ff7b9552d53cfdd39f2e9caf6e5d4cc3bbec884ea9943896cf5018b8e5769ce7

Sharing

Copy URL Twitter E-mail

General

Target

ff7b9552d53cfdd39f2e9caf6e5d4cc3bbec884ea9943896cf5018b8e5769ce7
Size

548KB
MD5

6126b729255a98704cc97f8618384e24
SHA1

ee1ba26584c2e5240bf6936b84c804db61b7c01b
SHA256

ff7b9552d53cfdd39f2e9caf6e5d4cc3bbec884ea9943896cf5018b8e5769ce7
SHA512

bb63cd829b5368ce07d12c8cf29e33e2380b8ba9e3621b6b8ac5c2e27afc05f969d9a35ab8876fbb97ff203a4ec18f0340e4d681882080d72d37d772f82ae1c6
SSDEEP

12288:3z7HFp1ZPBuSSTb6I69i7hYe2sFRRA+piX80c6fhoIkJl:3z7HFzZPBuSSTO9i7hYe2sFRRA+pSfhR

Score

N/A

Malware Config

Signatures

Files

ff7b9552d53cfdd39f2e9caf6e5d4cc3bbec884ea9943896cf5018b8e5769ce7
.exe windows x86

bcbba4a207a1d5af7c87cf12d82e373a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

hhctrl.ocx

ord14

mwic_32

eral_ssf1101
swr_ssf1101
srd_ssf1101
chk_ssf1101
swr_4442
swr_4432
srd_4442
srd_4432
rsc_4442
rsct_4442
swr_4428
swr_4418
srd_4428
srd_4418
ser_4404
eswc_4406
swr_4404
swr_4406
srd_4404
srd_4406
wsc_1608
wsc_153
pwr_4442
pwr_4432
prd_4442
wsc_4442
csc_4442
csc_4428
pwr_4428
pwr_4418
wrwpb_4428
wrwpb_4418
srd_1604b
srd_1604
srd_102
swr_1604b
swr_1604
swr_102
ser_1604b
ser_1604
ser_102
auto_pull
srd_1608
srdconfig_1608
srd_153
srdconfig_153
swr_1608
swrconfig_1608
swr_153
swrconfig_153
init_auth_1608
srfus_1608
csc_1608
init_auth_153
Authenticate
SetInit
srfus_153
csc_153
reset_1608
reset_153
srd_24c64
srd_24c32
srd_24c16
srd_24c08
srd_24c04
srd_24c02
srd_24c01a
swr_24c64
swr_24c32
swr_24c16
swr_24c08
swr_24c04
swr_24c02
swr_24c01a
srd_45d041
swr_45d041
srd_93c46
srd_93c46a
swr_93c46
swr_93c46a
wsc_4428
eral_93c46
eral_93c46a
exp_dis
get_status
ic_decrypt
ic_encrypt
sam_slt_reset
sam_slt_protocol
val_read
srd_snr
srd_ver
chk_baud
get_status0
ic_init
ic_exit
set_baud
swr_eeprom
srd_eeprom
dv_beep
setsc_md
srd_dvsc
swr_dvsc
cmp_dvsc
set_code
cpu_reset
chk_card
csc_102
csc_1604b
csc_1604
cesc_102
cesc_1604b
cesc_1604
wsc_102
wsc_1604b
wsc_1604
wesc_102
wesc_1604b
wesc_1604
fakefus_4404
fakefus_1604b
fakefus_1604
fakefus_102
psnl_4406
psnl_4404
psnl_153
psnl_1608
psnl_1604b
psnl_1604
psnl_102
csc_4404
cesc_4404
wsc_4404
wesc_4404
csc_4406
wsc_4406
rdwpb_4418
rdwpb_4428

kernel32

SetEnvironmentVariableA
CompareStringW
CompareStringA
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
SetUnhandledExceptionFilter
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
ReleaseMutex
WaitForSingleObject
GetWindowsDirectoryA
GetTickCount
CreateMutexA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetLastError
CreateFileA
Sleep
DeleteFileA
LoadResource
FindResourceA
LockResource
GlobalFree
GlobalUnlock
GlobalLock
GetProcAddress
GetModuleHandleA
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetCurrentThreadId
lstrcatA
GetVersion
FreeLibrary
LoadLibraryA
SetLastError
MulDiv
lstrcpynA
SetEvent
ResumeThread
SetThreadPriority
SuspendThread
CreateEventA
InterlockedIncrement
InterlockedDecrement
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
DuplicateHandle
GetCurrentProcess
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetShortPathNameA
GetModuleFileNameA
LocalFree
GetCurrentThread
lstrcmpA
GlobalAlloc
GetFileAttributesA
GetTempFileNameA
SetFileTime
GetFileTime
GetDiskFreeSpaceA
GlobalFlags
SizeofResource
LocalAlloc
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GetCPInfo
GetOEMCP
GetFileSize
LocalFileTimeToFileTime
SystemTimeToFileTime
SetErrorMode
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentDirectoryA
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
RaiseException
CreateThread
ExitThread
HeapAlloc
HeapFree
SetStdHandle
GetFileType
HeapReAlloc
HeapSize
GetACP
GetTimeZoneInformation
GetProfileStringA

user32

GetMenuCheckMarkDimensions
wvsprintfA
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
InflateRect
GetCursorPos
ValidateRect
TranslateMessage
GetMessageA
CharUpperA
PostQuitMessage
ShowOwnedPopups
SetCursor
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
GetDesktopWindow
DestroyMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
GetClassNameA
PtInRect
LoadCursorA
GetSysColorBrush
LoadStringA
InsertMenuA
DeleteMenu
GetMenuStringA
DestroyIcon
ShowWindow
IsDialogMessageA
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
LoadBitmapA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
IsChild
GetCapture
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
SetWindowPos
ScreenToClient
GetWindowRect
UnregisterClassA
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
IsWindowEnabled
SetActiveWindow
GetClassInfoA
LoadIconA
GetSysColor
RegisterWindowMessageA
GetFocus
SetFocus
GetCaretPos
EnableWindow
ShowCaret
HideCaret
SetCaretPos
InvalidateRect
GetKeyboardState
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
SetScrollInfo
EnableMenuItem
SendMessageA
WinHelpA
DestroyCaret
CreateCaret
wsprintfA
FindWindowA
GetWindow
LoadMenuA
SetMenu
SetWindowTextA
GetDlgItem
IsWindowUnicode
DefWindowProcA

gdi32

BitBlt
CreateCompatibleDC
LPtoDP
CreateDIBitmap
GetTextExtentPointA
PatBlt
Escape
ExtTextOutA
RectVisible
PtVisible
CreateSolidBrush
DeleteObject
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
TextOutA

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
SetFileSecurityA
GetFileSecurityA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegCreateKeyA
RegSetValueA
RegQueryValueExA

shell32

DragQueryFileA
DragFinish
SHGetFileInfoA
DragAcceptFiles
ExtractIconA

comctl32

ord17

Sections

.text
Size: 424KB - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bcbba4a207a1d5af7c87cf12d82e373a

Headers

File Characteristics

Imports

hhctrl.ocx

mwic_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 424KB - Virtual size: 420KB

.rdata Size: 60KB - Virtual size: 56KB

.data Size: 24KB - Virtual size: 46KB

.rsrc Size: 36KB - Virtual size: 36KB

.text
Size: 424KB - Virtual size: 420KB

.rdata
Size: 60KB - Virtual size: 56KB

.data
Size: 24KB - Virtual size: 46KB

.rsrc
Size: 36KB - Virtual size: 36KB