bb76966620412cc36f6cb38e45c49728bf540ae8e921ce2510b84b56cfbfaa7f

Sharing

Copy URL Twitter E-mail

General

Target

bb76966620412cc36f6cb38e45c49728bf540ae8e921ce2510b84b56cfbfaa7f
Size

376KB
MD5

acec6a1ad40498013c1b122b2845ef59
SHA1

699c046f171a60bc928b1c979961e3457dd199bb
SHA256

bb76966620412cc36f6cb38e45c49728bf540ae8e921ce2510b84b56cfbfaa7f
SHA512

faca4e05b411ed3072564113740b4688e39e6607c952587ffbb03b11a230f62180c061fa0617c16630c0f316de738e4c68f8437459664d70be37d03fed5341f0
SSDEEP

6144:N45RgDWGz6fGDV1FXcB3kGLkLdz0aA87n7+Pd:WRuWGz6fGDVLMB3kGLk4a7+Pd

Score

N/A

Malware Config

Signatures

Files

bb76966620412cc36f6cb38e45c49728bf540ae8e921ce2510b84b56cfbfaa7f
.exe windows x86

4d28b9bc531f3da8bc3677e4ed3337db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeZoneInformation
GetLocalTime
GetACP
TerminateProcess
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
GetFileType
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
GetProfileStringA
RaiseException
HeapAlloc
HeapFree
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
SetErrorMode
GetCurrentDirectoryA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetOEMCP
GetCPInfo
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GlobalFlags
GetProcessVersion
FindResourceExA
SizeofResource
MulDiv
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalAlloc
GetCurrentThread
SetLastError
FileTimeToLocalFileTime
GetDiskFreeSpaceA
SetFileTime
GetTempFileNameA
lstrcpynA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
GlobalLock
GlobalUnlock
FindResourceA
GetFileAttributesA
LoadResource
LockResource
GlobalFree
SetFilePointer
WriteFile
FileTimeToSystemTime
GetSystemTime
lstrcmpA
FindFirstFileA
FindNextFileA
CreateFileA
GetFileSize
GetFileTime
ReadFile
CloseHandle
lstrcpyA
CreateMutexA
GetLastError
SetCurrentDirectoryA
GetComputerNameA
GetModuleFileNameA
GetFullPathNameA
HeapCreate

user32

ValidateRect
TranslateMessage
GetMessageA
CharUpperA
InvalidateRect
ReleaseDC
GetDC
DestroyMenu
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
GetDesktopWindow
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
IsZoomed
LoadCursorA
GetSysColorBrush
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetClassNameA
PtInRect
InsertMenuA
DeleteMenu
GetMenuStringA
DestroyIcon
InflateRect
WindowFromPoint
SetRect
GetDCEx
LockWindowUpdate
SetCapture
SetParent
wvsprintfA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
LoadIconA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
AdjustWindowRectEx
EqualRect
SetCursor
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EnableWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
EndDialog
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetWindowRect
MapDialogRect
SetWindowPos
ShowWindow
PostMessageA
GetCapture
GetActiveWindow
SetActiveWindow
GetAsyncKeyState
GetFocus
ShowOwnedPopups
PostQuitMessage
LoadStringA
DeferWindowPos
SetFocus
GetDlgItem
IsWindowEnabled
GetParent
KillTimer
SetTimer
ScreenToClient
LoadMenuA
GetSubMenu
GetCursorPos
wsprintfA
GetWindowLongA
SetWindowLongA
IsWindowUnicode
SendMessageA
GetSysColor

gdi32

SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
CreateRectRgn
OffsetViewportOrgEx
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetRectRgn
CombineRgn
BitBlt
CreateCompatibleDC
SetViewportOrgEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
DeleteDC
EnumFontFamiliesExA
GetStockObject
GetDeviceCaps
CreateFontIndirectA
DeleteObject
GetTextMetricsA
SelectObject
GetTextExtentPoint32A
CreateRectRgnIndirect
PatBlt
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateDIBitmap
GetTextExtentPointA

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegCreateKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
SetFileSecurityA
GetFileSecurityA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegSetValueA
RegDeleteValueA

shell32

DragQueryFileA
DragFinish
SHGetFileInfoA
ShellExecuteA
ExtractIconA

comctl32

PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ord17
ImageList_Destroy
ImageList_LoadImageA

wsock32

inet_addr
ntohs
getpeername
accept
ioctlsocket
bind
htons
htonl
closesocket
WSASetLastError
recv
send
WSAAsyncSelect
inet_ntoa
socket
recvfrom
sendto
connect
listen
WSAGetLastError
WSAStartup
WSACleanup
shutdown
gethostname

Sections

.text
Size: 200KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d28b9bc531f3da8bc3677e4ed3337db

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

wsock32

Sections

.text Size: 200KB - Virtual size: 196KB

.rdata Size: 48KB - Virtual size: 44KB

.data Size: 16KB - Virtual size: 32KB

.rsrc Size: 108KB - Virtual size: 105KB

.text
Size: 200KB - Virtual size: 196KB

.rdata
Size: 48KB - Virtual size: 44KB

.data
Size: 16KB - Virtual size: 32KB

.rsrc
Size: 108KB - Virtual size: 105KB