bb070222c6432d34e0ee813e1f39ac8e2ea33b2d86af7b3d3bb712632dd4d8d1

Sharing

Copy URL Twitter E-mail

General

Target

bb070222c6432d34e0ee813e1f39ac8e2ea33b2d86af7b3d3bb712632dd4d8d1
Size

2.6MB
MD5

4406b9921f14ebbb65597464ab18ca4f
SHA1

e043237f181b0dfb94c5915033368393fcac7d1d
SHA256

bb070222c6432d34e0ee813e1f39ac8e2ea33b2d86af7b3d3bb712632dd4d8d1
SHA512

1c0a6fa8667eec95211af7b348ed0e62dd95c8e6479c48a03632d94a925b51746412ed8f50b22a69391f69effdee0ab0732e9ebc8eec15c3303ba0a1849f3988
SSDEEP

49152:q9YcXHl1lsGWx7zieNadeySu3jjmT7tXweoH3suSwIbFLOAkGy3zdnErPSCTEFDY:qhXl1KGW/iPdYu3jjmTpRe3wFLOAkGkO

Score

N/A

Malware Config

Signatures

Files

bb070222c6432d34e0ee813e1f39ac8e2ea33b2d86af7b3d3bb712632dd4d8d1
.exe windows x86

2680d87023453599e0d6ae5f5f5e68cc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCheckConnectionA

urlmon

URLDownloadToFileA

wtsapi32

WTSEnumerateSessionsA

kernel32

GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
CompareStringW
WriteConsoleA
SizeofResource
LockResource
LoadResource
FindResourceA
WideCharToMultiByte
LoadLibraryA
GetModuleHandleA
GetProcAddress
SetLastError
GetLastError
GetPrivateProfileIntA
LCMapStringA
GetPrivateProfileStringA
WritePrivateProfileStringA
lstrcpyA
FreeResource
GlobalUnlock
GlobalLock
GlobalAlloc
CreateProcessA
GetSystemInfo
CloseHandle
Process32Next
lstrcmpiA
OpenProcess
TerminateProcess
Process32First
CreateToolhelp32Snapshot
Module32Next
Module32First
GetCurrentProcess
WaitForSingleObject
GetStringTypeW
GetStringTypeA
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
SetHandleCount
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetACP
GetFileType
SetStdHandle
HeapSize
ExitProcess
HeapReAlloc
VirtualQuery
VirtualAlloc
HeapFree
HeapAlloc
GetStartupInfoA
CreateThread
ExitThread
GetSystemTimeAsFileTime
CreateDirectoryA
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
FindResourceExA
SetErrorMode
CreateFileMappingA
LCMapStringW
GetFileSizeEx
CreateEventA
GetWindowsDirectoryA
SetEvent
FileTimeToLocalFileTime
VirtualProtect
GetSystemDirectoryW
LoadLibraryW
GetVolumeInformationA
FindFirstFileA
FindClose
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WriteFile
ReadFile
DeleteFileA
GetTempPathA
SetFilePointer
GetProfileIntA
GetTickCount
SearchPathA
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
TlsGetValue
LocalAlloc
InterlockedIncrement
GetModuleHandleW
GetFullPathNameA
GetTempFileNameA
GetFileTime
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryExA
FileTimeToSystemTime
lstrcmpA
CreateFileA
Sleep
GetFileSize
GetFileAttributesA
DeleteCriticalSection
InitializeCriticalSection
GlobalReAlloc
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
GetCurrentDirectoryA
ResumeThread
SetThreadPriority
InterlockedDecrement
GetModuleFileNameW
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
GetCurrentProcessId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFree
CopyFileA
GlobalSize
FormatMessageA
LocalFree
lstrlenW
MulDiv
lstrlenA
GetCommandLineA
MultiByteToWideChar
GetVersionExA
GetModuleFileNameA
SetFileAttributesA
TerminateThread
GetExitCodeThread
FreeLibrary
MapViewOfFile
UnmapViewOfFile

