afb28818a85e59ca641c8846207f162c67557486b3bcf6e438c2e61dd2531ace

Sharing

Copy URL Twitter E-mail

General

Target

afb28818a85e59ca641c8846207f162c67557486b3bcf6e438c2e61dd2531ace
Size

280KB
MD5

acaedd994f6d2d9de219cb3d99936477
SHA1

ac9f495d35e78f379ce3b674b1743efff2edc6c0
SHA256

afb28818a85e59ca641c8846207f162c67557486b3bcf6e438c2e61dd2531ace
SHA512

938097fd442efe44e5641b4c6915b13ee205ff2d34fbab2ef5bc481ec9a26781ad690254b7c04f477df38f8243371a152cd042d4fae4a90c23c4dd928623b9e9
SSDEEP

6144:Kcbg0sgS0aVbqyNVdd3ooEebGTI0iZfzQjWQncJ:Kcb5W5hldd3ooEpTIxZfzQKX

Score

N/A

Malware Config

Signatures

Files

afb28818a85e59ca641c8846207f162c67557486b3bcf6e438c2e61dd2531ace
.exe windows x86

0a7b8934e183580f8f9f879aaac00a4c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFileType
GetProfileStringA
GetStdHandle
SetHandleCount
GetTimeZoneInformation
GetACP
HeapReAlloc
HeapSize
TerminateProcess
HeapAlloc
HeapFree
RaiseException
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
GetFileTime
GetFileSize
GetFileAttributesA
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
SetErrorMode
GetThreadLocale
SizeofResource
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetLastError
FormatMessageA
LocalFree
GlobalFree
GetModuleFileNameA
GlobalAlloc
lstrcmpA
GetCurrentThread
lstrcpynA
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
GlobalLock
GlobalUnlock
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
InterlockedDecrement
InterlockedIncrement
CreateSemaphoreA
WaitForSingleObject
ReleaseSemaphore
CloseHandle
IsBadReadPtr
SetCurrentDirectoryA

user32

CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
UpdateWindow
SendDlgItemMessageA
PeekMessageA
DispatchMessageA
GetFocus
IsWindow
AdjustWindowRectEx
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetDlgCtrlID
GetKeyState
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
IntersectRect
MessageBeep
GetWindow
GetWindowTextA
GetAsyncKeyState
SystemParametersInfoA
DrawTextA
SetWindowTextA
SetTimer
ShowWindow
KillTimer
MapWindowPoints
SetScrollInfo
GetSysColorBrush
DrawFrameControl
CallWindowProcA
SetActiveWindow
CreateWindowExA
SetWindowLongA
IsWindowEnabled
DestroyWindow
MoveWindow
RedrawWindow
BeginPaint
EndPaint
DefWindowProcA
GetCursorPos
ScreenToClient
SetFocus
SetScrollPos
LoadCursorA
RegisterClassExA
IsIconic
GetSystemMetrics
DrawIcon
GetSystemMenu
AppendMenuA
LoadIconA
EnableWindow
LoadImageA
DestroyMenu
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
DestroyCursor
GetIconInfo
GetDC
CreateIconIndirect
ReleaseDC
FillRect
DrawStateA
GetClientRect
CopyRect
FrameRect
InflateRect
GetSysColor
OffsetRect
DrawFocusRect
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
GetWindowPlacement
GetWindowRect
GetSubMenu
TrackPopupMenuEx
PostMessageA
ClientToScreen
WindowFromPoint
GetActiveWindow
InvalidateRect
SetCursor
GetParent
GetNextDlgTabItem
SendMessageA
GetWindowLongA
DestroyIcon
GetDesktopWindow
PtInRect
GetClassNameA
MapDialogRect
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamA
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
LoadStringA
GrayStringA
TabbedTextOutA
GetWindowDC
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
IsDialogMessageA
SetWindowPos

gdi32

CombineRgn
CreateRectRgn
GetClipBox
SaveDC
RestoreDC
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
MoveToEx
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
Escape
GetMapMode
PatBlt
DPtoLP
GetTextColor
GetBkColor
LPtoDP
LineTo
GetRgnBox
CreateFontIndirectA
GetTextMetricsA
SetBkMode
Rectangle
GetDeviceCaps
GetDIBits
SetDIBits
SetTextAlign
ExtTextOutA
ExtCreatePen
CreatePen
GetObjectA
GetPixel
SetPixel
CreateBitmap
SetBkColor
SetTextColor
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
GetStockObject
CreateDIBitmap
GetTextExtentPointA
DeleteObject

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteExA

comctl32

_TrackMouseEvent
ImageList_GetImageInfo
ImageList_Destroy
ImageList_AddMasked
ImageList_Create
ImageList_Draw
ord17
ImageList_LoadImageA

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleUninitialize

olepro32

ord253

oleaut32

SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen

Sections

.text
Size: 204KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0a7b8934e183580f8f9f879aaac00a4c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 204KB - Virtual size: 200KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 12KB - Virtual size: 25KB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: 204KB - Virtual size: 200KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 12KB - Virtual size: 25KB

.rsrc
Size: 20KB - Virtual size: 19KB