispatchMessageA
GetFocus
SetActiveWindow
AdjustWindowRectEx
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GrayStringA
CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
MapWindowPoints
PeekMessageA
WinHelpA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
LoadIconA
IsIconic
DrawIcon
GetSystemMetrics
GetSystemMenu
AppendMenuA
KillTimer
SetTimer
PostMessageA
SendMessageA
GetWindowLongA
EnableWindow
GetParent
SetCapture
GetCapture
GetActiveWindow
RedrawWindow
InvalidateRect
GetClientRect
DrawFocusRect
DrawStateA
FrameRect
OffsetRect
InflateRect
PtInRect
CopyRect
SetCursor
GetSysColor
ReleaseCapture
LoadImageA
DestroyCursor
GetDC
ReleaseDC
FillRect
SetFocus
IsWindow
ModifyMenuA
ShowCaret
ExcludeUpdateRgn
HideCaret
IsWindowUnicode
UnregisterClassA
DefDlgProcA

gdi32

DeleteObject
CreateDIBSection
BitBlt
SetPixel
FillRgn
LineTo
MoveToEx
ExtCreatePen
GetDIBits
RealizePalette
GetStockObject
SelectPalette
GetDeviceCaps
CreateRectRgn
CreateDCA
SaveDC
CombineRgn
RestoreDC
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
SetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetClipBox
SetWindowExtEx
IntersectClipRect
DeleteDC
StretchDIBits
GetViewportExtEx
GetWindowExtEx
PtVisible
ExtTextOutA
Escape
RectVisible
GetMapMode
DPtoLP
GetBkColor
LPtoDP
GetTextColor
CreateDIBitmap
CreateFontA
SetTextAlign
GetPixel
TextOutW
StrokeAndFillPath
CreateHatchBrush
SetBkMode
CreatePen
GetTextExtentPoint32A
BeginPath
EndPath
StrokePath
GetCharWidthA
GetCurrentObject
CreateFontIndirectA
TextOutA
PatBlt
GetObjectA
CreateCompatibleBitmap
SetBkColor
SetTextColor
CreateBitmap
SetStretchBltMode
StretchBlt
CreateCompatibleDC
SelectObject
SelectClipRgn
CreateSolidBrush
CreatePolygonRgn
GetTextExtentPointA
SetMapMode
ExtTextOutW

comdlg32

GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyA
RegCreateKeyExA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
DragFinish
SHGetFileInfoA
DragQueryFileA

comctl32

ImageList_Destroy
ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysStringLen
SysFreeString
SysAllocStringByteLen
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysAllocString

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 210KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 247KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

59d9a8f48caf195c0b164b9ca3302628

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 210KB - Virtual size: 212KB

.data Size: 247KB - Virtual size: 324KB

.rsrc Size: 47KB - Virtual size: 48KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 210KB - Virtual size: 212KB

.data
Size: 247KB - Virtual size: 324KB

.rsrc
Size: 47KB - Virtual size: 48KB