user32

GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
SetCursorPos
WaitMessage
PostThreadMessageA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
ShowOwnedPopups
PostQuitMessage
FrameRect
CharUpperBuffA
GetIconInfo
DestroyAcceleratorTable
LockWindowUpdate
GetUpdateRect
SetRect
DrawFocusRect
DrawFrameControl
DrawEdge
GetSysColorBrush
SetClassLongA
EmptyClipboard
CloseClipboard
SetClipboardData
LoadImageA
DestroyIcon
CopyImage
OpenClipboard
DrawStateA
UpdateLayeredWindow
EnableScrollBar
UnionRect
IsRectEmpty
CharUpperA
GetAsyncKeyState
NotifyWinEvent
MessageBeep
LoadCursorA
WindowFromPoint
SetCapture
GetSystemMenu
DeleteMenu
RegisterClipboardFormatA
MapVirtualKeyA
GetKeyNameTextA
GetMenuItemInfoA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
ValidateRect
SetMenuDefaultItem
DrawIconEx
IsMenu
GetMenuDefaultItem
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CreateAcceleratorTableA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
SetWindowsHookExA
CallNextHookEx
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
PtInRect
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
GetWindowPlacement
GetClassNameA
UnpackDDElParam
ReuseDDElParam
DestroyMenu
WinHelpA
SetWindowPos
SetFocus
GetWindowThreadProcessId
GetActiveWindow
IsWindowEnabled
EqualRect
GetDlgItem
SetWindowLongA
GetDlgCtrlID
GetKeyState
LoadIconA
SetCursor
PeekMessageA
ReleaseCapture
LoadAcceleratorsA
SetActiveWindow
IsIconic
InsertMenuItemA
CreatePopupMenu
GetClassInfoA
IntersectRect
OffsetRect
GetMenu
GetLastActivePopup
BringWindowToTop
SetMenu
UnregisterClassA
IsClipboardFormatAvailable
CopyIcon
GetDoubleClickTime
SubtractRect
EnumChildWindows
MapDialogRect
GetNextDlgGroupItem
DestroyCursor
DrawIcon
IsCharLowerA
GetDesktopWindow
ShowWindow
GetWindowLongA
TranslateAcceleratorA
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
RemoveMenu
MapVirtualKeyExA
CreateMenu
GetWindowRgn
ModifyMenuA
IsWindow
DestroyWindow
GetSystemMetrics
GetClassLongA
SetParent
GetTopWindow
GetCapture
IsWindowVisible
SetWindowRgn
IsZoomed
PostMessageA
CopyRect
GetWindow
ClientToScreen
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer
RedrawWindow
WaitForInputIdle
GetSysColor
GetParent
GetFocus
IsChild
EnableWindow
SendMessageA
InvalidateRect
UpdateWindow
ScreenToClient
GetClientRect
GetWindowRect
LoadMenuA
GetSubMenu
LoadBitmapA
InflateRect
SetRectEmpty
GetCursorPos

gdi32

GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
PatBlt
GetTextMetricsA
CreateRoundRectRgn
CreateDIBSection
SetDIBColorTable
GetDIBits
RealizePalette
CombineRgn
StretchBlt
SetPixel
CreateEllipticRgn
CreatePolygonRgn
GetViewportExtEx
Polyline
Ellipse
Polygon
SetRectRgn
DPtoLP
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
RoundRect
Rectangle
OffsetRgn
GetRgnBox
ExtFloodFill
CreatePalette
GetPaletteEntries
SetPaletteEntries
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
EnumFontFamiliesExA
GetNearestPaletteIndex
GetSystemPaletteEntries
GetTextFaceA
SetPixelV
CreateRectRgn
SelectClipRgn
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetTextColor
CreateRectRgnIndirect
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
CreateCompatibleDC
CreateCompatibleBitmap
CopyMetaFileA
GetDeviceCaps
DeleteObject
CreateFontIndirectA
GetTextExtentPoint32A
GetBkColor
GetObjectA
GetStockObject

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

OpenProcessToken
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
CryptReleaseContext
CryptDestroyHash
CryptDecrypt
CryptDeriveKey
CryptHashData
RegEnumKeyExA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
GetTokenInformation
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegDeleteValueA
RegCreateKeyA
RegSetValueExA
CryptEncrypt
CryptAcquireContextA
CryptCreateHash

shell32

CommandLineToArgvW
DragFinish
DragQueryFileA
SHAppBarMessage
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteExA
SHGetFileInfoA

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathRemoveFileSpecW

ole32

CoInitializeEx
CoUninitialize
OleLockRunning
DoDragDrop
OleGetClipboard
CoCreateInstance
CreateStreamOnHGlobal
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor

oleaut32

VariantClear
SysAllocString
SysFreeString
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType

gdiplus

GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipCloneImage

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 259KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2680d87023453599e0d6ae5f5f5e68cc

Headers

DLL Characteristics

File Characteristics

Imports

wininet

urlmon

wtsapi32

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

gdiplus

imm32

winmm

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 259KB - Virtual size: 258KB

.data Size: 22KB - Virtual size: 53KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.reloc Size: 152KB - Virtual size: 152KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 259KB - Virtual size: 258KB

.data
Size: 22KB - Virtual size: 53KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

.reloc
Size: 152KB - Virtual size: 152KB