2dd46f0f568cc80a14db875a65db29674dd4e7189eba0bc8d0d3b64a112cbe38

Sharing

Copy URL Twitter E-mail

General

Target

2dd46f0f568cc80a14db875a65db29674dd4e7189eba0bc8d0d3b64a112cbe38
Size

7.1MB
MD5

289da607d509ccf8d2e031e10e6ab666
SHA1

f2c9c86b95e2caf2cba0f0dbab27504f01903aa6
SHA256

2dd46f0f568cc80a14db875a65db29674dd4e7189eba0bc8d0d3b64a112cbe38
SHA512

be4a739052af82268b5e9f924a9bb9f3d62299bb202e9a5a431ec9ae54fd778aab1dbd3a4c5eda9a98e019a39f997a36d011dab637571476e38134276bd73c7d
SSDEEP

98304:o7De4JVYTrNPj8IkSK00ygeEEtEE8EEUv9pR9aG2lZqriZVB1z14u/ZVB1z14uM:o3VYdTkd0hEEtEE8EEQRr+HiuLHiuM

Score

N/A

Malware Config

Signatures

Files

2dd46f0f568cc80a14db875a65db29674dd4e7189eba0bc8d0d3b64a112cbe38
.exe windows x86

a295c66601c3dde529dc8bdea800feac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

GetModuleFileNameExA
EnumProcessModules

iphlpapi

GetAdaptersInfo

kernel32

GetFileTime
SetErrorMode
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
GetSystemTimeAsFileTime
GetCommandLineA
RtlUnwind
HeapSize
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetTimeZoneInformation
GetACP
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetDriveTypeA
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetCurrentDirectoryA
GetShortPathNameA
GetFullPathNameA
GetVolumeInformationA
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GetThreadLocale
GlobalFlags
WritePrivateProfileStringA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
lstrcmpA
GlobalReAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GetProfileIntA
GetTickCount
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GlobalSize
FreeResource
ReleaseMutex
LocalFree
LocalAlloc
FormatMessageA
GetProcessHeap
HeapFree
HeapAlloc
RemoveDirectoryA
GetStartupInfoA
CreateProcessA
GetModuleHandleA
SetLastError
CreateMutexA
MulDiv
DeleteFileA
DeleteCriticalSection
FindNextFileA
FindClose
FindFirstFileA
CreateDirectoryA
DeviceIoControl
TerminateThread
CreateThread
GetTempPathA
GetCurrentProcessId
CloseHandle
GetVersionExA
GetModuleFileNameA
LoadLibraryA
GetLocalTime
CopyFileA
GetProcAddress
GetSystemDirectoryA
ReadFile
TerminateProcess
GetFileAttributesA
Sleep
OpenProcess
WriteFile
WaitForSingleObject
GetCurrentProcess
FreeLibrary
SetLocalTime
GetFileSize
CreateFileA
GetComputerNameA
GlobalHandle
GlobalFree
GlobalUnlock
GlobalAlloc
GlobalLock
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetVersion
CompareStringA
LockResource
GetLastError
InterlockedExchange
lstrlenW
MultiByteToWideChar
CompareStringW
SizeofResource
WideCharToMultiByte
LoadResource
lstrlenA
FindResourceA
RaiseException

user32

UnregisterClassA
GetSysColorBrush
DestroyMenu
RegisterClipboardFormatA
GetMessageA
TranslateMessage
ValidateRect
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
InflateRect
IsClipboardFormatAvailable
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
WinHelpA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenu
EnableWindow
CharUpperA
SendMessageA
GetClientRect
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
ScreenToClient
EqualRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowTextLengthA
SetFocus
GetMenuItemID
GetMenuItemCount
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
CharNextA
CopyAcceleratorTableA
IsRectEmpty
SetRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
PostThreadMessageA
GetNextDlgTabItem
GetLastActivePopup
DispatchMessageA
GetSystemMetrics
GetCursorPos
ReleaseDC
MessageBoxA
GetDC
ExitWindowsEx
GetDesktopWindow
InvalidateRect
GetWindowRect
DestroyIcon
LoadCursorA
AppendMenuA
BringWindowToTop
RegisterWindowMessageA
LoadIconA
LoadMenuA
LoadBitmapA
GetSubMenu
GetSystemMenu
SetCursor
PostMessageA
EndDialog
GetScrollPos
SetScrollPos
SetScrollRange
PtInRect
SetTimer
GetWindowThreadProcessId
GetWindowTextA
CreatePopupMenu
IsWindowEnabled
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
CheckMenuItem
GetActiveWindow
GetWindow
SetCapture
GetFocus
GetCapture
GetWindowLongA
GetSysColor
ReleaseCapture
CopyRect
ShowScrollBar
GetParent
EnableMenuItem

gdi32

GetRgnBox
GetTextColor
GetBkColor
GetMapMode
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
DeleteDC
BitBlt
CreateFontIndirectA
GetDeviceCaps
StretchBlt
CreateBitmap
SetBitmapBits
GetBitmapBits
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
MoveToEx
LineTo
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateRectRgnIndirect
SetBkColor
SetTextColor
GetClipBox
CopyMetaFileA
GetTextExtentPoint32A
RoundRect
CreateDCA
SetDIBits
CreateSolidBrush
CreatePen
Rectangle
DeleteObject
GetStockObject
GetObjectA

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueExA
RegQueryValueExA
RegQueryValueA
RegOpenKeyA
RegSetValueA
RegEnumKeyA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegCloseKey
AdjustTokenPrivileges
RegOpenKeyExA
LookupPrivilegeValueA
OpenProcessToken

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
DragQueryFileA
Shell_NotifyIconA
ExtractIconA
ShellExecuteA

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleInitialize
CoDisconnectObject
OleIsCurrentClipboard
OleFlushClipboard
StringFromCLSID
CoTaskMemFree
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleCreateStaticFromData
CoCreateInstance
OleUninitialize
CLSIDFromString
CreateStreamOnHGlobal
CoGetClassObject
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
CLSIDFromProgID
StringFromGUID2
CoRevokeClassObject
CoRegisterClassObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SafeArrayDestroy
LoadTypeLi
RegisterTypeLi
LoadRegTypeLi
SysAllocString
VariantCopy
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysStringByteLen
SysAllocStringByteLen
SysFreeString
SysStringLen

ws2_32

WSAStartup
htonl
WSAGetLastError
WSARecvFrom
setsockopt
sendto
send
listen
accept
WSASendTo
inet_addr
closesocket
recv
gethostbyname
socket
bind
WSACleanup
htons
inet_ntoa
connect

winmm

timeGetTime

odbc32

ord16
ord17
ord41
ord10
ord2
ord1
ord15
ord9
ord14
ord3
ord61
ord20
ord8
ord48
ord49
ord11
ord19
ord12
ord46
ord18
ord13
ord59
ord43
ord68
ord44
ord45
ord50
ord51
ord5

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 220KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a295c66601c3dde529dc8bdea800feac

Headers

File Characteristics

Imports

psapi

iphlpapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

winmm

odbc32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 220KB - Virtual size: 216KB

.data Size: 36KB - Virtual size: 98KB

.rsrc Size: 5.5MB - Virtual size: 5.5MB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 220KB - Virtual size: 216KB

.data
Size: 36KB - Virtual size: 98KB

.rsrc
Size: 5.5MB - Virtual size: 5.5MB