d2b9b09e51995763fd64ada4ca233de8a87186ea1ba7001a75484309ae992fdf

Sharing

Copy URL

Twitter E-mail

General

Target

d2b9b09e51995763fd64ada4ca233de8a87186ea1ba7001a75484309ae992fdf
Size

1.5MB
MD5

fa7a3c629e254bbac80bdd8b1a4ea166
SHA1

fa18336f85e7e257bab419ecdb63e6c8da3ea844
SHA256

d2b9b09e51995763fd64ada4ca233de8a87186ea1ba7001a75484309ae992fdf
SHA512

f99e6a8bd8d6f3e9f1e0eb730741cf0f68df9865e1c0ae20e285c0ae8d0c2dc0f65ed83a39c0b7f4708b049e4fb30f7e1ee056aa38c93defdf2236bca550cd30
SSDEEP

6144:rS7Ikb5YfdfdI1pT7OwqcZ9MNHpnK7POrI/f0yKhXJiVjbM7Qz2TE/KbzXwyMnbz:sb5YfdVap/OwqNnKio

Score

N/A

Malware Config

Signatures

Files

d2b9b09e51995763fd64ada4ca233de8a87186ea1ba7001a75484309ae992fdf
.exe windows x86

eaa0262f2cdd8c4615916955e09f52e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

sensapi

IsNetworkAlive

kernel32

SetStdHandle
GetFileType
GetTimeZoneInformation
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetACP
Sleep
CloseHandle
GetLastError
CreateMutexA
CreateDirectoryA
CreateProcessA
GetTickCount
MultiByteToWideChar
GetProcAddress
LoadLibraryA
WriteFile
CreateFileA
GetVersionExA
GetLocalTime
FreeLibrary
GetWindowsDirectoryA
lstrcpyA
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
GlobalAlloc
GlobalLock
GetModuleFileNameA
WaitForSingleObject
SetEvent
ResumeThread
SetThreadPriority
SuspendThread
CreateEventA
InterlockedIncrement
InterlockedDecrement
lstrlenA
WideCharToMultiByte
HeapSize
HeapReAlloc
RaiseException
ExitThread
CreateThread
HeapFree
GetCommandLineA
GetStartupInfoA
HeapAlloc
TerminateProcess
ExitProcess
RtlUnwind
SetErrorMode
GetOEMCP
GetCPInfo
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
GetFileSize
GetFileAttributesA
GetFullPathNameA
GetVolumeInformationA
GetProfileStringA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetCurrentProcess
DuplicateHandle
GetThreadLocale
SizeofResource
GetProcessVersion
GetCurrentDirectoryA
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
SetLastError
TlsAlloc
FindNextFileA
FindFirstFileA
FindClose
lstrlenW
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
EnterCriticalSection
lstrcpynA
FormatMessageA
LocalFree
GlobalFree
LockResource
FindResourceA
LoadResource
GlobalUnlock
MulDiv
GetModuleHandleA

user32

CharUpperA
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
InflateRect
GetSysColorBrush
PtInRect
GetClassNameA
FindWindowA
DestroyMenu
LoadStringA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
SetFocus
AdjustWindowRectEx
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
CopyRect
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
PostThreadMessageA
RegisterClipboardFormatA
GetWindowDC
ReleaseDC
GetDC
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
GetCursorPos
ScreenToClient
GetParent
LoadCursorA
CopyIcon
GetSysColor
ReleaseCapture
GetCursor
SetCursor
ClientToScreen
SetCapture
EnableWindow
InvalidateRect
PostMessageA
PostQuitMessage
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
GetDesktopWindow
LoadBitmapA
LoadIconA
SetWindowLongA

gdi32

ScaleWindowExtEx
GetClipBox
IntersectClipRect
DeleteObject
SetWindowExtEx
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
LPtoDP
DPtoLP
GetMapMode
GetTextColor
GetBkColor
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkMode
SetBkColor
SelectPalette
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateCompatibleBitmap
CreateFontIndirectA
CreateBitmap
GetDeviceCaps
RealizePalette
GetObjectA
CreateCompatibleDC
GetTextExtentPointA
CreateDIBitmap
BitBlt

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

comctl32

ImageList_DragShowNolock
ImageList_AddMasked
ImageList_EndDrag
ImageList_DragLeave
ImageList_Draw
ImageList_DragMove
ImageList_DragEnter
ImageList_Destroy
ImageList_Create
ImageList_BeginDrag
ord17

oledlg

ord8

ole32

CoUninitialize
CoCreateInstance
CoInitialize
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysStringLen
VariantChangeType
SysAllocStringByteLen
SysAllocString
VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

wininet

InternetQueryDataAvailable
InternetSetStatusCallback
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetReadFileExA
InternetReadFile
InternetOpenA
InternetOpenUrlA
InternetGetLastResponseInfoA
InternetWriteFile
InternetSetFilePointer
InternetCheckConnectionA
InternetGetConnectedState
HttpQueryInfoA
InternetCloseHandle

Sections

.text
Size: 204KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eaa0262f2cdd8c4615916955e09f52e1

Headers

File Characteristics

Imports

iphlpapi

sensapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wininet

Sections

.text Size: 204KB - Virtual size: 201KB

.rdata Size: 52KB - Virtual size: 50KB

.data Size: 20KB - Virtual size: 35KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 204KB - Virtual size: 201KB

.rdata
Size: 52KB - Virtual size: 50KB

.data
Size: 20KB - Virtual size: 35KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB