bab624e9a3f84ba707166bfda5d75163d70b09cbb4c524a6ecee5caca585843f

Sharing

Copy URL Twitter E-mail

General

Target

bab624e9a3f84ba707166bfda5d75163d70b09cbb4c524a6ecee5caca585843f
Size

3.3MB
MD5

5a139327417e52ccb02104c85e678919
SHA1

08ad91163c6358ec56120404d0db18d2cefa99a2
SHA256

bab624e9a3f84ba707166bfda5d75163d70b09cbb4c524a6ecee5caca585843f
SHA512

ed672035568cc9631457573321f996f2de8e8e8d0e0b4aa2e62f4f5418a2731baec6745c7a886977815be576425251498422277735e9ba7583dd1b40df48f9b9
SSDEEP

49152:Rn3p80JVi1r2w8SgVWKp2r2w8SgVWKpWT0erGUJO3c9VjQe:Q0k/KeaUJO3Sn

Score

N/A

Malware Config

Signatures

Files

bab624e9a3f84ba707166bfda5d75163d70b09cbb4c524a6ecee5caca585843f
.exe windows x86

635dfe7ee3690b05936eda3584beb097

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemInfo
VirtualQuery
HeapReAlloc
ExitProcess
HeapSize
SetStdHandle
GetFileType
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
VirtualAlloc
GetConsoleMode
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCurrentDirectoryA
GetDriveTypeA
SetEnvironmentVariableA
VirtualProtect
HeapAlloc
HeapFree
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
GetStartupInfoW
SetErrorMode
GetFileTime
GetFileSizeEx
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
TlsGetValue
GlobalFlags
LocalAlloc
InterlockedDecrement
GetThreadLocale
InterlockedIncrement
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
WaitForSingleObject
GetModuleHandleA
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
FormatMessageW
LocalFree
MulDiv
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
InterlockedExchange
GlobalReAlloc
SetLastError
GetCPInfo
lstrlenA
lstrcmpiW
GetVersion
GetVersionExW
GetFileSize
ReadFile
CreateThread
GetPrivateProfileStringW
GlobalSize
GetCommandLineW
OpenProcess
GetExitCodeProcess
TerminateProcess
lstrlenW
GetLocalTime
GetWindowsDirectoryW
WritePrivateProfileStringW
GetPrivateProfileIntW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
Sleep
GetCurrentProcess
GetModuleFileNameW
SetFilePointer
CreateEventW
GetLastError
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryW
GetFileAttributesW
CreateProcessW
FreeResource
GlobalAlloc
GlobalLock
GlobalUnlock
CreateFileW
WriteFile
CloseHandle
GlobalFree
lstrcpynW
GetModuleHandleW
GetTickCount
LoadLibraryW
GetProcAddress
FreeLibrary
DeleteFileW
FindResourceW
LoadResource
LockResource
GetConsoleCP
SizeofResource

user32

PostThreadMessageW
DestroyMenu
CharNextW
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
GetMessageW
TranslateMessage
ValidateRect
EndPaint
BeginPaint
GetMenuStringW
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
TrackPopupMenu
GetKeyState
SetMenu
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
ScreenToClient
DeferWindowPos
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowPos
IntersectRect
SystemParametersInfoA
GetWindowPlacement
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
IsWindowEnabled
EndDialog
ReleaseCapture
LoadCursorW
SetCapture
BringWindowToTop
EqualRect
DestroyCursor
LoadImageW
SetCursor
WindowFromPoint
GetNextDlgTabItem
GetActiveWindow
ClientToScreen
SetWindowRgn
DrawFocusRect
FrameRect
InflateRect
DrawStateW
IsMenu
GetMenuItemInfoW
SystemParametersInfoW
DrawIconEx
DestroyIcon
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetSysColorBrush
GetSysColor
ModifyMenuW
GetSubMenu
GetMenuState
GetMenuItemID
GetMenuItemCount
CreatePopupMenu
CreateMenu
DrawEdge
LoadBitmapW
EnumChildWindows
RegisterClipboardFormatW
GetWindowThreadProcessId
GetDesktopWindow
GetWindowTextLengthW
UnregisterClassW
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
CharUpperW
GetClassNameW
GetWindowTextW
GetCursorPos
GetSystemMetrics
LoadIconW
InvalidateRect
IsIconic
GetSystemMenu
AppendMenuW
DrawIcon
FindWindowW
ShowWindow
SetForegroundWindow
PtInRect
GetWindow
IsWindow
GetDC
ReleaseDC
SetWindowLongW
GetWindowLongW
GetWindowDC
FillRect
IsWindowVisible
GetClientRect
GetWindowRect
OffsetRect
SetRectEmpty
SetRect
IsRectEmpty
CopyRect
MessageBoxW
wsprintfW
SendMessageW
GetParent
KillTimer
SetTimer
PostMessageW
EnableWindow
AdjustWindowRectEx

gdi32

SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
SetWindowOrgEx
SetViewportExtEx
GetBkColor
GetTextColor
GetMapMode
GetCharWidthW
StretchDIBits
GetRgnBox
SetBkMode
RestoreDC
ScaleViewportExtEx
SaveDC
GetClipBox
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
DeleteObject
GetTextMetricsW
CreateRectRgnIndirect
GetDIBColorTable
StretchBlt
CreateBitmap
Escape
ExtTextOutW
RectVisible
PtVisible
DeleteDC
SetPixel
GetPixel
PatBlt
Ellipse
GetBkMode
CreatePen
BitBlt
GetDeviceCaps
GetTextExtentPoint32W
CreateDIBSection
GetStockObject
GetObjectW
CreateFontIndirectW
GetGlyphOutlineW
SetTextColor
SetBkColor
CreateCompatibleBitmap
CreateSolidBrush
CreateFontW
TextOutW
SelectObject
CreateCompatibleDC

msimg32

TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegDeleteValueW
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegQueryValueExW
RegSetValueExW
RegSetValueW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

shell32

ShellExecuteW
ShellExecuteExW
SHGetSpecialFolderPathW

comctl32

_TrackMouseEvent

shlwapi

PathFindFileNameW
UrlUnescapeW
PathStripToRootW
PathIsUNCW
PathFindExtensionW

oledlg

OleUIBusyW

ole32

CoRegisterMessageFilter
CLSIDFromProgID
CreateStreamOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard

oleaut32

SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
OleCreateFontIndirect
SysFreeString
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen

ws2_32

WSASetLastError
WSACleanup
WSAStartup
inet_addr

gdiplus

GdipSaveImageToStream
GdipCloneImage
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipDeleteGraphics
GdipLoadImageFromStream
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromResource
GdipCreateFromHDC
GdipDrawImageRectI
GdipCloneBitmapArea
GdipDisposeImage
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromHBITMAP

wininet

InternetSetOptionW
InternetReadFile
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
HttpQueryInfoW
InternetReadFileExW
InternetCloseHandle

winmm

PlaySoundW

Sections

.text
Size: 365KB - Virtual size: 364KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

635dfe7ee3690b05936eda3584beb097

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

gdiplus

wininet

winmm

Sections

.text Size: 365KB - Virtual size: 364KB

.rdata Size: 84KB - Virtual size: 83KB

.data Size: 19KB - Virtual size: 34KB

.rsrc Size: 2.8MB - Virtual size: 2.8MB

.reloc Size: 53KB - Virtual size: 53KB

.text
Size: 365KB - Virtual size: 364KB

.rdata
Size: 84KB - Virtual size: 83KB

.data
Size: 19KB - Virtual size: 34KB

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

.reloc
Size: 53KB - Virtual size: 53KB